last executing test programs: 1m32.149556104s ago: executing program 0 (id=2855): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000002300)=ANY=[@ANYBLOB="66e4a3ead4c1490ef232228f2aa6396d6f64653d30303030303030303037c1e62c61756469742c6f626a5f747970653d7b2b7d2c6673757569643d36363038336562622d636462302d623937392d343436342d61623438326230302c7365636c6162656c2c0000000000000000"]) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m32.121890974s ago: executing program 0 (id=2856): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) keyctl$reject(0x13, 0x0, 0x800000000000002c, 0x80001, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x100000001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x27, 0x3, 0xa000) 1m32.021838607s ago: executing program 0 (id=2863): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="f320c5a29f098c0f56a51a9322079081"], 0x18) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$xdp(0x2c, 0x3, 0x0) accept(r5, 0x0, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000000)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x8000000, 0x8, 0xd, 0x3, 0x6, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x2, 0x41, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0x8000000, 0x8, 0x5, 0x1, 0x7, 0x0, 0x9, 0x6, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x2, 0x5, 0xf8, 0x8, 0x9, 0xb, 0xf1}, {0x4000, 0x2000, 0x8, 0x4, 0x15, 0x2, 0xab, 0x7b, 0x1, 0x83, 0xf7, 0x8}, {0x1000, 0x3000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x1000, 0x1, 0x4, 0x5, 0x0, 0xe4, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x0, 0xeeef0000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x0, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x6, 0x0, 0x8080000, [0x6800000000000000, 0x9, 0x60, 0x3]}) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) (async) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async, rerun: 32) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async, rerun: 32) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) 1m31.626565914s ago: executing program 0 (id=2875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x5, 0x800) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000240)={0x4, 0xdc08, 0xff, 0x6, 0x7, 0x3089}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) userfaultfd(0x800) (async) r2 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) (async) r3 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) umount2(&(0x7f0000000400)='./bus\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x2804cdc, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x1000, 0x980}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 1m31.607646805s ago: executing program 0 (id=2876): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202400000000044addbed5731da7d85ba00946aa923bca1ba63e164ead7"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106000000cc13fc47a9ae"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket$inet6(0x10, 0x3, 0x800004) close(r1) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000002640)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) recvmsg$can_bcm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)=""/74, 0x4a}], 0x1}, 0x0) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x47, 0x8, 0x3, 0x8, {{0x5, 0x4, 0x2, 0x1b, 0x14, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @broadcast}}}}) 1m31.31468541s ago: executing program 0 (id=2877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) faccessat2(r1, &(0x7f00000001c0)='./file0/file1/file0\x00', 0x20, 0x300) r2 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.191687783s ago: executing program 32 (id=2877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) faccessat2(r1, &(0x7f00000001c0)='./file0/file1/file0\x00', 0x20, 0x300) r2 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./file0/file1/file0\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.377721877s ago: executing program 1 (id=3971): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = userfaultfd(0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r3, 0xf648e000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f00003f5000/0x2000)=nil, &(0x7f0000842000/0x2000)=nil, 0x2000, 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x81, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1}, 0x14) r6 = pidfd_getfd(r1, r1, 0x0) setns(r6, 0x66020000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000020000000000000000000000ff"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) unshare(0x64061d80) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000', @ANYRESDEC]) socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$BLKGETZONESZ(r6, 0x80041284, &(0x7f00000000c0)=0xf5) r11 = openat$cgroup_int(r10, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) madvise(&(0x7f0000be5000/0x3000)=nil, 0x3000, 0x14) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x6) 23.22199158s ago: executing program 1 (id=3974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000910000000839dd26cc5500de23a2bcfb566455b10fa8294d4fb1cf64232"], 0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x19000}) close_range(r0, 0xffffffffffffffff, 0x0) 22.962707265s ago: executing program 3 (id=3979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) fchdir(r4) write$UHID_DESTROY(r4, &(0x7f00000000c0), 0x4) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) mkdir(&(0x7f0000000100)='./file0\x00', 0x2a) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000000)=0x9b1, 0x4) read$FUSE(r4, &(0x7f0000001100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000300)={0x50, 0xfffffffffffffffe, r6, {0x7, 0x2b, 0x2, 0x3081009, 0x7e35, 0x7, 0x6, 0x4, 0x0, 0x0, 0x100, 0xfffffffc}}, 0x50) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x802, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x890) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x802, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x890) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.850600937s ago: executing program 3 (id=3980): ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$NS_GET_USERNS(r1, 0x8004b708, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, 0x0, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r6 = open_tree(r2, &(0x7f0000000300)='./file2\x00', 0x8000) mount_setattr(r6, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) r7 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r9, &(0x7f0000000b00), 0x91) splice(r8, 0x0, r7, &(0x7f0000000140)=0x8008, 0x4, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) lsetxattr$security_ima(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v1={0x2, "b3d6e3f97369b85a6bd883"}, 0xc, 0x3) 22.827924067s ago: executing program 3 (id=3981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fstat(r0, &(0x7f0000000100)) (async) fstat(r0, &(0x7f0000000100)) accept$inet6(r1, 0x0, &(0x7f0000000040)) (async) r2 = accept$inet6(r1, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000100)="430fc73f0f2390b9800000c00f3235001000000f300f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x50}], 0x1, 0x69, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) unshare(0x62040200) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0x4, 0x0, 0x3}) read$usbmon(r7, &(0x7f0000000180)=""/218, 0xda) 22.502251474s ago: executing program 2 (id=3986): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040081}, 0x11) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, r5, &(0x7f0000000800)) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000001010400000000000000000a000000300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r6 = dup(r2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @local}) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f00007d0000)) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0002010180c2020002aaaaaaaaaabb86dd6354f02300010000000000"], 0x4e) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x2, &(0x7f0000000e00)=[{0x80, 0x80, 0x4, 0x1}, {0x6, 0xfb}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0xa0, 0x0, &(0x7f0000000680)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x4001, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1040}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/228, 0xe4, 0x1, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/231, 0xe7}, @fda={0x66646185, 0x9, 0x2, 0x10}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@increfs], 0x4c, 0x0, 0x0}) (rerun: 32) 22.17455409s ago: executing program 1 (id=3987): sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="9da207c21d05ec9940e0c6c422021e7776431dc1a17e9d7b18c8892d86ca14a2bdce349c86f4dccfbe48", 0x2a}], 0x1, 0x0, 0x0, 0x11000000}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) (async) lsm_get_self_attr(0x68, &(0x7f00000001c0)={0x0, 0x0, 0x6a, 0x4a, ""/74}, &(0x7f0000000080)=0x6a, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000100)=""/80, 0x2f) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$loop(0x0, 0xd5d1, 0x0) (async, rerun: 64) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) (rerun: 32) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async, rerun: 64) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}], [], 0x6b}}) close_range(r2, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, &(0x7f0000000040), 0x2, 0x1) 22.153892631s ago: executing program 3 (id=3988): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7ffefffe}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getpeername$tipc(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) getpeername$tipc(r5, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4], 0x30}, 0x0) (async) sendmsg$unix(r3, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r4], 0x30}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) r7 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0x10, 0x5}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYBLOB="05", @ANYRES16], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYBLOB="05", @ANYRES16], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) eventfd2(0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x8, 0x7, 0x10006, 0x6}}) 22.145729991s ago: executing program 1 (id=3989): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = socket(0x28, 0x5, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x444}, 0x1, 0x0, 0x0, 0x44}, 0x440) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setpriority(0x0, 0x0, 0x4) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) add_key$user(0x0, 0x0, &(0x7f00000000c0)="ca7aac43620767496beba12f3d4b91cc3c1951bdfc6ca667f1a9e80dfa8075d62e8b8ff8057c0a2c0cf90bdd2c04884c625d6e67e0ec", 0x36, 0xfffffffffffffffe) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r3, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrlimit(0x1d, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {&(0x7f0000000a40)={0x218, 0x20, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x123, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x8}, @nested={0xce, 0x148, 0x0, 0x1, [@generic="2becfd85eee9100ccc0eca4d7a262b02d3b7c98d92786fcba09d3dcb488026c4604a80a5d92ef1385a0a8d6ca2a58775e9c888bdfb3bdc38bc00fff4caa1c287767446219cfcdc7f8c2c5c41fd53bbaa7094e58f3d6d700395b293a23f7df5ce1e53e84fa7113dd8575c04420b47c4b3cdab106db21c48574a61689cf927ceb2282b17e84af28f88029a2851811537b9cf81f01d14bed335ae198e6dcf83d6816f67603f01987ebbf854ce1a50b39ac267ad", @nested={0x4, 