last executing test programs: 1m4.005944681s ago: executing program 2 (id=1402): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa7f084dd5657bbb0, 0x14}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0]) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x2d}, 0x18) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r3, 0x0, 0xffffffff) 1m4.005133171s ago: executing program 2 (id=1404): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) clock_gettime(0x0, &(0x7f0000004100)={0x0, 0x0}) ppoll(&(0x7f00000040c0)=[{r0, 0x2080}, {r0, 0x8087}, {r0, 0x200}, {r0, 0x200}], 0x4, &(0x7f0000004140)={r2, r3+60000000}, &(0x7f0000004180)={[0xfffffffffffffffa]}, 0x8) rt_sigtimedwait(&(0x7f00000041c0), &(0x7f0000004200), &(0x7f0000004280), 0x8) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000004300)={0x77, 0x10, [0x1c8, 0x1d, 0x9, 0x2], &(0x7f00000042c0)=[0x0, 0x0]}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004400)={&(0x7f0000004380)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfd1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) r4 = syz_open_dev$rtc(&(0x7f0000004480), 0x7f, 0x20000) ioctl$RTC_UIE_ON(r4, 0x7003) write$FUSE_INIT(r0, &(0x7f00000044c0)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x8, 0xffffffff80442200, 0x9, 0x6, 0x7ff, 0xe, 0x0, 0x0, 0x40, 0xb}}, 0x50) clock_gettime(0x0, &(0x7f0000004580)={0x0, 0x0}) futex(&(0x7f0000004540), 0x100, 0x1, &(0x7f00000045c0)={r5, r6+60000000}, &(0x7f0000004600)=0x1, 0x2) io_setup(0x0, &(0x7f0000004640)=0x0) io_pgetevents(r7, 0xffffffffffffffff, 0x1, &(0x7f0000004680)=[{}], &(0x7f00000046c0)={0x0, 0x3938700}, &(0x7f0000004740)={&(0x7f0000004700)={[0x100000001]}, 0x8}) io_setup(0x400, &(0x7f0000004780)=0x0) io_destroy(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000004800)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000004940)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004900)={&(0x7f0000004840)={0x88, 0x0, 0x518, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x44044) r11 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000004980), 0x80800) recvmmsg$unix(r11, &(0x7f000000a100)=[{{&(0x7f00000049c0), 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004a40)=""/111, 0x6f}, {&(0x7f0000004ac0)=""/110, 0x6e}, {&(0x7f0000004b40)=""/251, 0xfb}], 0x3, &(0x7f0000004c80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000004dc0)=@abs, 0x6e, &(0x7f0000007200)=[{&(0x7f0000004e40)=""/214, 0xd6}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/21, 0x15}, {&(0x7f0000006080)=""/153, 0x99}, {&(0x7f0000006140)=""/168, 0xa8}, {&(0x7f0000006200)=""/4096, 0x1000}], 0x7, &(0x7f0000007280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000007300)=@abs, 0x6e, &(0x7f0000007400)=[{&(0x7f0000007380)=""/80, 0x50}], 0x1, &(0x7f0000007440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000007500), 0x6e, &(0x7f0000007840)=[{&(0x7f0000007580)=""/233, 0xe9}, {&(0x7f0000007680)=""/199, 0xc7}, {&(0x7f0000007780)=""/191, 0xbf}], 0x3}}, {{&(0x7f0000007880), 0x6e, &(0x7f0000008980)=[{&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/90, 0x5a}], 0x2}}, {{&(0x7f00000089c0), 0x6e, &(0x7f0000008b40)=[{&(0x7f0000008a40)=""/243, 0xf3}], 0x1, &(0x7f0000008b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000008c00)=@abs, 0x6e, &(0x7f000000a000)=[{&(0x7f0000008c80)=""/196, 0xc4}, {&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/91, 0x5b}, {&(0x7f0000009e00)=""/139, 0x8b}, {&(0x7f0000009ec0)=""/161, 0xa1}, {&(0x7f0000009f80)=""/8, 0x8}, {&(0x7f0000009fc0)=""/54, 0x36}], 0x7, &(0x7f000000a080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x7, 0x40000000, &(0x7f000000a2c0)) pipe2$watch_queue(&(0x7f000000a300), 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f000000a340), 0x2, 0x0) sendmmsg$inet6(r13, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f000000a4c0)=[{&(0x7f000000a380)="cbf2db169a4526905d2fa34c650270acbe8acd48bbe7afd407f90490b3cae34041597e95ee2aa846a32bcd11b2290623117d3c00ba963f2d94260ae9125e09e9a35d582495e1e368f6297921b6189c08df67e48bfe86d47bf60b88db22cc8ebe9073d6482c0916", 0x67}, {&(0x7f000000a400)="6b454d3b55857575ac24e2d1e0edea1efc8ed582b02796cf0377224c4096ee507c0cc94db76677372342e7", 0x2b}, {&(0x7f000000a440)="eda0", 0x2}, {&(0x7f000000a480)="b7a82be131997f7e52af0304430120844eed03d8776367bf9bc7f0ff53fda6a9bffa3287020f2f4e53e2c4e978a1c2f34db94bdae657ca2bdc2c07817008", 0x3e}], 0x4, &(0x7f000000a500)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r10}}}], 0x28}}], 0x1, 0x5) mkdir(&(0x7f000000a580)='./file0\x00', 0xf5) pselect6(0x40, &(0x7f000000a5c0)={0x8, 0x5, 0x9, 0x8, 0xa6a, 0x4, 0x0, 0x6}, &(0x7f000000a600)={0x9, 0xd, 0x2, 0xc400000000000000, 0x100000001, 0x200, 0x7fff, 0x9}, &(0x7f000000a640)={0x9, 0x6, 0x7e3, 0xffffffffffffff81, 0x5, 0x6, 0x8000, 0x8}, &(0x7f000000a680)={0x77359400}, &(0x7f000000a700)={&(0x7f000000a6c0)={[0x81]}, 0x8}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4426778ba417b814, 0x40010, 0xffffffffffffffff, 0x87cd0000) r14 = accept(r12, &(0x7f000000a740)=@isdn, &(0x7f000000a7c0)=0x80) setsockopt$MRT_DEL_VIF(r14, 0x0, 0xcb, &(0x7f000000a800)={0xffffffffffffffff, 0x4, 0x4, 0xe, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) 1m3.868012364s ago: executing program 2 (id=1408): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 1m3.114381788s ago: executing program 2 (id=1413): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x009P2000.u'], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1a14824, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77668e126f3d70da7be17aa8315c197cf3e2a2afb27f7ea51f9e9135fc2255af369790fd4c0e1ba89030ff74e72c236a3e561f34e571eee9cbafb7b252b3b6f35d4ec39ec91a9330ccaa5b671949897e2cf74aad81a5ac4ddcf6aef5ba2a0fedabeeacdf955896f3bfd303c7212e3d78ced700055175187608009b4fd76c5ad3ee3112a740d91d5c04dc3410f6a4632eb8fed1f6f2dd6ef1e60f3c1019b6de715db8c4c15ffc2cc0bb861648fc6083ebafd815cd9c389c2df2706b6211720bb719c97e7778edd5840b1bdb0f528b89d60ebc8539b9f4bd22370cad78e6229d109827e3e97f45285ad5daa8fef92f10df6381eac96cf1b96bf88340196576cffe3b05c66b532d5a54162904a2972cfdebd586538e7295dd8c7459040977cfecb4102376d79d66a78fd93aefef62c400"/319, @ANYBLOB="dc17167162262bf7045a45f0ce1636113fb1167bf6080d8f334bd053591096993d6ba28dbbe64b938510bab78bb9da16b5515792a8c1eb1ee7f5b94768e3d941f744e8582b5a3df40d", @ANYBLOB=',afid=0x0000000000000008,^']) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') keyctl$session_to_parent(0x12) r4 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r5, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRESOCT=r1]) fcntl$setlease(r4, 0x400, 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) socket$netlink(0x10, 0x3, 0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, {{0xa, 0x0, 0x0, @empty, 0x3}}}, 0x108) close(0x4) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000140)={r8, 0x1, 0x8}) fcntl$getflags(r4, 0x401) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, 0xffffffffffffffff, 0x852ac000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r11, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) 1m3.09912579s ago: executing program 3 (id=1414): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) getpid() (async) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r3 = epoll_create(0x0) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r3, r0, 0x9}) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket(0x11, 0xa, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x2, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r7, 0xaec7) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001ff000009090585cfa9"], 0x0) (async) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001ff000009090585cfa9"], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) syz_usb_control_io(r8, &(0x7f0000000880)={0x2c, &(0x7f0000000400)={0x0, 0x9, 0xe2, {0xe2, 0x5, "d1d4db9ca6f30c183cfb680fa6e9e159b2509c7e49140038524e1f5a267661e6000658c6ac04ca7e346d70e9b18a220d17264eff4ad82f9b4f0f370d73c414e3b3505fa813c9368c381bda469fc8b9a44b7531ca4b39c41f8ff866e5803a0de0b293d2cd3b331564c70bd8e4befefe4396bdde4b7ffc472936d6cad3c0d1b590922557b1e490d8a881da22bb712c3f9618f4101643954ec1d3025c0d07fce673ccc6e4593a792fd6b4cd00e8e59b240bfeefaada71b887ad71eae4cf543de64af3d1e60e15550d09184444b695461748ac280a4ae592ed9be6d1b7c5b98438da"}}, &(0x7f0000000500)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "da0acc1ac49847b64d2a1f9ce54c5105e6ac616f6bd28361662d78a956d8d765e0b03f9c746fb900861d89a7670c125e72116e1d3e1b057ad23b9c7397700e70d8ae8070972713fbbc9682efbdb0bebb90f024a9ef6cfccb104bccb6decc0f8056fee1546f907249f99aba7500e9793c44022bebf31bb130747d39d5ef962bfb1e1d0c72f9d6ab664a622a91e12b972f19354fe7c586b7e62c1174985c78b6cc8a7f9be26b6d47e1fe7e50583720b20c4b45f5f265b42362ea438099682322990f6fb6fa145dfc2b549149887b031011d00ad5e9bd78"}}, &(0x7f0000000600)={0x0, 0xf, 0x1c1, {0x5, 0xf, 0x1c1, 0x5, [@ptm_cap={0x3}, @generic={0xb3, 0x10, 0x2, "a7bf013f5da5a1ea24b23e75bf1543db995e07143751773d518a6c7e9013adde1542cdbb2241485267f2bbb6ccbf15ef918121da0460657ac032a06f59481cdab1bc57b0342b13d42eaece3393a00c0b8447a23f134931f0f85eafff0ca5d78ea0b8a89c03bbd5b49f5c25e21461ee4d7598412c89b5198ad2c0c4b9e51a13dd4a0ad2b44756c46b0405baad52a3bac8ca2b082de34e17a12e6b8f519c906d495d3f275403c29a12ce2f8a716de03ffc"}, @generic={0xd6, 0x10, 0xa, "316330eaa7d79cfa986abc57af3842083a299ae65bc38efb25cfaa1a78e00bf6e232a0b7e0337c42d77d10ccac53ec1b8f8ff6cb336f5c5d2effaf60f9de37393444dd5b493f442634d2e1c2a137e82f6f32e30ccb0891a65bdd95cb121d77567ab7d79627a3a61c831b3829cfa97db6d4697e7d94d4a9fc9fe84529c92a3d2fc633b99f0f073844c6454f22c3e9fb8a86be214b4aca00a38722a73b7f8869fa1f2180b442a9f519159d8be6f5a8904938a487ba4af237c429868a5f62bd400e8f54817f758a3bf81a905dd973400243a96ea6"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0xff00, 0x1, [0xff0000, 0x0, 0x7f8000, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "63688c1e415929547a498ed5f10867f5"}]}}, &(0x7f0000000800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x81, 0x0, "2c7edcc7", "7f8df62e"}}, &(0x7f0000000840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xfa, 0x2, 0x4, 0x4, 0x2}}}, &(0x7f0000000d00)={0x84, &(0x7f00000008c0)={0x20, 0x3c, 0x2f, "e318b399fca326f57ecf784eafbcaf20d7431ab003c70cf41597b0b43eabe1a9fca862886204e120728dac5d973fca"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x37}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0xa0, 0x40, [0xf00]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x2ff9}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "cd93"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xbb}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="2f323432d424"}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "f391"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x8}}) 1m2.971739223s ago: executing program 2 (id=1416): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="fb15050d6e1994616a5da7d97d35cec7ccf564d3"], 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="fb15050d6e1994616a5da7d97d35cec7ccf564d3"], 0x15, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) (async) 1m2.971078523s ago: executing program 2 (id=1417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x84aebfbd6349b7f2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, 0x0, 0x500) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r6, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109023b0001010000080904fa4403020600070524060000052400ff0f0d240f010000000007efffff06090582021000090a04090503021000c009dc"], 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009e000040"]) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close_range(r0, 0xffffffffffffffff, 0x0) 1m2.577782411s ago: executing program 3 (id=1418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0xfff, 0x800) fgetxattr(r1, &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)=""/35, 0x23) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x444082, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x23) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080)) write(r0, &(0x7f0000000400)="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", 0x1f000) 1m2.375495641s ago: executing program 3 (id=1421): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) 1m1.98007933s ago: executing program 0 (id=1433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002000000ac14141a000000000000000002000100000000000000020d0000e8ff030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r7 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x2000, 0x4) sendmsg$can_raw(r8, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r6}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) r9 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r9, 0x80041284, 0x3) write$eventfd(r4, &(0x7f0000000040)=0x7fff, 0x8) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0xffff, 0x4e24, 0xfff, 0x8967ad5d31fdff0f, 0x80, 0x20, 0x32, r6, r10}, {0x10000, 0x3, 0x80000001, 0x8, 0x4, 0x7, 0x8000000000000001, 0x2}, {0x8, 0x400, 0x6, 0x7}, 0x0, 0x6e6bba, 0x2, 0x1, 0x0, 0x3}, {{@in=@remote, 0x100, 0xff}, 0x2, @in=@loopback, 0x3507, 0x0, 0x3, 0x8, 0x80, 0x7, 0x8}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000240)=0xe8) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) keyctl$chown(0x4, 0x0, r14, r15) mount$fuse(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r11, @ANYBLOB=',allow_other,default_permissions,seclabel,euid=', @ANYRESDEC=r12, @ANYBLOB=',fowner>', @ANYRESDEC=r14, @ANYBLOB=',\x00']) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.935754144s ago: executing program 0 (id=1434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1m1.891618299s ago: executing program 0 (id=1435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) futex(&(0x7f0000000000)=0x1, 0x80, 0x2, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x94822, &(0x7f00000003c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x39]}}]}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x43) getsockopt$inet_int(r5, 0x0, 0x31, &(0x7f0000000080), &(0x7f0000000200)=0x4) 1m1.188207568s ago: executing program 3 (id=1438): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) sendfile(r0, r0, 0x0, 0x1000007fd) 1m0.302722825s ago: executing program 0 (id=1439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x40000000000009, 0x10000, 0x1, 0x6, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r4, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x1, 0x2}], 0xc}}], 0x1, 0x24000000) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) (async) setsockopt(r5, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x200}, 0x1c) (async) setsockopt(r5, 0x1, 0x9, &(0x7f0000000040), 0x29) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r3, 0x8000000000000000, 0x8, 0x2}) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0x33, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_LABELS_MASK={0x10, 0x17, [0x3, 0x4, 0x7f]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x20004010) (async) setsockopt$inet_tcp_TLS_RX(r6, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "b6dbb49dbb9ad709", "38c5529b5b16683d726017042bccacb8", "e141ffbd", "bfe8739c446c2973"}, 0x28) 56.919453618s ago: executing program 3 (id=1441): r0 = getpid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f0000000780)="fc0000001c000704ab5b2509b868030002ab087a1100000001483393210001c0f0030539a20060100000000000039815fa2c53c28648000000b9d99d4f06b2e4cfab32685662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51a", 0xbd) ioctl$TCFLSH(r1, 0x800455c9, 0x0) r3 = syz_pidfd_open(r0, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={&(0x7f0000000080)=""/200, 0xc8}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}, 0x4}) setns(r3, 0x24020000) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 56.563680293s ago: executing program 0 (id=1442): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000ff0f0800a906241a0400020905810310007981010904010000020d00f30804010102020d42acb730b7742e16c644463eb10000090582020029778a4bde02ebd67cfb2e34fe841dd6c8c77c505fe6c76b57ea475f416c132479d78994a75f816682c8a264d81669d0130000000090f0f1482cb6b2e88a1798dfd1cff1dee2e710fc839b0951253c7457e2b6cb109edd4ad9209bd8028772d823e58621e4b255547f003eb96d211f38e17130df717f460cba22000000000000"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x21, &(0x7f0000000c00)=[{&(0x7f00000002c0)="ea", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x38fff, 0x4) socket$inet6(0xa, 0xafab9e1b41c33656, 0x8) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x228000c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f6, 0x400, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004004) 54.698732657s ago: executing program 3 (id=1444): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lgetxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@random={'user.', '[\x00'}, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x4, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@cache_fscache}], [], 