last executing test programs: 38.539279171s ago: executing program 3 (id=3450): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x8243d43a6a57f4d3, 0x0) socket(0xa, 0x3, 0xff) syz_usb_connect(0x0, 0x48, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0xa1, 0x41, 0x8f, 0x20, 0x5ac, 0x264, 0xd4ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x1, 0x90, 0x93, [{{0x9, 0x4, 0x98, 0x3, 0x4, 0x3, 0xe5, 0x2, 0x7, [], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x2, 0xa, 0x3}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x2, 0x1, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x30, 0x19, 0xfc}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x40, 0x40}}]}}]}}]}}, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40180, 0x60) r1 = openat(r0, 0x0, 0x80501, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000280)={0x40, 0xd, 0x3b, {0x3b, 0x21, "e0cb305f259ae61615f070d652654f661e4b3b3aa89a6e3987cbbcde05670235846a14fe078bec98805518c0480a9e383640eaea1d5a51af23"}}, &(0x7f00000004c0)={0x0, 0x3, 0xa5, @string={0xa5, 0x3, "40f52f2a275725b56f644e691742e38a320635a2f75ee73520669e090fee5d6c47dc4836018684b9745f4423e46e0ff0de54d391bea74899c774edc58b05e2f8db54272aa14785d68c75db4e511af198dc6fe3aab546ffe3d3dc54b235d7dc08f711517394cc80aee62b725132025151d47bd172c0a1d2650c833c8cc3c684826f85382c0d6b479b2696ad32d6a824fde0a8bb4ed6c232f6c70bf845f8acae74bdcb9f"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000380)={0x0, 0x16, 0x4b, "d7fc5b4bc14885d93ae5fd28f4ed15cffe58113d24761cf5fca1fc62847bac46fe330bce882c59767a87f249977c820d25ac2e3f92f949b39d6100e27baf591d8d1770b72815ad0af8ec42"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x1000}, &(0x7f0000000580)={0x40, 0xa0, 0x4}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "28dfc469f040693e82cba78eb5ec86726445d20d23de712d9a9f09155b69697b5ac531621bce9513ae344ea8836c37"}}) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) r5 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(r4, &(0x7f0000000480)=r5, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 37.168512207s ago: executing program 2 (id=3463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 37.098229558s ago: executing program 2 (id=3464): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="880100001af6010000000000000eb8af4f69f5df08cc000000ac141435000000ffffffffffffffff000000000000008000"/64, @ANYRES64, @ANYRES32=0x0, @ANYRES32=r1], 0x188}}, 0x880) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES8=r4], 0xffdd) (async) close(0x3) (async) close(0x4) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020315030b000000ff0e000000000000010009000000000003000600000000000200000000000000000000000000000002000200"], 0x58}, 0x1, 0x7}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @multicast2}, {0x302, @multicast}, 0x38, {0x2, 0xe25, @empty}, 'geneve1\x00'}) (async, rerun: 64) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x4000005, 0x9, 0xe, "000080f100df000000a7d9de16c70800"}) r7 = syz_open_pts(r6, 0x42) r8 = dup3(r7, r6, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3c) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="00020000008000"]) (async, rerun: 32) write$P9_RREADLINK(r8, 0x0, 0x0) (rerun: 32) 37.096428158s ago: executing program 3 (id=3465): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="0f01f5c4c3e10a2507000000b9b9800000c00f3235010000000f30b93d0300000f320f0134e48fc8789e7667000f789dde000000660f57a2481d0000f30f09b8960000000f23c00f21f835000001000f23f8"}], 0x1, 0x42, 0x0, 0x55) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x543, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 37.091082359s ago: executing program 2 (id=3466): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) (async) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) write$cgroup_pid(r2, &(0x7f0000000480)=r3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x93df}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0xfffffff7}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010010}, 0x24048014) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x80}}, 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, 0x0) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 37.064676879s ago: executing program 3 (id=3467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x3, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r5, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)={0x10, 0x1a, 0x1, 0xfffffffd, 0x25dfdc01}, 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) sendmsg$netlink(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000054}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x40, 0x0, 0x8, 0x9, 0x8, 0x7, 0x6, [0x7fffffff, 0x2, 0x0, 0xda50, 0x0, 0x7, 0xe25c, 0x7fff]}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r9 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r9, 0x80081270, 0x3) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r10, 0x40046205, 0x0) 36.870517953s ago: executing program 3 (id=3471): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000003c0)={0x10000, 0xe4, 0x3, 0x101, 0x6, "0200000000002000000000000000fcffffff00", 0x0, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x88, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x93}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4090}, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='veth1_to_bond\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 36.449658881s ago: executing program 2 (id=3474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480)=0x2076, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f00000004c0)="703e3bf0f69794ebb5076295b2d4c99b1776ae7e1e87c068616f6a2cda47d320a899b2ed0a8ed6612a313f629108f47804000000b29489000aecebce6a299b2fb1c9e39fd3737ce2661de445d113a5f2c8be6cf16521f88c97829c8d6f994f37533c963231fd847b687b75aaae9819023070e32e8b82185482567e425e04e9410d736f0f71ec666dd955b4cc43421257ceb5f50083a776a712c0f1f9497e6176ed92817ee9518ec2acb52070cae6c14f143ca90efd83758e0cb4f143b74bf5b80d2ad4e0fe8304d587bba4236439558ba9b24f57398a814daf6a24c5fc", 0xdd, 0x4008044, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000440)={&(0x7f0000000140)=@l2={0x1f, 0x800, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000200)="5301e8dc79c7f1d3ba4b026507749f07fe0551f86276a81a62d7a20eb721942ab05c38d2bad4a0d54b59d57ea8ec0172bc55", 0x32}, {&(0x7f0000000240)="ea7434d2de3fc25fdeb046d79c5f8b2a8e5daff6e00118dbd63f9304632594bb801fc4ddf54e8746a251f806b21312a46a886c27be508a6706865871dc5f71051ccf65ff2afb720a5cafcf2dc174138a9a15454a094a9e784e64b6d29963aedc9eb5c99f5dec7b951d9f75", 0x6b}, {&(0x7f00000002c0)="0655a3977259c9291b859fad10befbd605ff1d19301c9b854c6098b1c4b1187cb9", 0x21}, {&(0x7f0000000300)="1a49b1127c323a7b05366c34409c6c69cc4aa8d2c0a7c7b1dfa4d30ebcb1f869d47af46f544214abfc9e0656ff036439e17884a916923e1a2112b084e81e2e975f0f26d8d603f911ec19265606386d73aa6d22e6c13783eb8a07b3c9678b1867c3e1843be4e0bd1ed4c231c6513cd8a486482289bd796b04a64a1da9162b0f6ef9dc070df87986842aeef6a42af2da65175c34afd598d558e9c263fee0ed225d4f6baac6250f5a82347eab9510d0e477b0b3c8af8c0ee60788d11a7c2f742effb642ad84939e8d9501148403d403", 0xce}, {&(0x7f0000000400)="9e16f09519f35f64ba05b862746d3fdd95dd7959f2b16feb70329e99da0c1231a8aa5f3f862e2ddba984d549518b909316e1831ed8577eeac3a6", 0x3a}, {&(0x7f00000005c0)="a1f7b6db4e6680e1f435dc99fed744c86faa4a8507cc9c7206065e5b36f4e2ccf39523bf38b287e7d32ee7c3dc5c385b1f4ed428cf8a9552ab1988adf8ef3acf1f99678f916950305dff80cd439fe1cfe7c8dfe6b115b37ff3e51da4573de718e33e15d058a0f4f675901b6c82a3eb5154d8723b42015150a0c12536b017c1c109b04c32b9ecbd14b0b9d72bd7d31ef2e3ae1f635e9ab74a38dc56ef145c6156963cc0260eb97d46a4843390b67e50e571bac209884657781059c3ddecf3e81ae863d195816fe4714ed36d9d73102e6261199b1ba02fcc6c598763c7e09973e394321dd3e364", 0xe6}, {&(0x7f00000006c0)="aa769d8445430463783aeff934c6450c879eb809f6db6520f090be11548d7b8827abab37b90759fce742c025eddfcf45ab0776fcacb3e37d394aa8728261ba127c53cb7d", 0x44}], 0x7}, 0x81) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000007c0), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x206e) truncate(&(0x7f0000000080)='./file0\x00', 0x7) 36.333055103s ago: executing program 2 (id=3477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) lseek(r0, 0x2, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r3, 0xca3, 0x4) sendfile(r3, r3, 0x0, 0x1200000000000) r4 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) rmdir(0x0) syz_usb_ep_read(r4, 0xf, 0xffffffffffffffd2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000000000d"]) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) bind$unix(0xffffffffffffffff, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, r1, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030105e4da945a77c9000000000000007209040000010c0d00000524060001052400f9010d240f01f25c9426fffb06009506241a070001090581030002fc0e000904010000020d00000904010102020d00000905820208003a0900090503"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x2, 0x62, 0x9}, {0x8, 0x0, 0x8, 0x1}, {0x10, 0x3, 0x7, 0x9}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) 36.239354865s ago: executing program 1 (id=3478): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) 36.150526647s ago: executing program 1 (id=3479): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000042, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 36.093116388s ago: executing program 2 (id=3480): prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 36.037124699s ago: executing program 32 (id=3480): prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 36.029733359s ago: executing program 1 (id=3482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x551600, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x100000001, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac000000", @ANYRESDEC=r1, @ANYRESDEC=r1], 0xac}}, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x3e}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0x29, 0x0, 0x9, 0xfffffffa, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x9dfe, 0x2}}) (async) fsopen(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35.812283364s ago: executing program 1 (id=3484): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000780)="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", 0xfc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x3, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 35.395708842s ago: executing program 3 (id=3486): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0xffffff44, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) getpid() r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r1, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x8) 35.209342715s ago: executing program 4 (id=3481): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6i\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) syz_usb_connect(0x2, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d5052413", @ANYRES64], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x3}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ftruncate(r1, 0xfffd) fcntl$addseals(r1, 0x409, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0]) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) r5 = accept(0xffffffffffffffff, &(0x7f0000000240)=@tipc=@name, &(0x7f0000000080)=0x80) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000000)={0x2, 0x3}) r7 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) sendfile(r5, r7, &(0x7f0000000200)=0x3, 0x7fff) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000007, 0x11, r4, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 35.064957618s ago: executing program 0 (id=3488): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000000400010002081008418e00000004fcff", 0x58}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknodat$null(0xffffffffffffffff, 0x0, 0x8000, 0x103) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af60, &(0x7f0000000000)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) readv(r7, &(0x7f0000000040), 0x0) 35.059715288s ago: executing program 0 (id=3489): r0 = socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) recvfrom(r1, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c34520447cd5a657724b5fe73e943c08f0d7db2353e60feecb4d76f0ca5c9dd290aaf5a2aae41e525e050011c9eb38d36556f7785ebef04c68718bf4ce087db64493f840e0484d1e0a3c8f8d8a511ddc22ecb004c2c0ec668398f23f98890253b09ba25eac2d358d282a6e14774d55ca3768", 0x72}, {&(0x7f00000001c0)="c78147ee9e46c20687f2cbdabfe33f7aa5544b2059f955ba4c537f2502d4c53c175f41e5ea48fe618f957f5604a6494a7943a1708f221340677b1f354fc2b8930973fec9105c3d918cd945ae5714343f46b6d1fcc0dc68c20e2b014e5c264f3e45bb06dda71c88ec182dba2c9280774ed8805d7509d32643f3d888080a0eaf7d6a4f516c3d86e82d34d8604f3eb432c1218f7d4fb035eae8b18bbf17f84dfff0", 0xa0}], 0x2}, 0x1) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x402, 0x10000, @local}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000000c0)="714cbda4", 0x4}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000001540)={0x0, 0x0}) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) pidfd_getfd(r11, r12, 0x0) recvmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000002c0)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f00000015c0)=""/76, 0x4c}], 0x3, &(0x7f0000000500)=""/4096, 0x1000}, 0x80}], 0x1, 0x40000002, &(0x7f0000001580)={r8, r9+10000000}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) unshare(0x30000000) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x20}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 35.038390509s ago: executing program 0 (id=3490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x300) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x5, 0x808, 0xbe2, 0x200, 0xffff, 0x7, 0x0, 0x0, 0x1, 0x7d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x0, 0x1, 0xd, 0x5, 0x75, 0x8, 0x0, 0xdc, 0xa, 0x100, 0x80000002, 0x6, 0xd, 0x8, 0xaed, [0x3, 0x7]}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) (async) sendto$inet(r5, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x327, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb", 0x70}], 0x1}}], 0x1, 0x80d0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x25}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}}], 0x3d, 0x0, &(0x7f0000000200)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 34.96521642s ago: executing program 0 (id=3491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000)=0xfffffbfc, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x1a841, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xffffffffffffff70) (async) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0) 34.96426756s ago: executing program 0 (id=3492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 34.904746241s ago: executing program 1 (id=3493): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x6, 0xe) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x100, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x62, 0x37, 0x708f375d7c354fc9, 0x34, 0x63, 0x32, 0x66], 0x2d, [0x33, 0x32, 0x61, 0x61], 0x2d, [0x66, 0x64, 0x34, 0x38], 0x2d, [0x63, 0x34, 0x62, 0x63], 0x2d, [0x39, 0x31, 0x30, 0x34, 0x33, 0x39, 0x35, 0x38]}}}, {@audit}, {@fowner_lt}], 0x2f}) msync(&(0x7f00003fb000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='cgroup.freeze\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan3\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25230000000500210007000000050026000800000008000200", @ANYRES32=r5, @ANYBLOB="05002300070000000a0001007770616e31000000080024ed30b343f5c4e2431fb0000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01009300"}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) syz_open_procfs$userns(0x0, &(0x7f0000000400)) r8 = socket$netlink(0x10, 0x3, 0xe) epoll_create1(0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r11, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x1) close(r11) execveat$binfmt(0xffffffffffffff9c, r10, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="14fcfb6a", @ANYRES16=r7, @ANYBLOB="00022cbd70000000000022000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x758383a6a5f2258c) 33.299632863s ago: executing program 0 (id=3494): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r2 = dup2(r1, r1) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) write$tun(r2, 0x0, 0x46) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0xb, {0x9, 0x21, 0xaac, 0x1, 0x1, {0x22, 0x9aca}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r5, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="a2d557", 0x3}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x1}, 0x10) (async) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) getsockname$tipc(r7, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000440)=0xff, 0x4) (async) io_setup(0x80, &(0x7f0000000100)=0x0) io_cancel(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xdb62, r3, &(0x7f00000001c0)="477049d443cbbc671ea592c4f16bf3b78eccb3f7d9f46ebd716cd75c4e0f5c161d7e45628fa922950dd9d6267c204a99dde8c55f04010fa5abce04780dbdb50c35042210ca1f894d2355e2b41981f9405a3010d2a96aa1264fe8f6217a3759b184a34869ddfa0d8f5f072347959b6b857975e54e8bebab0267bc6ab3e287efdb5741d920e3f962fcea0c6bab05abc3433ed77bbb0a24dd1c5779d31a488a32f59dbc42d1b427dc255cbe5e554bf4288d989766552dc6bb82d7464984f373b79274b47da29f47d3ee5a0eb48b46ea8e2cd96df5c7434a3791c8659cc99975690b4d", 0xe1, 0x8, 0x0, 0x1}, &(0x7f0000000400)) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) (async, rerun: 64) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r9, 0x7704, 0x0) 30.600539495s ago: executing program 3 (id=3495): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8ba8b525c67bf18015e60800000000000000ca2ef95407a607ba99d88845ac14874f13a43f2b5fc3913a0eddb02fdc3426f935d9b7996c1df9c9e5dcb8a8987818b24b58852e427fbebaaedb06289c3d232fabc2bde58356c89680e7786201ba5b70de662700bdb3df54dc24f6237b904a1d86c2a2834b7ab6bfe294b49d38eaf764acf1b894d079ef6cf257a92d0162586e1fb67f3e00d8fc3c2da7e371b153073f987baa1034ff88e8a55d989801525d9e55a1aff792bae583b12a6c1c912823384f26546c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002280)={0x2c, &(0x7f0000002100)={0x20, 0x1, 0x4, "05dd6686"}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x2}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r7, 0x0, 0x0) (async) write$selinux_create(r7, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f0000000640)="70d07134252032b13c6f6f2f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16c060ff00c7c989810b4e43f0e9d34ba7cc586a39690595e5eea34493a009445963bbef86591214a9bb7a968a4b53580df290db3472e21f5d6d756f73802ee1d4761b"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f0000000640)="70d07134252032b13c6f6f2f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16c060ff00c7c989810b4e43f0e9d34ba7cc586a39690595e5eea34493a009445963bbef86591214a9bb7a968a4b53580df290db3472e21f5d6d756f73802ee1d4761b"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 18.900350323s ago: executing program 1 (id=3496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='$*\'\\)%+!/)+,\x00', 0x0, r1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000540)) syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x0, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0xff}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x8, '5'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x2, 0x4, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x2, 0x5, 0x7}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x0, "9c483288"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x96, 'Kbq'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "", "03"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfff, 0x9, 0xff, "c0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0xa0, "2a1a", "7b2517"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xf, 0x8, {0x7, 0x25, 0x1, 0x82, 0xf0, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4, 0x9, "89c8b604"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0xb7e, 0x7, "d76577c709743a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x73, 0x3, 0x4, {0x7, 0x25, 0x1, 0x0, 0x9a, 0x2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0xc, 0x9, 0x10, 0x9}, 0x2d, &(0x7f0000000040)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xac, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x16, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x3, 0x5}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0xa9, &(0x7f0000000300)=ANY=[@ANYBLOB="a903b22d62c0c436406a5087d64ce19bd3c3e719d51a38b9e04e860cdea7d65a9f93f523727df531fb2e4c03f2ace93d8180529e858528d57c1baf62c2fe39b8aa5f0860e11dfbfcc4f021f8c9c52558bdcded623720e901057c56f0ca6507d7c65983ea34b4dbb2bd179b690e04bc4513d309003b52319a18ac2401b448ca0e3525076242a569f8060c8f4fe60bf6f074f7bb66f094aeff19d658"]}, {0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "3fc9202ae01dc8eeef72776a3290f0244708ab6283d80138e7165d82293c8db3b9d5c11370369486ed2fe38a300070bc95c1dddaaedd342b8928b4c0690ac657241a799ed5cb40826959ac081af25fd2880c563183cda625a3223b761cfcfdcca88cf721e75beade3bea4e9622ddbc8996475d518c2a9fe25dada43234221ab0e24dc458b80682de086322857b93854ad6c18a0e08b8492f0dd1d2541e12350bf45b750a57d0eee0f24781bec7fc1e67626c1a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}]}) 16.735880875s ago: executing program 33 (id=3481): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6i\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) syz_usb_connect(0x2, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d5052413", @ANYRES64], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x3}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ftruncate(r1, 0xfffd) fcntl$addseals(r1, 0x409, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0]) r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) r5 = accept(0xffffffffffffffff, &(0x7f0000000240)=@tipc=@name, &(0x7f0000000080)=0x80) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000000)={0x2, 0x3}) r7 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) sendfile(r5, r7, &(0x7f0000000200)=0x3, 0x7fff) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000007, 0x11, r4, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 7.540726204s ago: executing program 34 (id=3494): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r2 = dup2(r1, r1) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) write$tun(r2, 0x0, 0x46) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x73f4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0xb, {0x9, 0x21, 0xaac, 0x1, 0x1, {0x22, 0x9aca}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r5, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000880)="a2d557", 0x3}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x0, 0x1}, 0x10) (async) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) getsockname$tipc(r7, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000440)=0xff, 0x4) (async) io_setup(0x80, &(0x7f0000000100)=0x0) io_cancel(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0xdb62, r3, &(0x7f00000001c0)="477049d443cbbc671ea592c4f16bf3b78eccb3f7d9f46ebd716cd75c4e0f5c161d7e45628fa922950dd9d6267c204a99dde8c55f04010fa5abce04780dbdb50c35042210ca1f894d2355e2b41981f9405a3010d2a96aa1264fe8f6217a3759b184a34869ddfa0d8f5f072347959b6b857975e54e8bebab0267bc6ab3e287efdb5741d920e3f962fcea0c6bab05abc3433ed77bbb0a24dd1c5779d31a488a32f59dbc42d1b427dc255cbe5e554bf4288d989766552dc6bb82d7464984f373b79274b47da29f47d3ee5a0eb48b46ea8e2cd96df5c7434a3791c8659cc99975690b4d", 0xe1, 0x8, 0x0, 0x1}, &(0x7f0000000400)) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) (async, rerun: 64) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r9, 0x7704, 0x0) 6.492283234s ago: executing program 35 (id=3495): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="8ba8b525c67bf18015e60800000000000000ca2ef95407a607ba99d88845ac14874f13a43f2b5fc3913a0eddb02fdc3426f935d9b7996c1df9c9e5dcb8a8987818b24b58852e427fbebaaedb06289c3d232fabc2bde58356c89680e7786201ba5b70de662700bdb3df54dc24f6237b904a1d86c2a2834b7ab6bfe294b49d38eaf764acf1b894d079ef6cf257a92d0162586e1fb67f3e00d8fc3c2da7e371b153073f987baa1034ff88e8a55d989801525d9e55a1aff792bae583b12a6c1c912823384f26546c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002280)={0x2c, &(0x7f0000002100)={0x20, 0x1, 0x4, "05dd6686"}, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x14, r2, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f00000000c0)=0x800004, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x2}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r7, 0x0, 0x0) (async) write$selinux_create(r7, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f0000000640)="70d07134252032b13c6f6f2f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16c060ff00c7c989810b4e43f0e9d34ba7cc586a39690595e5eea34493a009445963bbef86591214a9bb7a968a4b53580df290db3472e21f5d6d756f73802ee1d4761b"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f0000000640)="70d07134252032b13c6f6f2f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16c060ff00c7c989810b4e43f0e9d34ba7cc586a39690595e5eea34493a009445963bbef86591214a9bb7a968a4b53580df290db3472e21f5d6d756f73802ee1d4761b"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 0s ago: executing program 36 (id=3496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='$*\'\\)%+!/)+,\x00', 0x0, r1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000540)) syz_usb_connect$uac1(0x5, 0xe5, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x0, 0x30, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0xff}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x8, '5'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x2, 0x4, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x2, 0x5, 0x7}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x0, "9c483288"}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x96, 'Kbq'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x4, "", "03"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfff, 0x9, 0xff, "c0"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0xa0, "2a1a", "7b2517"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0xf, 0x8, {0x7, 0x25, 0x1, 0x82, 0xf0, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4, 0x9, "89c8b604"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0xb7e, 0x7, "d76577c709743a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x73, 0x3, 0x4, {0x7, 0x25, 0x1, 0x0, 0x9a, 0x2}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0xc, 0x9, 0x10, 0x9}, 0x2d, &(0x7f0000000040)={0x5, 0xf, 0x2d, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xac, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x16, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x3, 0x5}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0xa9, &(0x7f0000000300)=ANY=[@ANYBLOB="a903b22d62c0c436406a5087d64ce19bd3c3e719d51a38b9e04e860cdea7d65a9f93f523727df531fb2e4c03f2ace93d8180529e858528d57c1baf62c2fe39b8aa5f0860e11dfbfcc4f021f8c9c52558bdcded623720e901057c56f0ca6507d7c65983ea34b4dbb2bd179b690e04bc4513d309003b52319a18ac2401b448ca0e3525076242a569f8060c8f4fe60bf6f074f7bb66f094aeff19d658"]}, {0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "3fc9202ae01dc8eeef72776a3290f0244708ab6283d80138e7165d82293c8db3b9d5c11370369486ed2fe38a300070bc95c1dddaaedd342b8928b4c0690ac657241a799ed5cb40826959ac081af25fd2880c563183cda625a3223b761cfcfdcca88cf721e75beade3bea4e9622ddbc8996475d518c2a9fe25dada43234221ab0e24dc458b80682de086322857b93854ad6c18a0e08b8492f0dd1d2541e12350bf45b750a57d0eee0f24781bec7fc1e67626c1a"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}]}) kernel console output (not intermixed with test programs): with error -22 [ 244.774487][ T9071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9071 comm=syz.2.2755 [ 244.777522][ T9072] netlink: 'syz.2.2755': attribute type 5 has an invalid length. [ 244.792133][ T9074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9074 comm=syz.2.2755 [ 244.808861][ T9072] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2755'. [ 244.910971][ T9088] 9pnet_fd: p9_fd_create_tcp (9088): problem connecting socket to 127.0.0.1 [ 244.932423][ T7946] Bluetooth: hci0: Frame reassembly failed (-84) [ 244.969274][ T9006] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 244.977129][ T464] usb 4-1: USB disconnect, device number 62 [ 245.406339][ T9105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2766'. [ 245.522015][ T36] audit: type=1400 audit(235.903:557): avc: denied { bind } for pid=9117 comm="syz.2.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.539321][ T9122] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 245.541005][ T9122] rust_binder: Error while translating object. [ 245.553376][ T9122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.559655][ T9122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 245.918100][ T9141] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 245.935064][ T9141] netlink: 'syz.0.2777': attribute type 2 has an invalid length. [ 245.943316][ T9141] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 245.951098][ T9141] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2777'. [ 246.059609][ T9153] fuse: Bad value for 'group_id' [ 246.064660][ T9153] fuse: Bad value for 'group_id' [ 246.525208][ T9169] syz.3.2787: attempt to access beyond end of device [ 246.525208][ T9169] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 246.538329][ T9169] FAT-fs (loop3): unable to read boot sector [ 246.545484][ T9169] rust_binder: Error while translating object. [ 246.545524][ T9169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 246.551849][ T9169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 246.730800][ T9178] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 246.764025][ T9182] overlayfs: failed to clone upperpath [ 246.778953][ T9182] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2792'. [ 246.809548][ T36] audit: type=1400 audit(237.110:558): avc: denied { ioctl } for pid=9179 comm="syz.3.2791" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.110959][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.111003][ T514] Bluetooth: hci0: command 0x1003 tx timeout [ 247.587124][ T36] audit: type=1400 audit(237.839:559): avc: denied { accept } for pid=9220 comm="syz.2.