last executing test programs: 2m52.956534277s ago: executing program 1 (id=2578): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000040)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) preadv2(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) 2m52.902918547s ago: executing program 1 (id=2579): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x2, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x244401, 0x0) (rerun: 32) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r2, 0x4000}, {r2, 0x94a1}, {r4}], 0x3, &(0x7f0000000080)={r5, r6+60000000}, &(0x7f00000000c0)={[0x81]}, 0x8) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = getpgrp(0xffffffffffffffff) (async) r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x0, &(0x7f0000000780)={0x11, 0x0, 0x80}) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180)=0x2, 0x4) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) (async) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r9, &(0x7f0000000480)=""/14, 0xd, 0x8000) (async, rerun: 32) getitimer(0x1, &(0x7f0000000740)) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) 2m52.902255757s ago: executing program 1 (id=2580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x550b6c) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) read(r2, &(0x7f0000000040)=""/51, 0x33) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000001940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00006003ffffffffffffbbbbbbbbbbbb08004500001800670000032f907800001fe1e0000001a00086dd000c9078f842019d"], 0x32) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f00000013c0)={0x42112a00, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x19}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0)=""/153, &(0x7f0000001380)=[0x0], 0x1}, 0x58) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x2, &(0x7f0000000100)=""/130, 0x82, 0x0, 0x38}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x2101, 0x3}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001440)={@fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x100b}, @fda={0x66646185, 0x4, 0x2, 0x13}}, &(0x7f00000014c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001740)={@flat=@weak_handle={0x77682a85, 0x100a, 0x1}, @fd, @flat=@binder={0x73622a85, 0x2101, 0x1}}, &(0x7f00000017c0)={0x0, 0x18, 0x30}}, 0x40}, @decrefs={0x40046307, 0x3}, @acquire_done={0x40106309, 0x2000000000000}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}], 0xdc, 0x0, &(0x7f0000001600)="042d45a72b11daa793837fae998dd3e0271a8b3ea5e2efc576482e463f9ffa441f6855a7510ad97f2647268f1ca6b18efc88f3b5681c984eadb1039976cab42888577c1e3b00d0bbd7442934870fb12f9412ada3cf5f5ff3477b0705c1095d28879922cec0c3abb45dfca72ed08444a6552bdad8fad5063f86a0b63fbd52af94d882353bfab52fbc2c6e02d90762970587ed5750fac2913e7661ced61bd2cb1dde08486f8380af7fd577263e959ca318a528cb23544e726b88b57068d4b04236db06cd14302e0686d2c0fd534f04965ac8b7edae824289975ab40830"}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000001500)) 2m52.705829178s ago: executing program 1 (id=2585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') splice(r0, 0x0, r1, 0x0, 0xf3a, 0x6) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r5 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0), &(0x7f00000003c0), 0x8, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 2m52.662734459s ago: executing program 1 (id=2586): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x20) fcntl$getflags(r1, 0x40a) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @empty, 0xc3}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8080) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}]}]}]}, 0x2c}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r7, 0x5bc7000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x20) (async) fcntl$getflags(r1, 0x40a) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x8, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) ioctl$TCXONC(r4, 0x540a, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @empty, 0xc3}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8080) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x2}]}]}]}, 0x2c}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r7, 0x5bc7000) (async) 2m51.978193182s ago: executing program 1 (id=2593): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x15}, {0x0, 0x3}, {0x1}, 0x0, 0x800, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x404d3, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000005640)={0x1, 0x1000}, 0x4) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (rerun: 32) close_range(r9, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x8, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0xfffffffffffffebc) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = syz_pidfd_open(r2, 0x0) setns(r11, 0x24020000) 2m51.925966192s ago: executing program 32 (id=2593): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) r1 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x8, 0x301, 0x0, 0x0, 0xfe, 0x0}) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x15}, {0x0, 0x3}, {0x1}, 0x0, 0x800, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x404d3, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000005640)={0x1, 0x1000}, 0x4) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (rerun: 32) close_range(r9, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x8, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0xfffffffffffffebc) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = syz_pidfd_open(r2, 0x0) setns(r11, 0x24020000) 37.446458448s ago: executing program 4 (id=4637): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000380)={0x40043f, 0x208000, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) timer_create(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x9, 0x7fffffff) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="ba2100b8dd64efb8bd008ed8baf80c66b8eac3b68266efbafc0ced36260543c70f01d1650fac70c6fa0f06dbcb0f6bdb0f79e5", 0x33}], 0x1, 0x47, &(0x7f00000000c0)=[@dstype0={0x6, 0xc}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0xe4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x546}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xe4}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x2c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000140)) sendmmsg$inet6(r6, &(0x7f0000000b40)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0xc, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20040010) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r9, &(0x7f00000042c0)={0x2020}, 0x2020) 37.301722149s ago: executing program 4 (id=4641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x91, 0xc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0xa00, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private0, @broadcast, 0x16, 0x3}}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x20, 0x8}, 0x18) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x792981ca9168428) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, 0x0) 37.218207259s ago: executing program 4 (id=4643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xada, 0x0, &(0x7f0000002400)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$pid(0x2, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000080200000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000000)={0xd000, 0x3000, 0x0, 0x0, 0x5}) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r3, 0x66053000) 37.209949859s ago: executing program 2 (id=4644): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x10c8df9, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000200)={0x0, 0x5, [0xffff, 0xff, 0x3, 0x99, 0x3, 0x5]}) (async) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f00000003c0)={[{}, {@readahead={'readahead', 0x3d, 0x7}}, {@readahead={'readahead', 0x3d, 0xb65}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x6}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x5}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_wakeup_cnt}], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x52, 0x37, 0x64, 0x30, 0x62, 0x62, 0x39, 0x2], 0x2d, [0x39, 0x66, 0x39, 0x37], 0x2d, [0x66, 0x64, 0x61, 0x66], 0x2d, [0x64, 0x30, 0x31, 0x31], 0x2d, [0x36, 0x38, 0x51, 0x38, 0x37, 0x35, 0x39, 0x63]}}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, 'proc\x00'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}, {@euid_gt={'euid>', r2}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 37.0998977s ago: executing program 4 (id=4646): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r4) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1000000000000000, 0x7, 0xffffffffffffff8b, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) writev(r0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x10f}, {&(0x7f0000000480)="2537d0597ca9f294f128d8a1a050a343e100f62ad2d549f22cf8c98493503469fe105210dbcdad1447994a07304d38d3957e4e5d1081aeda0049e312fe8dfe7f6972e6f787bf23c14e1ea461f50f5dfa92176234dd840d61c7b89c8dca577680472b4908a827a8bba626454aac5c4ed493198e155862324bb91118e32df1ff65c3ce4531b84db02d92451e51e0795c812e5d8afc755c2c04acebda5ad59124a52a0371", 0xa3}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) sendto(r2, &(0x7f0000001180)="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", 0x1000, 0x551184cc3b9688c9, &(0x7f0000000200)=@rc={0x1f, @any, 0x4}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x0) 37.09933692s ago: executing program 3 (id=4647): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdir(0x0, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000002c0)=r0) (async, rerun: 64) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r3 = open(&(0x7f0000000200)='./bus\x00', 0x3932c2, 0x89) sendfile(r3, r2, 0x0, 0xffffffff) 37.09892679s ago: executing program 2 (id=4648): vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)="63ab694905ff178320cd84800c5d3b0d4ad63530709b1b02282f659bd34134e35c71f89f62d895628e872411fa376a9530e99b812020af990b69a8f7dc80edf4f3cf37698dea777242fc6ecb6153d0b5ec03afb5abc9cdb7afe37a4f923b3573d47e6df811623d4cea6b403c561a2ca5a7609d92a89fd3536227941e8d8ddfd199810b2d2c5876a6a0e4a46ea6d5562528a7c27b2295ec2782f19dbd72647f4002379fad6287103d8738e093685c80fa0851b55ae020001280e201c9408e", 0xbe}, {&(0x7f00000000c0)="5d2976df99f0fbd14e92d66b9007c1ee8fdc64243536473786d83e301fdb39c14635dd12aa5632ac9f5e856312960f8124dec06a41d6c87a97e4242a04cd58e8dcb46a5e43adc067bf3ae2ea2a4bf1ba06dfedfac63f5c0502be5321e5e9fdecf9b2aef636f947c165111557ae710a5763951c2d72a57e89247bdc0f4dfd8d3954fe87698df24afa458cc75fd58b5a3a1b4fa75465c3002b010285ce61b97a8cc85839693b9e9fe68e9fd36441bb77142e98117ccef83e34bdb5b908dfcb", 0xbe}, {&(0x7f0000000180)="1161f0362c1421d11a419885bde32fff75375c2d597cb341d29c3038ab3a90fdf284bcaeca5612ea39d763e0303143dd29713feff9accdb269eaf4324bc3d32d30e961add4e831a47513c644ff930658a548599942e8adf3aa053ea5ad8db6fc4a7da0b52b092d6d03edd06f3428bf659c0a0bd86f2f964213db1683baf3b8e2f6d220d41ed0921584946452332e9b000fc128bfe92578e412bf9697122d077e4b55017db03e6339c5c291520e7a5978f3572cf5236b05b41965b1468cfe494762c62be54b5dcc30b5fdb30cc5f7607b2f092532ade9b693dc81284f93ef06a46554a76be9e3cdb0820ee20a6f03", 0xee}, {&(0x7f0000000280)="c8d5843dc6cf4b297315992417e80dcdfbea123186c559cfb0f07275fb80426f31829fd0377dc9c9f7c2867ab0b366680321d49f9c78220c34f000ed983d40b39e4e896579398c3acb13995405afb0d63ad37d3be3170deebf0421d7f32370bfd88834003610c6c302a1a61699141185d2a0d03fe2cd526151db95cbd53578776c128ddcaefbca2b755150b037605f13fe911c16f76777d67c37967ec3456d3dd7f321e69eb393dfc422707af28cc577ef5b19bbbb730abb7d509d5901bde4e2708a37c4e8c43c78f6e26d8cd0c18f5506018228d00a643a7c7847560e222807cd0702adc5f4b155df018165add314e58e4cd3f215a9f075", 0xf8}, {&(0x7f0000000380)="404ef5e591601be7c8eee58c03a3f4cc075cfc0270efffceccff2be061812286a37b7b7e29fb6d8f90baab4135dffded00ae507ec9d9be75e9cb7d099128cd4de0b4cc020ebd69e5d5ca9d7aa8db95a97b7a6095791cd9ec294b08d85f9e0cce10693348c25208cbbc70a1ccc7f69ecfb77fe1", 0x73}, {&(0x7f0000000400)="0fb44822082b085c885f8945988a49e2fff94cf3249fee918987cf5bd328fd331adde3ee9834a28f568281f31489d053ee8bc8e3a9d161caae835951f075569e84c709184328a7a6092203814b310dd0889e0169ae1e10fa23fe2b0ffd07618325b641f155c72a486516964c355d9961de71b1be131e3f5000333b0ef018fa28a226d33fdb7945b93235b000aee3d60e4d36f86af9bbb00c5ebea047cd403a93ddcc252b27ab4f95f6024661d4ef5a", 0xaf}, {&(0x7f00000004c0)="39d1b4444612c7ae85edc3de4455e0b8ec5ceb603fe9ebc2e461297f87ef0b6b5f9f5e", 0x23}, {&(0x7f0000000500)="78603ce7593157b62952c8a37b20898ae505accb3c595e4ea117b3f897324c753731e6f9760144ac653a5282c9717cb76914cb37c15065554fdfecc6ecd223cae2020f3dac018e6bb79e96c41531d3df92771f0c9b86c74bbd80571c7ad2ffb628aa8831a4eac3a4d02a6edff1989066ec86767dc1af4edfd385fe1ade062b494c1fbb1893d004aea0c881cebb0f6feb8feed360877474731001643dbc803d7c98154df6ab495c2a7df5681936e99b77e77ef6807b2ef0ee49", 0xb9}], 0x8, 0xc) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x980, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getscheduler(r2) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000026c0)={0x3, 0xf1, "40ad2f7fc37d57ed61a9ceac495d1d6d17ded9f8b36efbdbad6178a0fcb13cf5f5fdc3ff507aa56ac21bb58b2924ca38aa69d07dfaf018c3b7db3fbbbef7508c69343ebd0c69880df180a215a3a138e6cc5ff5da710c853913bb79673dcc6f8c9a10acb88f2f36a30557b2945f5d941ca70645e762b3a8d66554a3dcb303a8edbba56eaaa1f9725e4aa78984a88e50f3f0fd725f1093ff1a0962807c9c4ab545d812ea98b44afa40cfe6f6d2cd74b653a108ae7962488a2d2e726ed4f65bd02871a08a85af5cffd5c7bd658d33d67c0d9309b192e8064899cf0866898ad4cdd1cc0663753ec2f1952caec110f34e732bcc"}) r3 = accept$nfc_llcp(r0, 0x0, &(0x7f0000002800)) sendmsg$nl_generic(r0, &(0x7f0000004bc0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004b80)={&(0x7f0000002840)={0x2310, 0x1a, 0x200, 0x70bd29, 0x25dfdbfb, {0xd}, [@nested={0x205, 0x46, 0x0, 0x1, [@generic="52e05e02e83c3d89ccec9b3d7b359029d809c35b36735055aa110d9771e7491830e454c748f16f35", @nested={0x4, 0x128}, @generic="a83d6b3389bdbd14a206c20e6381296ff84301dac7a818e9ae3d80e393d968b145b6b713125531486ba13eb1d1d642893370926be62d50d0660fa7106acf7115393e874bad4d44206c752425caaa7b", @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x5, 0x141, 0x0, 0x0, @str='\x00'}, @generic, @generic="4a508aef0e811c95907b51c2b407ca36ea02f0feec2640e716a8dcb1ff3cd738b19e1699bb241f9c5717436f7f4464fd27df30fd428a37b52b2c2c24cd4911f3ac8508f9b0173d52a63f5f8e84683b749a74b9e5de6599da29de3bec094e69e90a60219e43538dad4243fba9123d33103168dde492632c008778fb9f0a0ed989c65f6317459fded0dea7da235e80b1cfcab85c45af4b84eacdab2ab96f5098fbc0d262d2a31463061d9053d13cb3e7e8e9b311d458ca086e9353cd142898f80a72f08ee2ac114162130efbd0f1094cdb070645417e9b735143c4158a1190f90f", @generic="39aa3443d6c87025f5a246bda0bbb367718d6b85cd99e99ef6752b84dff665d751f3e39d967abfd3da685137c8ddbcaf9b830d9c25f810f8ee0c6a4ca348d49aa448e76710ce0c7ba925b5907940601878e145524d0fc5eb3aca506dd69db164e05a415ffe7290b960fb4956a5fd5e17f100f8b00d5b0cc9e9635239077bfeeaf8a7", @typed={0x8, 0xd2, 0x0, 0x0, @fd=r3}]}, @nested={0x1028, 0x13b, 0x0, 0x1, [@nested={0x4, 0xd4}, @nested={0x4, 0x124}, @nested={0x4, 0xd9}, @nested={0x4, 0x46}, @nested={0x4, 0x130}, @nested={0x4, 0x63}, @typed={0x1004, 0x3b, 0x0, 0x0, @binary="471a90ed0f5f15aaf52c3f994894eabb06a6db0082292d18530873b7fbf232ee361e9d70880ea4e0c7a034941b19b6432298dfef1ae662166935b0cda760856476097ca80fa44077f84833ad2ec5d4c195e7d34555185a818f726df3509945195825a164512d4a1f69fdfa4f3adb26498b990e52386ed1eea264034dacd61fa514954da469baa4d32aa1f5884e26731d8d4088adce7ef02d88230a6cfcd61ee8b7106d649bee6b12b42bd45afe6f403055c5f6104e105e681a207cbbf2eb489b3d5b5aa91f4ec31f3c7d7bfa188e8f0f17e46d6506548c8d54726454d4b7cc59a6f62c96fa716effc4834bfdbd199e9b8ee173ef62e00c3add0f28cf91a0ab74a9a72b7b40f54cd5fb778852dffd77b3eb25c16b116ee0c67ac0e49cdef8df6ea6d45105b9f279c51413dbd5899e0796f554aef042c5c28bc8b053466874e4bfb2b6ecad03427f5a21dc253faf5372c6c68917787901ae8d53004e78efac604713d8ace8d066a85491c444f02dface88ef2096c759f47407c025b062c0c846ab162582ad49ad9955cd99cada9f9fb9bd3c8e54217ed20bdb9c085da523d2340f438651809bdbe83dd0d1f8a41045bd85f8851de90ec1a3fb8cf58bedd3dfb5937e648be24a1860cb3eb8d2e19b4c2da899afec14091a9819c53adb93ec1986401c73f1364e69a7c594d0704f4c7c87c71f2ee01bc434eee73508e8ff19cfd20c7a5bc0030866fe05d76805d28df528dca226a2acf44e3e1dcbed9666cbb0c2b5e0f19c918f634eb8b615afbd049ec4acbb01e2ba254fccf2b0f032b021987fa6c6e90d7cbe4991a04bba5e628eb01d03723157d7eb00b4318210a3dd16836fb9e0577727d88eaba3b99399970dd96867edeed82e11fe7ffb5c047c3fe35fe904a78c911fd6fdd43ba8f4bacc7c770c6944f6149d93abc4038a7d66723b24032fc6b93764c6bf490424d0b68c6bf793c9f616cca699f65d78b03ec5493e555e15aa99ea6f1759e00df88644c6c9f928402c8cb7c3501b07033042057eb7baf2413de75455cfadeec2babbc22aba5f361481a420c0b43f9730e99e3c6d256b643fd88d937c0a3047a3130963e66e5a0027d2706b0e1367cf18255424f8bed5906637fccfc1fab86e7b9b47e8aff55abfda994e57a2e61cf0a22a1b6a8374d0f86ba2e797dc2c934e9075fceef0c9bf330e8839d86f5dca846faf7489ef023924c7aa9eac97cc38d5b0a80a6282da8d375adfa1c38895b95426649e30778fec470f3c3ff491208bc3930f37da05deebf5df59567dd3e498899decfb3a23406036be1f31a318e01305e5e0b0bd16c6aeeacab9de31b065744d9d047248a538cc3fa7a1a2ff9c0d414aef3df42ef2430cde4d36416043638b60a033a9e8048f0fa53e66af390071ea70d49cfa1da41e70782ed09208d327da898bcb1860e6fcee6f799bd225bc9c9d7d6802e2434db2e3f05cc4f576a23dae2bd3989ef736c524ed7e8c5d53b62774320ed0f735bf44eb7d2a152311d9dc92d234b577dad5c87b9bdc4d8a84a50c8de185739b6ab600fb97189a83035c111a7b83995dfb08c09bccae69483ce1d65bd05bd7b54616e52b15c6ed4c4aa1e60a56a19e3f712d339d42174c7b3353ece4710b3b135c3416539903101ff919e1ed7d748442e8fb9d5e91bcc866d33c1c7639d4574a5ec8d45e63a9ef76088f18944488f5848dd39a3567cb2230050a3e101706319e09557ea1342c9679d1119a8c3da7f4b93312522d1185dac760364137c70995ee75657c9b79ea357a4ccdab35eefb52026d58c822a03ee707f7ce9271dfad5b81a4ccdd90b866906779beb2f9152da7c72b81a210f99bf6af648dfb1dbc245adc65c030ed641a0b4420a4d22e776351d676ec7a372dbb116a79e087cb558def78a19434ff901c816e4b39e5a3bdcb24af089022643b6fa52eff0d8c59be8e8dfc446a62c0c39e1fd5575048a674f5affbad05ec75914dc3bd0e44595486f1e887ee6688f377dc66a31e196fdc879c26a597d1050fbf3ceba8fc26ad2f7df3707233b2bbd16c1af5a1d63007a0e5e848e13a6102f8250e479c0ed5c8ee45ed9258076861d190466ce6b99bc393367ba561159842c5b0716c8a0bf29c5e1f4ddfcebf11fd480c6adc579a44cfcad5b404cf11b6c5b259991cd8932ce0b11bceac0f193307b3ed5a1c19b85c42df0fe420a426dd991c37590990038600fde95321d6ba6f8d815e2fdc57f2c8195cbeefce43e1f4d0d62ccac94544918e4303145e6e7b945df266fe4e193da1bb105620a5505e9d83a4792beea62ae7d7630cbfae67fcbb7312c000651bd03cbcb82c562d8532098e503e50fb728b7ec57bb545ede5bbf2f169a0a771d496ead72b893c69c35cb7e223cfc567eb492aa65162fa37915c97cd9c2759bfee050e4028b316516c7af34e8780d6633282ad8bd7fcbd9e8ff81f8c18bf125b913df4e01e8fe32c04863b05a4e9ddc2a039a57f359e728f01952cecdcc9c19066a4ecdf1ad3a48fc8ca5d6f8f04d5d1af94b7ba089f2dff6398e514285b49102568acc12539115239e3b3696e7e0f8a2223f66d5ae640822afaa57fcd49ced3daa29e123ea5dd0c54e80c9d9f0738f73c8e34ffe16553dd43a85d9049c161451612f0c77c3e5516cbc744b6fd314d0645e8d0139bbeb2a24a1c3c2d3b0a0a926765dde1ec90b387dae99fcc6daeb7afcaa9cb5a78dc8632934563