0x6b}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4004) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 54.529786883s ago: executing program 0 (id=1445): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x8001) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) r10 = syz_clone(0x4000000, &(0x7f0000000580)="277b1da4e936329b612b14a9bc7d8cbb0bb2666de0cdc39acab7a9e6b8460460452296fdc57bcd7870ec451f8631376bf82efd65ccb982de01e7703e552b30923b", 0x41, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/74, 0x4a}], 0x1, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/45, 0x2d}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r12 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r12, r11, 0x0, 0xffffffff) 47.832458532s ago: executing program 32 (id=1417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvlan0\x00', 0x84aebfbd6349b7f2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, 0x0, 0x500) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r6, &(0x7f0000000400)="a399d7e4ad784ee25b5ef02167c690cdd3bfbf2859ee528df869afb8a34dfc", 0x1f) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x100401, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109023b0001010000080904fa4403020600070524060000052400ff0f0d240f010000000007efffff06090582021000090a04090503021000c009dc"], 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009e000040"]) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close_range(r0, 0xffffffffffffffff, 0x0) 39.092062073s ago: executing program 33 (id=1445): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x8001) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) r10 = syz_clone(0x4000000, &(0x7f0000000580)="277b1da4e936329b612b14a9bc7d8cbb0bb2666de0cdc39acab7a9e6b8460460452296fdc57bcd7870ec451f8631376bf82efd65ccb982de01e7703e552b30923b", 0x41, 0x0, 0x0, 0x0) process_vm_writev(r10, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/74, 0x4a}], 0x1, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/45, 0x2d}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r11 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r12 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r12, r11, 0x0, 0xffffffff) 34.202610814s ago: executing program 34 (id=1444): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lgetxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=@random={'user.', '[\x00'}, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x4, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@cache_fscache}], [], 0x6b}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '!'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4004) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 29.690421278s ago: executing program 1 (id=1453): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1000}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x5, 0x1, 0x6, 0x9}, {0x1ff, 0x5, 0x6, 0x10000}, {0xf9d, 0x10, 0xa}]}) r2 = socket(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmmsg$sock(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{&(0x7f0000000000)=@phonet={0x23, 0x8, 0x7f, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x24000800) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) close(r3) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x9, 0x0, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x40816) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getxattr(0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x700}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40043d0d, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') msync(&(0x7f00002c8000/0x2000)=nil, 0x2000, 0x6) 26.579566194s ago: executing program 1 (id=1454): times(&(0x7f0000000000)) times(&(0x7f0000000040)) (async) times(&(0x7f0000000080)) (async) times(&(0x7f00000000c0)) (async) times(&(0x7f0000000100)) times(&(0x7f0000000140)) (async) times(&(0x7f0000000180)) (async) times(&(0x7f00000001c0)) (async) times(&(0x7f0000000200)) (async) times(&(0x7f0000000240)) (async) times(&(0x7f0000000280)) (async) times(&(0x7f00000002c0)) (async) times(&(0x7f0000000300)) times(&(0x7f0000000340)) (async) times(&(0x7f0000000380)) times(&(0x7f00000003c0)) (async) times(&(0x7f0000000400)) times(&(0x7f0000000440)) (async, rerun: 32) times(&(0x7f0000000480)) (async, rerun: 32) times(&(0x7f00000004c0)) (async, rerun: 32) times(&(0x7f0000000500)) (async, rerun: 32) times(&(0x7f0000000540)) times(&(0x7f0000000580)) (async, rerun: 32) times(&(0x7f00000005c0)) (async, rerun: 32) times(&(0x7f0000000600)) (async, rerun: 32) times(&(0x7f0000000640)) (rerun: 32) times(&(0x7f0000000680)) times(&(0x7f00000006c0)) times(&(0x7f0000000700)) times(&(0x7f0000000740)) 25.382126122s ago: executing program 1 (id=1455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000010000000000008000fcdbdf25040000000c0004800800d00001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24008014) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) (async) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (rerun: 32) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) (async, rerun: 32) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x3) (rerun: 32) 21.708232003s ago: executing program 1 (id=1456): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 18.59036642s ago: executing program 1 (id=1457): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff, 0x4}) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6a, 0x8, 0x48, 0xa7, 0x5, 0x2, 0x6, 0x9, 0x1f1, 0x40, 0x380, 0x401, 0x1, 0x38, 0x2, 0x400, 0x8eb7, 0x8}, [{0x60000000, 0x4, 0x401, 0x165de4b2, 0x3, 0x7, 0x1, 0xa4c}, {0x60000000, 0x8, 0xffffffffffffff8a, 0x15b, 0x1, 0xd53f, 0x2, 0x7f}], "f8fc9873ca857eff3591b57dbbf3786a33a075a59a40629a06b9d89877d672e241646cf80aa63096700dcf5ab7aee017978ab88fa57ea4c395cb1bc614677b0e36f0570389e116e8a58198e2e2c53a9411d9dcab1fd4c54a6b3b6f7ec9b88edc2339619bbf88284fdf23f4d7b9552a85ce665763a557348c316992c1ec4b2c0c792bd7cfb48143b052c5a9c14317657b53de3a842eb4e274f52f2b911582947c4a7bcb2d5c20626eb51cfc92430c1ba24a023b36897ae30c5d87813b00a18afbba94ed542309a68166422c423503d30ffa793e307b2e25cdd8155e2f", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x78c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) fadvise64(r1, 0x81, 0x9, 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000100), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r5, 0x2}) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x8002, 0xa, 0x1}) syz_usb_connect(0x2, 0x24, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x41, &(0x7f0000000080)=@string={0x41, 0x3, "72ee7d03719964954620c35f65869c5626e888754e7cfaee82554aaa27ef0dd7c3bb09a7e0184bdb2c55e3629ac6d736d70b41ff93640ed092252988511744"}}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 15.379531846s ago: executing program 1 (id=1458): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="0b00022b00"/20], 0x2c}], 0x1}, 0xcc000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000052000100fcffffff000000000a00000007ffe500948358dd447a3636e875e207da0247976927df1e2895f71c8077bef5c8dd8179c3d9981bb23b282f7e2c264feca659a2fad9c2e5039c3b0ac10c91c0d97d9917ad225ac6fd7846a73c21cd4a01aeb4ed94a01b5d0defc4d0bd0880119d085b14ba806e3fe449cb5b8a95cd5dcaabf009ca6ad48913a76a7a8da2cf439e03eb311d565db526a50607b7463e80e3f820911ce480d3dcd27fbcb3df09cddb4e484ab89e564e4eb7d1fcd88dd1a4c0961a2d8d1ca2b32a7d5bedbd40c438dbc663b8dc306f38207fbef8a75ebebde3dfd60b145408000000000000002d03c4d4438ab2c850787102ff9705c1d54b042bac57fe2e60ff77414575232567ef82e14741bbb75068b7092c82cde122f8", @ANYRES64=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) io_setup(0xe4, &(0x7f0000000000)=0x0) io_destroy(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan1\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000880)=""/141, 0x8d}], 0x1, 0xa3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d77b5e", 0x3}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000002000000088e5aabddb1ad9d000000000000006c000000000000000000000007000000891f3fac1e0001640101010a010100ac1e0001ac14142a640101000a010101890757ac1414aa830b8a64010102ffffffff831f8700000000ffffffffac1414aaac1414aaac1414bbac1e00010a010102620c"], 0x88}, 0x4040001) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000280)="2e337ce10ba7670f5e3f5f9153f164ec9d8de8f9afaf53283654e54b702123adf54137e4f5", 0x25) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0306b6a265cce76894670c83b6035b9d1a26bd7000fc5bdf2503000000200001801400020073797a5f74", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 0s ago: executing program 35 (id=1458): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x38, 0x0, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000200", @ANYRES32=r4, @ANYBLOB="0b00022b00"/20], 0x2c}], 0x1}, 0xcc000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) io_setup(0xe4, &(0x7f0000000000)=0x0) io_destroy(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan1\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000880)=""/141, 0x8d}], 0x1, 0xa3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d77b5e", 0x3}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000002000000088e5aabddb1ad9d000000000000006c000000000000000000000007000000891f3fac1e0001640101010a010100ac1e0001ac14142a640101000a010101890757ac1414aa830b8a64010102ffffffff831f8700000000ffffffffac1414aaac1414aaac1414bbac1e00010a010102620c"], 0x88}, 0x4040001) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000280)="2e337ce10ba7670f5e3f5f9153f164ec9d8de8f9afaf53283654e54b702123adf54137e4f5", 0x25) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0306b6a265cce76894670c83b6035b9d1a26bd7000fc5bdf2503000000200001801400020073797a5f74", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) kernel console output (not intermixed with test programs): USB device number 11 using dummy_hcd [ 45.392141][ T36] audit: type=1400 audit(1761581551.930:302): avc: denied { setopt } for pid=1167 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.422387][ T65] usb 1-1: device descriptor read/64, error -71 [ 45.439824][ T764] ums-sddr55 4-1:6.210: USB Mass Storage device detected [ 45.488611][ T764] usb 4-1: USB disconnect, device number 11 [ 45.602015][ T1200] /dev/rnullb0: Can't open blockdev [ 45.621777][ T1202] rust_binder: 219: no such ref 3 [ 45.627220][ T1202] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 45.634317][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 45.661232][ T1202] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 45.678260][ T65] usb 1-1: device descriptor read/64, error -71 [ 45.684625][ T1202] netlink: 17 bytes leftover after parsing attributes in process `syz.1.297'. [ 45.693943][ T1202] netlink: 'syz.1.297': attribute type 1 has an invalid length. [ 45.701641][ T1202] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 45.792484][ T65] usb usb1-port1: attempt power cycle [ 45.954864][ T1210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.963512][ T1210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.020745][ T36] audit: type=1400 audit(1761581552.560:303): avc: denied { map } for pid=1211 comm="syz.3.302" path="socket:[9728]" dev="sockfs" ino=9728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.152434][ T65] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.173507][ T65] usb 1-1: device descriptor read/8, error -71 [ 46.313526][ T65] usb 1-1: device descriptor read/8, error -71 [ 46.572389][ T65] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 46.592462][ T36] audit: type=1400 audit(1761581553.130:304): avc: denied { ioctl } for pid=1217 comm="syz.3.304" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.601654][ T65] usb 1-1: device descriptor read/8, error -71 [ 46.631911][ T1216] __vm_enough_memory: pid: 1216, comm: syz.1.303, bytes: 18014402804453376 not enough memory for the allocation [ 46.653801][ T36] audit: type=1400 audit(1761581553.200:305): avc: denied { relabelfrom } for pid=1219 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.674783][ T1220] erspan0: entered allmulticast mode [ 46.690641][ T36] audit: type=1400 audit(1761581553.200:306): avc: denied { relabelto } for pid=1219 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.690662][ T1222] random: crng reseeded on system resumption [ 46.753489][ T65] usb 1-1: device descriptor read/8, error -71 [ 46.848610][ T1229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.859803][ T1231] SELinux: security_context_str_to_sid (sytem_uÝGĐą ‰:˙ß) failed with errno=-22 [ 46.860569][ T1229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.876876][ T65] usb usb1-port1: unable to enumerate USB device [ 46.886240][ T1229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.911204][ T1229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.917305][ T36] audit: type=1400 audit(1761581553.450:307): avc: denied { getopt } for pid=1232 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.202404][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 47.349026][ T764] usb 3-1: USB disconnect, device number 6 [ 47.363323][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 47.374936][ T65] usb 4-1: config 1 has an invalid interface number: 232 but max is 0 [ 47.383166][ T65] usb 4-1: config 1 has no interface number 0 [ 47.389247][ T65] usb 4-1: config 1 interface 232 has no altsetting 0 [ 47.403400][ T65] usb 4-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5 [ 47.412532][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.422359][ T65] usb 4-1: Product: syz [ 47.431596][ T65] usb 4-1: Manufacturer: syz [ 47.436282][ T65] usb 4-1: SerialNumber: syz [ 47.513999][ T1245] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 47.545619][ T36] audit: type=1400 audit(1761581554.090:308): avc: denied { create } for pid=1248 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.639362][ T1263] netlink: 'syz.1.320': attribute type 7 has an invalid length. [ 47.647293][ T1263] netlink: 'syz.1.320': attribute type 5 has an invalid length. [ 47.655030][ T1263] netlink: 17 bytes leftover after parsing attributes in process `syz.1.320'. [ 47.665135][ T1263] /dev/rnullb0: Can't open blockdev [ 47.690510][ T1267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.690538][ T1267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.691866][ T65] usb 4-1: Found UVC 0.00 device syz (174f:8a34) [ 47.697407][ T1267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.703590][ T65] usb 4-1: No valid video chain found. [ 47.801989][ T1275] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 47.809365][ T1275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 48.411504][ T65] usb 4-1: USB disconnect, device number 12 [ 48.502065][ T1291] netlink: 'syz.1.330': attribute type 4 has an invalid length. [ 48.514543][ T1291] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.330'. [ 48.532619][ T1291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.532657][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 48.593264][ T1295] SELinux: failed to load policy [ 48.606118][ T1297] netlink: 5 bytes leftover after parsing attributes in process `syz.2.333'. [ 48.621252][ T1297] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 48.691035][ T1306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.699825][ T1306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.764882][ T1315] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 48.855477][ T1324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 48.892383][ T65] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 48.972209][ T1334] devpts: called with bogus options [ 49.018147][ T1339] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.053763][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 49.063603][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 49.070339][ T65] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 49.081834][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.099670][ T65] usb 4-1: config 0 descriptor?? [ 49.172892][ T1345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.350'. [ 49.332391][ T551] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 49.380088][ T1358] /dev/rnullb0: Can't open blockdev [ 49.409387][ T1364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1364 comm=syz.1.357 [ 49.492396][ T551] usb 3-1: Using ep0 maxpacket: 32 [ 49.498710][ T551] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.509661][ T551] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.520678][ T65] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0 [ 49.527937][ T65] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0 [ 49.528996][ T551] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.535133][ T65] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0 [ 49.544486][ T551] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.551278][ T65] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0 [ 49.559440][ T551] usb 3-1: Product: syz [ 49.566682][ T65] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0 [ 49.570667][ T551] usb 3-1: Manufacturer: syz [ 49.578976][ T65] lenovo 0003:17EF:6009.0005: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 49.595543][ T551] hub 3-1:4.0: USB hub found [ 49.724233][ T596] usb 4-1: USB disconnect, device number 13 [ 50.278953][ T1376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.295471][ T1376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.335431][ T1376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.352509][ T1376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.629206][ T1392] /dev/rnullb0: Can't open blockdev [ 50.660019][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 50.660052][ T36] audit: type=1400 audit(1761581557.200:322): avc: denied { accept } for pid=1391 comm="syz.0.364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.722383][ T36] audit: type=1400 audit(1761581557.260:323): avc: denied { remount } for pid=1395 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.778367][ T1399] 9pnet_fd: Insufficient options for proto=fd [ 50.842373][ T36] audit: type=1400 audit(1761581557.380:324): avc: denied { execmod } for pid=1393 comm="syz.3.365" path="/99/cpuacct.usage_percpu" dev="tmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.890154][ T36] audit: type=1400 audit(1761581557.430:325): avc: denied { mount } for pid=1402 comm="syz.3.369" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.891361][ T1403] incfs: Can't find or create .index dir in ./file0 [ 50.918906][ T1403] incfs: mount failed -1 [ 50.932418][ T36] audit: type=1400 audit(1761581557.430:326): avc: denied { mounton } for pid=1402 comm="syz.3.369" path="/100/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 50.938491][ T1403] incfs: Can't find or create .index dir in ./file0 [ 50.961698][ T1403] incfs: mount failed -1 [ 51.062413][ T596] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 51.242384][ T596] usb 1-1: Using ep0 maxpacket: 8 [ 51.250539][ T596] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 51.260243][ T596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.268570][ T596] usb 1-1: Product: syz [ 51.273186][ T596] usb 1-1: Manufacturer: syz [ 51.277893][ T596] usb 1-1: SerialNumber: syz [ 51.284579][ T596] usb 1-1: config 0 descriptor?? [ 51.291428][ T596] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 51.492530][ T1401] rust_binder: Got transaction with invalid offset. [ 51.492604][ T1401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.499636][ T1401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 51.513490][ T596] usb 1-1: USB disconnect, device number 14 [ 51.599201][ T1435] fuse: Bad value for 'fd' [ 51.738149][ T36] audit: type=1400 audit(1761581558.280:327): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.992747][ T551] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 52.013333][ T551] usb 3-1: USB disconnect, device number 7 [ 52.048592][ T36] audit: type=1400 audit(1761581558.590:328): avc: denied { nlmsg_write } for pid=1450 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 52.102709][ T1453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.119177][ T1453] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967295 [ 52.169837][ T1465] incfs_lookup_dentry err:-13 [ 52.174691][ T1465] incfs: Can't find or create .index dir in ./bus [ 52.181193][ T1465] incfs: mount failed -13 [ 52.186868][ T1465] rust_binder: 254: no such ref 3 [ 52.192235][ T1465] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 52.199562][ T1465] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 52.206660][ T1465] rust_binder: Write failure EFAULT in pid:254 [ 52.256139][ T36] audit: type=1400 audit(1761581558.800:329): avc: denied { setattr } for pid=1477 comm="syz.3.395" name="PACKET" dev="sockfs" ino=10707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.260065][ T1480] binder: Bad value for 'stats' [ 52.262458][ T36] audit: type=1400 audit(1761581558.800:330): avc: denied { read } for pid=1477 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.288358][ T1481] devpts: called with bogus options [ 52.330667][ T1483] __vm_enough_memory: pid: 1483, comm: syz.3.396, bytes: 18014402804453376 not enough memory for the allocation [ 52.392056][ T36] audit: type=1400 audit(1761581558.930:331): avc: denied { audit_write } for pid=1491 comm="syz.3.399" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 52.504097][ T551] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 52.679640][ T551] usb 3-1: Using ep0 maxpacket: 16 [ 52.686759][ T551] usb 3-1: config index 0 descriptor too short (expected 4495, got 71) [ 52.695238][ T551] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 52.703620][ T551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.713822][ T551] usb 3-1: config 0 has no interface number 0 [ 52.722973][ T551] usb 3-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 52.732176][ T551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.740252][ T551] usb 3-1: Product: syz [ 52.744673][ T551] usb 3-1: Manufacturer: syz [ 52.749326][ T551] usb 3-1: SerialNumber: syz [ 52.754854][ T551] usb 3-1: config 0 descriptor?? [ 53.002879][ T1461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 53.011891][ T1461] erspan0: default FDB implementation only supports local addresses [ 53.350491][ T764] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 53.474903][ T1511] incfs_lookup_dentry err:-13 [ 53.479632][ T1511] incfs: Can't find or create .index dir in ./bus [ 53.486208][ T1511] incfs: mount failed -13 [ 53.506206][ T764] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 53.514576][ T764] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 53.522911][ T764] usb 1-1: config 0 has no interface number 0 [ 53.529271][ T764] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 53.539165][ T764] usb 1-1: config 0 interface 200 has no altsetting 0 [ 53.547600][ T764] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 53.560659][ T551] usb 3-1: Found UVC 0.00 device syz (046c:14e0) [ 53.567372][ T764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.575381][ T764] usb 1-1: Product: syz [ 53.579599][ T551] usb 3-1: No valid video chain found. [ 53.588306][ T551] usb 3-1: USB disconnect, device number 8 [ 53.601872][ T764] usb 1-1: Manufacturer: syz [ 53.608517][ T764] usb 1-1: SerialNumber: syz [ 53.615719][ T764] usb 1-1: config 0 descriptor?? [ 53.700193][ T1522] rust_binder: 220: no such ref 1 [ 53.812461][ T1539] rust_binder: 225: no such ref 0 [ 53.828489][ T1541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.841689][ T1541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.853048][ T764] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input15 [ 53.876142][ T909] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 53.877453][ T764] usb 1-1: USB disconnect, device number 15 [ 54.020359][ T909] usb 4-1: device descriptor read/64, error -71 [ 54.092508][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 54.246970][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 54.253173][ T65] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 54.264100][ T65] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 54.274351][ T909] usb 4-1: device descriptor read/64, error -71 [ 54.281346][ T65] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 54.292739][ T65] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 54.301824][ T65] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 54.309838][ T65] usb 3-1: Manufacturer: syz [ 54.316438][ T65] hub 3-1:32.0: Invalid hub with more than one config or interface [ 54.324415][ T65] hub 3-1:32.0: probe with driver hub failed with error -22 [ 54.526386][ T909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 54.548085][ T65] usb 3-1: USB disconnect, device number 9 [ 54.559584][ T594] udevd[594]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.567252][ T1586] devpts: called with bogus options [ 54.645652][ T1611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.645687][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 54.656248][ T1612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.669106][ T909] usb 4-1: device descriptor read/64, error -71 [ 54.936418][ T909] usb 4-1: device descriptor read/64, error -71 [ 55.018676][ T764] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 55.049646][ T909] usb usb4-port1: attempt power cycle [ 55.162687][ T764] usb 3-1: device descriptor read/64, error -71 [ 55.399159][ T909] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 55.419692][ T764] usb 3-1: device descriptor read/64, error -71 [ 55.420775][ T909] usb 4-1: device descriptor read/8, error -71 [ 55.564626][ T909] usb 4-1: device descriptor read/8, error -71 [ 55.666297][ T764] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 55.799703][ T764] usb 3-1: device descriptor read/64, error -71 [ 55.820223][ T909] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 55.841825][ T909] usb 4-1: device descriptor read/8, error -71 [ 55.975245][ T909] usb 4-1: device descriptor read/8, error -71 [ 56.056337][ T764] usb 3-1: device descriptor read/64, error -71 [ 56.087218][ T909] usb usb4-port1: unable to enumerate USB device [ 56.173116][ T764] usb usb3-port1: attempt power cycle [ 56.204323][ T1689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1546 sclass=netlink_audit_socket pid=1689 comm=syz.1.456 [ 56.241169][ T1689] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1546 sclass=netlink_audit_socket pid=1689 comm=syz.1.456 [ 56.518195][ T764] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 56.550022][ T764] usb 3-1: device descriptor read/8, error -71 [ 56.683239][ T764] usb 3-1: device descriptor read/8, error -71 [ 56.738636][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 56.738655][ T36] audit: type=1400 audit(1761581563.159:340): avc: denied { write } for pid=1709 comm="syz.3.461" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.789525][ T36] audit: type=1400 audit(1761581563.159:341): avc: denied { map } for pid=1709 comm="syz.3.461" path="socket:[11985]" dev="sockfs" ino=11985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.822901][ T36] audit: type=1400 audit(1761581563.159:342): avc: denied { read write accept } for pid=1709 comm="syz.3.461" path="socket:[11985]" dev="sockfs" ino=11985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.897123][ T1721] rust_binder: Write failure EFAULT in pid:342 [ 56.924870][ T1726] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 56.938448][ T764] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 56.958391][ T1726] rust_binder: Error while translating object. [ 56.958434][ T1726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.978268][ T1730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.979582][ T1726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 57.000881][ T764] usb 3-1: device descriptor read/8, error -71 [ 57.154698][ T764] usb 3-1: device descriptor read/8, error -71 [ 57.277225][ T764] usb usb3-port1: unable to enumerate USB device [ 57.445519][ T36] audit: type=1326 audit(1761581563.851:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.3.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b4af8efc9 code=0x0 [ 57.595120][ T36] audit: type=1326 audit(1761581563.998:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1748 comm="syz.1.473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa077f8efc9 code=0x0 [ 57.647780][ T1751] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.657934][ T36] audit: type=1400 audit(1761581564.056:345): avc: denied { relabelto } for pid=1748 comm="syz.1.473" name="file0" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 57.705424][ T36] audit: type=1400 audit(1761581564.056:346): avc: denied { associate } for pid=1748 comm="syz.1.473" name="file0" dev="tmpfs" ino=882 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 57.878212][ T1754] futex_wake_op: syz.2.474 tries to shift op by 32; fix this program [ 58.378830][ T36] audit: type=1400 audit(1761581564.760:347): avc: denied { ioctl } for pid=1757 comm="syz.0.476" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.462375][ T1765] rust_binder: Error while translating object. [ 58.462410][ T1765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.474227][ T1765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 58.575408][ T36] audit: type=1400 audit(1761581564.956:348): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 58.612374][ T1777] rust_binder: inc_ref_done called when no active inc_refs [ 58.722041][ T1793] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 58.751762][ T1793] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.487'. [ 58.841939][ T1809] raw_sendmsg: syz.2.494 forgot to set AF_INET. Fix it! [ 58.852463][ T764] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.877928][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.878001][ T1813] rust_binder: Write failure EINVAL in pid:270 [ 58.930296][ T36] audit: type=1400 audit(1761581565.298:349): avc: denied { load_policy } for pid=1818 comm="syz.0.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.969348][ T1827] rust_binder: 318: no such ref 0 [ 59.019893][ T764] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 59.030034][ T764] usb 4-1: config 0 has no interface number 1 [ 59.036149][ T764] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 59.046075][ T764] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.058868][ T764] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 59.068170][ T764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 59.076221][ T764] usb 4-1: SerialNumber: syz [ 59.082292][ T764] usb 4-1: config 0 descriptor?? [ 59.088944][ T764] usb 4-1: Found UVC 0.00 device (0002:0000) [ 59.098557][ T764] usb 4-1: No valid video chain found. [ 59.293054][ T1783] rust_binder: Write failure EFAULT in pid:377 [ 59.293542][ T45] usb 4-1: USB disconnect, device number 18 [ 59.373520][ T909] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 59.527931][ T909] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.547158][ T909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.562189][ T909] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.571368][ T909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.579436][ T909] usb 1-1: Product: syz [ 59.583647][ T909] usb 1-1: Manufacturer: syz [ 59.588463][ T909] usb 1-1: SerialNumber: syz [ 59.690553][ T1872] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.510'. [ 59.699931][ T1872] netlink: 280 bytes leftover after parsing attributes in process `syz.1.510'. [ 59.726101][ T1874] 9pnet_fd: Insufficient options for proto=fd [ 59.806442][ T1844] rust_binder: Error in use_page_slow: ESRCH [ 59.806485][ T1844] rust_binder: use_range failure ESRCH [ 59.812734][ T1844] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 59.818295][ T1844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.842786][ T1844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:325 [ 59.846767][ T1881] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 59.864431][ T1844] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 59.880261][ T1844] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 59.895246][ T1881] netlink: 'syz.3.514': attribute type 11 has an invalid length. [ 59.931672][ T1885] 9pnet_fd: Insufficient options for proto=fd [ 60.211564][ T1909] rust_binder: Error while translating object. [ 60.211591][ T1909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.217869][ T1909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:403 [ 60.239996][ T1913] netlink: 17 bytes leftover after parsing attributes in process `syz.3.524'. [ 60.260695][ T1913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 60.260728][ T1913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:407 [ 60.281396][ T1915] incfs: Error accessing: ./file0. [ 60.295768][ T1915] incfs: mount failed -2 [ 60.302059][ T1916] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.316274][ T1916] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.440494][ T1924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 60.462589][ T1926] 9p: Unknown access argument : -22 [ 60.559213][ T1935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 60.559249][ T1935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:419 [ 60.577086][ T1937] rust_binder: Error while translating object. [ 60.593537][ T1937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 60.601571][ T1937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:300 [ 60.658549][ T1945] random: crng reseeded on system resumption [ 60.706802][ T1955] GUP no longer grows the stack in syz.3.539 (1955): 200000004000-20000000a000 (200000002000) [ 60.717293][ T1955] CPU: 0 UID: 0 PID: 1955 Comm: syz.3.539 