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 247.672271][ T9223] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 207) [ 247.672294][ T9223] rust_binder: Error while translating object. [ 247.682990][ T9223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 247.689331][ T9223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1621 [ 247.955868][ T1324] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 248.128119][ T1324] usb 2-1: config 1 interface 0 altsetting 180 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.139899][ T1324] usb 2-1: config 1 interface 0 altsetting 180 endpoint 0x2 has an invalid bInterval 113, changing to 10 [ 248.151740][ T1324] usb 2-1: config 1 interface 0 has no altsetting 0 [ 248.160942][ T1324] usb 2-1: New USB device found, idVendor=046d, idProduct=c548, bcdDevice= 0.40 [ 248.170195][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.178247][ T1324] usb 2-1: Product: syz [ 248.182776][ T1324] usb 2-1: Manufacturer: à ” [ 248.187441][ T1324] usb 2-1: SerialNumber: syz [ 248.411822][ T1324] usbhid 2-1:1.0: can't add hid device: -71 [ 248.417875][ T1324] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 248.427013][ T1324] usb 2-1: USB disconnect, device number 83 [ 248.533391][ T9256] netlink: 'syz.2.2813': attribute type 6 has an invalid length. [ 248.630308][ T9265] veth1: entered allmulticast mode [ 248.635749][ T9264] veth1: left allmulticast mode [ 249.421852][ T2277] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 249.513364][ T9299] 9pnet_fd: Insufficient options for proto=fd [ 249.560124][ T2277] usb 2-1: device descriptor read/64, error -71 [ 249.668016][ T9318] fuse: Bad value for 'group_id' [ 249.673127][ T9318] fuse: Bad value for 'group_id' [ 249.675304][ T9317] fuse: Bad value for 'group_id' [ 249.683519][ T9317] fuse: Bad value for 'group_id' [ 249.779576][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'. [ 249.816820][ T2277] usb 2-1: device descriptor read/64, error -71 [ 250.073504][ T2277] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 250.212543][ T2277] usb 2-1: device descriptor read/64, error -71 [ 250.263849][ T36] audit: type=1400 audit(240.335:560): avc: denied { audit_read } for pid=9348 comm="syz.3.2846" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.469237][ T2277] usb 2-1: device descriptor read/64, error -71 [ 250.586941][ T2277] usb usb2-port1: attempt power cycle [ 250.950509][ T2277] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 250.973037][ T2277] usb 2-1: device descriptor read/8, error -71 [ 251.078844][ T371] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 251.122775][ T2277] usb 2-1: device descriptor read/8, error -71 [ 251.202957][ T9378] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2856'. [ 251.203006][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 251.260643][ T371] usb 4-1: Using ep0 maxpacket: 32 [ 251.270069][ T371] usb 4-1: config 127 has an invalid interface number: 103 but max is 0 [ 251.278792][ T371] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 251.290684][ T371] usb 4-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 251.302611][ T371] usb 4-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 251.317570][ T371] usb 4-1: config 127 has no interface number 0 [ 251.326269][ T371] usb 4-1: config 127 interface 103 altsetting 7 endpoint 0x1 has an invalid bInterval 199, changing to 7 [ 251.337811][ T371] usb 4-1: config 127 interface 103 altsetting 7 endpoint 0x1 has invalid maxpacket 41766, setting to 1024 [ 251.349371][ T371] usb 4-1: config 127 interface 103 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 251.362761][ T371] usb 4-1: config 127 interface 103 has no altsetting 0 [ 251.371331][ T371] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff94, bcdDevice=39.a4 [ 251.378317][ T2277] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 251.380668][ T371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.401023][ T371] usb 4-1: Product: 澉놟î˜â¾¤å¡¦ä¡±ï‡´âª‡ë–›ì²€ã¶”䀞민莂æ‡é’ᒬ᪬辇腓헻í”á¼¢ï†í„¢ê¡†å¿±å¶³á´Žæ«¹ì†¯ã±ç•—å¹µå’ [ 251.411507][ T2277] usb 2-1: device descriptor read/8, error -71 [ 251.414528][ T371] usb 4-1: Manufacturer: ﲇ勸ä¶ì‘‡å•¢åºÚžâ©¼â¹„囘錼粬ﮆè‹è¹³êœ…ꄹ熸擭é‚巋Ꮀ瞴水餅๒掾繡罴훇ë¼êŒšîœ™ê…£ì¸§ìŸŠï㧅꺋郞꣘ã—娜锤같벯쀆타뤙ﮮ鳤ꛫ꥔䔺댔䈵屢沔ӛ갟袵럢쇰ñ䱨⋄ﳱ璓ퟙﬦ祘踡ì¯áˆ¬ì¿–궅䵺朠⧭ﾮ잩ﶛæ‹â¡®çŸ©â„®ë¿²í•¦â•‘ﰹˇ懂ዥ䴯﫢챟铖ꚩꂹâ©ã„ˆæ®¢ë©‰ï†‘á鷩尶痽 [ 251.454341][ T371] usb 4-1: SerialNumber: О [ 251.564894][ T2277] usb 2-1: device descriptor read/8, error -71 [ 251.681490][ T371] usb 4-1: USB disconnect, device number 63 [ 251.688561][ T2277] usb usb2-port1: unable to enumerate USB device [ 252.325418][ T9438] 9pnet_fd: Insufficient options for proto=fd [ 252.357586][ T9445] fuse: Bad value for 'fd' [ 252.419987][ T9462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 252.725893][ T371] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 252.898503][ T371] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.906669][ T371] usb 2-1: not running at top speed; connect to a high speed hub [ 252.915236][ T371] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 252.925377][ T371] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.936202][ T371] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.945313][ T371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.953432][ T371] usb 2-1: Product: syz [ 252.957646][ T371] usb 2-1: Manufacturer: syz [ 252.962277][ T371] usb 2-1: SerialNumber: syz [ 253.125073][ T9477] binder: Bad value for 'stats' [ 253.158585][ T9479] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 253.167742][ T9479] overlayfs: missing 'lowerdir' [ 253.262709][ T9484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.401741][ T371] usb 2-1: 0:2 : does not exist [ 253.419994][ T371] usb 2-1: USB disconnect, device number 88 [ 253.431293][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 253.476679][ T9494] 9pnet_fd: Insufficient options for proto=fd [ 254.031672][ T9496] fuse: Bad value for 'fd' [ 254.437169][ T2277] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 254.533412][ T1324] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 254.597539][ T2277] usb 2-1: Using ep0 maxpacket: 32 [ 254.603764][ T2277] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 254.611927][ T2277] usb 2-1: config 0 has no interface number 0 [ 254.618029][ T2277] usb 2-1: config 0 interface 72 has no altsetting 0 [ 254.626195][ T2277] usb 2-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 254.635260][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.643344][ T2277] usb 2-1: Product: syz [ 254.647657][ T2277] usb 2-1: Manufacturer: syz [ 254.652353][ T2277] usb 2-1: SerialNumber: syz [ 254.657609][ T2277] usb 2-1: config 0 descriptor?? [ 254.672538][ T1324] usb 4-1: device descriptor read/64, error -71 [ 254.929097][ T1324] usb 4-1: device descriptor read/64, error -71 [ 255.185796][ T1324] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 255.324850][ T1324] usb 4-1: device descriptor read/64, error -71 [ 255.581518][ T1324] usb 4-1: device descriptor read/64, error -71 [ 255.699223][ T1324] usb usb4-port1: attempt power cycle [ 256.062790][ T1324] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 256.085244][ T1324] usb 4-1: device descriptor read/8, error -71 [ 256.114332][ T9522] overlayfs: failed to clone upperpath [ 256.225016][ T1324] usb 4-1: device descriptor read/8, error -71 [ 256.490595][ T1324] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 256.513032][ T1324] usb 4-1: device descriptor read/8, error -71 [ 256.652177][ T1324] usb 4-1: device descriptor read/8, error -71 [ 256.768829][ T1324] usb usb4-port1: unable to enumerate USB device [ 257.070283][ T9557] 8021q: VLANs not supported on lo [ 257.075614][ T9558] 8021q: VLANs not supported on lo [ 257.407088][ T2277] usb 2-1: MIDIStreaming interface descriptor not found [ 257.424030][ T2277] usb 2-1: USB disconnect, device number 89 [ 257.445602][ T9582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.445781][ T9582] rust_binder: Error while translating object. [ 257.452279][ T9582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 257.468960][ T9582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1662 [ 257.507513][ T36] audit: type=1400 audit(247.114:561): avc: denied { listen } for pid=9579 comm="syz.2.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.616670][ T9604] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 257.628349][ T9604] tipc: Started in network mode [ 257.633512][ T9604] tipc: Node identity 4ae25adedf99, cluster identity 4711 [ 257.641095][ T9604] tipc: Enabled bearer , priority 0 [ 257.649111][ T9604] tipc: Disabling bearer [ 257.709328][ T9607] can0: slcan on ptm0. [ 257.764192][ T9607] can0 (unregistered): slcan off ptm0. [ 257.795061][ T9609] rust_binder: Error while translating object. [ 257.795100][ T9609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 257.809590][ T9609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:153 [ 257.825610][ T9609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.945140][ T2277] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 258.105567][ T914] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 258.116267][ T2277] usb 2-1: Using ep0 maxpacket: 32 [ 258.122790][ T2277] usb 2-1: unable to get BOS descriptor or descriptor too short [ 258.131165][ T2277] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 258.139546][ T2277] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 258.149860][ T2277] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 258.158905][ T2277] usb 2-1: config 128 has no interface number 0 [ 258.165411][ T2277] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 258.177082][ T2277] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.184618][ T9626] 9pnet_fd: Insufficient options for proto=fd [ 258.187386][ T2277] usb 2-1: config 128 interface 127 has no altsetting 0 [ 258.201918][ T2277] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 258.211055][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.219280][ T2277] usb 2-1: Product: syz [ 258.223880][ T2277] usb 2-1: Manufacturer: syz [ 258.228579][ T2277] usb 2-1: SerialNumber: syz [ 258.276696][ T914] usb 4-1: Invalid ep0 maxpacket: 64 [ 258.415733][ T914] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 258.456169][ T2277] usb 2-1: USB disconnect, device number 90 [ 258.468025][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 258.586846][ T914] usb 4-1: Invalid ep0 maxpacket: 64 [ 258.592393][ T914] usb usb4-port1: attempt power cycle [ 258.838605][ T36] audit: type=1400 audit(248.358:562): avc: denied { create } for pid=9659 comm="syz.0.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 258.971869][ T914] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 258.993656][ T914] usb 4-1: Invalid ep0 maxpacket: 64 [ 259.132316][ T914] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 259.164754][ T914] usb 4-1: Invalid ep0 maxpacket: 64 [ 259.177878][ T914] usb usb4-port1: unable to enumerate USB device [ 259.261852][ T9676] cgroup: fork rejected by pids controller in /syz2 [ 260.255326][ T914] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 260.415715][ T914] usb 2-1: Using ep0 maxpacket: 8 [ 260.422222][ T914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.430670][ T914] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 260.438930][ T914] usb 2-1: config 6 has no interface number 0 [ 260.445080][ T914] usb 2-1: config 6 interface 248 has no altsetting 0 [ 260.452338][ T914] usb 2-1: string descriptor 0 read error: -22 [ 260.469212][ T914] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 260.478269][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.495433][ T914] ums-karma 2-1:6.248: USB Mass Storage device detected [ 260.710295][ T371] usb 2-1: USB disconnect, device number 91 [ 261.085496][ T9801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.085854][ T9800] rust_binder: Error while translating object. [ 261.088045][ T9801] rust_binder: Error while translating object. [ 261.092469][ T9800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.098792][ T9801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.105103][ T9800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 261.114742][ T9801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 261.264039][ T9809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 261.280415][ T9809] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 261.452899][ T9823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.506612][ T914] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 261.627387][ T9838] netlink: 'syz.1.2990': attribute type 58 has an invalid length. [ 261.667060][ T914] usb 4-1: Using ep0 maxpacket: 32 [ 261.673252][ T914] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.681830][ T914] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.690606][ T914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.699849][ T914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.710262][ T914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.719954][ T914] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.733334][ T914] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 261.742944][ T914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.753021][ T914] usb 4-1: config 0 descriptor?? [ 261.973527][ T914] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 261.985624][ T914] usb 4-1: USB disconnect, device number 72 [ 261.992387][ T914] usblp0: removed [ 262.140088][ T9861] SELinux: Context system_u:object_r:faillog_t:s0 is not valid (left unmapped). [ 262.149533][ T36] audit: type=1400 audit(251.462:563): avc: denied { relabelto } for pid=9860 comm="syz.0.2999" name="cgroup" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:faillog_t:s0" [ 262.176291][ T36] audit: type=1400 audit(251.462:564): avc: denied { associate } for pid=9860 comm="syz.0.2999" name="cgroup" dev="tmpfs" ino=1917 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:faillog_t:s0" [ 262.205261][ T36] audit: type=1400 audit(251.462:565): avc: denied { unlink } for pid=6276 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:faillog_t:s0" [ 262.458493][ T1324] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 262.591681][ T371] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 262.600125][ T371] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.619284][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 262.626934][ T9890] fido_id[9890]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.629260][ T36] audit: type=1400 audit(390.899:566): avc: denied { getopt } for pid=9891 comm="syz.1.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 262.641733][ T1324] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 262.667996][ T1324] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 262.676826][ T1324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 262.684164][ T9894] overlayfs: failed to resolve './file1': -2 [ 262.686288][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.701628][ T1324] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 262.711790][ T1324] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.725026][ T1324] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 262.734269][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.747676][ T1324] usb 4-1: config 0 descriptor?? [ 262.767542][ T9901] rust_binder: Error while translating object. [ 262.767580][ T9901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.774172][ T9901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1748 [ 262.968266][ T1324] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.062241][ T9933] /dev/rnullb0: Can't open blockdev [ 263.260943][ T9952] cgroup: none used incorrectly [ 263.300661][ C0] usblp0: nonzero read bulk status received: -71 [ 263.301144][ T293] usb 4-1: USB disconnect, device number 73 [ 263.309714][ T9807] usblp0: error -71 reading from printer [ 263.516150][ T9807] usblp0: removed [ 263.517337][ T914] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 263.679546][ T914] usb 2-1: config 7 has an invalid interface number: 20 but max is 3 [ 263.687682][ T914] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 263.697797][ T914] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 263.706711][ T914] usb 2-1: config 7 has no interface number 0 [ 263.712846][ T914] usb 2-1: config 7 interface 20 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 263.723747][ T914] usb 2-1: config 7 interface 20 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.736735][ T914] usb 2-1: config 7 interface 20 has no altsetting 0 [ 263.750010][ T914] usb 2-1: New USB device found, idVendor=0403, idProduct=dafa, bcdDevice= 4.6d [ 263.759414][ T914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.768726][ T914] usb 2-1: Product: syz [ 263.772962][ T914] usb 2-1: Manufacturer: syz [ 263.779329][ T914] usb 2-1: SerialNumber: syz [ 264.001970][ T914] ftdi_sio 2-1:7.20: FTDI USB Serial Device converter detected [ 264.010017][ T914] ftdi_sio ttyUSB0: unknown device type: 0x46d [ 264.017384][ T914] usb 2-1: USB disconnect, device number 92 [ 264.024273][ T914] ftdi_sio 2-1:7.20: device disconnected [ 264.258255][ T9968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62480 sclass=netlink_route_socket pid=9968 comm=syz.3.3035 [ 264.271948][ T9968] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 208, size: 238) [ 264.271970][ T9968] rust_binder: Error while translating object. [ 264.282647][ T9968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.288860][ T9968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 264.311072][ T9970] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 264.328736][ T9970] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3036'. [ 264.338809][ T9970] rust_binder: Error while translating object. [ 264.338836][ T9970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.345060][ T9970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 264.554133][ T9987] input: syz1 as /devices/virtual/input/input25 [ 264.610868][ T9997] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 264.618947][ T293] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 264.790106][ T293] usb 4-1: Using ep0 maxpacket: 32 [ 264.801524][ T293] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.810003][ T293] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.835391][ T293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.845099][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.854834][ T293] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.864548][ T293] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.877573][ T293] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.886678][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.896502][ T293] usb 4-1: config 0 descriptor?? [ 264.931911][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.939011][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.946341][T10002] bridge_slave_0: entered allmulticast mode [ 264.952811][T10002] bridge_slave_0: entered promiscuous mode [ 264.959276][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.966372][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.973520][T10002] bridge_slave_1: entered allmulticast mode [ 264.979868][T10002] bridge_slave_1: entered promiscuous mode [ 265.071703][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.078811][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.083458][T10021] fuse: Bad value for 'fd' [ 265.096315][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.103425][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.117454][ T293] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.131775][T10002] veth0_vlan: entered promiscuous mode [ 265.138356][ T293] usb 4-1: USB disconnect, device number 74 [ 265.146118][T10002] veth1_macvtap: entered promiscuous mode [ 265.152068][ T293] usblp0: removed [ 265.183620][T10023] rust_binder: Error while translating object. [ 265.183652][T10023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 265.190093][T10023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 265.214395][ T7946] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.362984][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.371564][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.444178][T10031] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3056'. [ 265.652096][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=10035 comm=syz.2.3058 [ 265.665037][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3058'. [ 266.046974][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 266.071366][T10064] rust_binder: Failed copying into alloc: EFAULT [ 266.071393][T10064] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 266.078108][T10064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 266.086564][T10064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:193 [ 266.101545][T10062] fuse: Bad value for 'user_id' [ 266.114209][T10066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 266.115686][T10066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:195 [ 266.115893][T10062] fuse: Bad value for 'user_id' [ 266.206873][T10083] overlayfs: failed to clone upperpath [ 266.752665][T10128] rust_binder: Write failure EFAULT in pid:216 [ 266.764588][T10130] rust_binder: Write failure EINVAL in pid:218 [ 266.786724][T10132] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3091'. [ 267.282047][ T293] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 267.389004][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.389401][ T514] Bluetooth: hci0: command 0x1003 tx timeout [ 267.442433][ T293] usb 4-1: Using ep0 maxpacket: 32 [ 267.449836][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.460851][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.470667][ T293] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 267.480199][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.489449][ T293] usb 4-1: config 0 descriptor?? [ 267.505133][T10163] rust_binder: inc_ref_done called when no active inc_refs [ 267.521397][T10165] can0: slcan on ptm0. [ 267.582549][T10165] can0 (unregistered): slcan off ptm0. [ 267.644462][T10184] rust_binder: Write failure EFAULT in pid:18 [ 267.667902][ T36] audit: type=1400 audit(395.621:567): avc: denied { lock } for pid=10188 comm="syz.1.3108" path="socket:[52460]" dev="sockfs" ino=52460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 267.716478][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.725745][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.939742][ T293] koneplus 0003:1E7D:2D51.0013: item fetching failed at offset 1/5 [ 267.947875][ T293] koneplus 0003:1E7D:2D51.0013: parse failed [ 267.953946][ T293] koneplus 0003:1E7D:2D51.0013: probe with driver koneplus failed with error -22 [ 267.977194][ T464] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 268.116250][ T464] usb 2-1: device descriptor read/64, error -71 [ 268.375203][ T464] usb 2-1: device descriptor read/64, error -71 [ 268.413141][T10229] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 268.541060][ T293] usb 4-1: USB disconnect, device number 76 [ 268.640292][ T464] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 268.735630][T10243] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 268.779321][ T464] usb 2-1: device descriptor read/64, error -71 [ 269.048781][ T464] usb 2-1: device descriptor read/64, error -71 [ 269.164460][ T464] usb usb2-port1: attempt power cycle [ 269.526282][T10268] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 269.533642][ T464] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 269.533897][T10268] Invalid ELF header type: 3 != 1 [ 269.561171][ T464] usb 2-1: device descriptor read/8, error -71 [ 269.700169][ T464] usb 2-1: device descriptor read/8, error -71 [ 269.703290][T10295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10295 comm=syz.2.3140 [ 269.836134][T10302] rust_binder: 10300 RLIMIT_NICE not set [ 269.836410][T10300] rust_binder: Error while translating object. [ 269.842179][T10300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 269.848434][T10300] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 269.857816][T10300] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:266 [ 269.882370][T10304] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 269.890647][T10304] rust_binder: Read failure Err(EFAULT) in pid:269 [ 269.955801][ T464] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 269.989548][ T464] usb 2-1: device descriptor read/8, error -71 [ 270.003228][T10311] cgroup: release_agent respecified [ 270.024467][ T36] audit: type=1400 audit(397.818:568): avc: denied { read } for pid=10314 comm="syz.3.3147" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 270.048232][ T36] audit: type=1400 audit(397.818:569): avc: denied { open } for pid=10314 comm="syz.3.3147" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 270.060021][T10317] rust_binder: validate_parent_fixup: new_min_offset=36, sg_entry.length=0 [ 270.073078][T10317] rust_binder: Error while translating object. [ 270.081804][T10317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.088171][T10317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 270.128030][ T464] usb 2-1: device descriptor read/8, error -71 [ 270.165057][T10320] rust_binder: Error in use_page_slow: ESRCH [ 270.165074][T10320] rust_binder: use_range failure ESRCH [ 270.171232][T10320] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 270.176814][T10320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 270.184677][T10320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 270.196177][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.213835][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.255355][ T464] usb usb2-port1: unable to enumerate USB device [ 271.147330][T10342] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 271.431767][ T2277] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 271.442536][ T464] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 271.570789][ T2277] usb 2-1: device descriptor read/64, error -71 [ 271.604024][ T464] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.610696][ T464] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 271.619787][ T464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.628530][ T464] usb 4-1: config 0 descriptor?? [ 271.827455][ T2277] usb 2-1: device descriptor read/64, error -71 [ 272.064286][ T464] cypress 0003:04B4:ED81.0014: hidraw0: USB HID v1.01 Device [HID 04b4:ed81] on usb-dummy_hcd.3-1/input0 [ 272.084291][ T2277] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 272.223173][ T2277] usb 2-1: device descriptor read/64, error -71 [ 272.277645][T10353] netlink: 'syz.3.3162': attribute type 11 has an invalid length. [ 272.286260][T10353] rust_binder: Fixups oob 165 172 361 173 [ 272.286279][T10353] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 272.292099][T10353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.300408][T10353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303 [ 272.310435][ T464] usb 4-1: USB disconnect, device number 77 [ 272.479853][ T2277] usb 2-1: device descriptor read/64, error -71 [ 272.597617][ T2277] usb usb2-port1: attempt power cycle [ 272.871651][T10358] fuse: Invalid rootmode [ 272.962172][ T2277] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 272.983643][ T2277] usb 2-1: device descriptor read/8, error -71 [ 273.122622][ T2277] usb 2-1: device descriptor read/8, error -71 [ 273.142989][ T914] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 273.304525][ T914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.316996][ T914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.326095][ T914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.334105][ T914] usb 4-1: Product: syz [ 273.338296][ T914] usb 4-1: Manufacturer: syz [ 273.342913][ T914] usb 4-1: SerialNumber: syz [ 273.378259][ T2277] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 273.400689][ T2277] usb 2-1: device descriptor read/8, error -71 [ 273.514946][T10367] 9pnet_fd: Insufficient options for proto=fd [ 273.539764][ T2277] usb 2-1: device descriptor read/8, error -71 [ 273.656426][ T2277] usb usb2-port1: unable to enumerate USB device [ 274.423558][ T914] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 274.430088][ T914] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 274.437704][ T914] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 274.687934][T10399] fuse: Unknown parameter '0xffffffffffffffffÿÿ' [ 274.772100][T10410] rust_binder: inc_ref_done called when no active inc_refs [ 274.785603][T10412] rust_binder: Write failure EFAULT in pid:64 [ 274.849160][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.864031][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.941731][ T914] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 274.948798][ T914] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 274.963378][ T914] usb 4-1: USB disconnect, device number 78 [ 274.969869][ T914] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 275.057394][ T2277] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 275.067761][T10417] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3185'. [ 275.218870][ T2277] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 275.227086][ T2277] usb 2-1: config 0 has no interface number 0 [ 275.233261][ T2277] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.244158][ T2277] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 275.255861][ T2277] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 275.267007][ T2277] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 275.276912][ T2277] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.291459][ T2277] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 275.300540][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.308571][ T2277] usb 2-1: Product: syz [ 275.312746][ T2277] usb 2-1: Manufacturer: syz [ 275.317356][ T2277] usb 2-1: SerialNumber: syz [ 275.322531][ T2277] usb 2-1: config 0 descriptor?? [ 275.328011][T10415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.494764][T10423] rust_binder: Got transaction with invalid offset. [ 275.494837][T10423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.501510][T10423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 275.523199][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 275.557194][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3188'. [ 275.613897][ T2277] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 275.624324][ T2277] scsi host1: usb-storage 2-1:0.189 [ 275.635543][ T2277] usb 2-1: USB disconnect, device number 101 [ 275.648034][ T36] audit: type=1400 audit(403.073:570): avc: denied { map } for pid=10439 comm="syz.1.3191" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 275.671149][ T36] audit: type=1400 audit(403.073:571): avc: denied { nlmsg_write } for pid=10439 comm="syz.1.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 275.695009][T10442] fuseblk: Unknown parameter 'fsname' [ 275.695297][ T36] audit: type=1400 audit(403.119:572): avc: denied { setattr } for pid=10441 comm="syz.1.3192" name="file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.702458][T10442] rust_binder: Error while translating object. [ 275.723104][T10442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.730459][T10442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 275.748475][ T36] audit: type=1400 audit(403.119:573): avc: denied { mounton } for pid=10441 comm="syz.1.3192" path="/27/file0" dev="tmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 275.844729][T10451] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 275.844762][T10451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 275.852894][T10451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:83 [ 275.993907][T10461] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 276.003105][T10461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 276.011173][T10461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:88 [ 276.483014][ T36] audit: type=1400 audit(403.858:574): avc: denied { setattr } for pid=10466 comm="syz.3.3201" name="RFCOMM" dev="sockfs" ino=53098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 276.568582][T10473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331 [ 276.606932][T10482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 276.616668][T10488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 276.617092][T10489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 277.036181][ T1324] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 277.202884][T10519] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3220'. [ 277.212092][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 277.212177][T10519] 0ªö»ôM: renamed from bridge_slave_0 (while UP) [ 277.218579][ T1324] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 277.232074][ T1324] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 277.233895][T10519] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 277.239313][ T1324] usb 2-1: config 0 has no interface number 0 [ 277.241017][ T1324] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 277.270464][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.278580][ T1324] usb 2-1: Product: syz [ 277.282794][ T1324] usb 2-1: Manufacturer: syz [ 277.287552][ T1324] usb 2-1: SerialNumber: syz [ 277.294312][ T1324] usb 2-1: config 0 descriptor?? [ 277.302314][ T1324] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 277.309031][ T1324] usb 2-1: No valid video chain found. [ 277.519201][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.527801][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.536856][ T914] usb 2-1: USB disconnect, device number 102 [ 278.002750][ T36] audit: type=1326 audit(405.279:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10551 comm="syz.2.3230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2fd38eec9 code=0x0 [ 278.085023][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 278.107136][T10561] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 278.107831][T10562] rust_binder: inc_ref_done called when no active inc_refs [ 278.114889][T10561] SELinux: failed to load policy [ 278.177607][T10565] rust_binder: Error in use_page_slow: ESRCH [ 278.177632][T10565] rust_binder: use_range failure ESRCH [ 278.183723][T10565] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 278.189231][T10565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 278.197304][T10565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:101 [ 278.245492][ T36] audit: type=1400 audit(405.503:576): avc: denied { bind } for pid=10568 comm="syz.1.