0x148}, @nested={0x4, 0x35}, @typed={0xd, 0x13f, 0x0, 0x0, @str='/dev/kvm\x00'}]}, @typed={0x8, 0x28, 0x0, 0x0, @uid}, @nested={0x28, 0xc3, 0x0, 0x1, [@nested={0x4, 0x124}, @nested={0x4, 0x62}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x10000}]}, @nested={0x32, 0x132, 0x0, 0x1, [@generic="1251d6cd16be46b554873d13d1c73caeec3787f134731e165cb9e42092c6", @nested={0x4, 0x76}, @typed={0x8, 0x12b, 0x0, 0x0, @uid}, @nested={0x4, 0x1}]}, @generic="36a441dc7e6645e915e77b9f72a936930acca3dc78664e55b3fb6fe85f9f9862c5395d0bd756f89b7495628aa9f705aeca3cc6d29dcedb5af5d3addf7deccb75e1aa1f27bbca8adb103f1cf1c4dfde574e59e1be9c0c209c2365e0ec8cb1cc1eba47330ec699f655083e260cedb1ff541294bd50b548b8f8d1b616e985338ac6337ca0307c05b312ed1eab8858ed3574723d7b8117b8357dcc36d80db3babd27ac4ee3885b9d0819d348ca38cc8d07b8829c6888e90120d533a0e6db55541bf26db9"]}, 0x218}, {&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x16c}, {&(0x7f0000000fc0)={0x150, 0x12, 0x0, 0x70bd28, 0x25dfdbfc, "", [@generic="a68cc03d5c8277d3a1c8752d33b67114d749fa322f6fd37cba23555e38c6898b40f588ee9fcb18dbe2ab33fda5e469e17e320389c2c8594d4d7539beb0ea95d7d0a97b58483af57112013da3ad2057061f9d9df898527de5d354f073dcfda11dc0a12d231b48f7780abdfadb717c08e72b04d0e56b24a05df1ffa2a4b26b06338115250e8a10c0603bf2287f1703cc9f8699dfa66ed094c1771a18aad9f044769972d6a38c6953f17ee7871f9d84fbdf9bf6c90c12f6727308bfd0b47c1b3d6f27410855b8cadfbda422dd10", @nested={0x73, 0x140, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @pid}, @generic="8212f1", @typed={0x4, 0x92}, @typed={0x6, 0x21, 0x0, 0x0, @str=',\x00'}, @nested={0xc, 0x68, 0x0, 0x1, [@nested={0x4, 0x111}, @nested={0x4, 0x103}]}, @generic="a1773db08896b14e9d01d0d311721de00156f5cc8a7613ce71511ac3f9fc0d63a932f9a5ebd0aee13be2cdf03e523f67", @typed={0x1c, 0x28, 0x0, 0x0, @str='/selinux/avc/hash_stats\x00'}]}]}, 0x150}], 0x4, 0x0, 0x0, 0x2000044}, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000980)=ANY=[]) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x28, 0x2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 21.600169431s ago: executing program 4 (id=3992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x9, 0x7}}, 0x30) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000e1f000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/245, 0xf5, 0x0, &(0x7f0000000000)=""/97, 0x61}, &(0x7f0000000200)=0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.506620583s ago: executing program 2 (id=3993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005907350082"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a"], 0xb8}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005907350082"], 0xc4}}, 0x2c000010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a"], 0xb8}}, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x8) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) (async) 21.379735666s ago: executing program 2 (id=3994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000580)={0x0, 0x7, 0x56a5}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 32) read$eventfd(r1, &(0x7f0000000080), 0x8) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) (rerun: 32) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$getflags(r3, 0x401) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0x8}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0x9, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x20, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64) 21.320370577s ago: executing program 4 (id=3995): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3000001, 0x12, r0, 0x978ee000) 21.230622619s ago: executing program 2 (id=3996): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000002680)=""/4118, 0x1016}, {&(0x7f0000002580)=""/232, 0xe8}, {&(0x7f0000000140)=""/61, 0x3d}], 0x7}, 0xc98}], 0x1, 0x2100, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000100) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r2 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, 0x0, &(0x7f0000002140)) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x9, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xac, 0x0, &(0x7f0000000680)=[@release={0x40046306, 0x1}, @acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x0, 0x2a}, @flat=@weak_handle={0x77682a85, 0x100}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/86, 0x56, 0x2, 0x5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0xb6, 0x0, &(0x7f0000000780)="93c19dbd75722796e8c64742fbf0210579580e6536dc9d5c3286fc7ac68488c3d326d7715e029f41fbea1ef565601eb4e8d37e777dead79398885e84fd8106c2bed92a8fece391940292b2a00f5238ea512cf623898135297cc163b5f5b84ccb78f34f8a3f5e4a47be6f4f859f5d07c8e571792b5b4b9da267382909e035b0bf62f7870e630960eab4bd06a18773b68cdd66f462d00280bcffba4beab0f610016d2ed8416e4a42de884952bf3f703ae1780b1b16c6b4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) 21.229179019s ago: executing program 4 (id=3997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb4000040"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 21.16976662s ago: executing program 2 (id=3998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/122, 0x7a) fallocate(0xffffffffffffffff, 0x10, 0x7fffffffffffffff, 0x1000) setpriority(0x2, 0x0, 0xd2f4) r1 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40900a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0xfffffffffffffffe, 0x9, {0x880, 0x10, 0x0, {0x4, 0x80000000, 0x1000, 0x1, 0x2, 0x5, 0xa44, 0xe, 0xe23, 0x8000, 0x5, 0x0, r4, 0xbf5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r5, 0x5, &(0x7f0000000600)=0x5cf5) r6 = gettid() capget(&(0x7f0000000080)={0x20071026, r6}, &(0x7f00000000c0)={0xee96, 0x8, 0x3, 0x8, 0x7}) read$FUSE(0xffffffffffffffff, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000005ac0)='./file0\x00', 0x6000, 0x80, &(0x7f0000005b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000005c00), 0x40) socketpair$tipc(0x1e, 0xb71e7e621a1a0719, 0x0, &(0x7f0000005c40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000005c80), 0x2, 0x0) r12 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r13, r13, 0x0) lstat(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005d80)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, &(0x7f0000005e80)=0xe8) stat(&(0x7f0000005ec0)='./file0\x00', &(0x7f0000005f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000060c0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)="c0e3b665b52abb618dfc75f0d69447328c133ad0cac9e5aa8a2b46a507046614cada2634b186e8dd3498992ae54b74d8ec0b7560426f1745946510890d20269bd5a0f5e683fbef1ec44255c260b3aa54a5729c4fab862830598a75c732b0f9bff16adac5fbf84f70615e5937492c77515175649021cf8833918e4868cb285c6c3e6ac7ea081cfea6d07930a36e3a1ca847afea36315e973f2901704415153b07a30eb1897194d4ed0d6640ed4666e1fcf53ba9", 0xb3}, {&(0x7f0000000280)="a23d5f03dafc76fdcc434934a8809205306a943735b19497d298ba921f1efba0db29136511e0edcc08607f4aa1aeb2754f2ccfc23d861263c6160f68ca3bf21e01431e263c8dd89a7cd5cbf3836ee855d0fd9f759a678271469f49d6f715aa58b7cec51ed481320449d0891fbeba7fe3987cd50cd3eee8282df295a2b4304072798ebdf6989d8644d7be3aa12be6e167951f21124ee830d11f0bd224f210b6e0afce698925443e5e3ae91c6254029b874e5e723abdbb7a843c312361d7cb54aab5a5", 0xc2}, {&(0x7f0000000380)="676dc2d0da96a451850ae7c719d4ecfef415ea54d369c3d5f3be1f076d0df9cc953a8bc6d6e8cf02ea7269b71a90e517d82b12d3278a100e0d8795adab910e2c743227fd17bef0b31d34cb260e274998eb2fdd247cc0e7de2053a6b0d4db4e0fe15d44631babbc770905299ae117da5628c2b61520b82d00899c22c7ed8eaf71d42820360407b9180b0c385b2adc04aa9a0fd9be90e3b63e2ed1533dfa4346d6999c0f52e22d990b67933b99d247c50dfcfe06fca9f23f899a67a5bb2a456b", 0xbf}, {&(0x7f0000000000)="27c529117369fc31c5d3719ce5765eba49e8419d412ee87f6139", 0x1a}], 0x4, &(0x7f00000061c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ef2800"/20, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4004000}}, {{&(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="97882a78ed97844e5db7ca2e64041914891155e6c3b3d430783d5487daa49c9d8048c716c401a6e4b79f4d9e5209cbd664a58169b1e3b075d80c8f7e9cfc8bb44610df7846e7f155d263363ed96a0a943922bfe08c75b10c763c60f7a76823fb43874f06dc5b09dceb1b7d51274174a7e5245366239df3c4baceef3d28fd7dff5dd628f128d981c477595c3b20059c601294659891254ff4dfb249ca40a5d0140a3a6d539b", 0xa5}, {&(0x7f0000001b00)="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", 0x1000}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRESDEC=r16, @ANYBLOB="000000001c000000000000000100000002000000a3906c042c1f61536ff44cd2ac9aec04c1cbfdb86c1c35cbd028587c9be625c67ca1ea3d047ca97f", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x801}}, {{&(0x7f0000002f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002f80)="2a3bc6dd467b523c41675aa8cdae79cced62edc28b8d7270f30be0932094d821494602ca405a5d18ce619f9b91bf683c37073ed39dd6df918c3f0d111be7e13f00c8cfbaf74d6bb81812c9c735e8873cd304353a95b2a6120de128075953e60511d19540993bf51ef67e4b80539f52daf2daae6ecb4ae3c9b03b68d94cbe0426e2d2903dac043998aa5cfd2d6e7dc2f704ac95270b0ada6e4a107a1bba2afcc4181f4080816c9a2722bdd0a51eb3a1c1a8d9e14fdddca5c1550bed8c2dc5b59c30cb354a3ad3c5dcae1b74fdf567bf422d022dff240114fd2a", 0xd9}, {&(0x7f0000003080)="23a6494d4909d5492c150ad15ea7a51ce47880033d3d3781389f0c36e4bd10c4535cde642269f4b6720bc3d0859a992d51264fb0da5158a16add691808c79a9cbb4a1df357ac4ef32dabac891a8e29b594fedd3cea1d895034abc51e1a5599c03c5da27a3c895f2b49cf9aa4c5c225d4c4c5eb", 0x73}], 0x2, 0x0, 0x0, 0x4014}}, {{&(0x7f0000003140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f00000031c0)="b1b348b84cfff980b2f7cdc875aa7a58edb804143192ae0091977a578489c321d8118447607e372547c356d0831ddd1ad18b2a41228e81f79d9fc469a618d105d08eeaa4efbc0270d599e2bf0d98d87b13cd91ee15a26f2010", 0x59}, {&(0x7f0000003240)="92ebd9abff5049a165db5c549aaf0dc9a02b11b3f8f1df916df661c5ac", 0x1d}, {&(0x7f0000003280)="e9b01e42cc206399ddb34f84a3b2625f4c4b25e49293ee81fb7c52aabe2f83f330a8f26634b8ccc65f5feead340159b754a833b8e627f95080cb73ee9bc3b3c9039325cfe47695e134d99fa0f0cbde7f844acb2389b0b261cf78605311dee1f0767444b717b44afbc47a109f15af786b4f0250d9e87f13ecefc200a55cf619130f939e893da52d4c97e7b46241ce2d85fa7274e4271352e4490b6736b7ba35a1664c890ce52dc5152f1974ee005966354fd2f57c39eadb4b7d490674f94bf9906635c3f0", 0xc4}, {&(0x7f0000003380)="329a757487096f340503e20eeffc4fd96bf78f0fdd63b047508a577ba22c4e366a3bd3a69603e31ec6c9962471565c4e760fe39d5358464534d5ab0680fe096bfa4b98f326ddccc53646564b466589f109b79055112d7c94b23c28f0e63a9d817aafc132efdb8a64ce2d036ece14502ccabcc71f31da362f59db55bd30e331c86c732614c138a599fdf5199ef62e8b1cb1c5ad59a2dd2d025fb72357010747c076b42b57c5757bd298628238153cb24e784deb", 0xb3}, {&(0x7f0000003440)="67081ad62d6c69e1af1aafa73adff3fc09450c40bb3f28a3cbcfe2e195c4f04d5f577ebaa63793fe7dac1320a7ade272401a61eb35e62ed1a85299daf504e8a08f62ed33eb780d357d0deed255b79aa04acfffbd7f805d3ce029060ddb6efcb3c4294c1bce3bbfa34507256af00fc2d53079bcfa04b0695a30", 0x79}, {&(0x7f00000034c0)="e9d4372e7d3aa2508cb7fd83daa4aff54609e517ae17c852b3c5d70b294a8e89cd9090c5a2366b4e175c1bd44f2ee0c5ba012aaa103ca14a15a304b4cc8c961c1fe2427c64a7f6b906af6e1f5df192a5191bb9e0e800cf84ed08b622c2c33663d4ecc046ee6983ae145c6b179225f9651531fd553f8c4eabdd08e995f5c8bcf307d616f4f96e024054e86dcd0979add83c98fec2d31e5cc20ae55390daff9a7b1b287bb7b0d249a0668a249e38ac03bc8035b4bc2bdedcc986c9c143b0df7b8b81fbbfc0543090d62fedfee21ca41613eb951a9819fbb2f084c5608c4869fdb0d2fb1491b95dde925b08bd036a2cc0edc13eafcae14a23bf8fb263d2f5", 