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 60.717335][ T1955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.717349][ T1955] Call Trace: [ 60.717356][ T1955] [ 60.717363][ T1955] __dump_stack+0x21/0x30 [ 60.717395][ T1955] dump_stack_lvl+0x10c/0x190 [ 60.717422][ T1955] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.717449][ T1955] ? find_vma+0xcd/0x110 [ 60.717469][ T1955] ? vma_is_secretmem+0x11/0x50 [ 60.717498][ T1955] dump_stack+0x19/0x20 [ 60.717523][ T1955] __get_user_pages+0x1e34/0x22d0 [ 60.717553][ T1955] ? populate_vma_page_range+0x230/0x230 [ 60.717580][ T1955] get_user_pages_remote+0x392/0xbe0 [ 60.717605][ T1955] ? __cfi_mtree_load+0x10/0x10 [ 60.717627][ T1955] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 60.717648][ T1955] ? __cfi_get_user_pages_remote+0x10/0x10 [ 60.717676][ T1955] __access_remote_vm+0x1e2/0x640 [ 60.717699][ T1955] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 60.717737][ T1955] ? access_remote_vm+0x60/0x60 [ 60.717760][ T1955] ? _raw_spin_lock+0x8c/0x120 [ 60.717786][ T1955] ? __cfi__raw_spin_lock+0x10/0x10 [ 60.717812][ T1955] access_remote_vm+0x39/0x60 [ 60.717835][ T1955] proc_pid_cmdline_read+0x4bb/0xbf0 [ 60.717862][ T1955] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 60.717889][ T1955] ? bpf_lsm_file_permission+0xd/0x20 [ 60.717917][ T1955] vfs_readv+0x62b/0xa50 [ 60.717940][ T1955] ? __cfi_proc_pid_cmdline_read+0x10/0x10 [ 60.717966][ T1955] ? do_readv+0x2d0/0x2d0 [ 60.717994][ T1955] __x64_sys_preadv+0x197/0x2a0 [ 60.718016][ T1955] ? __cfi___x64_sys_preadv+0x10/0x10 [ 60.718038][ T1955] ? switch_fpu_return+0x12/0x20 [ 60.718061][ T1955] x64_sys_call+0x1ee9/0x2ee0 [ 60.718100][ T1955] do_syscall_64+0x58/0xf0 [ 60.718125][ T1955] ? clear_bhb_loop+0x50/0xa0 [ 60.718149][ T1955] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.718170][ T1955] RIP: 0033:0x7f5b4af8efc9 [ 60.718187][ T1955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.718204][ T1955] RSP: 002b:00007f5b4be65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 60.718225][ T1955] RAX: ffffffffffffffda RBX: 00007f5b4b1e5fa0 RCX: 00007f5b4af8efc9 [ 60.718239][ T1955] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000c [ 60.718252][ T1955] RBP: 00007f5b4b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 60.718265][ T1955] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 60.718277][ T1955] R13: 00007f5b4b1e6038 R14: 00007f5b4b1e5fa0 R15: 00007ffec2f4fd38 [ 60.718296][ T1955] [ 61.183289][ T1983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:433 [ 61.433885][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.596917][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 61.603016][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 61.611315][ T45] usb 4-1: config 179 has no interface number 0 [ 61.617610][ T45] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 61.628852][ T45] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 61.640255][ T45] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 61.651475][ T45] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 61.664808][ T45] usb 4-1: config 179 interface 65 has no altsetting 0 [ 61.671727][ T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 61.680792][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.692508][ T45] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 61.895652][ T45] usb 4-1: USB disconnect, device number 19 [ 61.895687][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 61.910460][ T45] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 62.088683][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 62.088702][ T36] audit: type=1326 audit(1761581568.387:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.0.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc158efc9 code=0x7fc00000 [ 62.102406][ T909] usb 1-1: cannot find UAC_HEADER [ 62.135597][ T1998] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.143835][ T909] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.151358][ T1998] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 62.167637][ T594] udevd[594]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.176462][ T1998] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 62.187303][ T909] usb 1-1: USB disconnect, device number 16 [ 62.205984][ T1998] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 62.258553][ T36] audit: type=1400 audit(1761581568.564:357): avc: denied { accept } for pid=2014 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.357124][ T2026] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 62.366030][ T2026] binder: Unknown parameter 'defcontext01777777777777777777777' [ 62.423662][ T2032] random: crng reseeded on system resumption [ 62.430268][ T2034] netlink: 'syz.0.566': attribute type 27 has an invalid length. [ 62.454316][ T2034] 9pnet_fd: Insufficient options for proto=fd [ 62.568119][ T2050] overlayfs: missing 'lowerdir' [ 62.610385][ T2053] binder: Bad value for 'stats' [ 62.664265][ T2058] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 62.783257][ T36] audit: type=1400 audit(1761581569.084:358): avc: denied { create } for pid=2017 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 62.818238][ T909] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 62.843418][ T36] audit: type=1400 audit(1761581569.143:359): avc: denied { read } for pid=2063 comm="syz.0.576" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.967241][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 62.980882][ T909] usb 4-1: Using ep0 maxpacket: 32 [ 63.012540][ T909] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.031008][ T909] usb 4-1: config 0 has no interface number 0 [ 63.037931][ T2082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331 [ 63.038790][ T909] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.063088][ T909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.071365][ T909] usb 4-1: Product: syz [ 63.075731][ T909] usb 4-1: Manufacturer: syz [ 63.080439][ T909] usb 4-1: SerialNumber: syz [ 63.086293][ T909] usb 4-1: config 0 descriptor?? [ 63.093504][ T909] smsc95xx v2.0.0 [ 63.122921][ T36] audit: type=1400 audit(1761581569.409:360): avc: denied { getopt } for pid=2079 comm="syz.0.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.245829][ T2106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.245868][ T2106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.500781][ T909] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 63.518189][ T909] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.642386][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 63.773904][ T45] usb 3-1: device descriptor read/64, error -71 [ 64.017616][ T45] usb 3-1: device descriptor read/64, error -71 [ 64.261325][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 64.393347][ T45] usb 3-1: device descriptor read/64, error -71 [ 64.637101][ T45] usb 3-1: device descriptor read/64, error -71 [ 64.748927][ T45] usb usb3-port1: attempt power cycle [ 64.763134][ T2153] fuse: blksize only supported for fuseblk [ 64.782504][ T2155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.605'. [ 65.104205][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 65.125275][ T45] usb 3-1: device descriptor read/8, error -71 [ 65.257121][ T45] usb 3-1: device descriptor read/8, error -71 [ 65.456898][ T36] audit: type=1400 audit(1761581571.713:361): avc: denied { ioctl } for pid=2186 comm="syz.1.617" path="socket:[13926]" dev="sockfs" ino=13926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.499611][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.531668][ T45] usb 3-1: device descriptor read/8, error -71 [ 65.539236][ T36] audit: type=1400 audit(1761581571.792:362): avc: denied { read } for pid=2207 comm="syz.1.624" name="file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 65.597317][ T36] audit: type=1326 audit(1761581571.851:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2215 comm="syz.0.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dc158efc9 code=0x0 [ 65.663099][ T45] usb 3-1: device descriptor read/8, error -71 [ 65.773635][ T45] usb usb3-port1: unable to enumerate USB device [ 66.175600][ T36] audit: type=1400 audit(1761581572.423:364): avc: denied { getopt } for pid=2229 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.495030][ T2257] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 66.513515][ T36] audit: type=1400 audit(1761581572.739:365): avc: denied { relabelfrom } for pid=2256 comm="syz.2.642" name="UDP-Lite" dev="sockfs" ino=13991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.737598][ T2270] : Can't lookup blockdev [ 66.782738][ T909] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 66.804103][ T909] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 66.816386][ T909] usb 4-1: USB disconnect, device number 20 [ 66.895856][ T2286] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 67.265996][ T2310] overlayfs: failed to clone upperpath [ 67.307267][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 67.307286][ T36] audit: type=1400 audit(1761581573.538:369): avc: denied { read } for pid=2313 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.457650][ T36] audit: type=1400 audit(1761581573.686:370): avc: denied { lock } for pid=2318 comm="syz.3.662" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.528412][ T36] audit: type=1400 audit(1761581573.765:371): avc: denied { accept } for pid=2322 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.665219][ T36] audit: type=1326 audit(1761581573.894:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.688637][ T36] audit: type=1326 audit(1761581573.894:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.714148][ T36] audit: type=1326 audit(1761581573.904:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.737985][ T36] audit: type=1326 audit(1761581573.904:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.738398][ T2333] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.761286][ T36] audit: type=1326 audit(1761581573.904:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.793338][ T2333] rust_binder: Write failure EINVAL in pid:468 [ 67.815028][ T36] audit: type=1400 audit(1761581574.042:377): avc: denied { remount } for pid=2334 comm="syz.0.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.844804][ T36] audit: type=1326 audit(1761581574.042:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2331 comm="syz.3.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4af8efc9 code=0x7ffc0000 [ 67.874660][ T2339] FAT-fs (rnullb0): bogus number of reserved sectors [ 67.895298][ T2339] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 68.128099][ T2365] fuse: Bad value for 'group_id' [ 68.133115][ T2365] fuse: Bad value for 'group_id' [ 68.139364][ T2365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 68.194693][ T764] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.295896][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 68.336355][ T764] usb 4-1: device descriptor read/64, error -71 [ 68.458918][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 68.467093][ T9] usb 3-1: config 1 has no interface number 0 [ 68.473215][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 68.483006][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8 [ 68.492691][ T9] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 68.505330][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 68.514848][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.523117][ T9] usb 3-1: Product: syz [ 68.527340][ T9] usb 3-1: Manufacturer: syz [ 68.532038][ T9] usb 3-1: SerialNumber: syz [ 68.537679][ T2363] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.544909][ T2363] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.579248][ T764] usb 4-1: device descriptor read/64, error -71 [ 68.832222][ T764] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.973769][ T764] usb 4-1: device descriptor read/64, error -71 [ 69.041958][ T2421] /dev/loop0: Can't lookup blockdev [ 69.216533][ T764] usb 4-1: device descriptor read/64, error -71 [ 69.337928][ T764] usb usb4-port1: attempt power cycle [ 69.468248][ T2430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.476774][ T2430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.681682][ T764] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 69.702965][ T764] usb 4-1: device descriptor read/8, error -71 [ 69.834325][ T764] usb 4-1: device descriptor read/8, error -71 [ 69.859700][ T2443] netlink: 8540 bytes leftover after parsing attributes in process `syz.0.709'. [ 69.868833][ T2443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 69.877651][ T2443] netlink: 5 bytes leftover after parsing attributes in process `syz.0.709'. [ 70.003848][ T2469] fuse: Unknown parameter '˙˙˙˙˙˙˙˙00000000000000000003rootmode' [ 70.075852][ T764] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 70.100788][ T764] usb 4-1: device descriptor read/8, error -71 [ 70.137276][ T2488] netlink: 176 bytes leftover after parsing attributes in process `syz.0.725'. [ 70.147135][ T2489] netlink: 176 bytes leftover after parsing attributes in process `syz.0.725'. [ 70.177471][ T2494] netlink: 'syz.0.727': attribute type 63 has an invalid length. [ 70.185248][ T2494] netlink: 5 bytes leftover after parsing attributes in process `syz.0.727'. [ 70.249500][ T764] usb 4-1: device descriptor read/8, error -71 [ 70.358944][ T764] usb usb4-port1: unable to enumerate USB device [ 70.999004][ T2547] rust_binder: Error while translating object. [ 70.999039][ T2547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.003601][ T2548] rust_binder: Error while translating object. [ 71.005325][ T2547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 71.014933][ T2548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.030595][ T2548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 71.100520][ T2557] incfs: Can't find or create .index dir in ./file0 [ 71.101478][ T909] usb 3-1: USB disconnect, device number 18 [ 71.109878][ T2557] incfs: mount failed -1 [ 71.129728][ T2557] incfs: Can't find or create .index dir in ./file0 [ 71.137396][ T2557] incfs: mount failed -1 [ 71.486152][ T2588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.537989][ T2598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.338709][ T2618] input: syz1 as /devices/virtual/input/input18 [ 72.354930][ T2619] incfs: Error accessing: mounts. [ 72.360061][ T2619] incfs: mount failed -2 [ 72.387415][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 72.387433][ T36] audit: type=1400 audit(1761581578.563:385): avc: granted { setsecparam } for pid=2622 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 72.421195][ T2627] incfs: Can't find or create .index dir in ./file0 [ 72.428166][ T2627] incfs: mount failed -1 [ 72.433200][ T2627] incfs: Can't find or create .index dir in ./file0 [ 72.439872][ T2627] incfs: mount failed -1 [ 72.840245][ T2630] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 73.165567][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 73.316836][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 73.333476][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.345464][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 73.357260][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.366234][ T9] usb 4-1: Product: syz [ 73.370459][ T9] usb 4-1: Manufacturer: syz [ 73.375098][ T9] usb 4-1: SerialNumber: syz [ 73.388015][ T9] usb 4-1: config 0 descriptor?? [ 73.394147][ T9] asix 4-1:0.0: probe with driver asix failed with error -22 [ 73.679980][ T909] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 73.778695][ T2673] overlayfs: failed to clone upperpath [ 73.831262][ T909] usb 3-1: Using ep0 maxpacket: 16 [ 73.837608][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.849041][ T909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.859177][ T909] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 73.868392][ T909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.877326][ T909] usb 3-1: config 0 descriptor?? [ 73.895227][ T2688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.902544][ T2688] IPv6: NLM_F_CREATE should be set when creating new route [ 73.909813][ T2688] IPv6: NLM_F_CREATE should be set when creating new route [ 73.948103][ T2696] fuse: Bad value for 'fd' [ 74.289510][ T909] playstation 0003:054C:05C4.0006: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 74.489319][ T909] playstation 0003:054C:05C4.0006: Invalid byte count transferred, expected 16 got 0 [ 74.498871][ T909] playstation 0003:054C:05C4.0006: Failed to retrieve DualShock4 pairing info: -22 [ 74.508214][ T909] playstation 0003:054C:05C4.0006: Failed to get MAC address from DualShock4 [ 74.517131][ T909] playstation 0003:054C:05C4.0006: Failed to create dualshock4. [ 74.525470][ T909] playstation 0003:054C:05C4.0006: probe with driver playstation failed with error -22 [ 74.692519][ T2671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:428 [ 74.692960][ T2671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.702253][ T2671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:428 [ 74.713433][ T909] usb 3-1: USB disconnect, device number 19 [ 75.268182][ T36] audit: type=1400 audit(1761581581.419:386): avc: denied { shutdown } for pid=2753 comm="syz.0.821" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.893974][ T9] usb 4-1: USB disconnect, device number 25 [ 76.064150][ T2793] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 76.071992][ T2793] netlink: 164 bytes leftover after parsing attributes in process `syz.1.834'. [ 76.077341][ T36] audit: type=1326 audit(1761581582.223:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.092564][ T2794] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 76.104412][ T36] audit: type=1326 audit(1761581582.223:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.112181][ T2794] netlink: 164 bytes leftover after parsing attributes in process `syz.1.834'. [ 76.135201][ T36] audit: type=1326 audit(1761581582.223:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.167167][ T36] audit: type=1326 audit(1761581582.223:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.190423][ T36] audit: type=1326 audit(1761581582.223:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.213684][ T36] audit: type=1326 audit(1761581582.223:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.237082][ T36] audit: type=1326 audit(1761581582.223:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.259947][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 76.260608][ T36] audit: type=1326 audit(1761581582.223:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz.2.