f7f36a4a941b165dad3cdf061b63d136291f25b111eab51eb52cb978b40a5791b773405033b2242fce641d86a940217efb080ccc87befc9167feb7401395d6ddb412269facba82cb54ffccacb84b94e4951e6583d069d697496610786a1b6a0e2e7d814f80e0b9a98106d1c51826d29a3bac18b46a8d8c511c5c0e4416c37b862edca9f976a7df9b589ff1e70e3ac49bde3937a3e61efa309a0612cc6a59a24484f9b5ebf643bde78aa4d68ba198c33c6b2f3fb658dfcc3efd328b85accb66e554aa09e39091815dffd5966a23effa6d0fe9e2dd3ad942f3a1e24bea6530ffcef7a3584e67bea22ab0227fde56c828b6596595139a96ee65dbca40b289414a77202a9c8b0ea192c3271868aac91487153923bd348fd9ada5a0b0503d7596f72e298f1d73cb4f8c712f0c4d5ec813a8da35309e2ef75e9afb92da23cbeea6fb9591bc0872e858fab84a9355e4c6459f642df2632112373947460945b991743d854e36c5d6576754adc3d2a2793bc6d34d32fe42e83aca0a5ffae300095674bd9f376205d7a36f9bcd7acf735fb091b6c90eafb20c2bf8556b72555c8f77075a50b49e4c92342412db4f2ae93fd0f094a8e96dd6788b30e83d1c2817658d37c4b01834f1cf1dfcccab59d0d61b4d7628d674597fda9224493b669e0296cdbcd50e966b33f302a3850318dbf49d2448e3683d76b3e2708ab50f8596630109516ea783a33368ed3c3501a481a84c07724ee716276393c89cd692a48c6c46ee7271175ffa85034aa1c97422df0567093cdbae2c5add23b9b41fa00cedbeefa9e54fd6163f3a31965c3c7be8228eaba6d745c7024073b73c92235531271a88770ba99657983cf73d2895e6842510601d62aa66a473e7d7c10d8509da7c4a578493578ac0734f759b5ff9d8c3186aaa4977f3b9a7442f8d95a00102cc321086f4866e6adc344e5ec6aec4a96b3f0115db0bebef6e19211cfc0bbb5c4160a2545a3bffc3256abd575845d96a43eded2f8c60d1ff5c31e95b5da94ee8086714eddec8fc57b21e52f68272c0a1db588611d09158b347cd0e1a11fdd3200a2aa75ef7c78d6761f262aa262e723fb45b220499cc8dd9d6c2598c48ba7b32342f0654186d57a3921f0bf32549fad5673bf68f35e8df810142d7c0dd8d956b576dca6a97080ad25284a844e25bdecfc28bcc15b8d19ba83bab53d5c784c2184628d518edf04f66f29fcb8259ce554b6d99d1e49cff21e2ba15ccccd1ebce3696d56385f71591d3f6c2e7b3264e7eb41528db136a2c6d8dbb5fa247d4355b8bb3e7e35851450d8576b0b618e590594b962116d6cc94eb9c5d3f566096fff60bb3b0f8938a1891392534f0798350b97f2ee4d9de1a2e8832c26753f72163a4d44e44f743a34900096262088dcaf877c9b87cc7c57f95920b06652a7eefd7de32f638e8fd182ae10c529360433e24d8234af36a774e8c6f76d5386beeda0f6b8e67cbc1b03c5e7ca60dc89277891466d5030b4b53ca4144ccfc11fa9e186f85617469d1c44b0bf776ed3535da636290ae464b0befb37b704749066619cf976a6466258dd56626781f4b6f144011fd856699ee75dc8a3cd7658e5533931e2f60fad8d9dfc0560e1780dd3f19176d9a5ff0169b3d6cc1d2c3bd2ed4e5a06746ee8aa2d41884f8b90384ccf59038a410b143ae41938930960d10c5e967f2aa09e58a72b1a98ee2752a42349a3794892ce57a30c41116f6357f36ad0d0cb286085a93fb793b5e7172b849a512ddee561b3c68ecb8ef41bb9703a84d91ef9d2dcbfb43fbc803bb4beeff6e3f55c4f12cb3814a71f84ec309031a502573b05d4ef9801a83ed48c4b24e5095e1928fc333b479af7c55fa4d100e5dd8d7f623f020d7fc6f3c18f8291cc799f6eb4f087c10d81160b9fb7ba255a3bf3e44fc4f47d737829bd9eea903b641e2d23aabb08d4742d61fbf892a27a2f4ff4ee2a5fb5cfb8d2fb9969f428e4ae2df6985994959dd1905c835cf6915a9368f19c2b400f6a40305b65de106d475cca51641d718c7fb4616b1166fe9d05593623f2f20ca58bd6628f76c8359807a7ffdffaf916cc0c0005453244495468e0358e5580166087f57637b4f944a092b870975f894c1320105bd70bcd78ca58bdf0074a84759b124b1a6ef50d0104086c81c795803a9d52e87179265129fcf50368a5dae96b55bf123be35fb6a8cd8db9a3d408516ec33ad0779afff5dcc63f33b8013fc348ab127d889c7f474999e961117c03ae083ede898a0b5eb03dd77beaed3a05c15cdf754ef0b0799a2f993cc36af11d2a43f8d6cb05acd8e4366f78f25b8b80aa59a8a9cb3d03eea803966851e9b0d16741c8471626233c5e1f20dcf8eaedc7b7f3862c8627a79310793b520a0ac7c4ff88f645935b14c0269d0ba50e613ee1ca8f0e85f66aa7cd7a44550f7cdb2aeae4460dc5543cdc2e5e260e4bc51e58c55e3248af021fa2c2d0305ec54a68435247119d4a3df487a178d000bdbef453749de342879ef8f6044d45b845f8e63cd693880fdc2d5f55531e45a41d794d9e163bff654de141289430fa081457a79bff7e62a3f88d79deff90c81820e5bd1ea4e91c9723c079b75283abb3dd5ab842625da23e1cc63417680e3b554359ab965512a7eb1b9e4db9c7deebf2865be1d12f52007faaad5397d00e8650296e787d58482018e87edcaddbbd6081946e0ba994b9968cd3f15624d94e4cd4a74e3f773043a643d5c6ed19e4bbd0b0fd569859a2b83fc493ad9c33475aca9e859dfdff0799e40679bdcd08a3aab6c86fb33b84d9acc35382a36856a0502cbe744f71c9453aaa05c6985fd64612770aac69cbb6b269e3c01a4f5e930fb9719ae22e4bf47ea2568bed7a996a65b1e6276d88005870e62a6306f8fa1a6d02ea5b018c1cd93ed34913d64ebcc62d98b65d4c0d4948872cf80b754336836cdd9552f859d5fd1c05deea997eb52ed834315ac0a17d1c97f0fc4ca78fa77584cb4e0471dd51f2c6d7f8c48937353914691233c1d51131269fbffac38d07641ae1dbe0f5ff01bcca8ab7bf8"}, @nested={0x4, 0x20}, @nested={0x4, 0x76}]}, @nested={0x1008, 0x37, 0x0, 0x1, [@nested={0x4, 0x115}, @generic="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"]}, @typed={0x4, 0xb4}, @typed={0x8, 0x116, 0x0, 0x0, @fd=r0}, @nested={0xb5, 0x34, 0x0, 0x1, [@generic="ce1fc5f98c5d7869fecb4851afe6b285697904ad4ba6c52f0b56fab2d3701a9f3ac818b8deac45e4f3ec61b6fb6210e0c1b1a87d7432568fb9545a1aa3096c010943ee4b04ce18e8c8bbbcb57d6dd9877b91fa85cd7360a9a4ce1efdd9d484c04185342903c670538081b56255ad8d2182252ac0b595fc", @generic="8b1ed64e856e4157f231ce0792ce89edaf9c4c22fa4975edadab07f0ae7a703aee1ad4f9ff148d446c7c0d337b8be16ac52e", @typed={0x8, 0x5d, 0x0, 0x0, @uid=r1}]}]}, 0x2310}, 0x1, 0x0, 0x0, 0x4004880}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000004e40)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004c40)={0x1b8, 0x2f, 0x200, 0x70bd25, 0x25dfdbfd, {0x9}, [@typed={0xc, 0x37, 0x0, 0x0, @u64=0x5}, @nested={0x7d, 0x105, 0x0, 0x1, [@generic="00824165516fe1ef73de9be55fac572ed2467c14275c3809f991cb68f4c210d541aa1ca3b2ea212c005195b702bfbdb77377f2e07dd43a4333599e2a22f20916c3801676578212530555600d596f96cb907db79736673b91129c95791f1deba5a7ddcda32ad0fa0693f64fb99502f45d6f3ceeb13c80c7aaae"]}, @generic="ef884df082825d8f46f02a5fb06775fd9732fc66f23549e8a63a1617aeecacff33c3267d0c4dfd0182fd6b6ff4034f6f29ea08718d30311c09af2c381f3dd39a59c51b3eee216fb058de8468ea87ffff1fe17115aa4b60a2c0ab417be7c43dc4425d48891c9959d6ff547b35ad803060ba3210de6108b62b7f5e008e6e7469711a9a880e0359e821bff70a0252292539c122d45dba7a09c38c04c293b2b53b9e3662d10f917882063e80c7b19061811f893e", @generic="f461d0d3b269cb9a644d6683e67ecded92504555e36d22b6e2019f4efab66c772d52e42334c607098bcda2ed5b49d211b2da71a8931be083c523ec048e6f998959a73ed48e0f884a3f63755507130a0daf15544c6bf00154cbf062224208cfa5e5d70a1c68"]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) splice(r0, &(0x7f0000004e80)=0x3, r0, &(0x7f0000004ec0)=0x8000000000000001, 0xd1d, 0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004f40), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004fc0)={'syztnl1\x00', &(0x7f0000004f80)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x9, 0x0, {{0x6, 0x4, 0x2, 0x27, 0x18, 0x64, 0x0, 0x8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2d}, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000050c0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005080)={&(0x7f0000005000)={0x5c, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x18}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040811}, 0x408c4) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x74, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e0c42ce3d3c9bd159b846e208e"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000005300)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10eb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000000}, 0x810) fcntl$setown(r3, 0x8, r2) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x3a34, 0x2002) fsetxattr(r3, &(0x7f0000005340)=@random={'btrfs.', 'tunl0\x00'}, &(0x7f0000005380)=',V\x00', 0x3, 0x1) r6 = openat2(r0, &(0x7f00000053c0)='./file0\x00', &(0x7f0000005400)={0x0, 0x28, 0x4}, 0x18) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005480), r0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x40, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x11) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000005580)={'\x00', 0x1ff, 0x9ca, 0x2, 0x6, 0xb6d, r2}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000005600)={'\x00', 0x0, 0x7, 0xff, 0x5, 0xb, r8}) fcntl$getownex(r3, 0x10, &(0x7f0000005680)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000056c0)={0x73622a85, 0x0, 0x1}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r10, &(0x7f0000005800)={&(0x7f0000005700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005780)={0x2c, r11, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x4080) rt_tgsigqueueinfo(r9, 0x0, 0x3e, &(0x7f0000005840)={0x7, 0xd, 0x4}) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000005a00)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005980)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x35}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 36.916767861s ago: executing program 3 (id=4649): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000040)={0xb}) 36.814848881s ago: executing program 2 (id=4650): ioctl$KVM_CAP_HYPERV_VP_INDEX(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800004, 0x13, r0, 0x10000000) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x7f, "bc881ec48c93fad01d935c3f52f9b380153125d7e13040e90cb0b64a1df5b38460686f1e9e8e4e9e5c771f90bc947226fb02671c88184663998fe18257d6ba1cf5634ab80df899d0552f4b101b09b60c10823bc3e0adf72f353b1e7b8cfe9b74f00ac47a1b8b2d3bb1340755c1a69b9c989599727cba92a353b952485c491e"}, &(0x7f0000000140)=0xa3) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x6, 0xa4c, [0x0, 0x200000000280, 0x20000000064c, 0x2000000009b8], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x6, 0x6, 'erspan0\x00', 'veth0\x00', 'rose0\x00', 'pim6reg1\x00', @random="bd4cc83fe9de", [0xff, 0xff, 0xff], @remote, [0x0, 0x84b6e4feb7b1e9d2, 0x0, 0x0, 0xdf792c7399c6ddbf], 0x9e, 0x9e, 0xce, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x9, 0x3}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x53}}}}, {0x3, 0x1, 0x8848, 'vcan0\x00', 'macvtap0\x00', 'veth0_to_bridge\x00', 'pimreg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff], 0x1d6, 0x27e, 0x2ce, [@comment={{'comment\x00', 0x0, 0x100}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5, 0x5a, 0x1, 0xfafd88e981c1992a}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x3, 0x2, 0x1, 0x0, "d25cd7b5ef5dcb6bd2c3986da13e22bda485cc671b345795db8b84869c91ff678a0d441999d604aec0aea55c227ccb5f2de9c2a302ba28b0d317501ce445bb91"}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}], @common=@log={'log\x00', 0x28, {{0x3, "48bc8f6d8a8a6ebd931e4dc0bf05060629857015a495f7f04ed73cf858cf", 0x3ebfc88db99a0a08}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffd, 0x2, [{0x11, 0x0, 0x4, 'veth0_to_bond\x00', 'geneve1\x00', 'wg1\x00', 'nicvf0\x00', @random="98a42ee568d0", [0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff], 0x6e, 0x136, 0x1ae, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x308d, 'syz1\x00', {0x6}}}}, @common=@nflog={'nflog\x00', 0x50, {{0x60b, 0x1, 0xfff, 0x0, 0x0, "5b75a26388590a6c14a6abc7db7e52420da6d584312dcc7f622585a337b3edc6e8e4482211d463322c14cb6cc2cc9f36d7cf5a30588278f5c81e8defd06aff6e"}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2, 0x7fff, 0x7fff, 0x0, 0x0, "c0ea153b1346d2bb9ae57b265d26071fb7ec3c2f253ce85d608bdd288e2bc24ef7735258b428586abc1a891a0f99580a75d21ff09211824a526bf1bfc1469164"}}}}, {0x9, 0x20, 0x60, 'tunl0\x00', 'syzkaller0\x00', 'ip6tnl0\x00', 'veth1\x00', @random="b8f46e7f2b5e", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xde, 0x15e, 0x18e, [@stp={{'stp\x00', 0x0, 0x48}, {{0xff, {0x6d, 0x2, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x7fff, 0xffffffff, 0xd, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x8, 0x100, 0x6, 0x80, 0x2, 0x7, 0x2, 0x6}, 0x2, 0x40a}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x7e, {0x4}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x14, 0x888e, 'veth1_to_bond\x00', 'gretap0\x00', 'veth0\x00', 'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x16777a9f90c169e1}, [0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x1e6, 0x22e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x3, 0x4, {0x6542}}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0xf, {0x4}}}}}, {0x9, 0x49, 0x800, 'netpci0\x00', 'ip6tnl0\x00', 'lo\x00', 'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x7a, 0xc0, {0x7ff}}}}}]}]}, 0xac4) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000e00)) pread64(r0, &(0x7f0000000e40)=""/129, 0x81, 0xfffffffffffffffb) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x20000, 0x126, 0x8}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f00000010c0)=0xe8) fchownat(r2, &(0x7f0000000f80)='./file0\x00', r4, r1, 0x1000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4280000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) r6 = socket$inet(0x2, 0x2, 0x7fffffff) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000001240)={0x4, 0x8, 0x9}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001280)={0x0, @multicast2, @empty}, &(0x7f00000012c0)=0xc) r7 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001300)={0x1, 0x5, [{r0, 0x0, 0x2000, 0x8000}, {r0, 0x0, 0x100000000, 0x4000}, {r0, 0x0, 0x1000000, 0x100000000}, {r0, 0x0, 0x1000000, 0x2000}, {r0, 0x0, 0x1000000, 0x1000000}]}) r8 = syz_clone(0x41206900, &(0x7f0000001380)="e3bf33c8c57dc6483dfdb7310a86438d3691921d6f97d40e51da92f587e02fde19b5392aa1cd712fa05a1b245eff59a83e8b7107a03bd1655209e850c94d9e40751fed0109033d70060e891837d439c2b5baa22921aa75361b88d2b46dd877b1e9d270bf6f12bcac945a7ad800baa32002957cbd812333052874f04afb8690a6aa48445e25443bdf7bf66fd3ecf76b5cc435dfd2acde265018f615b155187b2087a7ea468e04bad0f9bcdb6e82f28ad5573e39d692a1e8c4196b6d5dd2e8", 0xbe, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="6ea4dedfd5c96c7dc1c6b5a94751add7a33bbb5da58cc0ab4fbfd838f4189257fee9f8e987d4a67935d7445dd6179251d50204659ed97245a4e9420f1ddfbf4fb68375e1009825306e534dc24a8cc2ffcf89cc4dee1c5a9690a753b1fe1d9d239b770360b1743f57d2f9baad73fbeb44e4dbc5d3463b10933fd54f2deb1bd1f79e5bb957693bd645cdad22ce9741") fcntl$setownex(r7, 0xf, &(0x7f0000001580)={0x0, r8}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x100340, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000001600)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001740)={&(0x7f0000001640), 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) ioctl$KDDISABIO(r0, 0x4b37) pread64(r9, &(0x7f0000001780)=""/10, 0xa, 0x1) ioctl$int_in(r2, 0x5452, &(0x7f00000017c0)) writev(r9, &(0x7f00000019c0)=[{&(0x7f0000001800)="b4b0cbddd8a9ed38cb4f1a73b008370ef7078ba942b88ed9104b373de288f4db3190491297d777bd5d5b53706fdc027910394ffba965927ec564ed8157df06d802e8d7180648cb4f714f8a850f5fa44a8ce0320d22c7125686b81717bcb8104e8e1779cbc4471206be58b95eb6503f8471dfbda849d83501d64973a498ab2eb47cb3a8071f2a5b0c06589603655f7daf958680b7ebb1b79c7062a86c12bf7d2743d7b7297848f35b1c3294a9955bb3f76c6d0b8ba4603a822cece449c8d401a5be55a68732894623f9d8bb3a421117e80f416830628fbf858e902a533339", 0xde}, {&(0x7f0000001900)="08e28075d7", 0x5}, {&(0x7f0000001940)="23c62211f4c3ebb4986e4153ad1eeef3f47b219e1173a981d7f1d02fe1c0074b0c99eaf6f15dc9fb51d36754dc0a9fac0aa7ed6c6ab5ab09e34b6f85088cd51520df761331b6dff60287e76e512ee1f833a0211e91ab9abbd28d8e4c1299ce8fd705e21b2b0c7316a92feee8ce7c455b9325ffc796767cf71c6eb1715a", 0x7d}], 0x3) 36.655983202s ago: executing program 3 (id=4651): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000002c0)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x111509e, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="e40000002000000802000000ffdbdf2511000000cd0001002f6465762f726e6c623000e1b679e7a3d36f8a84b7407e5ab474871987a675cdd56f5da6ac9c2188abb656c3eb738fbad5c4776d36b585a2893c0c59c64bef5bd09a2824525b431d132f93ea9fd1f872ca3a888d6c3e0d4f00007206a7446cd627636545b596dd25c52a32d769ccef134b334657289258ee8dfea261a86b96b1cb5b3168ccefed33607cabce14f37bfc9cd5078989248414a4ed3396cf178042680a9945b5b0a9299059d6f9b4a2cbbf6fedd5740743f69a70fb40c6a5119c57708f95ce8f671ff300000000d5ab0f4ce58c3fa9aa9bd234fe9f59"], 0xe4}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) sendto$inet_nvme_of_msg(r0, &(0x7f00000004c0)={@rsp={{0x5, 0x4, 0x18, 0x5, 0x47}, {@u16=0xff, 0x10, 0x7, 0xcb, 0x5}}, @val=&(0x7f0000000400)="2c516afd70edd507eb0143843ce4ab1c3b230f6f08cda5c7eaca18c71646b3116bef53d25f429bab1c20736ad8601777497a64c35e1e44e6e800ddc368683d52e7455775397436dd1cdf3419dd60b0dc2aa828be1471fda0399959e0b2bcf4cd0c7c61595176f8ab2fae40396e0ba2ab97d0c99def8a3a9e1dd3a9431334de4b27340a8535aa78c6cc5c94a3e63b293c650e1726255cf78c1d79a603a3259a528ceaf09f92affbd17428fa4feb0e614e2a810fe1"}, 0x88, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0xd, 0x100000001, &(0x7f0000000180)=0xab}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x8000}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) pread64(r5, &(0x7f00000006c0)=""/4082, 0xff2, 0xd33) 36.617114363s ago: executing program 2 (id=4652): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r1, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) socket(0x1a, 0x800, 0x9) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x48, 0x0, 0x0, 0x1ffff, 0x4119e896, 0x10000000000000}, 0x0) pipe2$9p(&(0x7f0000000140), 0x8080) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)="1fe314f7bc0a6a6fcd057e92f98f51ef291b015636f66fe2a42db9c06a390d07e152c86193da40038f52dccbeccd2d1f745ab9c2d74acafdf9fd362f2fadddcdcee8c539af02a4bd5f1414b3e67f8b2aad97f7eae10070626554130e52df04b1131f44c0da4aefa9f27b10668337f772885179ee15dda016e719bed86af3d41bdcb0d421f248b918f04c819f18e8320c029f", 0x92}], 0x1}}], 0x1, 0x4001c00) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x1802, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$incfs(r3, &(0x7f0000000040)='.pending_reads\x00', 0x44c041, 0x1cf) 36.506712293s ago: executing program 3 (id=4653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000d00), 0x0) r1 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000c40)={0x1c, &(0x7f0000000b00)={0x0, 0x17, 0x33, "3d1dd26027ff1f4833b6d5d3cfc6aa5d9448ff69e365b1b0361a11cdb4209c9df21ae2847ca5cd40504e60aac61971d601ceb9"}, 0x0, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0xa8}}) fsopen(&(0x7f00000013c0)='9p\x00', 0x1) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb5, 0x50, 0xf8, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xc75}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x52, 0x3, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x3, 0x0, 0xe}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket(0x28, 0x5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 36.326005604s ago: executing program 2 (id=4656): unshare(0x22020600) (async) r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$eventfd(r2, &(0x7f0000000340), 0x8) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000600)=[@acquire_done={0x40106309, 0x1}], 0x43, 0x0, &(0x7f0000000740)="ff9388205610ea990eaaba1fb8f28d721321e0ee676b6be7e753dfed4627798d969499de1f768fb7f709a95a8827959fc3a7c7d5b2375ce7636e7fa23142d3c6fb86e6"}) 36.201854475s ago: executing program 2 (id=4657): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) prctl$PR_GET_SECCOMP(0x15) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@code={0xa, 0x5e, {"420f05c4017b11a75d2800000f237a66bad00466b80a0066efc4c1ff7051af00400f01df65450f01dfb9e90a0000b8a1000000ba000000000f30b805000000b9f894e1630f01d92e67670fc72b"}}], 