0xfd}, {&(0x7f00000035c0)="d226c67c0bd1df09841196962046928172d7d59195b38a754609f1e85e2621f8fbba0330103f7efe16a4ed89bf5be504fe", 0x31}, {&(0x7f0000003600)="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", 0xff}], 0x8, &(0x7f0000005f80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000600000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x20000040}}], 0x4, 0x44004850) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) 20.910891305s ago: executing program 3 (id=3999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x48201, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000140)=0x1, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x22020400) close_range(r2, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x200000, 0x2d) setsockopt$bt_hci_HCI_TIME_STAMP(r10, 0x0, 0x3, &(0x7f0000000040)=0xc6b0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 20.810632367s ago: executing program 4 (id=4000): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = fsopen(&(0x7f0000001980)='tmpfs\x00', 0x0) socket$inet(0x2, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000019c0)='uid', &(0x7f0000001a00)='./file0\x00', 0xffffffffffffffff) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20401040}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6e419f50}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x413}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe95}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) write$P9_RREAD(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="32000000750200270047e976c65e189e9187f099465de7779512f087ad0900006b7192411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459"], 0x32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 20.707502339s ago: executing program 4 (id=4001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109025c0002018010060904000001020d000005240600010524002aab0d240f0105000000ff0f0800a906241a04000209058103100079810109040009058202000207002309050302000206090900"/110], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.62055344s ago: executing program 1 (id=4002): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x840) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000780)={0x0, 0xf, 0x2, "c257"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000000)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="20840200000006"], 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 20.250311397s ago: executing program 2 (id=4003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r6 = geteuid() quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$P9_RGETLOCK(r8, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)=0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) geteuid() (async) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) pipe2(&(0x7f0000001040), 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) (async) write$P9_RGETLOCK(r8, 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)=0x5) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 19.968965633s ago: executing program 3 (id=4004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82abcbf5e6ac", 0x6}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d00010000000000000000000a00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82abcbf5e6ac", 0x6}], 0x1}}], 0x1, 0x4404c880) (async) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d00010000000000000000000a00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) (async) epoll_create(0x101) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 18.009297001s ago: executing program 4 (id=4005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) fadvise64(r1, 0x8000000000000001, 0x80, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffff090, 0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x40, 0x0, [{}, {@loopback}, {@broadcast}, {@initdev}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 15.49588711s ago: executing program 1 (id=4006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r1) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000800"], 0x18}, 0x40080) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.177177479s ago: executing program 33 (id=4003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r6 = geteuid() quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) write$P9_RGETLOCK(r8, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)=0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00'}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) geteuid() (async) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) getpeername$netlink(r0, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) pipe2(&(0x7f0000001040), 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) (async) write$P9_RGETLOCK(r8, 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)=0x5) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 3.936669364s ago: executing program 34 (id=4004): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82abcbf5e6ac", 0x6}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d00010000000000000000000a00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1}, 0x40) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="82abcbf5e6ac", 0x6}], 0x1}}], 0x1, 0x4404c880) (async) sendto$inet6(r3, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)=ANY=[@ANYBLOB="200000001d00010000000000000000000a00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) (async) epoll_create(0x101) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.341400625s ago: executing program 35 (id=4005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) fadvise64(r1, 0x8000000000000001, 0x80, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffff090, 0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x40, 0x0, [{}, {@loopback}, {@broadcast}, {@initdev}]}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xf1, 0xa, 0x80, 0x8, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xbd, 0x20, 0xf, [{{0x9, 0x4, 0xf8, 0x8, 0x0, 0x7a, 0xf5, 0x4c, 0x5}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 36 (id=4006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r1) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x40, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000800"], 0x18}, 0x40080) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ng state [ 298.691970][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.699041][ T9820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.723383][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.730830][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.741628][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.748723][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.758155][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.765294][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.794632][ T9820] veth0_vlan: entered promiscuous mode [ 298.806977][ T9820] veth1_macvtap: entered promiscuous mode [ 298.923808][ T9839] netlink: 328 bytes leftover after parsing attributes in process `syz.1.3069'. [ 299.013205][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 299.029535][ T9847] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 299.433320][ T9871] overlayfs: failed to clone upperpath [ 299.743376][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.743420][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.749992][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.756214][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.762414][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.768626][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.774854][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.781075][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.787304][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.793523][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.799691][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.805954][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.812225][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.818373][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.824501][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.825285][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 299.832667][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.838408][ T45] asix 5-1:0.0: probe with driver asix failed with error -71 [ 299.848001][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.855115][ T45] usb 5-1: USB disconnect, device number 3 [ 299.863446][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.872571][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.878773][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.884882][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.891002][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.897104][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.903420][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.910067][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.916182][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.922346][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.928580][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.934705][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.940893][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.947009][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.953130][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.959262][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.965344][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.971486][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.977579][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.983803][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.990496][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 299.996785][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.004825][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.011306][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.017561][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.023709][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.029962][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.036086][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.042325][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.048536][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.054624][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.060812][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.066931][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.073256][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.080103][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.086208][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.092390][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.098531][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.104626][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.111112][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.117223][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.123361][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.129483][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.135565][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.141916][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.148220][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.154346][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.160475][ T9900] rust_binder: Write failure EFAULT in pid:11 [ 300.246658][ T9913] tipc: Started in network mode [ 300.261608][ T9913] tipc: Node identity , cluster identity 4711 [ 300.268039][ T9917] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 300.270007][ T9913] tipc: Failed to set node id, please configure manually [ 300.285305][ T9913] tipc: Enabling of bearer rejected, failed to enable media [ 300.448968][ T9952] tipc: Started in network mode [ 300.453972][ T9952] tipc: Node identity ee18b38df6ae, cluster identity 4711 [ 300.461497][ T9952] tipc: Enabled bearer , priority 0 [ 300.469765][ T9952] batadv_slave_0: entered promiscuous mode [ 300.476626][ T9952] batadv_slave_0: left promiscuous mode [ 300.486529][ T9952] tipc: Disabling bearer [ 300.527487][ T9965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 300.550873][ T9972] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 300.568371][ T9972] rust_binder: Write failure EINVAL in pid:31 [ 300.641245][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 300.641267][ T36] audit: type=1400 audit(2000000052.142:39108): avc: denied { create } for pid=9978 comm="syz.2.