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f178efc9 code=0x7fc00000 [ 76.392867][ T2826] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 76.412348][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 76.429258][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 76.437936][ T9] usb 4-1: config 5 has an invalid interface number: 29 but max is 0 [ 76.446143][ T9] usb 4-1: config 5 has no interface number 0 [ 76.452292][ T9] usb 4-1: config 5 interface 29 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 76.463122][ T9] usb 4-1: config 5 interface 29 has no altsetting 0 [ 76.472528][ T9] usb 4-1: New USB device found, idVendor=05a9, idProduct=2643, bcdDevice=49.45 [ 76.487301][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.500356][ T9] usb 4-1: Product: syz [ 76.511378][ T9] usb 4-1: Manufacturer: syz [ 76.516210][ T9] usb 4-1: SerialNumber: syz [ 76.522013][ T2790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.635028][ T2850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.855'. [ 76.656853][ T2852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1813 sclass=netlink_tcpdiag_socket pid=2852 comm=syz.0.856 [ 76.815658][ T9] usb 4-1: Found UVC 0.00 device syz (05a9:2643) [ 76.822135][ T9] usb 4-1: No valid video chain found. [ 76.829675][ T9] usb 4-1: USB disconnect, device number 26 [ 76.925507][ T2872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 77.328946][ T2918] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 77.338280][ T2918] 9pnet: Could not find request transport: xen [ 77.547938][ T2947] 9pnet_fd: Insufficient options for proto=fd [ 77.591654][ T2949] rust_binder: Error in use_page_slow: ESRCH [ 77.591678][ T2949] rust_binder: use_range failure ESRCH [ 77.597675][ T2949] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 77.603252][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.611188][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:460 [ 77.645304][ T2953] netlink: 188 bytes leftover after parsing attributes in process `syz.2.892'. [ 77.681179][ T2955] rust_binder: 466: no such ref 3 [ 77.686248][ T2955] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 77.693510][ T2955] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 77.700677][ T2955] rust_binder: Write failure EFAULT in pid:466 [ 77.777395][ T2957] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 77.777566][ T2958] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 77.803601][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 77.803633][ T36] audit: type=1400 audit(1761581583.941:456): avc: denied { bind } for pid=2959 comm="syz.2.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.117360][ T2983] netlink: 188 bytes leftover after parsing attributes in process `syz.1.901'. [ 78.139434][ T36] audit: type=1326 audit(1761581584.269:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.164236][ T36] audit: type=1326 audit(1761581584.269:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.179095][ T2987] netlink: 'syz.1.903': attribute type 4 has an invalid length. [ 78.187925][ T36] audit: type=1326 audit(1761581584.269:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.195282][ T2987] netlink: 17 bytes leftover after parsing attributes in process `syz.1.903'. [ 78.218745][ T36] audit: type=1326 audit(1761581584.269:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.250557][ T36] audit: type=1326 audit(1761581584.269:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.273817][ T36] audit: type=1326 audit(1761581584.269:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.297379][ T36] audit: type=1326 audit(1761581584.269:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.320666][ T36] audit: type=1326 audit(1761581584.269:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.345641][ T36] audit: type=1326 audit(1761581584.269:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2984 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa077f8efc9 code=0x7ffc0000 [ 78.410921][ T3017] netlink: 188 bytes leftover after parsing attributes in process `syz.0.910'. [ 78.483617][ T3042] netlink: 164 bytes leftover after parsing attributes in process `syz.1.919'. [ 78.512840][ T3047] overlayfs: failed to clone upperpath [ 78.561884][ T3052] @0Ů: renamed from bond_slave_1 [ 78.582207][ T3054] 9pnet_fd: Insufficient options for proto=fd [ 78.749183][ T3076] syzkaller0: entered allmulticast mode [ 78.895934][ T3083] rust_binder: Error while translating object. [ 78.895985][ T3083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.902332][ T3083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 79.168857][ T65] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 79.266109][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 79.275758][ T3123] tipc: Enabling of bearer rejected, media not registered [ 79.285773][ T3123] netlink: 'syz.3.951': attribute type 11 has an invalid length. [ 79.327059][ T3127] fuse: Bad value for 'group_id' [ 79.330927][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 79.332086][ T3127] fuse: Bad value for 'group_id' [ 79.342950][ T65] usb 3-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 79.356978][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.365856][ T65] usb 3-1: config 0 descriptor?? [ 79.374115][ T3093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.374407][ T3129] tipc: Enabling not permitted [ 79.387158][ T3129] tipc: Enabling of bearer rejected, failed to enable media [ 79.396169][ T3129] rust_binder: Error while translating object. [ 79.396215][ T3129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.402491][ T3129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 79.792754][ T65] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 79.809047][ T65] betop 0003:8380:1850.0007: unknown main item tag 0x0 [ 79.817250][ T65] betop 0003:8380:1850.0007: hidraw0: USB HID v1.01 Device [HID 8380:1850] on usb-dummy_hcd.2-1/input0 [ 79.828526][ T65] betop 0003:8380:1850.0007: no inputs found [ 79.895111][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.902975][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.910859][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.918930][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.927138][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.935029][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.943045][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.951102][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.959135][ T3173] netlink: 'syz.0.968': attribute type 46 has an invalid length. [ 79.986328][ T3093] rust_binder: 486: no such ref 2 [ 79.997296][ T9] usb 3-1: USB disconnect, device number 20 [ 80.153223][ T3219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.153253][ T3219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 80.333521][ T3235] rust_binder: Error while translating object. [ 80.342706][ T3235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.348956][ T3235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:538 [ 80.379969][ T3242] rust_binder: Error while translating object. [ 80.389240][ T3242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.395503][ T3242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 80.488860][ T3257] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 80.675592][ T3277] overlay: Unknown parameter 'mask' [ 81.558775][ T3305] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 81.924239][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 82.085682][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.096697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.106446][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.119384][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.128432][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.137018][ T9] usb 3-1: config 0 descriptor?? [ 82.300620][ T3361] veth1: entered allmulticast mode [ 82.305964][ T3362] veth1: left allmulticast mode [ 82.547532][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.556451][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.564254][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.572147][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.579882][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.587761][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.595240][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 82.603278][ T9] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 82.617430][ T9] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.799084][ T3327] FAULT_INJECTION: forcing a failure. [ 82.799084][ T3327] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.812205][ T3327] CPU: 0 UID: 0 PID: 3327 Comm: syz.2.1024 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 82.812236][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.812249][ T3327] Call Trace: [ 82.812255][ T3327] [ 82.812262][ T3327] __dump_stack+0x21/0x30 [ 82.812286][ T3327] dump_stack_lvl+0x10c/0x190 [ 82.812308][ T3327] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.812330][ T3327] ? check_stack_object+0x82/0x140 [ 82.812344][ T3327] dump_stack+0x19/0x20 [ 82.812363][ T3327] should_fail_ex+0x3d9/0x530 [ 82.812379][ T3327] should_fail+0xf/0x20 [ 82.812393][ T3327] should_fail_usercopy+0x1e/0x30 [ 82.812409][ T3327] _copy_to_user+0x24/0xa0 [ 82.812429][ T3327] hiddev_ioctl+0x10a2/0x15f0 [ 82.812453][ T3327] ? __cfi_vfs_write+0x10/0x10 [ 82.812468][ T3327] ? __cfi_hiddev_ioctl+0x10/0x10 [ 82.812490][ T3327] ? mutex_unlock+0x8b/0x240 [ 82.812504][ T3327] ? __cfi_mutex_unlock+0x10/0x10 [ 82.812517][ T3327] ? __fget_files+0x2c5/0x340 [ 82.812535][ T3327] ? __fget_files+0x2c5/0x340 [ 82.812551][ T3327] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.812572][ T3327] ? security_file_ioctl+0x34/0xd0 [ 82.812594][ T3327] ? __cfi_hiddev_ioctl+0x10/0x10 [ 82.812615][ T3327] __se_sys_ioctl+0x135/0x1b0 [ 82.812632][ T3327] __x64_sys_ioctl+0x7f/0xa0 [ 82.812648][ T3327] x64_sys_call+0x1878/0x2ee0 [ 82.812670][ T3327] do_syscall_64+0x58/0xf0 [ 82.812689][ T3327] ? clear_bhb_loop+0x50/0xa0 [ 82.812706][ T3327] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.812722][ T3327] RIP: 0033:0x7fe1f178efc9 [ 82.812734][ T3327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.812747][ T3327] RSP: 002b:00007fe1f25ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.812764][ T3327] RAX: ffffffffffffffda RBX: 00007fe1f19e5fa0 RCX: 00007fe1f178efc9 [ 82.812776][ T3327] RDX: 0000000000000000 RSI: 0000000080404806 RDI: 0000000000000004 [ 82.812785][ T3327] RBP: 00007fe1f25ab090 R08: 0000000000000000 R09: 0000000000000000 [ 82.812795][ T3327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.812803][ T3327] R13: 00007fe1f19e6038 R14: 00007fe1f19e5fa0 R15: 00007fffe8bb7e08 [ 82.812816][ T3327] [ 82.813685][ T65] usb 3-1: USB disconnect, device number 21 [ 83.502679][ T3407] __nla_validate_parse: 1 callbacks suppressed [ 83.502694][ T3407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 83.825951][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 83.825969][ T36] audit: type=1400 audit(1761581589.929:510): avc: denied { read } for pid=3437 comm="syz.0.1065" path="socket:[18169]" dev="sockfs" ino=18169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.887655][ T3442] 9pnet_fd: Insufficient options for proto=fd [ 83.894401][ T36] audit: type=1400 audit(1761581589.999:511): avc: denied { getopt } for pid=3441 comm="syz.0.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.477067][ T3470] exFAT-fs (rnullb0): invalid boot record signature [ 84.483714][ T3470] exFAT-fs (rnullb0): failed to read boot sector [ 84.491041][ T3470] exFAT-fs (rnullb0): failed to recognize exfat type [ 84.504544][ T3476] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1079'. [ 84.600587][ T3496] binder: Unknown parameter '0x00000000000000040x00000000000000040x0000000000000004' [ 84.674250][ T3514] x_tables: duplicate underflow at hook 1 [ 85.034596][ T3555] validate_nla: 24 callbacks suppressed [ 85.034622][ T3555] netlink: 'syz.3.1105': attribute type 63 has an invalid length. [ 85.048453][ T3555] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1105'. [ 85.395590][ T36] audit: type=1400 audit(1761581591.495:512): avc: denied { read } for pid=3566 comm="syz.2.1110" name="file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.418306][ T36] audit: type=1400 audit(1761581591.495:513): avc: denied { open } for pid=3566 comm="syz.2.1110" path="/186/file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.470243][ T3577] incfs: mount failed -22 [ 85.474671][ T36] audit: type=1400 audit(1761581591.575:514): avc: denied { mounton } for pid=3575 comm="syz.0.1113" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 86.257803][ T3650] 9pnet_fd: Insufficient options for proto=fd [ 86.438576][ T3684] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1141'. [ 86.461373][ T3686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:580 [ 86.502872][ T3694] tmpfs: Unknown parameter ')' [ 86.688066][ T36] audit: type=1326 audit(1761581592.795:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.0.1153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dc158efc9 code=0x0 [ 86.795061][ T3718] cgroup: Need name or subsystem set [ 86.847171][ T764] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 86.998243][ T764] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 87.006813][ T764] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 87.016241][ T764] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 87.027011][ T764] usb 3-1: config 220 has no interface number 2 [ 87.033831][ T764] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 87.041775][ T3735] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 87.047610][ T764] usb 3-1: config 220 interface 0 has no altsetting 0 [ 87.062876][ T764] usb 3-1: config 220 interface 76 has no altsetting 0 [ 87.069771][ T764] usb 3-1: config 220 interface 1 has no altsetting 0 [ 87.078789][ T764] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 87.087870][ T764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.095944][ T764] usb 3-1: Product: syz [ 87.100264][ T764] usb 3-1: Manufacturer: syz [ 87.104871][ T764] usb 3-1: SerialNumber: syz [ 87.255924][ T3735] tipc: Can't bind to reserved service type 0 [ 87.317747][ T764] usb 3-1: selecting invalid altsetting 0 [ 87.323786][ T764] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 87.330628][ T764] usb 3-1: No valid video chain found. [ 87.339696][ T764] usb 3-1: USB disconnect, device number 22 [ 87.707464][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 87.916195][ T3775] rust_binder: Error while translating object. [ 87.916243][ T3775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.922491][ T3775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 88.006707][ T3782] 9pnet_fd: Insufficient options for proto=fd [ 88.217152][ T551] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 88.367247][ T551] usb 3-1: Using ep0 maxpacket: 16 [ 88.373811][ T551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.385068][ T551] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.395492][ T36] audit: type=1400 audit(1761581594.495:516): avc: denied { create } for pid=3793 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.395522][ T551] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 88.424726][ T551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.437391][ T551] usb 3-1: config 0 descriptor?? [ 88.610471][ T36] audit: type=1400 audit(1761581594.715:517): avc: denied { map } for pid=3805 comm="syz.0.1189" path="socket:[19142]" dev="sockfs" ino=19142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.845730][ T551] playstation 0003:054C:05C4.0009: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 89.074466][ T3833] overlay: filesystem on ./bus is read-only [ 89.094958][ T3835] netlink: 'syz.1.1201': attribute type 4 has an invalid length. [ 89.244159][ T551] playstation 0003:054C:05C4.0009: Invalid byte count transferred, expected 49 got 0 [ 89.253717][ T551] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 firmware info: -22 [ 89.263156][ T551] playstation 0003:054C:05C4.0009: Failed to get firmware info from DualShock4 [ 89.272204][ T551] playstation 0003:054C:05C4.0009: HW/FW version data in sysfs will be invalid. [ 89.304750][ T3841] bridge0: port 3(veth0_to_bridge) entered blocking state [ 89.311957][ T3841] bridge0: port 3(veth0_to_bridge) entered disabled state [ 89.319319][ T3841] veth0_to_bridge: entered allmulticast mode [ 89.325874][ T3841] veth0_to_bridge: entered promiscuous mode [ 89.332076][ T3841] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.344547][ T3841] bridge0: port 3(veth0_to_bridge) entered blocking state [ 89.351723][ T3841] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 89.437905][ T36] audit: type=1400 audit(1761581595.545:518): avc: denied { bind } for pid=3856 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.460512][ T3864] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1212'. [ 89.471561][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.481126][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.496700][ T551] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 89.509311][ T551] playstation 0003:054C:05C4.0009: Retrying DualShock 4 get calibration report (0x02) request [ 89.513156][ T36] audit: type=1326 audit(1761581595.615:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.3.