0x5e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 35.968044866s ago: executing program 0 (id=4661): mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x2b) (async) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x501440, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES16=r2], 0xd6) (async) r5 = syz_clone(0x9400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') readv(r8, &(0x7f0000000480), 0x10000000000001e8) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0x0, 0xe}, {0xeffd, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x8, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x9}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x1, [0xb, 0x2, 0x3, 0x3]}) (async) r10 = fsopen(&(0x7f0000000340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x81) openat$cgroup_subtree(r11, &(0x7f00000002c0), 0x2, 0x0) (async) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESOCT], 0x0) (async) waitid(0x2, r5, &(0x7f0000000100), 0x40000000, &(0x7f0000000200)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r12, 0x407, 0x0) write$FUSE_INIT(r12, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) vmsplice(r12, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x3) rt_sigqueueinfo(r5, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) (async) poll(&(0x7f0000000040)=[{r3, 0x80}, {r4, 0x28a}, {r2, 0x1021}, {r4, 0x629}, {r2, 0x1f322}], 0x5, 0xa) 35.338739689s ago: executing program 0 (id=4662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, @any, 0x0, 0x2}, 0xe) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={0x0}) (async) ptrace$setsig(0x4203, r2, 0x5, &(0x7f00000000c0)={0x5, 0x5, 0x1d33}) (async) ptrace$setregs(0x15, r1, 0xc, &(0x7f0000000000)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_getparam(r3, &(0x7f0000000040)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 35.23470844s ago: executing program 0 (id=4663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ab80aa031bf37981360f5096f16231e54752dd7ce341b0bc552ac5ab5494c2", 0x1f}, {&(0x7f0000000100)="2262231204869a12f73ac5b8e30c19eb12dbc75f3f15e0dc7e250327262d134de2a7128b630a6ce5a7ce701845d87d4ad10d5ab712b3542098854acb66a6da24bfca580fecae2ace9fab9f77acccb77431babc18a832a72c99829e6eaeb21e2c46a4df1fb8808eeba665e2c9ab07ddd540e577fde154387cd906f7c95ffa7f344036a0e0e8caa715137ed3330230d4e11239fd34988853e2347e55d2cd0fdd659026bd8ee97bababf0b87590d198618166568c88dbfa09f55dbdea31a1e5f30baeb780b02d358ba0a36be137f3306789635f6ac35c3b155f7b31d95ed325", 0xde}, {&(0x7f0000000080)="3312acaa01d4c4b6a6ef7c", 0xb}, {&(0x7f0000000200)="50e5950a3ac1b073", 0x8}, {&(0x7f0000000240)="67ebd165513c05156fbaab58eb49fd5ac8bce84242d212634f62853c7fa5ac65e654562af9b4db9cb4f18a7f91fcad0c5e71eecc15fe58c357519c95cc143f1cb6dc071a16678fc7d831b3882048b06ba6f22ec61d674ab670ef2fead9f56e36c1b75f003fd3803ad21e54f8d34463cacc2c0e01d10295616f69651e3dedca35d401bf5385a247f87ba69578f53c0d773e63727988d9abdc6d7a8c74d334732c9cf04a7fb5638b153cd43cec01e2bfa6f8ffa72050bb27d816734d4a310235c7db4972a19aa7c9f6cffb8e0029d018fc1d686130e14e7a", 0xd7}], 0x5, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}], 0x1, 0x20040084) close_range(r0, 0xffffffffffffffff, 0x0) 35.13882729s ago: executing program 0 (id=4664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000001c0)=0x48e4) r3 = dup(r1) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x4) 35.112075681s ago: executing program 0 (id=4665): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040400) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) read$eventfd(r3, &(0x7f0000000100), 0x8) 32.274141086s ago: executing program 4 (id=4666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$inet(r2, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0xcc) chroot(&(0x7f0000000100)='./file0/file0\x00') chroot(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000140)='./file0/file0/..\x00') close_range(r0, 0xffffffffffffffff, 0x0) 25.150762184s ago: executing program 3 (id=4667): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="68797363000000000000002a0e5987f772fe8725c32062e1a395d318d53a375196ad122c271b8d"]) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$FUSE(r0, &(0x7f00000038c0)={0x2020}, 0x2020) 21.079674616s ago: executing program 0 (id=4668): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x2010800, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x1}) 19.951984362s ago: executing program 33 (id=4657): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) prctl$PR_GET_SECCOMP(0x15) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000180)=[@code={0xa, 0x5e, {"420f05c4017b11a75d2800000f237a66bad00466b80a0066efc4c1ff7051af00400f01df65450f01dfb9e90a0000b8a1000000ba000000000f30b805000000b9f894e1630f01d92e67670fc72b"}}], 0x5e}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 18.620057719s ago: executing program 4 (id=4670): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) mount$bpf(0x0, 0x0, 0x0, 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) flock(r1, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 18.101047662s ago: executing program 3 (id=4671): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {{}, {0x0, 0x6}}}, 0xfffffffffffffd87}, 0x1, 0x0, 0x0, 0x4814}, 0x40008c4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "1bb0f5f798fdbf3e0957026907a39be2f4fe4543f300", "2b77b5b3eb3f9cb2e7d6e9008a0c003f8e13ca0f39253acbf17e4bf527c100", "673b818e006754bc3339d7ad320000d6000000000500", "d66820dd7cce93d319f60da53a948d87e0eef43f88be7de696738ef857a3ec9c", "565b5168c1b8ef3cd5565c833e988be009927fc3927978204b71845caec42aa6", "476b511c03002801f63b21f4", 0x9, 0x6, 0xb8f, 0x8, 0x9}}) r3 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) setuid(0xffffffffffffffff) r6 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r6, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0x101ff, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0x100000000, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x4, 0x49, 0x3ff, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x3, 0x8, 0x1ff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xab6, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x28000000, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x4, 0x200, 0x7, 0xe53e, 0x4, 0x9, 0x2293332f, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x7, 0xdfd4, 0x14b, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r4}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.78091362s ago: executing program 34 (id=4668): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x2010800, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x1}) 905.252285ms ago: executing program 35 (id=4670): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) mount$bpf(0x0, 0x0, 0x0, 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) flock(r1, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 0s ago: executing program 36 (id=4671): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd2d, 0x0, {{}, {0x0, 0x6}}}, 0xfffffffffffffd87}, 0x1, 0x0, 0x0, 0x4814}, 0x40008c4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "1bb0f5f798fdbf3e0957026907a39be2f4fe4543f300", "2b77b5b3eb3f9cb2e7d6e9008a0c003f8e13ca0f39253acbf17e4bf527c100", "673b818e006754bc3339d7ad320000d6000000000500", "d66820dd7cce93d319f60da53a948d87e0eef43f88be7de696738ef857a3ec9c", "565b5168c1b8ef3cd5565c833e988be009927fc3927978204b71845caec42aa6", "476b511c03002801f63b21f4", 0x9, 0x6, 0xb8f, 0x8, 0x9}}) r3 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) setuid(0xffffffffffffffff) r6 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r6, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0x101ff, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0x100000000, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x4, 0x49, 0x3ff, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x3, 0x8, 0x1ff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xab6, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x28000000, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x4, 0x200, 0x7, 0xe53e, 0x4, 0x9, 0x2293332f, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x7, 0xdfd4, 0x14b, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r4}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): alid bInterval 0, changing to 7 [ 255.831921][ T31] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 255.843768][ T31] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 255.857763][ T31] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 255.867032][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.878453][T11846] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.009572][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 256.092234][ T330] usb 4-1: USB disconnect, device number 21 [ 256.092247][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 256.158823][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 256.166496][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 256.175780][ T10] usb 5-1: config 0 has no interface number 0 [ 256.185687][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 256.194893][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.204102][ T10] usb 5-1: Product: syz [ 256.208296][ T10] usb 5-1: Manufacturer: syz [ 256.213136][ T10] usb 5-1: SerialNumber: syz [ 256.223042][ T10] usb 5-1: config 0 descriptor?? [ 256.229180][ T10] smsc95xx v2.0.0 [ 256.629452][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 256.640261][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 257.128877][ T1016] Bluetooth: hci0: command 0x1003 tx timeout [ 257.134955][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.256426][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 257.279953][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 257.303303][ T10] usb 5-1: USB disconnect, device number 25 [ 257.368707][ T330] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 257.398718][ T694] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 257.518703][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 257.524905][ T330] usb 4-1: config 7 has an invalid interface number: 218 but max is 0 [ 257.533311][ T330] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 257.542138][ T330] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 257.550961][ T330] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 257.558699][ T694] usb 1-1: Using ep0 maxpacket: 16 [ 257.559673][ T330] usb 4-1: config 7 has no interface number 0 [ 257.566338][ T694] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.570960][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 257.579298][ T694] usb 1-1: config 0 has no interface number 0 [ 257.589916][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 257.596342][ T694] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.606958][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 257.618306][ T694] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.628900][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 257.639026][ T694] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 257.653711][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 257.661681][ T694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.670469][ T330] usb 4-1: config 7 interface 218 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 32 [ 257.683423][ T694] usb 1-1: config 0 descriptor?? [ 257.693134][ T330] usb 4-1: config 7 interface 218 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 257.704097][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 257.717643][ T330] usb 4-1: config 7 interface 218 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 257.731133][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0x9 has an invalid bInterval 29, changing to 7 [ 257.742421][ T330] usb 4-1: config 7 interface 218 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 257.753449][ T330] usb 4-1: config 7 interface 218 altsetting 5 endpoint 0xF has an invalid bInterval 247, changing to 7 [ 257.764661][ T330] usb 4-1: config 7 interface 218 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 257.775967][ T330] usb 4-1: config 7 interface 218 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 257.787068][ T330] usb 4-1: config 7 interface 218 has no altsetting 0 [ 257.795733][ T330] usb 4-1: New USB device found, idVendor=1bc7, idProduct=10d0, bcdDevice=3a.e8 [ 257.804887][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.812990][ T10] usb 5-1: device descriptor read/64, error -71 [ 257.819313][ T330] usb 4-1: Product: ï“¿ [ 257.823522][ T330] usb 4-1: Manufacturer: 阺Ⲥ⚞쳟䥑䖅٧尻诔剨漕ᶺã¹å²¿ [ 257.831825][ T330] usb 4-1: SerialNumber: Ђ [ 257.838071][T11928] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.047059][T11955] rust_binder: Error in use_page_slow: ESRCH [ 258.047081][T11955] rust_binder: use_range failure ESRCH [ 258.047280][T11954] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 258.053517][T11955] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 258.058815][ T10] usb 5-1: device descriptor read/64, error -71 [ 258.067014][T11955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 258.074730][T11954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 258.081178][T11955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:140 [ 258.091743][T11954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:140 [ 258.115882][ T330] usb 4-1: USB disconnect, device number 22 [ 258.305033][ T694] uclogic 0003:28BD:0071.0010: pen parameters not found [ 258.312179][ T694] uclogic 0003:28BD:0071.0010: interface is invalid, ignoring [ 258.328752][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 258.364164][ T330] usb 1-1: USB disconnect, device number 31 [ 258.458759][ T10] usb 5-1: device descriptor read/64, error -71 [ 258.502561][ T36] kauditd_printk_skb: 117 callbacks suppressed [ 258.502585][ T36] audit: type=1400 audit(2000040056.617:1908): avc: denied { map } for pid=11962 comm="syz.2.3849" path="socket:[52563]" dev="sockfs" ino=52563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 258.574602][ T36] audit: type=1400 audit(2000040056.687:1909): avc: denied { accept } for pid=11974 comm="syz.2.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 258.640987][T11986] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 258.648313][T11986] rust_binder: 953: no such ref 1 [ 258.698810][ T10] usb 5-1: device descriptor read/64, error -71 [ 258.808993][ T10] usb usb5-port1: attempt power cycle [ 259.023430][T12010] rust_binder: Write failure EFAULT in pid:151 [ 259.039148][T12012] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 259.045534][T12012] rust_binder: Error while translating object. [ 259.056970][T12012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.063313][T12012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 259.128689][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 259.208755][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.229745][ T10] usb 5-1: device descriptor read/8, error -71 [ 259.288893][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 259.295364][ T31] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 259.303971][ T31] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 259.306325][T12020] /dev/rnullb0: Can't open blockdev [ 259.314549][ T31] usb 1-1: config 2 has no interface number 0 [ 259.325644][ T31] usb 1-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 259.335947][ T31] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 259.347225][ T31] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 259.360415][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 259.369607][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.369824][ T10] usb 5-1: device descriptor read/8, error -71 [ 259.379860][T12002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.391257][T12002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.461132][T12023] rust_binder: Write failure EFAULT in pid:163 [ 259.618745][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 259.649794][ T10] usb 5-1: device descriptor read/8, error -71 [ 259.779895][ T10] usb 5-1: device descriptor read/8, error -71 [ 259.888796][ T10] usb usb5-port1: unable to enumerate USB device [ 260.738807][ T694] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 260.889836][ T694] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 260.902398][ T694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.912576][ T694] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.925546][ T694] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 260.934990][ T694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.944791][ T694] usb 5-1: config 0 descriptor?? [ 260.951368][ T694] usb-storage 5-1:0.0: USB Mass Storage device detected [ 260.959333][ T694] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 261.682729][ T45] usb 5-1: USB disconnect, device number 30 [ 261.760753][ T31] usb 1-1: string descriptor 0 read error: -71 [ 261.772583][ T31] usb 1-1: USB disconnect, device number 32 [ 261.998722][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 262.016234][T12080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.016262][T12080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:977 [ 262.089085][T12084] binder: Bad value for 'stats' [ 262.149790][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.160774][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.170785][ T45] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 262.179922][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.188556][ T45] usb 5-1: config 0 descriptor?? [ 262.468698][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 262.628707][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 262.635653][ T31] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.646743][ T31] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 25411, setting to 1024 [ 262.657935][ T31] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.670864][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 262.678827][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 262.687927][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.695974][ T31] usb 1-1: Product: ﵨ勡ì›Í›ã‚‹é¡®ä¾ºï¯šï¼Žã ¥ä¶“æ›­ï‹‚â‘“å©‹s굽瘪鹾ᖨê“铬갈肶ﺸ䧊皟鄀⥯ԗ츳仵îµê¼± [ 262.708451][ T31] usb 1-1: Manufacturer: ሠ[ 262.713093][ T31] usb 1-1: SerialNumber: à š [ 262.738862][ T559] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 262.889261][ T559] usb 4-1: Using ep0 maxpacket: 32 [ 262.896264][ T559] usb 4-1: unable to get BOS descriptor or descriptor too short [ 262.904721][ T559] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.914904][ T559] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.923897][ T559] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.938297][ T559] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.947393][ T559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.955437][ T559] usb 4-1: Product: syz [ 262.959645][ T559] usb 