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 300.882587][ T36] audit: type=1400 audit(2000000052.382:39109): avc: denied { read write } for pid=10010 comm="syz.4.3130" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.926231][ T36] audit: type=1400 audit(2000000052.382:39110): avc: denied { open } for pid=10010 comm="syz.4.3130" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.950745][ T36] audit: type=1400 audit(2000000052.412:39111): avc: denied { map } for pid=10010 comm="syz.4.3130" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.032276][T10024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.032317][T10024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 301.161962][T10033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.171519][T10033] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 301.192595][ T36] audit: type=1400 audit(2000000052.692:39112): avc: denied { ioctl } for pid=10034 comm="syz.4.3139" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 301.331129][T10038] rust_binder: Fixups oob 165 172 361 173 [ 301.331163][T10038] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 301.337067][T10038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.349515][T10038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 301.544332][T10042] overlay: Unknown parameter 'subj_type' [ 301.575340][ T36] audit: type=1400 audit(2000000053.072:39113): avc: denied { sys_module } for pid=10043 comm="syz.2.3143" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 301.618086][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 301.789430][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 301.802547][ T45] usb 5-1: can't read configurations, error -61 [ 301.938075][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 302.056285][T10078] 9pnet_fd: Insufficient options for proto=fd [ 302.099510][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.108291][ T45] usb 5-1: can't read configurations, error -61 [ 302.120644][ T45] usb usb5-port1: attempt power cycle [ 302.138054][ T403] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 302.299195][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.310811][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.320962][ T403] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 302.336001][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.348293][ T403] usb 2-1: config 0 descriptor?? [ 302.468064][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 302.489878][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.497632][ T45] usb 5-1: can't read configurations, error -61 [ 302.628672][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 302.669679][ T45] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 302.678148][T10091] netlink: 'syz.2.3159': attribute type 11 has an invalid length. [ 302.686101][ T45] usb 5-1: can't read configurations, error -61 [ 302.692821][ T45] usb usb5-port1: unable to enumerate USB device [ 302.700467][T10092] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 302.710432][T10093] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 302.755918][ T403] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 302.763993][ T403] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 302.772077][ T403] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 302.780217][ T403] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 302.788922][ T403] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 302.808261][ T403] playstation 0003:054C:0DF2.001C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 303.367545][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.376495][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.393070][ T403] playstation 0003:054C:0DF2.001C: Failed to retrieve feature with reportID 5: -71 [ 303.408987][ T403] playstation 0003:054C:0DF2.001C: Failed to retrieve DualSense calibration info: -71 [ 303.418753][ T403] playstation 0003:054C:0DF2.001C: Failed to get calibration data from DualSense [ 303.428201][ T403] playstation 0003:054C:0DF2.001C: Failed to create dualsense. [ 303.443150][ T403] playstation 0003:054C:0DF2.001C: probe with driver playstation failed with error -71 [ 303.454889][ T403] usb 2-1: USB disconnect, device number 77 [ 303.619156][T10140] overlayfs: failed to clone upperpath [ 303.643854][T10145] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 303.748200][ T403] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 303.899282][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.910563][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.920340][ T403] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.933249][ T403] usb 2-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.00 [ 303.942388][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.951156][ T403] usb 2-1: config 0 descriptor?? [ 304.161917][T10106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.171607][T10106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.584621][T10106] tipc: Enabled bearer , priority 0 [ 304.592923][ T403] usbhid 2-1:0.0: can't add hid device: -71 [ 304.599567][T10105] tipc: Disabling bearer [ 304.600393][ T403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.616952][ T403] usb 2-1: USB disconnect, device number 78 [ 304.797902][ T45] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 304.816840][T10197] No source specified [ 304.957896][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 304.964204][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 304.975715][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.988736][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 304.997964][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.006829][ T45] usb 5-1: config 0 descriptor?? [ 305.215312][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 305.224704][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 305.236263][ T45] usb 5-1: USB disconnect, device number 8 [ 305.748041][T10250] __vm_enough_memory: pid: 10250, comm: syz.4.3212, bytes: 18014402804453376 not enough memory for the allocation [ 305.750708][ T403] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 305.762178][T10250] __vm_enough_memory: pid: 10250, comm: syz.4.3212, bytes: 18014402804453376 not enough memory for the allocation [ 305.803183][T10254] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.862975][ T36] audit: type=1400 audit(2000000057.363:39114): avc: denied { execute } for pid=10253 comm="syz.4.3213" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.928928][ T403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.940987][ T403] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 305.951093][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.959236][ T403] usb 2-1: Product: syz [ 305.963505][ T403] usb 2-1: Manufacturer: syz [ 305.968194][ T403] usb 2-1: SerialNumber: syz [ 305.978129][ T403] usb 2-1: config 0 descriptor?? [ 306.282271][ T403] usb 2-1: bad CDC descriptors [ 306.291069][ T403] usb 2-1: unsupported MDLM descriptors [ 306.303922][ T403] usb 2-1: USB disconnect, device number 79 [ 306.341056][T10269] overlayfs: failed to clone upperpath [ 306.368818][T10271] tipc: Enabling of bearer rejected, failed to enable media [ 306.797373][T10286] netlink: 'syz.1.3224': attribute type 6 has an invalid length. [ 306.805195][T10286] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3224'. [ 306.926184][T10290] incfs: Error accessing: ./file0. [ 306.926201][T10291] incfs: Error accessing: ./file0. [ 306.931523][T10290] incfs: mount failed -20 [ 306.936569][T10291] incfs: mount failed -20 [ 306.957441][T10295] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 306.969123][T10295] overlayfs: missing 'lowerdir' [ 306.986769][T10297] overlayfs: failed to clone upperpath [ 307.031812][T10306] tipc: Enabling of bearer rejected, failed to enable media [ 307.051959][T10308] overlayfs: failed to clone upperpath [ 307.330471][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 307.345700][T10339] rust_binder: Write failure EINVAL in pid:74 [ 307.705110][T10350] rust_binder: Write failure EFAULT in pid:85 [ 307.774108][T10354] rust_binder: 10353 RLIMIT_NICE not set [ 307.780405][T10352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 307.791245][ T403] rust_binder: 10351: removing orphan mapping 0:4248 [ 307.862776][T10358] 9pnet_fd: Insufficient options for proto=fd [ 308.011763][T10368] tipc: Enabling of bearer rejected, failed to enable media [ 308.097631][T10384] netlink: 'syz.3.3257': attribute type 1 has an invalid length. [ 308.900713][ T36] audit: type=1400 audit(2000000060.403:39115): avc: denied { setattr } for pid=10407 comm="syz.2.3264" name="secretmem" dev="secretmem" ino=63920 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 308.982365][T10421] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 309.029905][T10430] batadv_slave_1: entered promiscuous mode [ 309.052756][T10429] batadv_slave_1: left promiscuous mode [ 309.351692][T10454] overlayfs: failed to clone upperpath [ 309.395404][T10462] overlayfs: failed to resolve './file1': -2 [ 309.435574][T10471] netlink: 'syz.3.3285': attribute type 63 has an invalid length. [ 309.443561][T10471] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3285'. [ 309.452707][T10471] gretap0: entered allmulticast mode [ 309.458328][T10471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.480428][T10473] netlink: 'syz.3.3285': attribute type 63 has an invalid length. [ 309.488456][T10473] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3285'. [ 310.077686][ T541] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 310.237611][ T541] usb 5-1: Using ep0 maxpacket: 16 [ 310.245487][ T541] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 310.255233][ T541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.263641][ T541] usb 