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5b4af85e67 code=0x0 [ 89.520020][ T551] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 89.562712][ T551] playstation 0003:054C:05C4.0009: Retrying DualShock 4 get calibration report (0x02) request [ 89.577486][ T551] playstation 0003:054C:05C4.0009: Failed to retrieve feature with reportID 2: -71 [ 89.578638][ T3878] tipc: Started in network mode [ 89.586830][ T551] playstation 0003:054C:05C4.0009: Failed to retrieve DualShock4 calibration info: -71 [ 89.586865][ T551] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (3), disabling calibration. [ 89.593757][ T3878] tipc: Node identity 4, cluster identity 4711 [ 89.617160][ T551] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (4), disabling calibration. [ 89.619811][ T3878] tipc: Node number set to 4 [ 89.638735][ T551] playstation 0003:054C:05C4.0009: Invalid gyro calibration data for axis (5), disabling calibration. [ 89.649764][ T551] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 89.663332][ T551] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 89.676662][ T551] playstation 0003:054C:05C4.0009: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 89.690318][ T551] playstation 0003:054C:05C4.0009: Failed to get calibration data from DualShock4 [ 89.701132][ T551] playstation 0003:054C:05C4.0009: Gyroscope and accelerometer will be inaccurate. [ 89.708624][ T36] audit: type=1400 audit(1761581595.815:520): avc: denied { read } for pid=3887 comm="syz.3.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.717201][ T551] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0009/input/input20 [ 89.743086][ T551] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0009/input/input21 [ 89.759256][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 89.763273][ T551] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0009/input/input22 [ 89.777743][ T3891] 9pnet_fd: Insufficient options for proto=fd [ 89.809929][ T551] playstation 0003:054C:05C4.0009: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 89.832939][ T551] usb 3-1: USB disconnect, device number 23 [ 90.124636][ T36] audit: type=1400 audit(1761581596.225:521): avc: denied { setopt } for pid=3915 comm="syz.2.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.890171][ T3946] fuse: Bad value for 'fd' [ 91.334688][ T3962] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 79) [ 91.334712][ T3962] rust_binder: Error while translating object. [ 91.345454][ T3962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.351731][ T3962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:627 [ 91.361495][ T3962] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 91.377920][ T3962] rust_binder: 627: no such ref 1 [ 91.427895][ T3968] fuse: Bad value for 'fd' [ 91.637180][ T65] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 91.708579][ T36] audit: type=1400 audit(1761581597.815:522): avc: denied { mount } for pid=4005 comm="syz.3.1260" name="/" dev="pstore" ino=2632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 91.736436][ T4008] fuse: Bad value for 'fd' [ 91.788378][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 91.799387][ T65] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 91.808471][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.817077][ T65] usb 3-1: config 0 descriptor?? [ 91.822369][ T3964] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 92.132944][ T36] audit: type=1400 audit(1761581598.235:523): avc: denied { getopt } for pid=4019 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.233933][ T65] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 92.313632][ T4027] tmpfs: Bad value for 'nr_blocks' [ 92.434034][ T551] usb 3-1: USB disconnect, device number 24 [ 92.444924][ T4029] 9pnet_fd: Insufficient options for proto=fd [ 92.690825][ T4057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=4057 comm=syz.1.1278 [ 92.714724][ T4060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1279'. [ 92.787524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.799763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.801143][ T36] audit: type=1400 audit(1761581598.885:524): avc: denied { watch watch_reads } for pid=4072 comm="syz.0.1283" path="/366" dev="tmpfs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.811844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.846565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.858585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.870590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.882594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.894600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.906611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.918640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.209777][ T764] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 93.387149][ T764] usb 3-1: Using ep0 maxpacket: 16 [ 93.398090][ T764] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 93.477839][ T764] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 93.496831][ T764] usb 3-1: can't read configurations, error -61 [ 93.667160][ T764] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 93.837137][ T764] usb 3-1: Using ep0 maxpacket: 16 [ 93.857028][ T764] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 93.883046][ T764] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 93.894152][ T764] usb 3-1: can't read configurations, error -61 [ 93.912998][ T764] usb usb3-port1: attempt power cycle [ 93.972628][ T4121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 94.034300][ T36] audit: type=1400 audit(1761581600.135:525): avc: denied { accept } for pid=4120 comm="syz.1.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.198491][ T4125] 9pnet_fd: Insufficient options for proto=fd [ 94.267139][ T764] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 94.297474][ T764] usb 3-1: Using ep0 maxpacket: 16 [ 94.303060][ T764] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 94.312208][ T764] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.319964][ T764] usb 3-1: can't read configurations, error -61 [ 94.366003][ T4134] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 94.457175][ T764] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 94.487881][ T764] usb 3-1: Using ep0 maxpacket: 16 [ 94.493456][ T764] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 94.503645][ T764] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 94.511932][ T764] usb 3-1: can't read configurations, error -61 [ 94.524332][ T764] usb usb3-port1: unable to enumerate USB device [ 94.632168][ T4159] overlayfs: failed to clone lowerpath [ 94.639935][ T4161] syz.0.1315 uses obsolete (PF_INET,SOCK_PACKET) [ 94.811966][ T36] audit: type=1400 audit(1761581600.915:526): avc: denied { create } for pid=4185 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 95.127259][ T4218] overlayfs: failed to clone lowerpath [ 95.271482][ T4228] tipc: Enabling of bearer rejected, failed to enable media [ 95.332026][ T4235] can: request_module (can-proto-0) failed. [ 95.338502][ T4235] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.160694][ T4294] 9pnet_fd: Insufficient options for proto=fd [ 96.973430][ T4325] syz.2.1371 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.007246][ T4325] rust_binder: 639: no such ref 2 [ 97.018578][ T4325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:639 [ 97.137951][ T4343] SELinux: unknown common r [ 97.157464][ T4343] SELinux: failed to load policy [ 97.172768][ T4343] tmpfs: Unknown parameter '˙˙˙˙om' [ 97.518989][ T36] audit: type=1400 audit(1761581603.625:527): avc: denied { mount } for pid=4356 comm="syz.3.1385" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.542410][ T4357] overlayfs: failed to clone lowerpath [ 97.644364][ T36] audit: type=1400 audit(1761581603.745:528): avc: denied { write } for pid=4364 comm="syz.2.1384" path="socket:[21730]" dev="sockfs" ino=21730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.685768][ T4373] cgroup: Bad value for 'name' [ 97.699290][ T4376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1387'. [ 97.797147][ C1] net_ratelimit: 63896 callbacks suppressed [ 97.797169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.815199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.817859][ T4384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 97.827338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.827420][ T4384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:655 [ 97.836932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.870011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.882163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.894252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.906374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.918536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.930639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.858847][ T36] audit: type=1400 audit(1761581604.965:529): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 98.892699][ T4412] overlayfs: failed to clone upperpath [ 98.921695][ T36] audit: type=1400 audit(1761581605.025:530): avc: denied { watch_reads } for pid=4416 comm="syz.1.1405" path="/454/file0" dev="tmpfs" ino=2465 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.946571][ T4417] fuse: Bad value for 'fd' [ 99.904051][ T4453] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1417'. [ 100.167170][ T764] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 100.328652][ T764] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.353736][ T764] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 100.378376][ T764] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 100.404906][ T764] usb 3-1: config 220 has no interface number 2 [ 100.417927][ T764] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.437330][ T4460] fuse: Bad value for 'group_id' [ 100.446979][ T4460] fuse: Bad value for 'group_id' [ 100.456197][ T764] usb 3-1: config 220 interface 0 has no altsetting 0 [ 100.468412][ T764] usb 3-1: config 220 interface 76 has no altsetting 0 [ 100.477856][ T764] usb 3-1: config 220 interface 1 has no altsetting 0 [ 100.487463][ T764] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.496662][ T764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.504890][ T764] usb 3-1: Product: syz [ 100.509822][ T764] usb 3-1: Manufacturer: syz [ 100.514510][ T764] usb 3-1: SerialNumber: syz [ 100.729479][ T764] usb 3-1: selecting invalid altsetting 0 [ 100.738475][ T764] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 100.744884][ T764] usb 3-1: No valid video chain found. [ 100.772038][ T764] usb 3-1: USB disconnect, device number 29 [ 100.915608][ T4493] overlayfs: failed to clone upperpath [ 100.924539][ T4493] fuse: Bad value for 'group_id' [ 100.934944][ T4493] fuse: Bad value for 'group_id' [ 102.807147][ C1] net_ratelimit: 94802 callbacks suppressed [ 102.807169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.807235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.813277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.825103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.837135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.849119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.860960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.872909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.884815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.896673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.817134][ C1] net_ratelimit: 111938 callbacks suppressed [ 107.817156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.817196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.823284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.835249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.847282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.859215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.871153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.883037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.894990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.906938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.827116][ C1] net_ratelimit: 114426 callbacks suppressed [ 112.827140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.827185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.833288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.845197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.857053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.869076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.880932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.892796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.904824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.916719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.837168][ C0] net_ratelimit: 134311 callbacks suppressed [ 117.837191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.837208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.843284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.855276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.867169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.879170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.891042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.902929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.914916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.926791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.357101][ C0] sched: DL replenish lagged too much [ 122.847108][ C1] net_ratelimit: 157976 callbacks suppressed [ 122.847131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.847167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.853230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.865129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.877193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.889027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.900884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.912998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.924851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.936711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.857100][ C1] net_ratelimit: 162196 callbacks suppressed [ 