4-1: Manufacturer: syz [ 262.964250][ T559] usb 4-1: SerialNumber: syz [ 263.010514][ T45] hid-led 0003:27B8:01ED.0011: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 263.025848][ T45] hid-led 0003:27B8:01ED.0011: ThingM blink(1) initialized [ 263.253670][ T559] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 263.260564][ T559] cdc_ncm 4-1:1.0: bind() failure [ 263.267099][ T559] usb 4-1: USB disconnect, device number 23 [ 263.720318][ T10] usb 5-1: USB disconnect, device number 31 [ 263.827327][T12142] rust_binder: 581: no such ref 0 [ 263.832629][T12142] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 263.840110][T12143] netlink: 'syz.3.3908': attribute type 16 has an invalid length. [ 263.840694][T12142] rust_binder: 581: no such ref 2 [ 263.853423][T12142] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 263.853483][T12145] __vm_enough_memory: pid: 12145, comm: syz.3.3908, bytes: 18014402804453376 not enough memory for the allocation [ 263.881178][T12143] netlink: 64130 bytes leftover after parsing attributes in process `syz.3.3908'. [ 263.934976][T12155] netlink: 'syz.3.3912': attribute type 16 has an invalid length. [ 264.004584][T12160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:593 [ 264.605465][T12189] rust_binder: Error while translating object. [ 264.615180][T12189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 264.621538][T12189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:618 [ 264.722663][T12202] overlayfs: failed to clone upperpath [ 264.738116][T12202] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 264.749095][ T36] audit: type=1400 audit(2000040062.867:1910): avc: denied { relabelto } for pid=12201 comm="syz.2.3927" name="file0" dev="tmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 264.776904][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'. [ 264.788601][ T36] audit: type=1400 audit(2000040062.867:1911): avc: denied { associate } for pid=12201 comm="syz.2.3927" name="file0" dev="tmpfs" ino=2969 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netlabel_mgmt_exec_t:s0" [ 264.878717][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 264.902431][T12204] rust_binder: Got transaction with invalid offset. [ 264.902469][T12204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.909157][T12204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 264.943878][T12209] /dev/sg0: Can't lookup blockdev [ 265.039983][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 265.047866][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 265.056137][ T10] usb 5-1: config 0 has no interface number 0 [ 265.062501][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 265.072454][ T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 265.082414][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 265.090749][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 265.100319][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.108684][ T10] usb 5-1: Product: syz [ 265.113356][ T10] usb 5-1: Manufacturer: syz [ 265.118000][ T10] usb 5-1: SerialNumber: syz [ 265.126853][ T10] usb 5-1: config 0 descriptor?? [ 265.132229][T12189] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.132606][T12216] binder: Unknown parameter 'rg' [ 265.139510][T12189] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.161581][T12218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 265.161812][T12219] rust_binder: 200: no such ref 1 [ 265.176074][T12219] rust_binder: Read failure Err(EAGAIN) in pid:200 [ 265.176396][T12218] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 265.190210][T12218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 265.190223][T12219] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 265.190245][T12219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 265.241474][ T31] usb 1-1: USB disconnect, device number 33 [ 265.303010][T12223] 9pnet_fd: Insufficient options for proto=fd [ 265.353241][T12189] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.361099][T12189] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.458706][ T330] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 265.548741][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 265.588687][ T330] usb 4-1: device descriptor read/64, error -71 [ 265.698712][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 265.705690][ T31] usb 1-1: config 1 interface 0 altsetting 11 endpoint 0x2 has an invalid bInterval 115, changing to 10 [ 265.716903][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 265.725129][ T31] usb 1-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.40 [ 265.734262][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.742299][ T31] usb 1-1: Product: ÐŒ [ 265.746393][ T31] usb 1-1: Manufacturer: 꼎ꗋ܎ꥎ蜘犦ꃄå·å„Šî»žã¤¾í˜ªê©å€¿ [ 265.754327][ T31] usb 1-1: SerialNumber: ä°Š [ 265.820736][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 265.829209][ T330] usb 4-1: device descriptor read/64, error -71 [ 265.836462][ T10] usb 5-1: USB disconnect, device number 32 [ 265.965191][ T31] usbhid 1-1:1.0: can't add hid device: -71 [ 265.971207][ T31] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 265.980166][ T31] usb 1-1: USB disconnect, device number 34 [ 266.068713][ T330] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 266.198742][ T330] usb 4-1: device descriptor read/64, error -71 [ 266.398779][ T559] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 266.438774][ T330] usb 4-1: device descriptor read/64, error -71 [ 266.548858][ T559] usb 1-1: Using ep0 maxpacket: 32 [ 266.554080][ T330] usb usb4-port1: attempt power cycle [ 266.560441][ T559] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 266.570364][ T559] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 266.581603][ T559] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.590688][ T559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.598755][ T559] usb 1-1: Product: ï“¿ [ 266.602931][ T559] usb 1-1: Manufacturer: з [ 266.607428][ T559] usb 1-1: SerialNumber: 䧈覼仠팤筯闲鸹B㯙磇ᾖ㢦켹鴕ç¬êžºå‰–é‚á¸•ã ‡è“…Ë²éŸ–îˆ–é•Ÿá „æ©…ï‘±íƒ¸ë¹¯æ½˜êªæ³ˆá¬˜âŒ¨à±šêµî™ç‡¼å³™æŸ¤è’›è‚“쇴ᇤ麜⛕ᘖ䥻㭚滯ሰ⺢隽擉䅡⎔ꙧ좺ݤ뗬ャ告左嫦⦋ꬿᵬ⋕Ǯ籚㌇ꥩ劫겖阺ã…鉨 [ 266.835838][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.844418][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.856824][ T559] cdc_ncm 1-1:1.0: bind() failure [ 266.862993][ T559] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 266.869906][ T559] cdc_ncm 1-1:1.1: bind() failure [ 266.877484][ T559] usb 1-1: USB disconnect, device number 35 [ 266.898724][ T330] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 266.919827][ T330] usb 4-1: device descriptor read/8, error -71 [ 267.050107][ T330] usb 4-1: device descriptor read/8, error -71 [ 267.288742][ T330] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 267.309944][ T330] usb 4-1: device descriptor read/8, error -71 [ 267.439947][ T330] usb 4-1: device descriptor read/8, error -71 [ 267.548859][ T330] usb usb4-port1: unable to enumerate USB device [ 273.424792][ T36] audit: type=1326 audit(2000040071.537:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12241 comm="syz.4.3943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x0 [ 273.559331][T12267] fusectl: Unknown parameter './cgroup/syz1' [ 273.709527][T12290] overlayfs: overlapping lowerdir path [ 274.008743][ T694] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.158683][ T694] usb 4-1: device descriptor read/64, error -71 [ 274.313395][T12307] overlayfs: failed to clone upperpath [ 274.398701][ T694] usb 4-1: device descriptor read/64, error -71 [ 274.408625][T12325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.544514][T12338] cgroup: Invalid name [ 274.638715][ T694] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 274.668736][ T559] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 274.778734][ T694] usb 4-1: device descriptor read/64, error -71 [ 274.819773][ T559] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 274.828063][ T559] usb 1-1: config 0 has no interface number 0 [ 274.835587][ T559] usb 1-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 274.844872][ T559] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.852903][ T559] usb 1-1: Product: syz [ 274.857101][ T559] usb 1-1: Manufacturer: syz [ 274.861770][ T559] usb 1-1: SerialNumber: syz [ 274.868948][ T559] usb 1-1: config 0 descriptor?? [ 275.018812][ T694] usb 4-1: device descriptor read/64, error -71 [ 275.128853][ T694] usb usb4-port1: attempt power cycle [ 275.425131][T12357] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3982'. [ 275.468736][ T694] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 275.479040][T12329] /dev/rnullb0: Can't open blockdev [ 275.479482][T12370] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3986'. [ 275.487207][ T559] asix 1-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.494832][ T694] usb 4-1: device descriptor read/8, error -71 [ 275.504659][ T559] asix 1-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 275.511605][T12370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.520298][ T559] asix 1-1:0.225: probe with driver asix failed with error -71 [ 275.547329][ T559] usb 1-1: USB disconnect, device number 36 [ 275.576692][T12379] fuse: Bad value for 'fd' [ 275.586685][T12379] overlayfs: failed to clone upperpath [ 275.595545][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3990'. [ 275.655990][T12389] netlink: 'syz.4.3994': attribute type 4 has an invalid length. [ 275.669783][ T694] usb 4-1: device descriptor read/8, error -71 [ 275.908712][ T694] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 275.930040][ T694] usb 4-1: device descriptor read/8, error -71 [ 276.059721][ T694] usb 4-1: device descriptor read/8, error -71 [ 276.168835][ T694] usb usb4-port1: unable to enumerate USB device [ 276.201724][T12400] rust_binder: got new transaction with bad transaction stack [ 276.201745][T12400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1018 [ 276.222536][ T36] audit: type=1326 audit(2000040074.337:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.0.3999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906ff8efc9 code=0x0 [ 276.287627][T12420] rust_binder: Write failure EFAULT in pid:1026 [ 276.538720][ T694] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 276.730795][ T694] usb 1-1: Using ep0 maxpacket: 32 [ 276.744963][ T694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.756119][ T694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.766319][ T694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 276.779961][ T694] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 276.789238][ T694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.798181][ T694] usb 1-1: config 0 descriptor?? [ 276.850077][T12486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.989420][T12494] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 276.989448][T12494] rust_binder: Read failure Err(EFAULT) in pid:232 [ 277.275262][ T694] usbhid 1-1:0.0: can't add hid device: -71 [ 277.298747][ T694] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 277.316776][ T694] usb 1-1: USB disconnect, device number 37 [ 277.501875][T12522] netlink: 'syz.4.4034': attribute type 4 has an invalid length. [ 277.509811][T12522] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4034'. [ 277.562543][ T36] audit: type=1400 audit(2000040075.677:1914): avc: denied { setattr } for pid=12528 comm="syz.0.4037" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 277.804698][T12567] /dev/rnullb0: Can't open blockdev [ 277.832023][T12575] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 277.842548][ T36] audit: type=1400 audit(2000040075.957:1915): avc: denied { relabelto } for pid=12574 comm="syz.2.4053" name="586" dev="tmpfs" ino=3202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 277.884441][ T36] audit: type=1400 audit(2000040075.987:1916): avc: denied { associate } for pid=12574 comm="syz.2.4053" name="586" dev="tmpfs" ino=3202 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 277.914592][T12581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12581 comm=syz.2.4055 [ 277.928022][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4056'. [ 277.937739][T12581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12581 comm=syz.2.4055 [ 277.950318][ T36] audit: type=1400 audit(2000040075.987:1917): avc: denied { write } for pid=7066 comm="syz-executor" name="586" dev="tmpfs" ino=3202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 277.988081][T12581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12581 comm=syz.2.4055 [ 277.993067][ T36] audit: type=1400 audit(2000040075.987:1918): avc: denied { remove_name } for pid=7066 comm="syz-executor" name="blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=3207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 278.069030][ T36] audit: type=1400 audit(2000040075.997:1919): avc: denied { rmdir } for pid=7066 comm="syz-executor" name="586" dev="tmpfs" ino=3202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 278.333143][T12607] rust_binder: Write failure EFAULT in pid:1060 [ 278.365490][T12610] random: crng reseeded on system resumption [ 278.528748][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 278.658716][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.676232][T12617] netlink: 'syz.2.4067': attribute type 4 has an invalid length. [ 278.684857][T12617] netlink: 'syz.2.4067': attribute type 4 has an invalid length. [ 278.698716][ T65] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 278.849111][ T65] usb 1-1: no configurations [ 278.853815][ T65] usb 1-1: can't read configurations, error -22 [ 278.898723][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.988727][ T65] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 279.138736][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 279.159122][ T65] usb 1-1: no configurations [ 279.163958][ T65] usb 1-1: can't read configurations, error -22 [ 279.170557][ T65] usb usb1-port1: attempt power cycle [ 279.268721][ T10] usb 4-1: device descriptor read/64, error -71 [ 279.354507][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4083'. [ 279.508691][ T10] usb 4-1: device descriptor read/64, error -71 [ 279.519667][ T65] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 279.549660][ T65] usb 1-1: no configurations [ 279.554595][ T65] usb 1-1: can't read configurations, error -22 [ 279.626218][T12685] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.633566][ T10] usb usb4-port1: attempt power cycle [ 279.643546][T12685] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.663822][T12685] bridge_slave_0: entered allmulticast mode [ 279.671528][T12685] bridge_slave_0: entered promiscuous mode [ 279.678748][T12685] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.686073][T12685] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.688781][ T65] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 279.693415][T12685] bridge_slave_1: entered allmulticast mode [ 279.707873][T12685] bridge_slave_1: entered promiscuous mode [ 279.714102][ T8189] 0ªî{X¹¦: left promiscuous mode [ 279.719327][ T8189] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 279.726733][ T8189] bridge_slave_0: left allmulticast mode [ 279.732990][ T8189] bridge_slave_0: left promiscuous mode [ 279.738802][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.739444][ T65] usb 1-1: no configurations [ 279.755233][ T65] usb 1-1: can't read configurations, error -22 [ 279.761747][ T65] usb usb1-port1: unable to enumerate USB device [ 279.901291][ T8189] veth1_macvtap: left promiscuous mode [ 279.943751][T12685] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.950843][T12685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.958124][T12685] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.965187][T12685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.988289][ T3009] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.995676][ T3009] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.003155][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 280.012756][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.019842][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.029820][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.037351][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.044423][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.070519][T12685] veth0_vlan: entered promiscuous mode [ 280.081795][T12685] veth1_macvtap: entered promiscuous mode [ 280.180447][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.438726][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 280.470006][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.600571][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.718799][ T10] usb usb4-port1: unable to enumerate USB device [ 280.860140][T12732] bridge0: port 2(veth0_to_bridge) entered blocking state [ 280.877445][T12732] bridge0: port 2(veth0_to_bridge) entered disabled state [ 280.884755][T12732] veth0_to_bridge: entered allmulticast mode [ 280.899168][T12732] veth0_to_bridge: entered promiscuous mode [ 280.913230][T12732] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.936711][T12732] bridge0: port 2(veth0_to_bridge) entered blocking state [ 280.943922][T12732] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 281.439478][T12763] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4112'. [ 281.444419][T12767] /dev/rnullb0: Can't open blockdev [ 281.448564][T12763] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.536318][T12780] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 281.544229][T12780] rust_binder: Write failure EINVAL in pid:1072 [ 281.596758][ T36] audit: type=1326 audit(2000040079.707:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.4.4119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b6158efc9 code=0x0 [ 281.695274][ T36] audit: type=1400 audit(2000040079.807:1921): avc: denied { map } for pid=12793 comm="syz.0.4123" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 281.838729][ T330] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 281.991085][ T330] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.000187][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.008263][ T330] usb 4-1: Product: syz [ 282.012664][ T330] usb 4-1: Manufacturer: syz [ 282.017338][ T330] usb 4-1: SerialNumber: syz [ 282.461223][T12820] overlayfs: failed to clone lowerpath [ 282.588687][ T65] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 282.609895][T12823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4132'. [ 282.728751][ T65] usb 1-1: device descriptor read/64, error -71 [ 282.988734][ T65] usb 1-1: device descriptor read/64, error -71 [ 283.228759][ T65] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 283.358698][ T65] usb 1-1: device descriptor read/64, error -71 [ 283.598699][ T65] usb 1-1: device descriptor read/64, error -71 [ 283.718729][ T65] usb usb1-port1: attempt power cycle [ 284.058701][ T65] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 284.079799][ T65] usb 1-1: device descriptor read/8, error -71 [ 284.210889][ T65] usb 1-1: device descriptor read/8, error -71 [ 284.264221][ T36] audit: type=1400 audit(2000040082.377:1922): avc: denied { accept } for pid=12864 comm="syz.4.