5-1: Product: syz [ 310.268090][ T541] usb 5-1: Manufacturer: syz [ 310.272714][ T541] usb 5-1: SerialNumber: syz [ 310.282416][ T541] usb 5-1: config 0 descriptor?? [ 310.290643][ T541] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 310.299790][ T541] usb 5-1: Detected FT232H [ 310.500450][T10487] __vm_enough_memory: pid: 10487, comm: syz.4.3289, bytes: 141733920768 not enough memory for the allocation [ 310.512808][ T541] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 310.522534][ T541] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 310.529882][ T541] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 310.540339][ T541] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 310.549917][ T541] usb 5-1: USB disconnect, device number 9 [ 310.558771][ T541] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 310.569147][ T541] ftdi_sio 5-1:0.0: device disconnected [ 310.667638][ T65] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 310.669852][T10526] 9p: Unknown Cache mode or invalid value mmap¦ï9õwï¹ÂÆOGµvÎÃÚµ­½%ØÃ¢G(=œü ¨ë²#ÔAS”P^ „·§ Åac¤ [ 310.818760][ T65] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.828843][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.835454][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 310.844581][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.853291][ T65] usb 2-1: config 0 descriptor?? [ 311.268418][ T65] ryos 0003:1E7D:3138.001D: collection stack underflow [ 311.276823][ T65] ryos 0003:1E7D:3138.001D: item 0 4 0 12 parsing failed [ 311.287963][ T65] ryos 0003:1E7D:3138.001D: parse failed [ 311.298536][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'. [ 311.307610][ T65] ryos 0003:1E7D:3138.001D: probe with driver ryos failed with error -22 [ 311.364629][T10551] cgroup2: Unknown parameter 'net_cls' [ 311.399305][T10563] rust_binder: 202: no such ref 0 [ 311.404854][T10570] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 311.413913][T10570] rust_binder: Write failure EINVAL in pid:202 [ 311.414128][T10563] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 311.476496][ T403] usb 2-1: USB disconnect, device number 80 [ 311.505975][ T36] audit: type=1326 audit(2000000063.003:39116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.2.3325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59e4f8ec29 code=0x0 [ 311.528073][T10592] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 311.538172][T10592] rust_binder: Write failure EINVAL in pid:210 [ 311.538493][T10592] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 311.551984][T10592] rust_binder: Write failure EINVAL in pid:210 [ 311.581226][T10595] rust_binder: Error while translating object. [ 311.587513][T10595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 311.593700][T10595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:212 [ 312.032838][T10602] bridge0: port 3(veth0_to_bridge) entered blocking state [ 312.049135][T10602] bridge0: port 3(veth0_to_bridge) entered disabled state [ 312.056292][T10602] veth0_to_bridge: entered allmulticast mode [ 312.062973][T10602] veth0_to_bridge: entered promiscuous mode [ 312.069101][T10602] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.081449][T10602] bridge0: port 3(veth0_to_bridge) entered blocking state [ 312.088604][T10602] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 312.198780][ T36] audit: type=1400 audit(2000000063.703:39117): avc: denied { listen } for pid=10616 comm="syz.4.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 312.350751][ T36] audit: type=1400 audit(2000000063.853:39118): avc: denied { create } for pid=10622 comm="syz.2.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 312.401612][T10636] overlayfs: failed to clone upperpath [ 312.482761][T10652] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 312.857682][T10662] rust_binder: Write failure EINVAL in pid:105 [ 312.876994][T10664] __vm_enough_memory: pid: 10664, comm: syz.1.3350, bytes: 18014402804453376 not enough memory for the allocation [ 312.919213][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 313.009325][T10676] fuse: Bad value for 'fd' [ 313.044037][T10680] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3357'. [ 313.083737][T10683] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 313.114244][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 313.167654][ T541] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 313.240450][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 313.317437][ T541] usb 2-1: Using ep0 maxpacket: 16 [ 313.323838][ T541] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.334143][ T541] usb 2-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.347147][ T541] usb 2-1: config 1 interface 0 has no altsetting 0 [ 313.354538][ T541] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.363655][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.371713][ T541] usb 2-1: SerialNumber: syz [ 313.583980][ T541] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 313.591910][ T541] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 313.598399][ T541] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 313.607231][ T541] usb 2-1: USB disconnect, device number 81 [ 314.273897][ T36] audit: type=1400 audit(2000000065.773:39119): avc: denied { view } for pid=10704 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 314.507396][ T541] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 314.657348][ T541] usb 2-1: Using ep0 maxpacket: 8 [ 314.663540][ T541] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 314.671778][ T541] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.681915][ T541] usb 2-1: config 0 has no interface number 0 [ 314.688045][ T541] usb 2-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 314.702791][ T541] usb 2-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21 [ 314.711913][ T541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.719965][ T541] usb 2-1: Product: syz [ 314.724125][ T541] usb 2-1: Manufacturer: syz [ 314.728752][ T541] usb 2-1: SerialNumber: syz [ 314.733960][ T541] usb 2-1: config 0 descriptor?? [ 314.739829][ T541] usb 2-1: bad CDC descriptors [ 314.941590][T10705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 314.941619][T10705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 314.951948][ T403] usb 2-1: USB disconnect, device number 82 [ 315.267337][ T1427] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 315.267366][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 315.373972][T10713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.374093][T10713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 315.520108][T10729] netlink: 'syz.4.3375': attribute type 28 has an invalid length. [ 315.591987][T10732] rust_binder: Fixups oob 165 172 361 173 [ 315.592009][T10732] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 315.597897][T10732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 315.606290][T10732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 315.737333][ T403] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 315.897348][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 315.906038][ T403] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 315.914348][ T403] usb 2-1: config 0 has no interface number 0 [ 315.920578][ T403] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.931493][ T403] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 315.943175][ T403] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 315.954338][ T403] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 315.964303][ T403] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.979122][ T403] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 315.988335][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.996333][ T403] usb 2-1: Product: syz [ 316.000568][ T403] usb 2-1: Manufacturer: syz [ 316.005210][ T403] usb 2-1: SerialNumber: syz [ 316.010612][ T403] usb 2-1: config 0 descriptor?? [ 316.015883][T10723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.058506][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.078142][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.090125][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 316.099638][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.117437][ T9] usb 5-1: config 0 descriptor?? [ 316.225384][T10723] rust_binder: Error while translating object. [ 316.225459][T10723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 316.231984][T10723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:119 [ 316.244583][ T403] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 316.269734][ T403] scsi host1: usb-storage 2-1:0.189 [ 316.278662][ T403] usb 2-1: USB disconnect, device number 83 [ 316.390120][ T13] ip6gretap0: left allmulticast mode [ 316.395525][ T13] ip6gretap0: left promiscuous mode [ 316.401312][ T13] bridge0: port 3(ip6gretap0) entered disabled state [ 316.408998][ T13] bridge_slave_1: left allmulticast mode [ 316.414829][ T13] bridge_slave_1: left promiscuous mode [ 316.420831][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.428939][ T13] bridge_slave_0: left allmulticast mode [ 316.434640][ T13] bridge_slave_0: left promiscuous mode [ 316.440737][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.569471][ T13] tipc: Left network mode [ 316.575329][ T13] veth1_macvtap: left promiscuous mode [ 316.581167][ T13] veth0_vlan: left promiscuous mode [ 316.936717][ T9] hid-led 0003:27B8:01ED.001E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 316.970997][ T36] audit: type=1400 audit(2000000068.473:39120): avc: denied { accept } for pid=10805 comm="syz.3.3397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.980406][ T9] hid-led 0003:27B8:01ED.001E: ThingM blink(1) initialized [ 317.037096][T10814] fuse: Unknown parameter 'fŽ' [ 317.147868][ T403] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 317.203543][ T364] usb 5-1: USB disconnect, device number 10 [ 317.317198][ T403] usb 2-1: Using ep0 maxpacket: 8 [ 317.326683][ T403] usb 2-1: unable to get BOS descriptor or descriptor too short [ 317.336161][ T403] usb 2-1: config 6 has an invalid interface number: 201 but max is 0 [ 317.347291][ T403] usb 2-1: config 6 has no interface number 0 [ 317.353457][ T403] usb 2-1: config 6 interface 201 has no altsetting 0 [ 317.375823][ T403] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 317.387565][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.405761][ T403] usb 2-1: Product: syz [ 317.415856][ T403] usb 2-1: Manufacturer: syz [ 317.425962][ T403] usb 2-1: SerialNumber: syz [ 317.987182][ T364] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 318.019300][T10850] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 318.078928][T10858] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3414'. [ 318.137216][ T364] usb 5-1: Using ep0 maxpacket: 16 [ 318.143594][ T364] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 318.160721][ T364] usb 5-1: config 0 has no interface number 0 [ 318.166887][ T364] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 318.195175][ T364] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 318.216290][ T364] usb 5-1: config 0 interface 41 has no altsetting 0 [ 318.232164][ T364] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.252139][ T364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.269068][ T364] usb 5-1: Product: syz [ 318.273313][ T364] usb 5-1: Manufacturer: syz [ 318.288862][ T364] usb 5-1: SerialNumber: syz [ 318.299733][ T364] usb 5-1: config 0 descriptor?? [ 318.305130][T10848] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.312725][T10848] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.595899][T10848] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 318.616019][T10848] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 319.247460][ T364] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 319.568857][T10889] netlink: 'syz.3.3425': attribute type 3 has an invalid length. [ 319.589227][T10889] netlink: 944 bytes leftover after parsing attributes in process `syz.3.3425'. [ 319.719927][ T36] audit: type=1326 audit(2000000071.223:39121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10892 comm="syz.3.