127.857124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.857163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.863255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.875174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.887029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.899029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.911015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.922929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.934815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.946673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.208947][ T36] audit: type=1400 audit(1761581636.265:531): avc: denied { mounton } for pid=4548 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 132.867121][ C1] net_ratelimit: 158836 callbacks suppressed [ 132.867146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.867147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.867248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.873226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.885276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.897295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.909285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.921328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.933176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.945033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.977352][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 137.877116][ C1] net_ratelimit: 152619 callbacks suppressed [ 137.877139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.877161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.883237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.895154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.907202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.919166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.930939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.942989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.954830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.966684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.887148][ C0] net_ratelimit: 152562 callbacks suppressed [ 142.887171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.887203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.893288][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.905301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.917143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.929321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.941100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.952969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.964988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.976854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.897132][ C1] net_ratelimit: 152097 callbacks suppressed [ 147.897160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.897200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.903285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.915333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.927314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.939261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.951276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.963267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.975160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.987016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.069284][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 149.410525][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 149.562092][ T4574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1458'. [ 152.907130][ C1] net_ratelimit: 135944 callbacks suppressed [ 152.907152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.907191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.913230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.925356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.937198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.949070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.961103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.972974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.984848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.996880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.700109][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.758408][ T4548] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.765549][ T4548] bridge_slave_0: entered allmulticast mode [ 155.290405][ T4548] bridge_slave_0: entered promiscuous mode [ 155.860502][ T4548] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.878748][ T4548] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.897564][ T4548] bridge_slave_1: entered allmulticast mode [ 155.931492][ T4548] bridge_slave_1: entered promiscuous mode [ 157.494289][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.517573][ T4553] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.524867][ T4553] bridge_slave_0: entered allmulticast mode [ 157.560198][ T4553] bridge_slave_0: entered promiscuous mode [ 157.788889][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.795981][ T4553] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.827682][ T4553] bridge_slave_1: entered allmulticast mode [ 157.868017][ T4553] bridge_slave_1: entered promiscuous mode [ 157.917107][ C1] net_ratelimit: 131130 callbacks suppressed [ 157.917129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.917344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.923213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.935171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.947053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 157.958885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.970962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.982997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.994810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.006812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.092602][ T4552] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.118446][ T4552] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.125754][ T4552] bridge_slave_0: entered allmulticast mode [ 159.163479][ T4552] bridge_slave_0: entered promiscuous mode [ 159.922177][ T4552] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.941074][ T4552] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.957523][ T4552] bridge_slave_1: entered allmulticast mode [ 159.980840][ T4552] bridge_slave_1: entered promiscuous mode [ 162.927086][ C0] net_ratelimit: 132412 callbacks suppressed [ 162.927110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.927145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.933278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.945300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.957512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.969171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.981133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.993021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 163.004861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.016884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.959197][ T909] usb 2-1: USB disconnect, device number 4 [ 164.965545][ T909] ftdi_sio 2-1:6.63: device disconnected [ 167.937090][ C1] net_ratelimit: 133013 callbacks suppressed [ 167.937112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.937151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.943195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.955164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.967457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.979355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.991217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.003119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.015095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 168.026930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.947113][ C0] net_ratelimit: 137264 callbacks suppressed [ 172.947136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.947159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.953248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.965176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 172.977054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.989004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.000940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.012925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.025135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.036798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.957114][ C1] net_ratelimit: 135749 callbacks suppressed [ 177.957138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.957193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.963220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.975203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.987222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 177.999138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.011293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 178.022907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.034863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.046828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.967079][ C1] net_ratelimit: 136082 callbacks suppressed [ 182.967101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 182.967164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.973238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.985218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.997306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.009340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.021172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.033087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.045158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.056993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.977091][ C1] net_ratelimit: 133724 callbacks suppressed [ 187.977111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.977150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.983200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.995154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.007036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.018904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.030856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.042912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.054805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.066727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.987081][ C1] net_ratelimit: 134291 callbacks suppressed [ 192.987104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 192.987322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.993212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.005281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.017110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.029080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.041080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.053024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.064855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.076753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.997108][ C0] net_ratelimit: 141279 callbacks suppressed [ 197.997130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.997145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.997198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.003252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.015147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.027115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.039053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 198.051043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.062883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.074757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.007115][ C1] net_ratelimit: 138399 callbacks suppressed [ 203.007138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.007209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.013209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.025215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.037255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.049178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.061064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 203.072926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.084909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.096846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.017066][ C1] net_ratelimit: 145104 callbacks suppressed [ 208.017089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.017120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.023161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.035159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.047230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.059104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.071103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 208.083162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.094836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.106844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.027065][ C1] net_ratelimit: 137120 callbacks suppressed [ 213.027090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.027109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.033181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.045207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.057178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.069028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.081043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 213.093106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.104777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.116789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.037091][ C0] net_ratelimit: 137631 callbacks suppressed [ 218.037112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.037141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.043180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.055192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.067285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.079038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 218.090903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.102762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.114709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.126665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.047112][ C0] net_ratelimit: 139768 callbacks suppressed [ 223.047137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.047141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 223.047208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.053502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.065119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.077185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.089145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.100989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.112945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.124941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.057092][ C0] net_ratelimit: 131871 callbacks suppressed [ 228.057112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.057188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 228.063435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.075446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.087456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.099399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.111463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.123446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.135291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.147344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.827201][ T37] INFO: task kworker/u8:2:46 blocked for more than 123 seconds. [ 229.834976][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.113118][ T36] audit: type=1400 audit(1761581736.185:532): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1626]" dev="pipefs" ino=1626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 230.350419][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.445900][ T37] task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000 [ 230.456183][ T37] Workqueue: netns cleanup_net [ 230.461030][ T37] Call Trace: [ 230.464325][ T37] [ 230.467364][ T37] __schedule+0x1322/0x1df0 [ 230.471908][ T37] ? __sched_text_start+0x10/0x10 [ 230.476968][ T37] ? kthread_data+0x54/0xc0 [ 230.481525][ T37] ? wq_worker_sleeping+0x69/0x260 [ 230.486656][ T37] ? trace_contention_begin+0xc0/0xc0 [ 230.492091][ T37] schedule+0xc6/0x240 [ 230.496193][ T37] schedule_preempt_disabled+0x14/0x30 [ 230.501751][ T37] __mutex_lock+0x81e/0x1b50 [ 230.506378][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 230.513185][ T37] ? kasan_save_track+0x4f/0x80 [ 230.518095][ T37] ? kasan_save_track+0x3e/0x80 [ 230.522969][ T37] ? kasan_save_free_info+0x4a/0x60 [ 230.528219][ T37] ? __kasan_slab_free+0x5f/0x80 [ 230.533180][ T37] ? kfree+0x15c/0x460 [ 230.537284][ T37] ? cleanup_net+0x842/0xc70 [ 230.541896][ T37] ? process_scheduled_works+0x7d2/0x1020 [ 230.547677][ T37] ? worker_thread+0xc58/0x1250 [ 230.552546][ T37] ? kthread+0x2ca/0x370 [ 230.556817][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 230.561821][ T37] __mutex_lock_slowpath+0xe/0x20 [ 230.566875][ T37] mutex_lock+0x102/0x1c0 [ 230.571243][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 230.576115][ T37] rcu_barrier+0x4d/0x530 [ 230.580504][ T37] ? __kasan_check_write+0x18/0x20 [ 230.585648][ T37] cleanup_net+0x8f2/0xc70 [ 230.590117][ T37] ? __cfi_cleanup_net+0x10/0x10 [ 230.595084][ T37] ? kick_pool+0xb9/0x550 [ 230.599455][ T37] process_scheduled_works+0x7d2/0x1020 [ 230.605049][ T37] worker_thread+0xc58/0x1250 [ 230.609771][ T37] kthread+0x2ca/0x370 [ 230.613866][ T37] ? __cfi_worker_thread+0x10/0x10 [ 230.619019][ T37] ? __cfi_kthread+0x10/0x10 [ 230.623635][ T37] ret_from_fork+0x67/0xa0 [ 230.628131][ T37] ? __cfi_kthread+0x10/0x10 [ 230.632739][ T37] ret_from_fork_asm+0x1a/0x30 [ 230.637547][ T37] [ 230.640658][ T37] INFO: task kworker/0:5:764 blocked for more than 124 seconds. [ 230.663975][ T37] Not tainted syzkaller #0 [ 230.669082][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.677810][ T37] task:kworker/0:5 state:D stack:0 pid:764 tgid:764 ppid:2 flags:0x00004000 [ 230.688037][ T37] Workqueue: events fqdir_free_fn [ 230.693105][ T37] Call Trace: [ 230.696398][ T37] [ 230.699363][ T37] __schedule+0x1322/0x1df0 [ 230.703910][ T37] ? __sched_text_start+0x10/0x10 [ 230.708994][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 230.714144][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 230.719410][ T37] schedule+0xc6/0x240 [ 230.723524][ T37] schedule_timeout+0xb2/0x3a0 [ 230.728330][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 230.733737][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 230.739344][ T37] ? generic_exec_single+0x201/0x500 [ 230.744656][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 230.750370][ T37] wait_for_common+0x359/0x630 [ 230.755181][ T37] ? wait_for_completion+0x40/0x40 [ 230.760356][ T37] ? _raw_spin_unlock+0x45/0x60 [ 230.765247][ T37] ? __switch_to_asm+0x3d/0x70 [ 230.770066][ T37] wait_for_completion+0x1c/0x40 [ 230.775037][ T37] rcu_barrier+0x415/0x530 [ 230.779497][ T37] fqdir_free_fn+0x36/0x150 [ 230.784032][ T37] process_scheduled_works+0x7d2/0x1020 [ 230.789714][ T37] worker_thread+0xc58/0x1250 [ 230.794421][ T37] kthread+0x2ca/0x370 [ 230.798556][ T37] ? __cfi_worker_thread+0x10/0x10 [ 230.803690][ T37] ? __cfi_kthread+0x10/0x10 [ 230.808322][ T37] ret_from_fork+0x67/0xa0 [ 230.812764][ T37] ? __cfi_kthread+0x10/0x10 [ 230.817385][ T37] ret_from_fork_asm+0x1a/0x30 [ 230.822188][ T37] [ 231.008893][ T37] INFO: task syz.2.1417:4452 blocked for more than 124 seconds. [ 231.016575][ T37] Not tainted syzkaller #0 [ 231.120685][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 231.129413][ T37] task:syz.2.1417 state:D stack:0 pid:4452 tgid:4452 ppid:292 flags:0x00004004 [ 231.139623][ T37] Call Trace: [ 231.143016][ T37] [ 231.145960][ T37] __schedule+0x1322/0x1df0 [ 231.150535][ T37] ? __sched_text_start+0x10/0x10 [ 231.155614][ T37] ? __kasan_check_write+0x18/0x20 [ 231.160777][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 231.166007][ T37] ? __kasan_check_write+0x18/0x20 [ 231.171162][ T37] ? trace_contention_begin+0xc0/0xc0 [ 231.176566][ T37] schedule+0xc6/0x240 [ 231.180690][ T37] schedule_preempt_disabled+0x14/0x30 [ 231.186184][ T37] __mutex_lock+0x81e/0x1b50 [ 231.190868][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 231.197843][ T37] ? __kasan_check_write+0x18/0x20 [ 231.202992][ T37] ? __kasan_check_write+0x18/0x20 [ 231.208148][ T37] ? wake_up_q+0x10f/0x1c0 [ 231.212605][ T37] ? __mutex_unlock_slowpath+0x48a/0x740 [ 231.218271][ T37] ? mutex_unlock+0x240/0x240 [ 231.222975][ T37] __mutex_lock_slowpath+0xe/0x20 [ 231.228042][ T37] mutex_lock+0x102/0x1c0 [ 231.232384][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 231.237266][ T37] rcu_barrier+0x4d/0x530 [ 231.241629][ T37] ? __kasan_slab_free+0x6a/0x80 [ 231.246595][ T37] netdev_run_todo+0x10e/0xcb0 [ 231.251409][ T37] ? kvfree+0x39/0x50 [ 231.255423][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 231.260744][ T37] rtnl_unlock+0x12/0x20 [ 231.265008][ T37] tun_chr_close+0xc5/0x150 [ 231.269577][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 231.274705][ T37] __fput+0x1fb/0xa00 [ 231.278732][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 231.284314][ T37] ____fput+0x20/0x30 [ 231.288376][ T37] task_work_run+0x1e0/0x250 [ 231.292991][ T37] ? __cfi_task_work_run+0x10/0x10 [ 231.298159][ T37] ? __kasan_check_read+0x15/0x20 [ 231.303225][ T37] resume_user_mode_work+0x36/0x50 [ 231.308385][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 231.313864][ T37] do_syscall_64+0x64/0xf0 [ 231.318315][ T37] ? clear_bhb_loop+0x50/0xa0 [ 231.323017][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.328955][ T37] RIP: 0033:0x7fe1f178efc9 [ 231.333387][ T37] RSP: 002b:00007fffe8bb7f68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 231.341842][ T37] RAX: 0000000000000000 RBX: 0000000000018468 RCX: 00007fe1f178efc9 [ 231.349875][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 231.357881][ T37] RBP: 00007fe1f19e7da0 R08: 0000000000000001 R09: 00000018e8bb825f [ 231.365868][ T37] R10: 0000001b2df20000 R11: 0000000000000246 R12: 00007fe1f19e5fac [ 231.373867][ T37] R13: 00007fe1f19e5fa0 R14: ffffffffffffffff R15: 00007fffe8bb8080 [ 231.381876][ T37] [ 231.500002][ T37] NMI backtrace for cpu 1 [ 231.500024][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 231.500049][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.500062][ T37] Call Trace: [ 231.500068][ T37] [ 231.500076][ T37] __dump_stack+0x21/0x30 [ 231.500107][ T37] dump_stack_lvl+0x10c/0x190 [ 231.500132][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 231.500160][ T37] dump_stack+0x19/0x20 [ 231.500183][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 231.500208][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 231.500233][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 231.500256][ T37] ? sched_show_task+0x379/0x560 [ 231.500281][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 231.500303][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 231.500329][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 231.500354][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 231.500379][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 231.500404][ T37] watchdog+0xd8f/0xed0 [ 231.500432][ T37] ? __cfi_watchdog+0x10/0x10 [ 231.500457][ T37] ? __kasan_check_read+0x15/0x20 [ 231.500485][ T37] ? __kthread_parkme+0x138/0x180 [ 231.500503][ T37] ? schedule+0xc6/0x240 [ 231.500529][ T37] kthread+0x2ca/0x370 [ 231.500548][ T37] ? __cfi_watchdog+0x10/0x10 [ 231.500574][ T37] ? __cfi_kthread+0x10/0x10 [ 231.500593][ T37] ret_from_fork+0x67/0xa0 [ 231.500619][ T37] ? __cfi_kthread+0x10/0x10 [ 231.500638][ T37] ret_from_fork_asm+0x1a/0x30 [ 231.500668][ T37] [ 231.500675][ T37] Sending NMI from CPU 1 to CPUs 0: [ 231.693478][ C0] NMI backtrace for cpu 0 [ 231.693492][ C0] CPU: 0 UID: 0 PID: 4585 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 231.693524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.693534][ C0] RIP: 0010:update_stack_state+0x135/0x4b0 [ 231.693558][ C0] Code: ff ff ff 4c 89 f6 48 c1 ee 03 48 89 b5 40 ff ff ff 48 89 8d 70 ff ff ff 48 c1 e9 03 48 89 8d 48 ff ff ff 48 89 95 58 ff ff ff <48> c1 ea 03 48 89 95 68 ff ff ff 48 89 45 c0 48 c1 e8 03 48 89 45 [ 231.693570][ C0] RSP: 0018:ffffc900000070b8 EFLAGS: 00000a02 [ 231.693584][ C0] RAX: ffffc90000007230 RBX: ffffc90000007208 RCX: 1ffff92000000e43 [ 231.693612][ C0] RDX: ffffc90000007220 RSI: 1ffff92000000e42 RDI: ffffc90000007260 [ 231.693624][ C0] RBP: ffffc90000007178 R08: ffffc900000072d0 R09: ffffc900000072c8 [ 231.693635][ C0] R10: 0000000000000011 R11: ffffffff817457d0 R12: 0000000000000000 [ 231.693646][ C0] R13: dffffc0000000000 R14: ffffc90000007210 R15: ffffc90011507510 [ 231.693657][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 231.693670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.693680][ C0] CR2: 00005560a901eb98 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 231.693694][ C0] Call Trace: [ 231.693698][ C0] [ 231.693708][ C0] unwind_next_frame+0x3c2/0x750 [ 231.693727][ C0] ? __kernel_text_address+0x11/0x40 [ 231.693747][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 231.693770][ C0] arch_stack_walk+0x139/0x170 [ 231.693784][ C0] ? addrconf_ifdown+0x608/0x1940 [ 231.693805][ C0] stack_trace_save+0x9d/0xe0 [ 231.693826][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 231.693849][ C0] kasan_save_track+0x3e/0x80 [ 231.693865][ C0] ? kasan_save_track+0x3e/0x80 [ 231.693880][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 231.693900][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 231.693917][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 231.693930][ C0] ? skb_clone+0x229/0x460 [ 231.693951][ C0] ? br_flood+0x4ed/0x730 [ 231.693969][ C0] ? br_handle_frame_finish+0x12bb/0x1720 [ 231.693991][ C0] ? br_handle_frame+0x5a6/0xba0 [ 231.694012][ C0] ? __netif_receive_skb_core+0xf4b/0x3940 [ 231.694032][ C0] ? process_backlog+0x3e5/0xae0 [ 231.694050][ C0] ? __napi_poll+0xd3/0x610 [ 231.694068][ C0] ? net_rx_action+0x584/0xce0 [ 231.694087][ C0] ? handle_softirqs+0x1ab/0x630 [ 231.694100][ C0] ? __do_softirq+0xf/0x16 [ 231.694121][ C0] ? do_softirq+0xa6/0x100 [ 231.694142][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 231.694164][ C0] ? _raw_spin_unlock_bh+0x54/0x60 [ 231.694183][ C0] ? addrconf_ifdown+0x608/0x1940 [ 231.694208][ C0] kasan_save_alloc_info+0x40/0x50 [ 231.694229][ C0] __kasan_slab_alloc+0x73/0x90 [ 231.694245][ C0] kmem_cache_alloc_noprof+0x1cb/0x430 [ 231.694259][ C0] ? skb_clone+0x229/0x460 [ 231.694280][ C0] skb_clone+0x229/0x460 [ 231.694312][ C0] ? br_do_proxy_suppress_arp+0xab0/0xd80 [ 231.694332][ C0] br_flood+0x4ed/0x730 [ 231.694353][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 231.694374][ C0] ? syscall_exit_to_user_mode+0x58/0xb0 [ 231.694391][ C0] ? do_syscall_64+0x64/0xf0 [ 231.694412][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 231.694437][ C0] br_handle_frame+0x5a6/0xba0 [ 231.694463][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 231.694484][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 231.694503][ C0] ? dst_release+0xe3/0x240 [ 231.694517][ C0] ? arp_process+0xd81/0x1740 [ 231.694535][ C0] ? qdisc_run_end+0x120/0x120 [ 231.694553][ C0] ? __cfi_arp_process+0x10/0x10 [ 231.694568][ C0] ? NF_HOOK+0x157/0x1b0 [ 231.694583][ C0] ? __cfi_arp_process+0x10/0x10 [ 231.694598][ C0] ? arp_xmit+0x1f0/0x1f0 [ 231.694613][ C0] ? __cfi_arp_process+0x10/0x10 [ 231.694628][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 231.694646][ C0] process_backlog+0x3e5/0xae0 [ 231.694666][ C0] ? run_posix_cpu_timers+0x2c5/0x620 [ 231.694684][ C0] __napi_poll+0xd3/0x610 [ 231.694703][ C0] net_rx_action+0x584/0xce0 [ 231.694725][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 231.694744][ C0] ? sched_clock+0x44/0x60 [ 231.694781][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 231.694803][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 231.694822][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 231.694844][ C0] handle_softirqs+0x1ab/0x630 [ 231.694859][ C0] __do_softirq+0xf/0x16 [ 231.694881][ C0] do_softirq+0xa6/0x100 [ 231.694904][ C0] [ 231.694909][ C0] [ 231.694915][ C0] ? __cfi_do_softirq+0x10/0x10 [ 231.694938][ C0] ? _raw_spin_lock_bh+0x90/0x120 [ 231.694958][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 231.694978][ C0] ? preempt_schedule_thunk+0x1a/0x40 [ 231.694995][ C0] __local_bh_enable_ip+0x74/0x80 [ 231.695019][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 231.695039][ C0] addrconf_ifdown+0x608/0x1940 [ 231.695063][ C0] ? addrconf_cleanup+0x150/0x150 [ 231.695084][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695109][ C0] ? mutex_unlock+0x8b/0x240 [ 231.695124][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 231.695137][ C0] ? macsec_notify+0x103/0x4b0 [ 231.695160][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 231.695175][ C0] addrconf_notify+0x17a/0xea0 [ 231.695205][ C0] ? __cfi_addrconf_notify+0x10/0x10 [ 231.695228][ C0] notifier_call_chain+0x10b/0x2c0 [ 231.695253][ C0] raw_notifier_call_chain+0x31/0x40 [ 231.695268][ C0] unregister_netdevice_many_notify+0xe32/0x1bd0 [ 231.695288][ C0] ? kick_pool+0x3d8/0x550 [ 231.695306][ C0] ? __queue_work+0xb5d/0x1120 [ 231.695324][ C0] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 231.695346][ C0] ? __queue_delayed_work+0x18e/0x240 [ 231.695367][ C0] ? __kasan_check_read+0x15/0x20 [ 231.695390][ C0] unregister_netdevice_queue+0x339/0x380 [ 231.695409][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 231.695427][ C0] ? linkwatch_fire_event+0x1fb/0x260 [ 231.695448][ C0] __tun_detach+0xca1/0x1460 [ 231.695472][ C0] tun_chr_close+0x93/0x150 [ 231.695499][ C0] ? __cfi_tun_chr_close+0x10/0x10 [ 231.695514][ C0] __fput+0x1fb/0xa00 [ 231.695549][ C0] ? call_rcu+0x14/0x20 [ 231.695564][ C0] ____fput+0x20/0x30 [ 231.695582][ C0] task_work_run+0x1e0/0x250 [ 231.695601][ C0] ? __cfi_task_work_run+0x10/0x10 [ 231.695619][ C0] ? free_nsproxy+0x223/0x290 [ 231.695641][ C0] do_exit+0x9bc/0x2630 [ 231.695660][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695685][ C0] ? __cfi_do_exit+0x10/0x10 [ 231.695703][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695727][ C0] ? put_pid+0xe2/0x120 [ 231.695742][ C0] ? netlink_sendmsg+0x835/0xaf0 [ 231.695767][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695790][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 231.695811][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 231.695831][ C0] do_group_exit+0x22a/0x300 [ 231.695851][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695875][ C0] get_signal+0x139d/0x14f0 [ 231.695897][ C0] arch_do_signal_or_restart+0x96/0x720 [ 231.695923][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 231.695948][ C0] ? __kasan_check_write+0x18/0x20 [ 231.695973][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 231.695990][ C0] do_syscall_64+0x64/0xf0 [ 231.696009][ C0] ? clear_bhb_loop+0x50/0xa0 [ 231.696027][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.696044][ C0] RIP: 0033:0x7f3379590e03 [ 231.696056][ C0] Code: Unable to access opcode bytes at 0x7f3379590dd9. [ 231.696065][ C0] RSP: 002b:00007ffe0a364df8 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 231.696081][ C0] RAX: 0000000000000028 RBX: 00007f337a314620 RCX: 00007f3379590e03 [ 231.696093][ C0] RDX: 0000000000000028 RSI: 00007f337a314670 RDI: 0000000000000003 [ 231.696103][ C0] RBP: 0000000000000001 R08: 00007ffe0a364e14 R09: 000000000000000c [ 231.696112][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 231.696122][ C0] R13: 0000000000000000 R14: 00007f337a314670 R15: 0000000000000000 [ 231.696135][ C0] [ 233.067105][ C0] net_ratelimit: 111720 callbacks suppressed [ 233.067129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.067180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:72:e2:fe:ee:21, vlan:0) [ 233.073302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.085160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.097128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.109185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.121336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.133161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.145046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.157052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.077053][ C1] net_ratelimit: 132655 callbacks suppressed [ 238.077077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.077153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.083181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.095120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.107056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.118893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.130844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.142854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.154724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.166601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)