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 278.285916][T10571] rust_binder: Fixups oob 165 172 361 173 [ 278.285938][T10571] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 278.291805][T10571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 278.300119][T10571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 278.542777][T10575] 9pnet_fd: Insufficient options for proto=fd [ 278.848144][ T36] audit: type=1400 audit(406.064:577): avc: denied { checkpoint_restore } for pid=10578 comm="syz.2.3239" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.067799][T10600] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 279.067825][T10600] rust_binder: Error while translating object. [ 279.087620][T10600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.094033][T10600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 279.151572][T10607] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.240193][T10625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3253'. [ 279.369782][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3257'. [ 279.430859][T10627] 9pnet: Could not find request transport: fdlrfdno=0x0000000000000008 [ 279.464298][ T1324] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 279.498956][T10655] rust_binder: Error while translating object. [ 279.499001][T10655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.517652][T10655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 279.663628][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 279.692272][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.710254][T10698] syz.0.3274: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 279.710325][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.733373][T10698] ,cpuset=syz0,mems_allowed=0 [ 279.744158][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.0.3274 Not tainted syzkaller #0 c79f1cffa6a5c09114654fbb1334511b20ee076b [ 279.744190][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.744206][T10698] Call Trace: [ 279.744215][T10698] [ 279.744225][T10698] __dump_stack+0x21/0x30 [ 279.744263][T10698] dump_stack_lvl+0x10c/0x190 [ 279.744294][T10698] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.744326][T10698] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 279.744356][T10698] dump_stack+0x19/0x20 [ 279.744386][T10698] warn_alloc+0x1bc/0x2a0 [ 279.744416][T10698] ? stack_depot_save_flags+0x38/0x800 [ 279.744444][T10698] ? __cfi_warn_alloc+0x10/0x10 [ 279.744473][T10698] ? kasan_save_track+0x4f/0x80 [ 279.744498][T10698] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 279.744521][T10698] ? xskq_create+0x68/0x2a0 [ 279.744550][T10698] ? xsk_init_queue+0xb6/0x120 [ 279.744578][T10698] ? xsk_setsockopt+0x43f/0x6f0 [ 279.744612][T10698] ? do_sock_setsockopt+0x26d/0x400 [ 279.744641][T10698] ? __x64_sys_setsockopt+0x1b8/0x250 [ 279.744670][T10698] ? x64_sys_call+0x2adc/0x2ee0 [ 279.744703][T10698] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.744739][T10698] __vmalloc_node_range_noprof+0x135/0x1420 [ 279.744779][T10698] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 279.744812][T10698] ? avc_has_perm+0x144/0x220 [ 279.744845][T10698] ? kasan_save_alloc_info+0x40/0x50 [ 279.744876][T10698] ? __kasan_kmalloc+0x96/0xb0 [ 279.744902][T10698] vmalloc_user_noprof+0x77/0x90 [ 279.744934][T10698] ? xskq_create+0xdb/0x2a0 [ 279.744963][T10698] xskq_create+0xdb/0x2a0 [ 279.744993][T10698] xsk_init_queue+0xb6/0x120 [ 279.745022][T10698] xsk_setsockopt+0x43f/0x6f0 [ 279.745051][T10698] ? __cfi_xsk_setsockopt+0x10/0x10 [ 279.745080][T10698] ? do_futex+0x309/0x500 [ 279.745104][T10698] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 279.745134][T10698] ? security_socket_setsockopt+0x33/0xd0 [ 279.745158][T10698] ? __cfi_xsk_setsockopt+0x10/0x10 [ 279.745188][T10698] do_sock_setsockopt+0x26d/0x400 [ 279.745218][T10698] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 279.745251][T10698] __x64_sys_setsockopt+0x1b8/0x250 [ 279.745281][T10698] x64_sys_call+0x2adc/0x2ee0 [ 279.745315][T10698] do_syscall_64+0x58/0xf0 [ 279.745340][T10698] ? clear_bhb_loop+0x50/0xa0 [ 279.745363][T10698] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.745397][T10698] RIP: 0033:0x7f3a9b18eec9 [ 279.745417][T10698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.745436][T10698] RSP: 002b:00007f3a99bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.745462][T10698] RAX: ffffffffffffffda RBX: 00007f3a9b3e5fa0 RCX: 00007f3a9b18eec9 [ 279.745480][T10698] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 279.745495][T10698] RBP: 00007f3a9b211f91 R08: 0000000000000004 R09: 0000000000000000 [ 279.745510][T10698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.745526][T10698] R13: 00007f3a9b3e6038 R14: 00007f3a9b3e5fa0 R15: 00007ffd581a28a8 [ 279.745546][T10698] [ 279.745569][T10698] Mem-Info: [ 279.753106][ T1324] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 279.775129][T10698] active_anon:24100 inactive_anon:11 isolated_anon:0 [ 279.775129][T10698] active_file:8934 inactive_file:15880 isolated_file:0 [ 279.775129][T10698] unevictable:0 dirty:34 writeback:0 [ 279.775129][T10698] slab_reclaimable:6568 slab_unreclaimable:77259 [ 279.775129][T10698] mapped:24720 shmem:16612 pagetables:1148 [ 279.775129][T10698] sec_pagetables:0 bounce:0 [ 279.775129][T10698] kernel_misc_reclaimable:0 [ 279.775129][T10698] free:1494488 free_pcp:4810 free_cma:0 [ 279.806606][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.809735][T10698] Node 0 active_anon:97000kB inactive_anon:44kB active_file:35736kB inactive_file:63520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98880kB dirty:136kB writeback:0kB shmem:66448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7336kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no [ 279.813533][ T1324] usb 4-1: config 0 descriptor?? [ 279.836763][T10698] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965948kB mlocked:0kB bounce:0kB free_pcp:5736kB local_pcp:5736kB free_cma:0kB [ 279.861092][ T1324] hub 4-1:0.0: USB hub found [ 279.865226][T10698] lowmem_reserve[]: [ 280.026001][ T36] audit: type=1400 audit(407.158:578): avc: denied { listen } for pid=10711 comm="syz.1.3277" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.036262][T10698] 0 [ 280.087900][ T1324] hub 4-1:0.0: 1 port detected [ 280.103646][T10698] 3921 3921 [ 280.217900][T10698] Normal free:3020144kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:95204kB inactive_anon:48kB active_file:35736kB inactive_file:63520kB unevictable:0kB writepending:144kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:12032kB local_pcp:11100kB free_cma:0kB [ 280.249500][T10698] lowmem_reserve[]: 0 0 0 [ 280.253984][T10698] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 280.269517][T10698] Normal: 455*4kB (UME) 582*8kB (UME) 452*16kB (UME) 729*32kB (UME) 503*64kB (UME) 216*128kB (UME) 103*256kB (UME) 91*512kB (UME) 67*1024kB (UME) 36*2048kB (UME) 661*4096kB (UM) = 3019628kB [ 280.288476][T10698] 41429 total pagecache pages [ 280.293208][T10698] 41 pages in swap cache [ 280.297471][T10698] Free swap = 124448kB [ 280.301681][T10698] Total swap = 124996kB [ 280.305849][T10698] 2097051 pages RAM [ 280.310224][T10698] 0 pages HighMem/MovableOnly [ 280.314921][T10698] 351534 pages reserved [ 280.319085][T10698] 0 pages cma reserved [ 280.325718][T10698] Memory allocations: [ 280.329748][T10698] 0 B 0 init/main.c:1370 func:do_initcalls [ 280.337060][T10698] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 280.345190][T10698] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 280.352917][T10698] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 280.360840][T10698] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 280.368807][T10698] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 280.377466][T10698] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 280.385409][T10698] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 280.393335][T10698] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 280.401292][T10698] 0 B 0 init/initramfs.c:101 func:find_link [ 280.420095][T10729] 9pnet_fd: Insufficient options for proto=fd [ 280.448748][ T1324] hub 4-1:0.0: activate --> -90 [ 280.504805][ T36] audit: type=1400 audit(407.616:579): avc: denied { append } for pid=10736 comm="syz.0.3285" name="file0" dev="tmpfs" ino=2223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.505524][T10737] netlink: 'syz.0.3285': attribute type 12 has an invalid length. [ 280.674377][ T2277] usb 4-1: USB disconnect, device number 79 [ 280.908344][ T1324] usb 4-1-port1: config error [ 280.927176][T10763] fuseblk: Unknown parameter 'Nd' [ 281.102255][T10782] overlay: filesystem on ./bus is read-only [ 281.106920][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 281.106944][ T36] audit: type=1400 audit(408.178:583): avc: denied { read write } for pid=10767 comm="syz.1.3296" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.137020][ T36] audit: type=1400 audit(408.178:584): avc: denied { open } for pid=10767 comm="syz.1.3296" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.218592][ T2277] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 281.266101][T10793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 281.266139][T10793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:163 [ 281.378896][ T2277] usb 4-1: Using ep0 maxpacket: 32 [ 281.394574][ T2277] usb 4-1: unable to get BOS descriptor or descriptor too short [ 281.402993][ T2277] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 281.411379][ T2277] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 281.421722][ T2277] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 281.430779][ T2277] usb 4-1: config 128 has no interface number 0 [ 281.437062][ T2277] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 281.448453][ T2277] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.458730][ T2277] usb 4-1: config 128 interface 127 has no altsetting 0 [ 281.470932][ T2277] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 281.480126][ T2277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.488208][ T2277] usb 4-1: Product: syz [ 281.489647][T10808] netlink: 'syz.0.3308': attribute type 58 has an invalid length. [ 281.492417][ T2277] usb 4-1: Manufacturer: syz [ 281.504843][ T2277] usb 4-1: SerialNumber: syz [ 281.738225][ T2277] usb 4-1: USB disconnect, device number 80 [ 281.750478][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.815699][T10816] sit0: entered promiscuous mode [ 281.821957][T10816] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3311'. [ 282.295239][ T36] audit: type=1400 audit(409.290:585): avc: denied { add_name } for pid=10853 comm="syz.3.3325" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.320005][ T36] audit: type=1400 audit(409.290:586): avc: denied { create } for pid=10853 comm="syz.3.3325" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 282.342522][ T36] audit: type=1400 audit(409.290:587): avc: denied { associate } for pid=10853 comm="syz.3.3325" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 282.368067][ T36] audit: type=1400 audit(409.309:588): avc: denied { unmount } for pid=8436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 282.521677][T10885] binder: Bad value for 'defcontext' [ 282.601276][ T36] audit: type=1400 audit(409.580:589): avc: denied { module_load } for pid=10881 comm="syz.1.3335" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 282.601806][T10890] kernel read not supported for file /policy (pid: 10890 comm: syz.1.3335) [ 282.638175][T10890] binder: Unknown parameter 'cCtel_uÝG ' [ 282.801363][ T293] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 282.972477][ T293] usb 4-1: Using ep0 maxpacket: 16 [ 282.984661][ T293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.997237][ T293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 283.011039][ T293] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 283.021448][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.036681][ T293] usb 4-1: Product: syz [ 283.041089][ T293] usb 4-1: Manufacturer: syz [ 283.048374][ T293] usb 4-1: SerialNumber: syz [ 283.061749][ T293] usb 4-1: config 0 descriptor?? [ 283.091081][T10914] netlink: 'syz.0.3344': attribute type 2 has an invalid length. [ 283.475162][ T1324] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 283.635591][ T1324] usb 2-1: Using ep0 maxpacket: 8 [ 283.642116][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.650772][ T1324] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 283.659095][ T1324] usb 2-1: config 6 has no interface number 0 [ 283.665245][ T1324] usb 2-1: config 6 interface 248 has no altsetting 0 [ 283.673821][ T1324] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 283.683131][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.691618][ T1324] usb 2-1: Product: syz [ 283.695852][ T1324] usb 2-1: Manufacturer: syz [ 283.696605][T10934] overlayfs: failed to clone upperpath [ 283.700792][ T1324] usb 2-1: SerialNumber: syz [ 283.773462][T10944] fuse: Bad value for 'group_id' [ 283.778492][T10944] fuse: Bad value for 'group_id' [ 283.935404][ T1324] ums-karma 2-1:6.248: USB Mass Storage device detected [ 283.937917][T10889] rust_binder: Write failure EFAULT in pid:396 [ 283.943416][ T293] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 283.959888][ T293] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 283.970997][ T293] asix 4-1:0.0: probe with driver asix failed with error -71 [ 283.981797][ T293] usb 4-1: USB disconnect, device number 81 [ 284.001570][ T1324] usb 2-1: USB disconnect, device number 103 [ 284.352716][T10953] overlayfs: missing 'lowerdir' [ 284.592710][T10960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 284.592739][T10960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:398 [ 284.613045][T10965] binder: Bad value for 'defcontext' [ 284.984611][T10980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10980 comm=syz.2.3366 [ 285.456543][T10987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 285.456570][T10987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:211 [ 285.625238][T11010] bridge0: port 3(veth0_to_bridge) entered blocking state [ 285.641596][T11010] bridge0: port 3(veth0_to_bridge) entered disabled state [ 285.648843][T11010] veth0_to_bridge: entered allmulticast mode [ 285.655271][T11010] veth0_to_bridge: entered promiscuous mode [ 285.661298][T11010] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.673897][T11010] bridge0: port 3(veth0_to_bridge) entered blocking state [ 285.681082][T11010] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 285.807786][ T36] audit: type=1400 audit(412.572:590): avc: denied { getopt } for pid=11012 comm="syz.0.3379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 285.908587][T11032] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3386'. [ 286.127878][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.139618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.151841][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.163519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.175638][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.187385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.199514][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.211335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.223468][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.235150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.323746][ T36] audit: type=1400 audit(413.059:591): avc: denied { ioctl } for pid=11048 comm="syz.1.3393" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.784500][ T914] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 286.855532][T11070] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 286.927594][T11070] overlay: filesystem on ./bus not supported as upperdir [ 286.984220][ T914] usb 4-1: Using ep0 maxpacket: 8 [ 287.025274][ T914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.070695][ T914] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 287.091004][ T914] usb 4-1: config 6 has no interface number 0 [ 287.098033][ T914] usb 4-1: config 6 interface 248 has no altsetting 0 [ 287.198627][ T914] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 287.206821][T11082] 9pnet_fd: Insufficient options for proto=fd [ 287.212223][ T914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.241380][ T914] usb 4-1: Product: syz [ 287.245609][ T914] usb 4-1: Manufacturer: syz [ 287.262567][ T914] usb 4-1: SerialNumber: syz [ 287.548274][T11086] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 287.605541][ T914] ums-karma 4-1:6.248: USB Mass Storage device detected [ 287.724026][ T914] usb 4-1: USB disconnect, device number 82 [ 287.828495][ T36] audit: type=1400 audit(414.467:592): avc: denied { map } for pid=11105 comm="syz.2.3412" path="socket:[56066]" dev="sockfs" ino=56066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.875091][ T36] audit: type=1400 audit(414.504:593): avc: denied { setattr } for pid=11107 comm="syz.2.3413" name="CAN_BCM" dev="sockfs" ino=56071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.928603][T11111] xt_NFQUEUE: number of total queues is 0 [ 288.000193][T11118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 288.120086][T11126] overlayfs: failed to clone lowerpath [ 288.381101][T11151] fuseblk: Bad value for 'fd' [ 288.408929][T11156] fuseblk: Bad value for 'fd' [ 288.451528][T11160] netlink: 'syz.3.3431': attribute type 4 has an invalid length. [ 288.460513][T11160] netlink: 992 bytes leftover after parsing attributes in process `syz.3.3431'. [ 288.790650][ T1324] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 288.844125][ T371] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 288.951187][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 288.957945][ T1324] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.968234][ T1324] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.985663][ T1324] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.999083][ T371] usb 2-1: device descriptor read/64, error -71 [ 289.010135][ T1324] usb 4-1: config 1 interface 0 has no altsetting 0 [ 289.018626][ T1324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.031500][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.039868][ T1324] usb 4-1: Product: syz [ 289.044193][ T1324] usb 4-1: Manufacturer: syz [ 289.053437][ T1324] usb 4-1: SerialNumber: syz [ 289.261246][ T371] usb 2-1: device descriptor read/64, error -71 [ 289.402736][ T1324] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 289.422503][ T1324] usb 4-1: USB disconnect, device number 83 [ 289.436822][ T1324] usblp0: removed [ 289.517972][ T371] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 289.669085][ T371] usb 2-1: device descriptor read/64, error -71 [ 289.935363][ T371] usb 2-1: device descriptor read/64, error -71 [ 290.063564][ T371] usb usb2-port1: attempt power cycle [ 290.448403][ T371] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 290.470928][ T371] usb 2-1: device descriptor read/8, error -71 [ 290.549765][ T7948] tipc: Subscription rejected, illegal request [ 290.609925][ T371] usb 2-1: device descriptor read/8, error -71 [ 290.619534][ T1324] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 290.779966][ T1324] usb 4-1: Using ep0 maxpacket: 32 [ 290.786986][ T1324] usb 4-1: config 1 has an invalid interface number: 152 but max is 0 [ 290.800051][ T1324] usb 4-1: config 1 has no interface number 0 [ 290.806545][ T1324] usb 4-1: config 1 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 290.822147][ T1324] usb 4-1: config 1 interface 152 has no altsetting 0 [ 290.830720][ T1324] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=d4.ef [ 290.845052][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.853159][ T1324] usb 4-1: Product: syz [ 290.860858][ T1324] usb 4-1: Manufacturer: syz [ 290.865717][ T371] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 290.873516][ T1324] usb 4-1: SerialNumber: syz [ 290.898710][ T371] usb 2-1: device descriptor read/8, error -71 [ 291.038142][ T371] usb 2-1: device descriptor read/8, error -71 [ 291.103064][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.119646][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.144331][ T1324] usbhid 4-1:1.152: couldn't find an input interrupt endpoint [ 291.165118][ T371] usb usb2-port1: unable to enumerate USB device [ 291.173320][ T1324] usb 4-1: USB disconnect, device number 84 [ 291.203907][T11252] futex_wake_op: syz.0.3460 tries to shift op by -1; fix this program [ 291.233530][T11254] tmpfs: Unknown parameter 'no' [ 291.485834][ C0] net_ratelimit: 63309 callbacks suppressed [ 291.485852][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.503418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.515539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.527647][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.539240][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.550950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.563062][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.574652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.586770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.598910][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.695451][T11260] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63002 sclass=netlink_xfrm_socket pid=11260 comm=syz.2.3464 [ 292.303970][ T36] audit: type=1400 audit(425.642:594): avc: denied { lock } for pid=11285 comm="syz.1.3472" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.341602][ T580] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 292.379234][T11289] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 292.379260][T11289] rust_binder: Read failure Err(EFAULT) in pid:249 [ 292.389504][T11289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 292.523270][ T580] usb 4-1: Using ep0 maxpacket: 8 [ 292.534870][ T580] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.548350][ T580] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 292.569040][ T580] usb 4-1: config 6 has no interface number 0 [ 292.584287][ T580] usb 4-1: config 6 interface 248 has no altsetting 0 [ 292.601938][ T580] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 292.611583][ T580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.619788][ T580] usb 4-1: Product: syz [ 292.624729][ T580] usb 4-1: Manufacturer: syz [ 292.630091][T11300] __vm_enough_memory: pid: 11300, comm: syz.1.3478, bytes: 18014402804453376 not enough memory for the allocation [ 292.647901][ T580] usb 4-1: SerialNumber: syz [ 292.873296][ T580] ums-karma 4-1:6.248: USB Mass Storage device detected [ 293.022659][T11315] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3484'. [ 293.069643][ T580] usb 4-1: USB disconnect, device number 85 [ 293.076156][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.108057][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.119616][T11312] bridge_slave_0: entered allmulticast mode [ 293.128564][T11312] bridge_slave_0: entered promiscuous mode [ 293.138112][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.147575][T11322] rust_binder: Error while translating object. [ 293.147614][T11322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 293.153819][T11322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 293.166687][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.183548][T11312] bridge_slave_1: entered allmulticast mode [ 293.190424][T11312] bridge_slave_1: entered promiscuous mode [ 293.338424][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.345532][T11312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.352877][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.359939][T11312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.393255][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.402531][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.444136][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.451267][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.490943][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.498066][ T7946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.534009][T11312] veth0_vlan: entered promiscuous mode [ 293.552080][T11312] veth1_macvtap: entered promiscuous mode [ 293.689049][ T1324] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 293.850538][ T1324] usb 4-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 293.866286][ T1324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.875500][ T580] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 293.883384][ T1324] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.914916][ T1324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.932265][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.940840][ T1324] usb 4-1: Product: syz [ 293.945066][ T1324] usb 4-1: Manufacturer: syz [ 293.950098][ T1324] usb 4-1: SerialNumber: syz [ 294.427019][ T580] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 295.862058][ T1324] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 295.868886][ T1324] cdc_ncm 4-1:1.0: bind() failure [ 296.028150][ T580] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 296.559832][ T580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.844134][ C1] net_ratelimit: 116819 callbacks suppressed [ 296.844158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.844187][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.850227][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.862317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.873765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.885169][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.897165][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.909182][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.920624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.932205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.561870][ T580] usb 5-1: Product: syz [ 297.566112][ T580] usb 5-1: Manufacturer: syz [ 297.572597][ T1324] usb 4-1: USB disconnect, device number 86 [ 298.599454][ T580] usb 5-1: SerialNumber: syz [ 302.202392][ C0] net_ratelimit: 162623 callbacks suppressed [ 302.202414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 302.202435][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.208564][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.220516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.231951][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.243380][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.255443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.267026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.278270][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.290245][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.025882][ C0] sched: DL replenish lagged too much [ 307.560644][ C1] net_ratelimit: 164326 callbacks suppressed [ 307.560669][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.560671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.560732][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.566788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.578300][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.590245][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.601762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.613738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.625170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.636601][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.342755][ T580] usb 5-1: config 0 descriptor?? [ 312.918949][ C1] net_ratelimit: 165515 callbacks suppressed [ 312.918973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.919019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.925145][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.937148][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.949148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.960654][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.972046][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.984072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.995498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.006933][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.860775][ T580] usb 5-1: can't set config #0, error -71 [ 316.301751][ T580] usb 5-1: USB disconnect, device number 2 [ 318.277216][ C0] net_ratelimit: 164049 callbacks suppressed [ 318.277239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 318.277282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.283527][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.295394][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.307443][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.318886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.330398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.341834][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.353851][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.365946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.225650][ T62] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 323.019086][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 323.141457][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 323.154094][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 323.167228][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 323.199035][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 323.635447][ C1] net_ratelimit: 161281 callbacks suppressed [ 323.635469][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.635476][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.635583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.641634][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.653709][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.665212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.677162][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.688593][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.700084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.712140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.748663][ T62] usb 4-1: device descriptor read/all, error -32 [ 328.993726][ C1] net_ratelimit: 158449 callbacks suppressed [ 328.993750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.993782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.999835][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.011891][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.023893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.035315][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.047284][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.059426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.070835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.082265][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.352063][ C1] net_ratelimit: 155952 callbacks suppressed [ 334.352086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.352145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.358169][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.370182][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.382214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.393709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.405115][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.417067][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.429098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.440566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.710303][ C1] net_ratelimit: 165160 callbacks suppressed [ 339.710326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.710370][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.716401][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.728468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.739945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.751397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.763335][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.775313][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.787330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.798800][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.068554][ C1] net_ratelimit: 162954 callbacks suppressed [ 345.068578][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.068595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.068673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.074694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.086145][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.098204][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.110222][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.122235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.133737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.145127][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.426855][ C1] net_ratelimit: 167638 callbacks suppressed [ 350.426879][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.426887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.426944][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.433012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.444519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.456448][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.467989][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.480014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.492085][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.503406][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.785105][ C0] net_ratelimit: 163513 callbacks suppressed [ 355.785132][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.785137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.791362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.802800][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.814767][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.826807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.838277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.849658][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.861667][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.873688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.143396][ C1] net_ratelimit: 164417 callbacks suppressed [ 361.143419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.143483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.149489][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.161563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.173690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.185088][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.197070][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.209105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.220604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.232109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.501666][ C1] net_ratelimit: 167002 callbacks suppressed [ 366.501690][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.501769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.507802][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.519255][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.531279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.542831][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.554166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.566215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.577597][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.589608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 371.859999][ C0] net_ratelimit: 165582 callbacks suppressed [ 371.860023][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.860060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.866189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.877621][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.889607][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.901609][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.913202][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.924684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.936167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.947595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.218213][ C1] net_ratelimit: 160150 callbacks suppressed [ 377.218237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.218267][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.224345][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.236407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.247813][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.259306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.271285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.282712][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.294792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.306801][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.576472][ C1] net_ratelimit: 157479 callbacks suppressed [ 382.576496][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.576532][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.582615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.594143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.605575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.617546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 382.629470][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.641575][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.653463][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.664929][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.934771][ C1] net_ratelimit: 156441 callbacks suppressed [ 387.934796][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.934832][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.941021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.952732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.964154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.976312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.988270][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.000267][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.012353][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.023937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.293078][ C1] net_ratelimit: 156668 callbacks suppressed [ 393.293103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.293131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.299181][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.311236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.323230][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.334675][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.346730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.358182][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 393.369617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.381744][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.651312][ C1] net_ratelimit: 157787 callbacks suppressed [ 398.651337][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.651397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.657456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.668969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.680939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.692901][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.704867][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.716879][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.728327][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 398.740012][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.009579][ C1] net_ratelimit: 163175 callbacks suppressed [ 404.009604][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.009638][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.015728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.027317][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.038843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.050813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.062213][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.074213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.086181][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.097638][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.367856][ C1] net_ratelimit: 157881 callbacks suppressed [ 409.367880][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.367930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.374064][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.385562][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.397569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.409168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.420561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.432530][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.444496][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.456560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 414.726166][ C1] net_ratelimit: 161053 callbacks suppressed [ 414.726190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.726220][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.732358][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.744490][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.755972][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.767447][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.778889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.790534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.802507][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.814492][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.084417][ C1] net_ratelimit: 160293 callbacks suppressed [ 420.084443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.084468][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.090596][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.102869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.114276][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.125712][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.137825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.149274][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.160775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.172873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.442699][ C0] net_ratelimit: 164886 callbacks suppressed [ 425.442723][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.442730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.442805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.448844][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.460398][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.472501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.484442][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.495884][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.507367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.519444][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.800960][ C1] net_ratelimit: 161400 callbacks suppressed [ 430.800982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.801048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.807116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.819113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.831073][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.843046][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.855062][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.866502][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 430.878077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 430.889680][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.159258][ C1] net_ratelimit: 160940 callbacks suppressed [ 436.159283][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.159319][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.165379][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.177085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.188530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.199998][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.211972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.224026][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.235477][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.247563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.517517][ C1] net_ratelimit: 163723 callbacks suppressed [ 441.517541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.517634][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.523621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.535721][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.547168][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.559246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.570672][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.582209][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.594232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.605687][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 443.411625][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.418707][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.443933][T11383] bridge_slave_0: entered allmulticast mode [ 443.475599][T11383] bridge_slave_0: entered promiscuous mode [ 443.690257][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.697426][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.732949][T11379] bridge_slave_0: entered allmulticast mode [ 443.763916][T11379] bridge_slave_0: entered promiscuous mode [ 443.894672][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.160007][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.167540][T11379] bridge_slave_1: entered allmulticast mode [ 444.224228][T11379] bridge_slave_1: entered promiscuous mode [ 444.320943][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.328027][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.352074][T11383] bridge_slave_1: entered allmulticast mode [ 444.385657][T11383] bridge_slave_1: entered promiscuous mode [ 444.450222][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.457403][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.481562][T11382] bridge_slave_0: entered allmulticast mode [ 444.513869][T11382] bridge_slave_0: entered promiscuous mode [ 445.497294][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.504391][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.528606][T11382] bridge_slave_1: entered allmulticast mode [ 445.550185][T11382] bridge_slave_1: entered promiscuous mode [ 446.875816][ C1] net_ratelimit: 155738 callbacks suppressed [ 446.875838][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.875893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.881960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.893437][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.905447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.917440][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.928878][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.941033][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.952349][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.963865][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.197682][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.204795][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.228962][T11384] bridge_slave_0: entered allmulticast mode [ 447.260977][T11384] bridge_slave_0: entered promiscuous mode [ 447.656695][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.663788][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.700109][T11384] bridge_slave_1: entered allmulticast mode [ 447.732004][T11384] bridge_slave_1: entered promiscuous mode [ 452.234092][ C1] net_ratelimit: 156087 callbacks suppressed [ 452.234116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.234155][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.240198][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.252429][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.263725][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.275319][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.286806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.298327][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.309857][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.321899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.592334][ C1] net_ratelimit: 160592 callbacks suppressed [ 457.592359][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.592412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.598455][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.609958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.621963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.633478][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.645499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.657520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.668913][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.680886][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.950623][ C1] net_ratelimit: 168757 callbacks suppressed [ 462.950647][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.950702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.956748][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.968300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.980240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.991657][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.003656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.015685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.027080][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 463.039100][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.308876][ C1] net_ratelimit: 167945 callbacks suppressed [ 468.308899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.308947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.314998][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.327049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.339015][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.350567][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.362536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.374022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.385427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.397404][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.667191][ C1] net_ratelimit: 154175 callbacks suppressed [ 473.667215][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.667245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 473.673337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.684818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.696773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.709136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.721076][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.733082][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.745071][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.756567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.025426][ C0] net_ratelimit: 157451 callbacks suppressed [ 479.025456][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.025496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.031618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.043056][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.055117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 479.067034][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.078562][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 479.090490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.101929][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.113417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.383725][ C0] net_ratelimit: 159214 callbacks suppressed [ 484.383749][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 484.383753][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.383836][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.389857][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.401439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.412968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.424387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.435821][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.447791][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.459800][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.755216][ T37] INFO: task syz-executor:11312 blocked for more than 127 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 487.903079][ T36] audit: type=1400 audit(608.528:595): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2804]" dev="pipefs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 487.927441][ T37] Not tainted syzkaller #0 [ 487.932431][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.314312][ T37] task:syz-executor state:D stack:0 pid:11312 tgid:11312 ppid:1 flags:0x00004006 [ 489.741979][ C1] net_ratelimit: 159529 callbacks suppressed [ 489.742003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.742035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.748107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.760138][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.772148][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.784235][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.795564][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.807060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.818497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.829931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 490.009576][ T37] Call Trace: [ 490.012918][ T37] [ 490.015870][ T37] __schedule+0x1322/0x1df0 [ 491.358264][ T37] ? __sched_text_start+0x10/0x10 [ 491.363460][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 495.100250][ C1] net_ratelimit: 165215 callbacks suppressed [ 495.100274][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.100307][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.106378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.117899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:af:2c:ac:d5:e0, vlan:0) [ 495.129455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.141527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.153382][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.165419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.177473][ C1] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.188912][ C0] bridge0: received packet on 30ªö»ôM with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 495.699785][ T37] ? rcu_barrier_entrain+0x35f/0x4d0 [ 495.705156][ T37] schedule+0xc6/0x240 [ 495.776268][ T37] schedule_timeout+0xb2/0x3a0 [ 495.781102][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 496.255403][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 496.261032][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 496.456416][ T37] ? generic_exec_single+0x20a/0x500 [ 496.461809][ T37] wait_for_common+0x359/0x630 [ 496.466612][ T37] ? wait_for_completion+0x40/0x40 [ 496.471772][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 496.477266][ T37] wait_for_completion+0x1c/0x40 [ 496.482246][ T37] rcu_barrier+0x415/0x530 [ 496.486683][ T37] netdev_run_todo+0x10e/0xcb0 [ 496.491472][ T37] ? kvfree+0x39/0x50 [ 496.495484][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 496.500816][ T37] rtnl_unlock+0x12/0x20 [ 496.505077][ T37] tun_chr_close+0xc5/0x150 [ 496.509586][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 496.514725][ T37] __fput+0x1fe/0xa00 [ 496.518735][ T37] ? call_rcu+0x14/0x20 [ 496.522934][ T37] ____fput+0x20/0x30 [ 496.526932][ T37] task_work_run+0x1e3/0x250 [ 496.531531][ T37] ? __cfi_task_work_run+0x10/0x10 [ 496.536662][ T37] ? free_nsproxy+0x223/0x290 [ 496.541351][ T37] do_exit+0x9bc/0x2630 [ 496.545539][ T37] ? kasan_save_track+0x4f/0x80 [ 496.550413][ T37] ? putname+0x113/0x150 [ 496.554668][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 496.560766][ T37] ? __cfi_do_exit+0x10/0x10 [ 496.565377][ T37] ? __kasan_check_write+0x18/0x20 [ 496.570538][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 496.575655][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 496.581318][ T37] do_group_exit+0x22a/0x300 [ 496.585934][ T37] ? __kasan_check_write+0x18/0x20 [ 496.591071][ T37] get_signal+0x139d/0x14f0 [ 496.595611][ T37] ? __kasan_slab_free+0x6a/0x80 [ 496.600573][ T37] arch_do_signal_or_restart+0x96/0x720 [ 496.606154][ T37] ? putname+0x113/0x150 [ 496.610460][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 496.616622][ T37] ? do_unlinkat+0x54d/0x5a0 [ 496.621423][ T37] ? __kasan_check_write+0x18/0x20 [ 496.626552][ T37] ? getname_flags+0x209/0x710 [ 496.631335][ T37] ? __kasan_check_read+0x15/0x20 [ 496.636372][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 496.641857][ T37] do_syscall_64+0x64/0xf0 [ 496.646271][ T37] ? clear_bhb_loop+0x50/0xa0 [ 496.650952][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 496.656871][ T37] RIP: 0033:0x7fd126b8e477 [ 496.661292][ T37] RSP: 002b:00007fff65ecd338 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 496.669725][ T37] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd126b8e477 [ 496.677717][ T37] RDX: 00007fff65ecd360 RSI: 00007fff65ecd3f0 RDI: 00007fff65ecd3f0 [ 496.685710][ T37] RBP: 00007fff65ecd3f0 R08: 0000000000000000 R09: 0000000000000000 [ 496.693706][ T37] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff65ece480 [ 496.701691][ T37] R13: 00007fd126c11d7d R14: 000000000004493e R15: 00007fff65ece4c0 [ 496.709704][ T37] [ 496.823013][ T37] NMI backtrace for cpu 0 [ 496.823035][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 c79f1cffa6a5c09114654fbb1334511b20ee076b [ 496.823067][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.823083][ T37] Call Trace: [ 496.823091][ T37] [ 496.823101][ T37] __dump_stack+0x21/0x30 [ 496.823149][ T37] dump_stack_lvl+0x10c/0x190 [ 496.823179][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 496.823212][ T37] dump_stack+0x19/0x20 [ 496.823240][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 496.823266][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 496.823294][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 496.823319][ T37] ? sched_show_task+0x379/0x560 [ 496.823348][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 496.823375][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.823404][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.823433][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 496.823460][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 496.823489][ T37] watchdog+0xd8f/0xed0 [ 496.823522][ T37] ? __cfi_watchdog+0x10/0x10 [ 496.823552][ T37] ? __kasan_check_read+0x15/0x20 [ 496.823585][ T37] ? __kthread_parkme+0x138/0x180 [ 496.823606][ T37] ? schedule+0xc6/0x240 [ 496.823634][ T37] kthread+0x2c7/0x370 [ 496.823657][ T37] ? __cfi_watchdog+0x10/0x10 [ 496.823688][ T37] ? __cfi_kthread+0x10/0x10 [ 496.823727][ T37] ret_from_fork+0x67/0xa0 [ 496.823766][ T37] ? __cfi_kthread+0x10/0x10 [ 496.823791][ T37] ret_from_fork_asm+0x1a/0x30 [ 496.823829][ T37] [ 496.823838][ T37] Sending NMI from CPU 0 to CPUs 1: [ 497.027179][ C1] NMI backtrace for cpu 1 [ 497.027193][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 c79f1cffa6a5c09114654fbb1334511b20ee076b [ 497.027215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.027226][ C1] RIP: 0010:stack_trace_consume_entry+0x70/0x2a0 [ 497.027258][ C1] Code: 0f b6 44 15 00 84 c0 0f 85 2d 01 00 00 45 3b 11 73 3c 4c 8d 67 0c 4d 89 e7 49 c1 ef 03 41 0f b6 04 17 84 c0 0f 85 58 01 00 00 <45> 8b 34 24 45 85 f6 74 22 41 ff ce 41 0f b6 04 17 84 c0 0f 85 8d [ 497.027273][ C1] RSP: 0018:ffffc90000230510 EFLAGS: 00000246 [ 497.027289][ C1] RAX: 0000000000000000 RBX: 1ffff920000460c6 RCX: 0000000000230500 [ 497.027301][ C1] RDX: dffffc0000000000 RSI: ffffffff858eef0f RDI: ffffc90000230620 [ 497.027314][ C1] RBP: ffffc90000230558 R08: ffffc90000230630 R09: ffffc90000230628 [ 497.027327][ C1] R10: 000000000000000d R11: ffffffff817441e0 R12: ffffc9000023062c [ 497.027339][ C1] R13: 1ffff920000460c5 R14: ffffffff817441e0 R15: 1ffff920000460c5 [ 497.027353][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 497.027367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.027379][ C1] CR2: 000055b91b382b90 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 497.027395][ C1] Call Trace: [ 497.027401][ C1] [ 497.027409][ C1] ? __kernel_text_address+0x11/0x40 [ 497.027432][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 497.027457][ C1] arch_stack_walk+0x12d/0x170 [ 497.027472][ C1] ? __do_softirq+0xf/0x16 [ 497.027494][ C1] stack_trace_save+0x9d/0xe0 [ 497.027529][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 497.027551][ C1] ? netif_receive_skb+0x161/0x7b0 [ 497.027570][ C1] kasan_save_track+0x3e/0x80 [ 497.027586][ C1] ? kasan_save_track+0x3e/0x80 [ 497.027601][ C1] ? kasan_save_free_info+0x4a/0x60 [ 497.027622][ C1] ? __kasan_slab_free+0x5f/0x80 [ 497.027638][ C1] ? kmem_cache_free+0x1c1/0x510 [ 497.027653][ C1] ? __kfree_skb+0x18f/0x210 [ 497.027670][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 497.027687][ C1] ? ip6_mc_input+0x4f3/0x670 [ 497.027701][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 497.027715][ C1] ? ipv6_rcv+0xed/0x220 [ 497.027728][ C1] ? process_backlog+0x44b/0xae0 [ 497.027748][ C1] ? __napi_poll+0xd0/0x610 [ 497.027763][ C1] ? net_rx_action+0x584/0xce0 [ 497.027781][ C1] ? handle_softirqs+0x1ab/0x630 [ 497.027809][ C1] kasan_save_free_info+0x4a/0x60 [ 497.027830][ C1] __kasan_slab_free+0x5f/0x80 [ 497.027847][ C1] kmem_cache_free+0x1c1/0x510 [ 497.027884][ C1] ? __kfree_skb+0x18f/0x210 [ 497.027903][ C1] __kfree_skb+0x18f/0x210 [ 497.027920][ C1] ? ip6_mc_input+0x4f3/0x670 [ 497.027935][ C1] sk_skb_reason_drop+0xd8/0x310 [ 497.027954][ C1] ip6_mc_input+0x4f3/0x670 [ 497.027970][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 497.027986][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 497.028013][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 497.028029][ C1] ip6_rcv_finish+0x344/0x3c0 [ 497.028044][ C1] ipv6_rcv+0xed/0x220 [ 497.028058][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 497.028081][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 497.028096][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 497.028110][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 497.028128][ C1] ? resched_curr+0x113/0x430 [ 497.028165][ C1] process_backlog+0x44b/0xae0 [ 497.028185][ C1] __napi_poll+0xd0/0x610 [ 497.028201][ C1] net_rx_action+0x584/0xce0 [ 497.028221][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 497.028239][ C1] ? timer_expire_remote+0xa0/0xa0 [ 497.028255][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 497.028276][ C1] handle_softirqs+0x1ab/0x630 [ 497.028300][ C1] __do_softirq+0xf/0x16 [ 497.028318][ C1] do_softirq+0xa6/0x100 [ 497.028339][ C1] [ 497.028345][ C1] [ 497.028351][ C1] ? __cfi_do_softirq+0x10/0x10 [ 497.028373][ C1] ? __kasan_slab_free+0x6a/0x80 [ 497.028390][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 497.028409][ C1] __local_bh_enable_ip+0x74/0x80 [ 497.028431][ C1] rcu_do_batch+0x5c6/0xd20 [ 497.028454][ C1] ? rcu_core+0xd20/0xd20 [ 497.028474][ C1] ? __kasan_check_write+0x18/0x20 [ 497.028514][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 497.028533][ C1] ? __kasan_check_read+0x15/0x20 [ 497.028556][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 497.028580][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 497.028606][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 497.028630][ C1] ? __kasan_check_write+0x18/0x20 [ 497.028653][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 497.028671][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 497.028690][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 497.028708][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 497.028725][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 497.028742][ C1] ? __kasan_check_read+0x15/0x20 [ 497.028768][ C1] ? __kthread_parkme+0x138/0x180 [ 497.028783][ C1] ? schedule+0xc6/0x240 [ 497.028804][ C1] kthread+0x2c7/0x370 [ 497.028820][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 497.028844][ C1] ? __cfi_kthread+0x10/0x10 [ 497.028861][ C1] ret_from_fork+0x67/0xa0 [ 497.028883][ C1] ? __cfi_kthread+0x10/0x10 [ 497.028900][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.028927][ C1]