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf30f8ec29 code=0x0 [ 319.798315][ T403] ums-karma 2-1:6.201: USB Mass Storage device detected [ 319.834578][ T403] usb 2-1: USB disconnect, device number 84 [ 319.888240][T10912] rust_binder: Write failure EFAULT in pid:129 [ 319.946508][T10918] overlayfs: failed to clone upperpath [ 320.057449][ T36] audit: type=1400 audit(2000000071.564:39122): avc: denied { execmod } for pid=10936 comm="syz.3.3441" path="/dev/rnullb0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 320.277045][ T65] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 320.428162][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.439228][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.449049][ T65] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 320.458148][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.467012][ T65] usb 2-1: config 0 descriptor?? [ 320.499235][ T364] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 320.510098][ T364] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 320.519591][ T364] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 320.531802][ T364] usb 5-1: USB disconnect, device number 11 [ 321.047596][T10972] Unsupported ieee802154 address type: 0 [ 321.251601][T10996] FAT-fs (rnullb0): bogus number of reserved sectors [ 321.258430][T10996] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 321.274712][ T65] hid-led 0003:27B8:01ED.001F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 321.319647][ T65] hid-led 0003:27B8:01ED.001F: ThingM blink(1) initialized [ 321.477382][ T403] usb 2-1: USB disconnect, device number 85 [ 321.505592][T11033] fuse: Bad value for 'group_id' [ 321.524676][T11033] fuse: Bad value for 'group_id' [ 321.792461][T11060] __vm_enough_memory: pid: 11060, comm: syz.4.3477, bytes: 18014402804453376 not enough memory for the allocation [ 322.201285][T11074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.210104][T11074] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 322.221757][T11074] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.433178][T11101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.433455][T11101] rust_binder: Error while translating object. [ 322.440555][T11101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 322.447307][T11101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:166 [ 322.663485][T11157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 322.681462][ T36] audit: type=1326 audit(2000000074.184:39123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11158 comm="syz.2.3511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59e4f8ec29 code=0x0 [ 322.986947][ T65] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 323.095029][T11171] overlayfs: failed to clone upperpath [ 323.136994][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 323.142593][ T65] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 323.151774][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.159455][ T65] usb 2-1: can't read configurations, error -61 [ 323.193164][ T36] audit: type=1326 audit(2000000074.694:39124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11177 comm="syz.3.3519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf30f8ec29 code=0x0 [ 323.287662][ T65] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 323.436872][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 323.443423][ T65] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 323.452643][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.460368][ T65] usb 2-1: can't read configurations, error -61 [ 323.466774][ T65] usb usb2-port1: attempt power cycle [ 323.557510][ T36] audit: type=1400 audit(2000000075.064:39125): avc: denied { write } for pid=11188 comm="syz.2.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 323.593628][T11195] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3526'. [ 323.602842][T11195] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3526'. [ 323.612437][T11195] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3526'. [ 323.706813][T11204] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 323.806866][ T65] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 323.837378][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 323.843059][ T65] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 323.852481][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 323.860435][ T65] usb 2-1: can't read configurations, error -61 [ 323.996864][ T65] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 324.017270][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 324.022969][ T65] usb 2-1: too many configurations: 206, using maximum allowed: 8 [ 324.032419][ T65] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 324.040344][ T65] usb 2-1: can't read configurations, error -61 [ 324.046864][ T65] usb usb2-port1: unable to enumerate USB device [ 324.392468][T11220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.392768][T11220] rust_binder: Error while translating object. [ 324.399284][T11220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 324.405591][T11220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:315 [ 324.415639][T11222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.670879][ T36] audit: type=1326 audit(2000000076.174:39126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.694617][ T403] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 324.698296][ T36] audit: type=1326 audit(2000000076.174:39127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.726215][ T36] audit: type=1326 audit(2000000076.174:39128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.750012][ T36] audit: type=1326 audit(2000000076.174:39129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.773832][ T36] audit: type=1326 audit(2000000076.174:39130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.797750][ T36] audit: type=1326 audit(2000000076.174:39131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.821502][ T36] audit: type=1326 audit(2000000076.174:39132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11236 comm="syz.3.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdf30f8ec29 code=0x7ffc0000 [ 324.878576][ T403] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.888826][ T403] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 324.897858][ T403] usb 5-1: config 1 has no interface number 0 [ 324.904033][ T403] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.918658][ T403] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.927786][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.935813][ T403] usb 5-1: Product: syz [ 324.944556][ T403] usb 5-1: Manufacturer: syz [ 324.949229][ T403] usb 5-1: SerialNumber: syz [ 324.956134][ T403] usb 5-1: selecting invalid altsetting 1 [ 325.220940][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.229569][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.312010][T11256] overlayfs: failed to clone lowerpath [ 325.364669][T11268] fuse: Bad value for 'group_id' [ 325.369876][T11268] fuse: Bad value for 'group_id' [ 325.403914][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3548'. [ 325.430760][T11275] netlink: 'syz.3.3549': attribute type 27 has an invalid length. [ 325.846829][T11298] syz.1.3555 (11298) used obsolete PPPIOCDETACH ioctl [ 325.887842][T11298] rust_binder: Error in use_page_slow: ESRCH [ 325.887872][T11298] rust_binder: use_range failure ESRCH [ 325.893952][T11298] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 325.899606][T11298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 325.907696][T11298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 325.973266][T11302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3557'. [ 326.306704][ T65] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 326.468800][ T65] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.481337][ T65] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.490512][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.498583][ T65] usb 2-1: Product: syz [ 326.502827][ T65] usb 2-1: Manufacturer: syz [ 326.507493][ T65] usb 2-1: SerialNumber: syz [ 327.315946][ T65] cdc_ncm 2-1:1.0: bind() failure [ 327.322174][ T65] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 327.329019][ T65] cdc_ncm 2-1:1.1: bind() failure [ 327.335429][ T65] usb 2-1: USB disconnect, device number 90 [ 327.501351][ T403] cdc_ncm 5-1:1.1: bind() failure [ 327.515955][ T403] usb 5-1: USB disconnect, device number 12 [ 327.635102][T11352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.635236][T11352] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 327.833111][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 327.833133][ T36] audit: type=1400 audit(2000000079.334:39143): avc: denied { append } for pid=11357 comm="syz.1.3577" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.843360][T11358] loop4: detected capacity change from 0 to 8388608 [ 327.970405][T11369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11369 comm=syz.1.3579 [ 328.019337][T11376] /dev/rnullb0: Can't open blockdev [ 328.286585][ T403] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 328.296285][T11389] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3586'. [ 328.391741][T11393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11393 comm=syz.3.3589 [ 328.428537][T11402] binder: Bad value for 'stats' [ 328.446391][T11405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.446612][ T403] usb 2-1: Using ep0 maxpacket: 8 [ 328.459516][ T403] usb 2-1: too many endpoints for config 0 interface 0 altsetting 186: 255, using maximum allowed: 30 [ 328.471100][ T403] usb 2-1: config 0 interface 0 altsetting 186 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 328.485056][ T403] usb 2-1: config 0 interface 0 has no altsetting 0 [ 328.493676][ T403] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 328.502831][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.512001][ T403] usb 2-1: config 0 descriptor?? [ 328.527524][T11404] rust_binder: Write failure EINVAL in pid:338 [ 328.777921][ T403] usb 2-1: string descriptor 0 read error: -71 [ 328.792478][ T403] usbhid 2-1:0.0: can't add hid device: -71 [ 328.798672][ T403] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.807596][ T403] usb 2-1: USB disconnect, device