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.448725][ T65] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 284.469744][ T65] usb 1-1: device descriptor read/8, error -71 [ 284.488712][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 284.599860][ T65] usb 1-1: device descriptor read/8, error -71 [ 284.606389][ T330] usb 4-1: USB disconnect, device number 36 [ 284.638676][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 284.645874][ T31] usb 3-1: config 3 has an invalid interface number: 98 but max is 2 [ 284.655032][T12884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.655103][ T31] usb 3-1: config 3 has an invalid interface number: 142 but max is 2 [ 284.672197][ T31] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 284.681212][ T31] usb 3-1: config 3 has an invalid interface number: 227 but max is 2 [ 284.689611][ T31] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 284.698320][ T31] usb 3-1: config 3 has no interface number 0 [ 284.704661][ T31] usb 3-1: config 3 has no interface number 1 [ 284.711030][ T65] usb usb1-port1: unable to enumerate USB device [ 284.717471][ T31] usb 3-1: config 3 has no interface number 2 [ 284.724169][ T31] usb 3-1: config 3 interface 98 altsetting 250 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 284.735521][ T31] usb 3-1: config 3 interface 98 altsetting 250 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 284.746811][ T31] usb 3-1: config 3 interface 98 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 284.757832][ T31] usb 3-1: config 3 interface 98 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 284.769308][ T31] usb 3-1: config 3 interface 98 altsetting 250 endpoint 0xD has invalid wMaxPacketSize 0 [ 284.779401][ T31] usb 3-1: config 3 interface 98 altsetting 250 has a duplicate endpoint with address 0x1, skipping [ 284.790372][ T31] usb 3-1: config 3 interface 98 altsetting 250 has a duplicate endpoint with address 0xB, skipping [ 284.801367][ T31] usb 3-1: config 3 interface 98 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 284.812523][ T31] usb 3-1: config 3 interface 98 altsetting 250 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 284.823777][ T31] usb 3-1: config 3 interface 98 altsetting 250 endpoint 0x3 has invalid wMaxPacketSize 0 [ 284.833905][ T31] usb 3-1: config 3 interface 142 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 284.843926][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 284.861931][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 284.867554][ T31] usb 3-1: config 3 interface 142 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 284.881958][ T31] usb 3-1: config 3 interface 142 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 284.893353][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 284.904274][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 284.915466][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 284.926245][ T31] usb 3-1: config 3 interface 142 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 284.937174][ T31] usb 3-1: config 3 interface 142 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 284.948206][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 284.959020][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 284.969961][ T31] usb 3-1: config 3 interface 142 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 284.980893][ T31] usb 3-1: config 3 interface 142 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 284.992711][ T31] usb 3-1: config 3 interface 227 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 285.003590][ T31] usb 3-1: config 3 interface 227 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 285.014405][ T31] usb 3-1: config 3 interface 227 altsetting 10 has a duplicate endpoint with address 0x3, skipping [ 285.025240][ T31] usb 3-1: config 3 interface 227 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 285.036070][ T31] usb 3-1: config 3 interface 98 has no altsetting 0 [ 285.042816][ T31] usb 3-1: config 3 interface 142 has no altsetting 0 [ 285.050108][ T31] usb 3-1: config 3 interface 227 has no altsetting 0 [ 285.058255][ T31] usb 3-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=22.f0 [ 285.067850][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.075906][ T31] usb 3-1: Product: â¡° [ 285.080123][ T31] usb 3-1: Manufacturer: 율╩냾얋悽⸮誣ï‹à¼ºå´™ê¼èœ¶×–以윾æ£Ùªîƒ‡ïƒ¾î¬ºä®’䱴ㅶ覊ﱘ主짽䨾ꓖٟ㷑ëˆç“‡ïˆ‡ë”ƒë–¸å œå¶‹æ•ºæ¬²è€ î‹™èœ¦ä®š [ 285.097044][ T31] usb 3-1: SerialNumber: Ð… [ 285.102750][T12859] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 285.110204][T12859] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 285.143704][T12895] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 285.153204][T12895] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 285.175579][T12900] rust_binder: 286: no such ref 3 [ 285.180703][T12900] rust_binder: 286: no such ref 1 [ 285.185810][T12900] rust_binder: Write failure EFAULT in pid:286 [ 285.202072][T12902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 285.208297][T12902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:288 [ 285.281464][T12908] /dev/rnullb0: Can't open blockdev [ 285.383881][T12917] incfs: Error accessing: ./file0. [ 285.389256][T12917] incfs: mount failed -20 [ 285.488557][T12921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 285.488594][T12921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:306 [ 285.489091][T12922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 285.514256][ T31] usb 3-1: bad CDC descriptors [ 285.530339][T12922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:306 [ 285.535931][ T31] usb 3-1: USB disconnect, device number 38 [ 285.594857][T12930] tipc: Enabled bearer , priority 0 [ 285.603151][T12929] tipc: Resetting bearer [ 285.617587][T12929] tipc: Disabling bearer [ 285.693898][T12936] SELinux: failed to load policy [ 285.699061][T12937] SELinux: failed to load policy [ 285.862668][T12954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 285.863782][T12954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 285.873043][T12954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:321 [ 285.898523][T12958] rust_binder: 323: no such ref 6 [ 285.912806][T12958] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 285.948466][T12963] rust_binder: Error in use_page_slow: ESRCH [ 285.948491][T12963] rust_binder: use_range failure ESRCH [ 285.955244][T12963] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 285.960850][T12963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 285.969098][T12963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:325 [ 285.993959][T12965] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.4184'. [ 286.248718][ T45] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 286.301701][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4189'. [ 286.349462][T12984] 9pnet_fd: Insufficient options for proto=fd [ 286.384252][T12988] loop7: detected capacity change from 0 to 16384 [ 286.400578][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.412087][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 286.420817][ T45] usb 4-1: config 4 has an invalid interface number: 56 but max is 0 [ 286.429162][ T45] usb 4-1: config 4 has no interface number 0 [ 286.435307][ T45] usb 4-1: config 4 interface 56 has no altsetting 0 [ 286.443815][ T45] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 286.453129][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.462123][ T45] usb 4-1: Product: syz [ 286.466343][ T45] usb 4-1: Manufacturer: syz [ 286.470995][ T45] usb 4-1: SerialNumber: syz [ 286.496218][T12996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.496257][T12996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 286.540214][T13000] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 286.601334][T13005] rust_binder: Write failure EFAULT in pid:44 [ 286.685050][ T36] audit: type=1400 audit(2000040084.797:1923): avc: denied { read } for pid=13019 comm="syz.2.4202" path="socket:[57144]" dev="sockfs" ino=57144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 286.698878][ T330] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 286.715624][ T36] audit: type=1400 audit(2000040084.797:1924): avc: denied { setattr } for pid=13019 comm="syz.2.4202" name="NFC_LLCP" dev="sockfs" ino=57144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 286.746667][T13025] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967295 [ 286.793384][T13034] netlink: 'syz.3.4207': attribute type 27 has an invalid length. [ 286.801348][T13034] lo: entered promiscuous mode [ 286.806153][T13034] lo: entered allmulticast mode [ 286.812114][T13034] tunl0: entered promiscuous mode [ 286.817181][T13034] tunl0: entered allmulticast mode [ 286.822796][T13034] gre0: entered promiscuous mode [ 286.827965][T13034] gre0: entered allmulticast mode [ 286.834364][T13034] gretap0: entered promiscuous mode [ 286.840562][T13034] gretap0: entered allmulticast mode [ 286.846565][T13034] erspan0: entered promiscuous mode [ 286.851956][T13034] erspan0: entered allmulticast mode [ 286.858032][T13034] ip_vti0: entered promiscuous mode [ 286.863354][T13034] ip_vti0: entered allmulticast mode [ 286.865922][ T45] snd-usb-audio 4-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 286.871366][T13034] ip6_vti0: entered promiscuous mode [ 286.880256][ T45] usb 4-1: USB disconnect, device number 37 [ 286.889602][ T330] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 286.892850][T13034] ip6_vti0: entered allmulticast mode [ 286.899439][ T330] usb 1-1: config 8 has no interface number 0 [ 286.905993][T13034] sit0: entered promiscuous mode [ 286.911932][ T330] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 286.915351][T13034] sit0: entered allmulticast mode [ 286.928397][ T330] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 286.930852][T13034] ip6tnl0: entered promiscuous mode [ 286.943350][ T330] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 286.946782][T13034] ip6tnl0: entered allmulticast mode [ 286.956014][ T330] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 286.961664][T13034] ip6gre0: entered promiscuous mode [ 286.969483][ T330] usb 1-1: Product: syz [ 286.974538][T13034] ip6gre0: entered allmulticast mode [ 286.978614][ T330] usb 1-1: Manufacturer: syz [ 286.984548][T13034] syz_tun: entered promiscuous mode [ 286.988804][ T330] usb 1-1: SerialNumber: syz [ 286.993899][T13034] syz_tun: entered allmulticast mode [ 287.004440][T13034] ip6gretap0: entered promiscuous mode [ 287.010098][T13034] ip6gretap0: entered allmulticast mode [ 287.016268][T13034] bridge0: entered promiscuous mode [ 287.021529][T13034] bridge0: entered allmulticast mode [ 287.027752][T13034] vcan0: entered promiscuous mode [ 287.033067][T13034] vcan0: entered allmulticast mode [ 287.038344][T13034] dummy0: entered promiscuous mode [ 287.043828][T13034] dummy0: entered allmulticast mode [ 287.049822][T13034] veth0: entered promiscuous mode [ 287.054890][T13034] veth0: entered allmulticast mode [ 287.060749][T13034] veth1: entered promiscuous mode [ 287.065822][T13034] veth1: entered allmulticast mode [ 287.071781][T13034] wg0: entered promiscuous mode [ 287.076666][T13034] wg0: entered allmulticast mode [ 287.082317][T13034] wg1: entered promiscuous mode [ 287.087217][T13034] wg1: entered allmulticast mode [ 287.092707][T13034] wg2: entered promiscuous mode [ 287.097596][T13034] wg2: entered allmulticast mode [ 287.103270][T13034] veth0_to_bridge: entered promiscuous mode [ 287.109242][T13034] veth0_to_bridge: entered allmulticast mode [ 287.116321][T13034] veth1_to_bridge: entered promiscuous mode [ 287.122490][T13034] veth1_to_bridge: entered allmulticast mode [ 287.129735][T13034] veth0_to_bond: entered promiscuous mode [ 287.135598][T13034] veth0_to_bond: entered allmulticast mode [ 287.142663][T13034] bond_slave_0: entered promiscuous mode [ 287.148423][T13034] bond_slave_0: entered allmulticast mode [ 287.154700][T13034] veth1_to_bond: entered promiscuous mode [ 287.160769][T13034] veth1_to_bond: entered allmulticast mode [ 287.167315][T13034] bond_slave_1: entered promiscuous mode [ 287.173045][T13034] bond_slave_1: entered allmulticast mode [ 287.179315][T13034] veth0_to_team: entered promiscuous mode [ 287.185057][T13034] veth0_to_team: entered allmulticast mode [ 287.191580][T13034] team_slave_0: entered promiscuous mode [ 287.197244][T13034] team_slave_0: entered allmulticast mode [ 287.203472][T13034] veth1_to_team: entered promiscuous mode [ 287.209292][T13034] veth1_to_team: entered allmulticast mode [ 287.215751][T13034] team_slave_1: entered promiscuous mode [ 287.221631][T13034] team_slave_1: entered allmulticast mode [ 287.227880][T13034] veth0_to_batadv: entered promiscuous mode [ 287.233867][T13034] veth0_to_batadv: entered allmulticast mode [ 287.240578][T13034] batadv_slave_0: entered promiscuous mode [ 287.246437][T13034] batadv_slave_0: entered allmulticast mode [ 287.253054][T13034] veth1_to_batadv: entered promiscuous mode [ 287.259024][T13034] veth1_to_batadv: entered allmulticast mode [ 287.265808][T13034] batadv_slave_1: entered promiscuous mode [ 287.271971][T13034] batadv_slave_1: entered allmulticast mode [ 287.272063][ T330] usb 1-1: USB disconnect, device number 46 [ 287.278569][T13034] xfrm0: entered promiscuous mode [ 287.289299][T13034] xfrm0: entered allmulticast mode [ 287.295147][T13034] veth0_to_hsr: entered promiscuous mode [ 287.301047][T13034] veth0_to_hsr: entered allmulticast mode [ 287.307273][T13034] hsr_slave_0: entered promiscuous mode [ 287.312897][T13034] hsr_slave_0: entered allmulticast mode [ 287.319079][T13034] veth1_to_hsr: entered promiscuous mode [ 287.324723][T13034] veth1_to_hsr: entered allmulticast mode [ 287.331190][T13034] hsr_slave_1: entered promiscuous mode [ 287.336749][T13034] hsr_slave_1: entered allmulticast mode [ 287.342896][T13034] veth1_virt_wifi: entered promiscuous mode [ 287.348957][T13034] veth1_virt_wifi: entered allmulticast mode [ 287.355590][T13034] veth0_virt_wifi: entered promiscuous mode [ 287.361723][T13034] veth0_virt_wifi: entered allmulticast mode [ 287.369297][T13034] veth1_vlan: entered promiscuous mode [ 287.374819][T13034] veth1_vlan: entered allmulticast mode [ 287.381063][T13034] veth0_vlan: entered allmulticast mode [ 287.387390][T13034] vlan0: entered promiscuous mode [ 287.392793][T13034] vlan0: entered allmulticast mode [ 287.398453][T13034] vlan1: entered promiscuous mode [ 287.403757][T13034] vlan1: entered allmulticast mode [ 287.409631][T13034] veth1_macvtap: entered allmulticast mode [ 287.415887][T13034] veth0_macvtap: entered promiscuous mode [ 287.421870][T13034] veth0_macvtap: entered allmulticast mode [ 287.428167][T13034] macsec0: entered promiscuous mode [ 287.433562][T13034] macsec0: entered allmulticast mode [ 287.439536][T13034] syztnl2: entered promiscuous mode [ 287.444783][T13034] syztnl2: entered allmulticast mode [ 287.458181][T13034] syztnl0: entered promiscuous mode [ 287.463510][T13034] syztnl0: entered allmulticast mode [ 287.491235][T13040] rust_binder: 342: no such ref 1 [ 287.496326][T13040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:342 [ 287.705588][T13065] rust_binder: inc_ref_done called when no active inc_refs [ 287.820808][T13075] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 287.853066][T13079] /dev/rnullb0: Can't open blockdev [ 287.853725][ T36] audit: type=1400 audit(2000040085.967:1925): avc: denied { mounton } for pid=13076 comm="syz.3.4221" path="/syzcgroup/unified/syz3" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 287.885472][T13081] __vm_enough_memory: pid: 13081, comm: syz.0.4222, bytes: 18014402804453376 not enough memory for the allocation [ 287.898082][T13081] __vm_enough_memory: pid: 13081, comm: syz.0.4222, bytes: 18014402804453376 not enough memory for the allocation [ 287.915175][T13089] 2N: renamed from vcan0 (while UP) [ 287.950998][T13096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.960319][T13096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.968909][ T330] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 288.108694][ T330] usb 3-1: device descriptor read/64, error -71 [ 288.168734][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 288.188718][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.318715][ T45] usb 4-1: device descriptor read/64, error -71 [ 288.318721][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 288.335064][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.344297][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.352420][ T10] usb 1-1: Product: syz [ 288.356777][ T330] usb 3-1: device descriptor read/64, error -71 [ 288.363118][ T10] usb 1-1: Manufacturer: syz [ 288.367795][ T10] usb 1-1: SerialNumber: syz [ 288.558720][ T45] usb 4-1: device descriptor read/64, error -71 [ 288.608718][ T330] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 288.620770][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 288.633379][ T10] usb 1-1: USB disconnect, device number 47 [ 288.640763][ T10] usblp0: removed [ 288.738701][ T330] usb 3-1: device descriptor read/64, error -71 [ 288.798730][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 288.928720][ T45] usb 4-1: device descriptor read/64, error -71 [ 288.942485][ T36] audit: type=1400 audit(2000040087.057:1926): avc: denied { relabelfrom } for pid=13123 comm="syz.4.4237" name="NETLINK" dev="sockfs" ino=57318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 288.942491][T13124] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 288.976885][ T36] audit: type=1400 audit(2000040087.057:1927): avc: denied { relabelto } for pid=13123 comm="syz.4.4237" name="NETLINK" dev="sockfs" ino=57318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 289.008690][ T330] usb 3-1: device descriptor read/64, error -71 [ 289.051912][ T36] audit: type=1326 audit(2000040087.167:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x7ffc0000 [ 289.075588][ T36] audit: type=1326 audit(2000040087.167:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x7ffc0000 [ 289.099453][ T36] audit: type=1326 audit(2000040087.167:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6b6158efc9 code=0x7ffc0000 [ 289.128911][ T330] usb usb3-port1: attempt power cycle [ 289.131416][ T36] audit: type=1326 audit(2000040087.167:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x7ffc0000 [ 289.157892][ T36] audit: type=1326 audit(2000040087.167:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.4239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x7ffc0000 [ 289.177222][T13141] rust_binder: Read failure Err(EAGAIN) in pid:1135 [ 289.182965][ T45] usb 4-1: device descriptor read/64, error -71 [ 289.214530][T13148] incfs: Options parsing error. -22 [ 289.219874][T13148] incfs: mount failed -22 [ 289.287465][T13166] 9pnet_fd: Insufficient options for proto=fd [ 289.298978][ T45] usb usb4-port1: attempt power cycle [ 289.478717][ T65] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 289.478725][ T330] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 289.499794][ T330] usb 3-1: device descriptor read/8, error -71 [ 289.529548][T13183] fuse: Bad value for 'fd' [ 289.629772][ T330] usb 3-1: device descriptor read/8, error -71 [ 289.640331][ T45] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 289.648938][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 133, changing to 11 [ 289.660246][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 41515, setting to 1024 [ 289.671662][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.685018][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.694314][ T45] usb 4-1: device descriptor read/8, error -71 [ 289.701100][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.710583][ T65] usb 1-1: config 0 descriptor?? [ 289.829768][ T45] usb 4-1: device descriptor read/8, error -71 [ 289.868709][ T330] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 289.889806][ T330] usb 3-1: device descriptor read/8, error -71 [ 289.918057][ T65] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 289.925559][ T65] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 289.933033][ T65] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 289.940609][ T65] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 289.948015][ T65] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 289.955928][ T65] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 289.968879][ T65] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 290.030003][ T330] usb 3-1: device descriptor read/8, error -71 [ 290.078704][ T45] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 290.099719][ T45] usb 4-1: device descriptor read/8, error -71 [ 290.138822][ T330] usb usb3-port1: unable to enumerate USB device [ 290.174266][ T65] usb 1-1: USB disconnect, device number 48 [ 290.238856][ T45] usb 4-1: device descriptor read/8, error -71 [ 290.243304][T13200] 9pnet_fd: Insufficient options for proto=fd [ 290.264493][T13202] random: crng reseeded on system resumption [ 290.348870][ T45] usb usb4-port1: unable to enumerate USB device [ 290.608694][ T65] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 290.738738][ T65] usb 1-1: device descriptor read/64, error -71 [ 290.988716][ T65] usb 1-1: device descriptor read/64, error -71 [ 291.143422][T13243] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 291.156563][T13243] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 291.169048][T13243] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 291.196503][T13248] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.196813][T13248] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 291.228731][ T65] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 291.379439][ T65] usb 1-1: device descriptor read/64, error -71 [ 291.402575][T13262] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4279'. [ 291.415485][T13262] netlink: 'syz.3.4279': attribute type 2 has an invalid length. [ 291.630564][ T65] usb 1-1: device descriptor read/64, error -71 [ 291.738794][ T65] usb usb1-port1: attempt power cycle [ 291.894934][T13293] netlink: 'syz.4.4288': attribute type 5 has an invalid length. [ 291.898739][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 291.981750][T13306] 9pnet_fd: Insufficient options for proto=fd [ 292.060571][ T10] usb 3-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 292.070929][ T10] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 292.081801][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 292.096076][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.098735][ T65] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 292.105193][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.120797][ T10] usb 3-1: SerialNumber: syz [ 292.128268][ T10] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 292.129943][ T65] usb 1-1: device descriptor read/8, error -71 [ 292.136189][ T10] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 292.148806][ T10] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 292.269703][ T65] usb 1-1: device descriptor read/8, error -71 [ 292.518675][ T65] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 292.549479][ T65] usb 1-1: device descriptor read/8, error -71 [ 292.572368][T13312] netlink: 'syz.4.4294': attribute type 12 has an invalid length. [ 292.614495][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 292.614523][ T36] audit: type=1400 audit(2000040090.727:1941): avc: denied { setattr } for pid=13318 comm="syz.4.4296" name="" dev="pipefs" ino=58740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 292.679685][ T65] usb 1-1: device descriptor read/8, error -71 [ 292.798785][ T65] usb usb1-port1: unable to enumerate USB device [ 292.882588][T13331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 292.882625][T13331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 293.339308][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 293.470327][T13349] input: syz1 as /devices/virtual/input/input33 [ 293.509942][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.519959][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 293.536780][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.560966][ T10] usb 4-1: config 0 descriptor?? [ 293.590206][T13358] binder: Bad value for 'defcontext' [ 293.739790][T13369] __vm_enough_memory: pid: 13369, comm: syz.0.4313, bytes: 18014402804453376 not enough memory for the allocation [ 293.794172][T13373] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 294.158695][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 294.252869][T13394] input: syz1 as /devices/virtual/input/input35 [ 294.264729][T13338] SELinux: failed to load policy [ 294.297149][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 294.315991][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.336186][ T10] usb 4-1: USB disconnect, device number 42 [ 294.348676][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 294.368746][ T45] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.382351][ T36] audit: type=1400 audit(2000040092.497:1942): avc: denied { getopt } for pid=13402 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.388289][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.438285][ T45] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 294.447443][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.469113][ T45] usb 1-1: config 0 descriptor?? [ 294.478956][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 294.676803][ T45] usb 3-1: USB disconnect, device number 43 [ 294.688834][T13405] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4324'. [ 294.700170][ T3029] Bluetooth: hci0: Frame reassembly failed (-84) [ 294.972746][T13418] netlink: 'syz.4.4328': attribute type 4 has an invalid length. [ 295.108751][ T45] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 295.258751][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 295.265038][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 295.273179][ T45] usb 4-1: config 0 has no interface number 0 [ 295.280712][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 295.289876][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.297918][ T45] usb 4-1: Product: syz [ 295.302138][ T45] usb 4-1: Manufacturer: syz [ 295.306745][ T45] usb 4-1: SerialNumber: syz [ 295.312024][ T45] usb 4-1: config 0 descriptor?? [ 295.317765][ T45] smsc95xx v2.0.0 [ 295.718209][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 295.729042][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.312696][T13441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4335'. [ 296.323749][T13441] fuse: Unknown parameter '000000000000000000040x0000000000000008' [ 296.728820][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.728838][ T1016] Bluetooth: hci0: command 0x1003 tx timeout [ 296.873985][ T10] usb 1-1: USB disconnect, device number 53 [ 296.964330][T13465] fuse: Unknown parameter '0x000000000000000300000000000000000003' [ 297.011203][T13472] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4346'. [ 297.034293][T13474] overlayfs: failed to clone upperpath [ 297.220551][T13495] netlink: 'syz.0.4354': attribute type 4 has an invalid length. [ 297.228358][T13495] netlink: 'syz.0.4354': attribute type 21 has an invalid length. [ 297.237233][T13495] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4354'. [ 297.399867][T13506] 9pnet_fd: Insufficient options for proto=fd [ 297.613571][T13515] binder: Bad value for 'defcontext' [ 297.709360][T13521] 9pnet_fd: Insufficient options for proto=fd [ 298.452992][T13580] __vm_enough_memory: pid: 13580, comm: syz.2.4381, bytes: 18014402804453376 not enough memory for the allocation [ 298.547927][T13586] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4382'. [ 298.560917][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 298.587915][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.602410][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 298.617454][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.630874][ T45] usb 4-1: USB disconnect, device number 43 [ 298.678524][T13597] fuse: Bad value for 'user_id' [ 298.684398][T13597] fuse: Bad value for 'user_id' [ 298.696016][T13597] overlayfs: overlapping lowerdir path [ 298.729183][T13602] 9pnet_fd: Insufficient options for proto=fd [ 298.759240][T13608] 9pnet_fd: Insufficient options for proto=fd [ 298.783063][T13614] rust_binder: 127: no such ref 0 [ 298.788334][T13614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 298.820501][ T36] audit: type=1400 audit(2000040096.937:1943): avc: denied { relabelfrom } for pid=13620 comm="syz.2.4394" name="NETLINK" dev="sockfs" ino=59244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.854603][ T36] audit: type=1400 audit(2000040096.937:1944): avc: denied { relabelto } for pid=13620 comm="syz.2.4394" name="NETLINK" dev="sockfs" ino=59244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 298.908653][T13630] rust_binder: Error while translating object. [ 298.908695][T13630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 298.908885][T13629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.915071][T13630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:142 [ 299.164885][T13646] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4403'. [ 299.230869][ T36] audit: type=1326 audit(2000040097.347:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.0.4402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906ff8efc9 code=0x0 [ 299.301268][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4405'. [ 299.363907][T13653] rust_binder: Error in use_page_slow: ESRCH [ 299.363928][T13653] rust_binder: use_range failure ESRCH [ 299.370051][T13653] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 299.375623][T13653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 299.383635][T13653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:446 [ 299.438721][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 299.466511][T13667] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4409'. [ 299.476330][T13667] /dev/rnullb0: Can't open blockdev [ 299.535641][T13679] /dev/rnullb0: Can't open blockdev [ 299.551858][T13682] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 299.588615][T13687] rust_binder: Write failure EFAULT in pid:473 [ 299.588697][ T10] usb 3-1: device descriptor read/64, error -71 [ 299.631920][T13691] rust_binder: 477: no such ref 0 [ 299.637038][T13691] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 299.644312][T13691] rust_binder: Write failure EINVAL in pid:477 [ 299.828723][ T10] usb 3-1: device descriptor read/64, error -71 [ 299.970708][T13707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 299.970736][T13707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:485 [ 300.088917][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 300.187936][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4428'. [ 300.228698][ T10] usb 3-1: device descriptor read/64, error -71 [ 300.478732][ T10] usb 3-1: device descriptor read/64, error -71 [ 300.599141][ T10] usb usb3-port1: attempt power cycle [ 300.640188][T13787] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 300.958728][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 300.979759][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.109831][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.118707][ T31] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 301.268695][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 301.274993][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 301.283171][ T31] usb 4-1: config 0 has no interface number 0 [ 301.291163][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 301.300330][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.308334][ T31] usb 4-1: Product: syz [ 301.312531][ T31] usb 4-1: Manufacturer: syz [ 301.317143][ T31] usb 4-1: SerialNumber: syz [ 301.322785][ T31] usb 4-1: config 0 descriptor?? [ 301.333045][ T31] smsc95xx v2.0.0 [ 301.350533][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 301.362606][T13799] 9pnet_fd: Insufficient options for proto=fd [ 301.379945][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.510036][ T10] usb 3-1: device descriptor read/8, error -71 [ 301.540697][T13814] fuse: Unknown parameter 'ff' [ 301.618851][ T10] usb usb3-port1: unable to enumerate USB device [ 301.663671][T13825] overlayfs: failed to clone upperpath [ 301.671261][ T36] audit: type=1107 audit(2000040100.782:1946): pid=13824 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 301.737614][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 301.748444][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 301.814392][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4467'. [ 301.965851][ T36] audit: type=1400 audit(2000040101.072:1947): avc: denied { mount } for pid=13791 comm="syz.3.4451" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 301.992536][T13792] binder: Bad value for 'stats' [ 302.151282][T13861] 9pnet_fd: Insufficient options for proto=fd [ 302.171841][T13865] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=13865 comm=syz.4.4478 [ 302.175882][ T36] audit: type=1326 audit(2000040101.282:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.4479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f906ff8efc9 code=0x0 [ 302.504883][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 302.516991][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 302.527541][ T31] usb 4-1: USB disconnect, device number 44 [ 302.613409][T13913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.613436][T13913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502 [ 304.157556][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4509'. [ 304.210609][ T36] audit: type=1326 audit(2000040103.322:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13953 comm="syz.4.4510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6158efc9 code=0x0 [ 304.408702][ T1016] Bluetooth: hci0: command 0x1003 tx timeout [ 304.414798][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 304.484749][T13956] rust_binder: 177: no such ref 3 [ 304.484806][ T36] audit: type=1400 audit(2000040103.592:1950): avc: denied { setattr } for pid=13955 comm="syz.2.4511" name="NETLINK" dev="sockfs" ino=61160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.490193][T13956] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 304.521217][T13956] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 304.528475][T13956] rust_binder: Write failure EFAULT in pid:177 [ 305.067755][T13972] EXT4-fs: dax option not supported [ 305.791950][T14004] fuse: Unknown parameter 'g^oup_id' [ 305.799848][T14004] tmpfs: Bad value for 'huge' [ 305.838675][ T330] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 305.889809][T14014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=14014 comm=syz.4.4533 [ 306.001289][ T330] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 306.011491][ T330] usb 4-1: can't read configurations, error -71 [ 306.152438][ T36] audit: type=1400 audit(2000040105.262:1951): avc: denied { append } for pid=14023 comm="syz.2.4537" name="usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.176186][ T36] audit: type=1400 audit(2000040105.262:1952): avc: denied { map } for pid=14023 comm="syz.2.4537" path="/proc/199/net/snmp" dev="proc" ino=4026533006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 306.203666][ T36] audit: type=1400 audit(2000040105.312:1953): avc: denied { mounton } for pid=14025 comm="syz.2.4538" path="/65/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 306.313204][T14038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4541'. [ 306.358853][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 306.858716][ T330] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 306.984331][T14119] veth1_to_bridge: entered promiscuous mode [ 306.990404][T14119] veth1_to_bridge: entered allmulticast mode [ 306.996439][ T330] usb 4-1: device descriptor read/64, error -71 [ 307.049222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.061351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.073413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.085587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.097664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.109712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.121802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.133993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.146034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.158148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.571976][ T330] usb 4-1: device descriptor read/64, error -71 [ 307.684369][ T330] usb usb4-port1: attempt power cycle [ 307.720047][ T36] audit: type=1326 audit(2000040106.832:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14143 comm="syz.0.4580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906ff8efc9 code=0x0 [ 308.070440][T14166] fuse: Unknown parameter 'grЍ+׋˜&‚»Ç’Ý\K†oup_id' [ 308.073602][ T330] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 308.195244][T14176] netlink: 'syz.2.4592': attribute type 3 has an invalid length. [ 308.198847][ T330] usb 4-1: device descriptor read/8, error -71 [ 308.203249][T14176] netlink: 944 bytes leftover after parsing attributes in process `syz.2.4592'. [ 308.232068][ T36] audit: type=1326 audit(2000040107.342:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.2.4592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37818efc9 code=0x0 [ 308.337201][T14184] GUP no longer grows the stack in syz.2.4592 (14184): 200000001000-200000c01000 (200000000000) [ 308.357661][T14184] CPU: 1 UID: 0 PID: 14184 Comm: syz.2.4592 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 308.357702][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.357726][T14184] Call Trace: [ 308.357736][T14184] [ 308.357747][T14184] __dump_stack+0x21/0x30 [ 308.357800][T14184] dump_stack_lvl+0x10c/0x190 [ 308.357834][T14184] ? __cfi_dump_stack_lvl+0x10/0x10 [ 308.357872][T14184] ? find_vma+0xcd/0x110 [ 308.357899][T14184] dump_stack+0x19/0x20 [ 308.357931][T14184] __get_user_pages+0x1e34/0x22d0 [ 308.357963][T14184] ? __kasan_check_write+0x18/0x20 [ 308.358003][T14184] ? down_read_killable+0x79/0xf0 [ 308.358030][T14184] ? populate_vma_page_range+0x230/0x230 [ 308.358061][T14184] ? kernel_text_address+0xa9/0xe0 [ 308.358093][T14184] ? unwind_get_return_address+0x51/0x90 [ 308.358132][T14184] __gup_longterm_locked+0xcb1/0x1580 [ 308.358167][T14184] ? stack_depot_save_flags+0x38/0x800 [ 308.358197][T14184] gup_fast_fallback+0x12ae/0x14a0 [ 308.358229][T14184] ? kasan_save_track+0x3e/0x80 [ 308.358256][T14184] ? __kmalloc_cache_noprof+0x24c/0x490 [ 308.358281][T14184] ? futex_lock_pi+0x77a/0xa10 [ 308.358315][T14184] ? get_user_pages_fast_only+0xc0/0xc0 [ 308.358349][T14184] get_user_pages_fast+0x73/0xb0 [ 308.358381][T14184] get_futex_key+0x24d/0x930 [ 308.358404][T14184] ? __cfi_get_futex_key+0x10/0x10 [ 308.358428][T14184] ? futex_lock_pi+0x77a/0xa10 [ 308.358456][T14184] ? futex_setup_timer+0xb4/0xd0 [ 308.358479][T14184] futex_lock_pi+0x1c0/0xa10 [ 308.358506][T14184] ? futex_unqueue+0x136/0x160 [ 308.358532][T14184] ? __cfi_futex_lock_pi+0x10/0x10 [ 308.358562][T14184] ? __cfi_futex_wake_mark+0x10/0x10 [ 308.358594][T14184] ? futex_setup_timer+0xb4/0xd0 [ 308.358618][T14184] ? __cfi_futex_wake_mark+0x10/0x10 [ 308.358648][T14184] ? __kasan_check_write+0x18/0x20 [ 308.358685][T14184] ? up_read+0x26/0x1d0 [ 308.358715][T14184] do_futex+0x25c/0x500 [ 308.358740][T14184] ? __cfi_do_futex+0x10/0x10 [ 308.358766][T14184] ? vm_mmap_pgoff+0x145/0x4e0 [ 308.358789][T14184] __se_sys_futex+0x28f/0x300 [ 308.358816][T14184] ? __x64_sys_futex+0x110/0x110 [ 308.358843][T14184] ? __kasan_check_write+0x18/0x20 [ 308.358900][T14184] __x64_sys_futex+0xe9/0x110 [ 308.358927][T14184] x64_sys_call+0x227f/0x2ee0 [ 308.358964][T14184] do_syscall_64+0x58/0xf0 [ 308.358996][T14184] ? clear_bhb_loop+0x50/0xa0 [ 308.359024][T14184] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.359050][T14184] RIP: 0033:0x7fd37818efc9 [ 308.359077][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.359100][T14184] RSP: 002b:00007fd378ff8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 308.359133][T14184] RAX: ffffffffffffffda RBX: 00007fd3783e6090 RCX: 00007fd37818efc9 [ 308.359153][T14184] RDX: 0000000000000001 RSI: 000000000000000d RDI: 0000200000000b00 [ 308.359169][T14184] RBP: 00007fd378211f91 R08: 0000000000000000 R09: 0000000000000002 [ 308.359186][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.359201][T14184] R13: 00007fd3783e6128 R14: 00007fd3783e6090 R15: 00007ffdbb423748 [ 308.359224][T14184] [ 308.904545][ T330] usb 4-1: device descriptor read/8, error -71 [ 309.212706][ T330] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 309.368428][ T330] usb 4-1: device descriptor read/8, error -71 [ 309.606853][T14217] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 309.606884][T14217] rust_binder: Error while translating object. [ 309.650065][ T330] usb 4-1: device descriptor read/8, error -71 [ 309.705497][T14217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.705537][T14217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 309.914303][ T330] usb usb4-port1: unable to enumerate USB device [ 311.710579][T14264] rust_binder: Failed copying remainder into alloc: EFAULT [ 311.710607][T14264] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 311.718006][T14264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 311.726889][T14264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:285 [ 311.753712][T14264] /dev/rnullb0: Can't open blockdev [ 311.809191][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4623'. [ 311.854997][T14269] rust_binder: 287: no such ref 1 [ 311.870582][T14269] rust_binder: Write failure EINVAL in pid:287 [ 311.949995][T14290] rust_binder: Write failure EFAULT in pid:557 [ 312.058675][ C0] net_ratelimit: 112432 callbacks suppressed [ 312.058701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.083095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.095175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.107248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.119310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.131381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.143542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.155597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.167643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.179675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.240744][T14304] binder: Unknown parameter 's' [ 312.345205][T14315] binder: Unknown parameter '' [ 312.419159][T14323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:300 [ 312.419208][T14323] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 312.453952][T14323] rust_binder: Read failure Err(EFAULT) in pid:300 [ 312.857124][T14356] rust_binder: Write failure EFAULT in pid:581 [ 313.508668][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 313.719778][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 313.761192][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 313.808331][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 313.854088][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 313.895735][ T45] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 313.925030][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.960512][ T45] usb 4-1: Product: syz [ 313.977873][ T45] usb 4-1: Manufacturer: syz [ 313.998690][ T45] usb 4-1: SerialNumber: syz [ 314.024145][ T45] usb 4-1: config 0 descriptor?? [ 314.048795][ T45] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 314.409652][ T45] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 314.646488][T14413] sit0: entered promiscuous mode [ 314.958454][T14415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.137091][T14415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.068664][ C0] net_ratelimit: 150131 callbacks suppressed [ 317.068688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.068712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.074808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.086846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.098849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.110861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.122841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.134827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.146767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.158655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.078652][ C1] net_ratelimit: 200002 callbacks suppressed [ 322.078677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.078685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 322.084790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.096723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.108717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.120610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.132488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.144408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.156283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.168314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 323.681505][ T45] usb 4-1: USB disconnect, device number 49 [ 324.463013][T14413] netlink: 'syz.0.4665': attribute type 1 has an invalid length. [ 324.906769][T14413] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4665'. [ 327.088676][ C0] net_ratelimit: 201577 callbacks suppressed [ 327.088699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.088719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.094834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.106719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.118687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 327.130709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.142639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.154628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.166573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.178465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.098658][ C1] net_ratelimit: 203286 callbacks suppressed [ 332.098693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.098719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.104770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.116854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 332.128919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.140916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.152878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.164770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.176645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.188661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.108645][ C1] net_ratelimit: 205289 callbacks suppressed [ 337.108676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.108700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 337.114772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.126796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.138790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.150776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.162669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.174634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.186515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.198574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 339.882232][ C1] sched: DL replenish lagged too much [ 342.118635][ C0] net_ratelimit: 205778 callbacks suppressed [ 342.118658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.118659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.118724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.124777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.136706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.148724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 342.160700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.172712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.184672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.196699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.128650][ C1] net_ratelimit: 204438 callbacks suppressed [ 347.128675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.128705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.134817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.146797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 347.158772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.170698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.182718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.194664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.206525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.218451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.138632][ C0] net_ratelimit: 233490 callbacks suppressed [ 352.138656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.138667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.138716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.144741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.156799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.168752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.180704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.192634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 352.204570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.216569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.148651][ C1] net_ratelimit: 269593 callbacks suppressed [ 357.148675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.148679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 357.148728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.154775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.166903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.178897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.190783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.202668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.214575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 357.226568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.158625][ C0] net_ratelimit: 278436 callbacks suppressed [ 362.158650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.158682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.164743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 362.176764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.188683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.200654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.212577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.224495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.236426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.248328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.168636][ C0] net_ratelimit: 285545 callbacks suppressed [ 367.168661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.168674][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.168726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.174834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 367.187118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.199097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.211155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.223297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.235271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.247211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.178643][ C0] net_ratelimit: 275199 callbacks suppressed [ 372.178674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.178681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.178732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.184788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.196698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.208903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.220787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.232704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 372.244582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.256562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.188625][ C0] net_ratelimit: 281188 callbacks suppressed [ 377.188649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.188663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.188715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.194841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.206756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.218748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.230628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.242553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 377.254424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.266506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.198633][ C0] net_ratelimit: 272972 callbacks suppressed [ 382.198660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 382.198693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.204828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.216839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.228759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.240646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.252593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.264603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.276497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 382.288454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.208634][ C0] net_ratelimit: 274503 callbacks suppressed [ 387.208659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.208699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.214744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.226683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.238668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.250607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.262614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 387.274566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.286554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.298534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.218617][ C1] net_ratelimit: 268485 callbacks suppressed [ 392.218639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.218659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.224900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.236989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 392.248977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.260881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.272929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.284825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.296780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.308707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.280779][ T46] bridge_slave_1: left allmulticast mode [ 396.330726][ T46] bridge_slave_1: left promiscuous mode [ 396.379605][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.458863][ T46] bridge_slave_0: left allmulticast mode [ 396.481655][ T46] bridge_slave_0: left promiscuous mode [ 396.520277][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.228625][ C1] net_ratelimit: 276127 callbacks suppressed [ 397.228650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.228665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.228718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 397.234791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.246755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.258719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.270734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.282782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.294709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.306687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.238623][ C0] net_ratelimit: 280547 callbacks suppressed [ 402.238646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.238674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.244733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 402.256739][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.268753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.280793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.292762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.304648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.316600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.328624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.248625][ C0] net_ratelimit: 279003 callbacks suppressed [ 407.248650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 407.248660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.248714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.254759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.266927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.278846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.290725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.302663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.314563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.326542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 412.258616][ C0] net_ratelimit: 279964 callbacks suppressed [ 412.258639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.258666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.264748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.276668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.288661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 412.300650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.312677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.324668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.336566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.348449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.268616][ C0] net_ratelimit: 280210 callbacks suppressed [ 417.268641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.268668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.274851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.286754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.298746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.310629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.322557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 417.334517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.346533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.358499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.278608][ C1] net_ratelimit: 280843 callbacks suppressed [ 422.278633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.278655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.284722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.296751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.308671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.320682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.332548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.344553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 422.356535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.368525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.288596][ C1] net_ratelimit: 280294 callbacks suppressed [ 427.288621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.288649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.294870][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.306834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 427.318885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.330884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.342846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.354850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.366723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.378734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.298621][ C1] net_ratelimit: 278292 callbacks suppressed [ 432.298646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.298647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.298699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.304956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.316876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.328738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.340659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 432.352561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.364523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.376480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.308603][ C1] net_ratelimit: 279214 callbacks suppressed [ 437.308628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.308636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.308685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 437.314717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.326647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.338631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.350703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.362559][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.374467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.386469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.318584][ C1] net_ratelimit: 287330 callbacks suppressed [ 442.318608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.318610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.318661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.324720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.336757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 442.348724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.360700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.372699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.384680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.396562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.328587][ C1] net_ratelimit: 281481 callbacks suppressed [ 447.328612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.328630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.334780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.346693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.358610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.370505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.382465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.394461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.406370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.418340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 452.338607][ C1] net_ratelimit: 284737 callbacks suppressed [ 452.338630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.338647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.344714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.356825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.368694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.380609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 452.392594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.404540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.416522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.428456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 455.560872][ T37] INFO: task syz.2.4657:14378 blocked for more than 124 seconds. [ 455.579248][ T37] Not tainted syzkaller #0 [ 455.584234][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.652264][ T37] task:syz.2.4657 state:D stack:0 pid:14378 tgid:14377 ppid:12685 flags:0x00004006 [ 455.669892][ T37] Call Trace: [ 455.673222][ T37] [ 455.676182][ T37] __schedule+0x1322/0x1df0 [ 455.699576][ T37] ? __sched_text_start+0x10/0x10 [ 455.704675][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 455.727193][ T37] ? __kasan_check_write+0x18/0x20 [ 455.732429][ T37] ? llist_add_batch+0x109/0x1e0 [ 455.737408][ T37] schedule+0xc6/0x240 [ 455.741546][ T37] schedule_timeout+0xb2/0x3a0 [ 455.746339][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 455.751756][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 455.757401][ T37] ? generic_exec_single+0x201/0x500 [ 455.762710][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 455.768351][ T37] wait_for_common+0x359/0x630 [ 455.773145][ T37] ? wait_for_completion+0x40/0x40 [ 455.778276][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 455.784810][ T37] ? xa_find+0x145/0x170 [ 455.789074][ T37] wait_for_completion+0x1c/0x40 [ 455.794026][ T37] rcu_barrier+0x415/0x530 [ 455.798450][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 455.803841][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 455.808628][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 455.813756][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 455.819414][ T37] ? __kasan_check_write+0x18/0x20 [ 455.824633][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 455.830290][ T37] kvm_put_kvm+0xb04/0x12c0 [ 455.834822][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 455.839954][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 455.845165][ T37] kvm_vm_release+0x47/0x70 [ 455.849696][ T37] __fput+0x1fb/0xa00 [ 455.853690][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 455.859264][ T37] ____fput+0x20/0x30 [ 455.863271][ T37] task_work_run+0x1e0/0x250 [ 455.867875][ T37] ? __cfi_task_work_run+0x10/0x10 [ 455.873008][ T37] get_signal+0x1307/0x14f0 [ 455.877534][ T37] arch_do_signal_or_restart+0x96/0x720 [ 455.883128][ T37] ? __fget_files+0x2c5/0x340 [ 455.887820][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 455.894004][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 455.898875][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 455.904347][ T37] do_syscall_64+0x64/0xf0 [ 455.908794][ T37] ? clear_bhb_loop+0x50/0xa0 [ 455.913573][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 455.919485][ T37] RIP: 0033:0x7fd37818ebcb [ 455.923910][ T37] RSP: 002b:00007fd379018f30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.932462][ T37] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007fd37818ebcb [ 455.940461][ T37] RDX: 00007fd379018fd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 455.948444][ T37] RBP: 00007fd37822d300 R08: 0000000000000000 R09: 0000000000000000 [ 455.956440][ T37] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fd37822d390 [ 455.964531][ T37] R13: 00000000003cf000 R14: 0000200000c31000 R15: 0000200000c00000 [ 455.972576][ T37] [ 456.870979][ T37] NMI backtrace for cpu 0 [ 456.871002][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 456.871032][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.871048][ T37] Call Trace: [ 456.871056][ T37] [ 456.871066][ T37] __dump_stack+0x21/0x30 [ 456.871102][ T37] dump_stack_lvl+0x10c/0x190 [ 456.871134][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 456.871167][ T37] dump_stack+0x19/0x20 [ 456.871204][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 456.871233][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 456.871274][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 456.871302][ T37] ? sched_show_task+0x379/0x560 [ 456.871331][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 456.871358][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 456.871386][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 456.871415][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 456.871445][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 456.871474][ T37] watchdog+0xd8f/0xed0 [ 456.871507][ T37] ? __cfi_watchdog+0x10/0x10 [ 456.871536][ T37] ? __kasan_check_read+0x15/0x20 [ 456.871570][ T37] ? __kthread_parkme+0x138/0x180 [ 456.871590][ T37] ? schedule+0xc6/0x240 [ 456.871621][ T37] kthread+0x2ca/0x370 [ 456.871644][ T37] ? __cfi_watchdog+0x10/0x10 [ 456.871673][ T37] ? __cfi_kthread+0x10/0x10 [ 456.871696][ T37] ret_from_fork+0x67/0xa0 [ 456.871727][ T37] ? __cfi_kthread+0x10/0x10 [ 456.871750][ T37] ret_from_fork_asm+0x1a/0x30 [ 456.871785][ T37] [ 456.871795][ T37] Sending NMI from CPU 0 to CPUs 1: [ 457.071419][ C1] NMI backtrace for cpu 1 [ 457.071435][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 457.071458][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 457.071470][ C1] RIP: 0010:read_tsc+0x10/0x20 [ 457.071499][ C1] Code: 84 00 00 00 00 00 0f 1f 40 00 b8 85 61 64 34 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 e8 c3 18 4a 00 0f 01 f9 <66> 90 48 c1 e2 20 48 09 d0 5d c3 cc cc cc cc cc b8 95 20 58 e5 90 [ 457.071514][ C1] RSP: 0018:ffffc90000230000 EFLAGS: 00000246 [ 457.071530][ C1] RAX: 000000006afbc837 RBX: ffffffff8899c3d8 RCX: 0000000000000001 [ 457.071543][ C1] RDX: 00000000000000eb RSI: 0000000000000000 RDI: ffffffff872be380 [ 457.071555][ C1] RBP: ffffc90000230000 R08: ffff88810367a600 R09: 0000000000000002 [ 457.071567][ C1] R10: 0000000000000000 R11: ffffffff813be5e0 R12: dffffc0000000000 [ 457.071580][ C1] R13: 00000000000139c0 R14: 0000000000000000 R15: ffffffff872be380 [ 457.071592][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 457.071606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.071618][ C1] CR2: 00007fc4b6de6038 CR3: 00000001563de000 CR4: 00000000003526b0 [ 457.071635][ C1] Call Trace: [ 457.071640][ C1] [ 457.071649][ C1] ktime_get_with_offset+0x13c/0x2b0 [ 457.071675][ C1] netif_rx_internal+0x2b1/0x340 [ 457.071693][ C1] ? dev_forward_skb+0x80/0x80 [ 457.071711][ C1] ? __dev_forward_skb2+0x4ab/0x770 [ 457.071728][ C1] __netif_rx+0x24/0x230 [ 457.071748][ C1] veth_xmit+0x460/0x820 [ 457.071771][ C1] dev_hard_start_xmit+0x21b/0x770 [ 457.071793][ C1] __dev_queue_xmit+0x19cc/0x3790 [ 457.071814][ C1] ? __dev_queue_xmit+0x24c/0x3790 [ 457.071836][ C1] ? kasan_save_track+0x3e/0x80 [ 457.071864][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 457.071888][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 457.071907][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 457.071923][ C1] ? skb_clone+0x229/0x460 [ 457.071946][ C1] ? br_flood+0x661/0x730 [ 457.071968][ C1] ? br_handle_frame_finish+0x12bb/0x1720 [ 457.071993][ C1] ? br_handle_frame+0x5a6/0xba0 [ 457.072016][ C1] ? __netif_receive_skb_core+0xf4b/0x3940 [ 457.072039][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 457.072059][ C1] ? __do_softirq+0xf/0x16 [ 457.072083][ C1] ? do_softirq+0xa6/0x100 [ 457.072108][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 457.072133][ C1] ? rcu_do_batch+0x5c6/0xd20 [ 457.072156][ C1] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 457.072186][ C1] ? kthread+0x2ca/0x370 [ 457.072203][ C1] ? ret_from_fork+0x67/0xa0 [ 457.072226][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 457.072256][ C1] ? __copy_skb_header+0x453/0x5e0 [ 457.072280][ C1] br_dev_queue_push_xmit+0x553/0x6d0 [ 457.072302][ C1] ? __copy_skb_header+0x453/0x5e0 [ 457.072326][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 457.072349][ C1] ? __skb_clone+0x47a/0x7a0 [ 457.072372][ C1] __br_forward+0x25c/0x390 [ 457.072394][ C1] br_flood+0x67e/0x730 [ 457.072418][ C1] br_handle_frame_finish+0x12bb/0x1720 [ 457.072445][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 457.072470][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 457.072495][ C1] ? update_group_capacity+0x2b8/0x9f0 [ 457.072518][ C1] ? psi_group_change+0xb44/0x1130 [ 457.072541][ C1] br_handle_frame+0x5a6/0xba0 [ 457.072566][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 457.072590][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 457.072615][ C1] ? qdisc_run_end+0x120/0x120 [ 457.072636][ C1] ? sched_balance_update_blocked_averages+0x1320/0x1320 [ 457.072655][ C1] ? ttwu_do_activate+0x630/0x630 [ 457.072675][ C1] ? __kasan_check_write+0x18/0x20 [ 457.072700][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 457.072722][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 457.072745][ C1] process_backlog+0x3e5/0xae0 [ 457.072770][ C1] __napi_poll+0xd3/0x610 [ 457.072791][ C1] net_rx_action+0x584/0xce0 [ 457.072815][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 457.072837][ C1] ? sched_clock+0x44/0x60 [ 457.072859][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 457.072881][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 457.072901][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 457.072923][ C1] handle_softirqs+0x1ab/0x630 [ 457.072941][ C1] __do_softirq+0xf/0x16 [ 457.072964][ C1] do_softirq+0xa6/0x100 [ 457.072988][ C1] [ 457.072994][ C1] [ 457.073000][ C1] ? __cfi_do_softirq+0x10/0x10 [ 457.073025][ C1] ? dst_destroy+0x37d/0x460 [ 457.073040][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 457.073056][ C1] __local_bh_enable_ip+0x74/0x80 [ 457.073081][ C1] rcu_do_batch+0x5c6/0xd20 [ 457.073106][ C1] ? rcu_core+0xd20/0xd20 [ 457.073127][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 457.073147][ C1] ? __kasan_check_read+0x15/0x20 [ 457.073178][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 457.073202][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 457.073228][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 457.073253][ C1] ? __kasan_check_write+0x18/0x20 [ 457.073278][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 457.073300][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 457.073322][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 457.073345][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 457.073361][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 457.073379][ C1] ? __kasan_check_read+0x15/0x20 [ 457.073404][ C1] ? __kthread_parkme+0x138/0x180 [ 457.073421][ C1] ? schedule+0xc6/0x240 [ 457.073444][ C1] kthread+0x2ca/0x370 [ 457.073461][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 457.073486][ C1] ? __cfi_kthread+0x10/0x10 [ 457.073503][ C1] ret_from_fork+0x67/0xa0 [ 457.073526][ C1] ? __cfi_kthread+0x10/0x10 [ 457.073543][ C1] ret_from_fork_asm+0x1a/0x30 [ 457.073570][ C1] [ 457.348591][ C0] net_ratelimit: 250889 callbacks suppressed [ 457.348615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 457.352395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.358269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 457.362844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.367347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.371515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.377059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.382952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.388427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.393975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.358591][ C0] net_ratelimit: 261447 callbacks suppressed [ 462.358616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.358646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.364729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.376643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.388549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 462.400512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.412518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:89:3d:14:03:14, vlan:0) [ 462.424474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.436501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.448461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 464.896003][ T36] audit: type=1400 audit(2000040263.672:1956): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2688]" dev="pipefs" ino=2688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1