number 91 [ 328.816569][ T330] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 328.966544][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 328.982292][ T330] usb 5-1: too many configurations: 104, using maximum allowed: 8 [ 329.001134][ T330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.008864][ T330] usb 5-1: can't read configurations, error -61 [ 329.069029][T11425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11425 comm=syz.2.3599 [ 329.146542][ T330] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 329.255555][T11471] futex_wake_op: syz.2.3618 tries to shift op by -1; fix this program [ 329.306552][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 329.312413][ T330] usb 5-1: too many configurations: 104, using maximum allowed: 8 [ 329.327270][ T330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.343965][ T330] usb 5-1: can't read configurations, error -61 [ 329.359225][ T330] usb usb5-port1: attempt power cycle [ 329.366783][T11478] binder: Unknown parameter '00000000000000000000003' [ 329.527204][ T65] rust_binder: 11490: removing orphan mapping 0:4208 [ 329.536022][T11494] fuseblk: Unknown parameter 'max_read¤' [ 329.546002][T11497] fuseblk: Unknown parameter 'max_read¤' [ 329.706552][ T330] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 329.726960][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 329.732506][ T330] usb 5-1: too many configurations: 104, using maximum allowed: 8 [ 329.741489][ T330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.749122][ T330] usb 5-1: can't read configurations, error -61 [ 329.827064][ T403] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 329.876522][ T330] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 329.901452][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 329.907379][ T330] usb 5-1: too many configurations: 104, using maximum allowed: 8 [ 329.917391][ T330] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 329.925263][ T330] usb 5-1: can't read configurations, error -61 [ 329.932023][ T330] usb usb5-port1: unable to enumerate USB device [ 329.976651][ T403] usb 2-1: Using ep0 maxpacket: 16 [ 329.983480][ T403] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 329.994071][ T403] usb 2-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 330.003260][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.011555][ T403] usb 2-1: Product: syz [ 330.015765][ T403] usb 2-1: Manufacturer: syz [ 330.020419][ T403] usb 2-1: SerialNumber: syz [ 330.239985][T11509] 9pnet_fd: Insufficient options for proto=fd [ 330.387213][ T403] usb 2-1: USB disconnect, device number 92 [ 331.176444][ T330] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 331.326442][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 331.332919][ T330] usb 2-1: config index 0 descriptor too short (expected 49, got 36) [ 331.341075][ T330] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.352087][ T330] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.361932][ T330] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.368565][ T330] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 331.377651][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.386289][ T330] usb 2-1: config 0 descriptor?? [ 331.793875][ T330] logitech-djreceiver 0003:046D:C52B.0020: item fetching failed at offset 1/5 [ 331.803070][ T330] logitech-djreceiver 0003:046D:C52B.0020: logi_dj_probe: parse failed [ 331.811413][ T330] logitech-djreceiver 0003:046D:C52B.0020: probe with driver logitech-djreceiver failed with error -22 [ 331.856401][ T65] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 331.986394][ T65] usb 5-1: device descriptor read/64, error -71 [ 331.995381][ T541] usb 2-1: USB disconnect, device number 93 [ 332.226443][ T65] usb 5-1: device descriptor read/64, error -71 [ 332.476374][ T65] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 332.582323][ T36] audit: type=1326 audit(2000000084.084:39144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11578 comm="syz.3.3659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x0 [ 332.616341][ T65] usb 5-1: device descriptor read/64, error -71 [ 332.821426][T11605] SELinux: security_context_str_to_sid () failed with errno=-22 [ 332.840649][T11608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 332.856364][ T65] usb 5-1: device descriptor read/64, error -71 [ 332.976434][ T65] usb usb5-port1: attempt power cycle [ 333.076366][ T330] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 333.174518][T11617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=11617 comm=syz.3.3672 [ 333.190244][T11617] /dev/loop0: Can't lookup blockdev [ 333.195858][T11617] /dev/loop0: Can't lookup blockdev [ 333.227470][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.238643][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 333.249585][ T330] usb 2-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 333.258934][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.275653][ T330] usb 2-1: config 0 descriptor?? [ 333.284286][T11607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 333.316303][ T65] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 333.337467][ T65] usb 5-1: device descriptor read/8, error -71 [ 333.467413][ T65] usb 5-1: device descriptor read/8, error -71 [ 333.495157][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 333.501194][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 333.512341][ T330] usb 2-1: USB disconnect, device number 94 [ 333.550487][T11632] tipc: Trying to set illegal importance in message [ 333.718689][ T65] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 333.792453][ T65] usb 5-1: device descriptor read/8, error -71 [ 333.939706][ T65] usb 5-1: device descriptor read/8, error -71 [ 334.058113][ T65] usb usb5-port1: unable to enumerate USB device [ 334.246273][ T330] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 334.397804][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.408962][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.419606][ T330] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 334.428902][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.439118][ T330] usb 2-1: config 0 descriptor?? [ 335.156450][T11671] tipc: Enabling of bearer rejected, failed to enable media [ 335.185236][T11671] overlayfs: failed to clone upperpath [ 335.255526][ T330] hid-led 0003:27B8:01ED.0021: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 335.298676][ T330] hid-led 0003:27B8:01ED.0021: ThingM blink(1) initialized [ 335.445156][T11674] veth1_macvtap: left promiscuous mode [ 335.457631][ T330] usb 2-1: USB disconnect, device number 95 [ 335.469057][T11674] macsec0: entered promiscuous mode [ 335.506229][T11674] veth1_macvtap: entered promiscuous mode [ 335.531581][T11674] macsec0: left promiscuous mode [ 335.557377][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3693'. [ 335.592196][T11676] tipc: Invalid UDP bearer configuration [ 335.592226][T11676] tipc: Enabling of bearer rejected, failed to enable media [ 335.713809][T11686] netlink: 'syz.4.3698': attribute type 3 has an invalid length. [ 335.908116][T11691] 9pnet_fd: Insufficient options for proto=fd [ 335.930561][T11694] 9pnet_fd: p9_fd_create_unix (11694): problem connecting socket: ./file0: -111 [ 335.940246][T11694] tmpfs: Unknown parameter '' [ 335.956274][ T330] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 336.002645][ T36] audit: type=1400 audit(2000000087.504:39145): avc: denied { append } for pid=11699 comm="syz.1.3702" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.127164][ T330] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 336.148205][ T330] usb 5-1: config 1 has no interface number 0 [ 336.154493][ T330] usb 5-1: config 1 interface 105 has no altsetting 0 [ 336.176904][ T330] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 336.196356][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.209414][ T330] usb 5-1: Product: syz [ 336.213633][ T330] usb 5-1: Manufacturer: syz [ 336.231043][ T330] usb 5-1: SerialNumber: syz [ 336.296655][T11706] rust_binder: Error in use_page_slow: ESRCH [ 336.296683][T11706] rust_binder: use_range failure ESRCH [ 336.313008][T11706] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 336.324782][T11706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 336.334801][ T36] audit: type=1400 audit(2000000087.834:39146): avc: denied { remount } for pid=11710 comm="syz.2.3706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 336.351356][T11706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:254 [ 337.061661][T11732] overlayfs: failed to clone upperpath [ 337.077591][ T330] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 337.340765][ T330] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 337.372189][ T330] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 337.389376][ T330] usb 5-1: USB disconnect, device number 21 [ 337.400288][ T330] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 337.469986][ T330] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 337.496577][ T330] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 337.516102][ T330] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 337.806034][ T403] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 337.966565][ T403] usb 2-1: Using ep0 maxpacket: 16 [ 337.983046][ T403] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 338.012775][ T403] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.048616][ T403] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.067222][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.085449][ T403] usb 2-1: Product: syz [ 338.094090][ T403] usb 2-1: Manufacturer: syz [ 338.104251][ T403] usb 2-1: SerialNumber: syz [ 338.282486][T11757] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 338.321098][ T403] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 338.374660][ T36] audit: type=1400 audit(2000000089.875:39147): avc: denied { mounton } for pid=11760 comm="syz.4.3726" path="/proc/366/cgroup" dev="proc" ino=70126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 338.719826][ T36] audit: type=1326 audit(2000000090.225:39148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11768 comm="syz.3.3728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x0 [ 338.808417][ T403] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 338.839273][ T403] usb 2-1: USB disconnect, device number 96 [ 338.893812][T11775] rust_binder: 11775 RLIMIT_NICE not set [ 338.917745][ T364] rust_binder: 11774: removing orphan mapping 0:1024 [ 338.943071][T11779] rust_binder: Read failure Err(EAGAIN) in pid:373 [ 339.084426][T11788] 9pnet_fd: Insufficient options for proto=fd [ 339.117867][ T36] audit: type=1400 audit(2000000090.625:39149): avc: denied { append } for pid=11786 comm="syz.1.3733" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 339.407799][T11793] binder: Unknown parameter 'defcontext01777777777777777777777' [ 339.441818][T11796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 339.501224][T11803] rust_binder: Error while translating object. [ 339.517293][T11803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 339.538458][T11803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 339.608331][T11815] tipc: Enabling of bearer rejected, failed to enable media [ 339.760036][T11824] netlink: 'syz.1.3745': attribute type 4 has an invalid length. [ 339.784986][T11824] FAT-fs (rnullb0): bogus number of reserved sectors [ 339.792956][T11824] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 339.820520][T11829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.831374][T11829] rust_binder: Write failure EINVAL in pid:280 [ 339.842230][T11829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.862003][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.881870][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.889867][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.897615][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.905721][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.913945][T11833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.914399][T11833] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 339.923721][T11833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.926921][T11831] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3747'. [ 339.931965][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.931999][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932029][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932061][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932103][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932134][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932164][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932194][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932223][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932262][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932308][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932338][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932367][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932396][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932426][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932455][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932493][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932522][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932552][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932582][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932612][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932642][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932671][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932701][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932731][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932799][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932829][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932859][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932888][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932918][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932948][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.932977][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933006][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933036][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933065][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933094][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933124][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933153][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933182][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933211][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933240][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933270][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933304][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933333][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933362][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933391][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933420][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933450][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.933485][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 339.982845][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.326686][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.334767][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.342359][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.350528][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.358071][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.365583][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.404957][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.421756][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.437275][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.465440][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.476539][T11850] batadv_slave_0: mtu less than device minimum [ 340.484970][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.502746][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.521773][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.536271][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.551555][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.565897][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.581519][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.596295][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.605695][T11855] rust_binder: 11855 RLIMIT_NICE not set [ 340.606099][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.627523][ T403] rust_binder: 11854: removing orphan mapping 0:1168 [ 340.635998][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.645974][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.653485][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.670800][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.679876][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.702135][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.716523][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.724175][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.733079][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.749207][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.758266][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.766042][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.777458][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.785142][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.794180][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.802171][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.809991][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.833002][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.840749][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.848759][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.857480][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.865129][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.875458][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.886511][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.894218][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.903020][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.910716][ T403] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 340.919807][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.928877][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.936801][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.944495][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.953390][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 340.984109][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.001912][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.013438][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.021543][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.046372][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.054562][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.062409][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.070132][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.077938][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.087046][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.094680][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.103367][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.103450][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.123567][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.132548][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.140262][ T403] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.151410][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.159082][ T403] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 341.175870][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.189877][ T403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.198118][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.210820][ T403] usb 2-1: config 0 descriptor?? [ 341.215882][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.224990][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.235770][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.243469][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.251281][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.260537][ T330] hid-generic 0000:10000:0007.0022: unknown main item tag 0x0 [ 341.274542][ T330] hid-generic 0000:10000:0007.0022: hidraw0: HID v9.40 Device [syz1] on syz1 [ 341.867112][T11889] overlayfs: failed to clone lowerpath [ 342.043060][ T403] hid-led 0003:27B8:01ED.0023: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 342.065028][ T403] hid-led 0003:27B8:01ED.0023: ThingM blink(1) initialized [ 342.146818][ T1427] Bluetooth: hci0: command 0x1003 tx timeout [ 342.148617][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.227627][T11912] netlink: 8540 bytes leftover after parsing attributes in process `syz.4.3773'. [ 342.238593][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3773'. [ 342.250764][ T403] usb 2-1: USB disconnect, device number 97 [ 342.916859][T11927] rust_binder: 11927 RLIMIT_NICE not set [ 342.918586][T11927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 342.933200][T11927] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender. [ 342.968655][T11927] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:299 [ 343.014877][ T541] rust_binder: 11926: removing orphan mapping 0:1048 [ 343.097949][T11930] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 343.127396][T11930] SELinux: failed to load policy [ 343.592061][T11933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 343.592100][T11933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:305 [ 343.648714][T11936] FAT-fs (rnullb0): bogus number of reserved sectors [ 343.674571][T11936] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 343.985700][ T403] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 344.158709][ T403] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.176594][ T403] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.189028][ T403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.205381][ T403] usb 2-1: Product: syz [ 344.215103][ T403] usb 2-1: Manufacturer: syz [ 344.225250][ T403] usb 2-1: SerialNumber: syz [ 344.925633][ T330] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 345.115647][ T330] usb 5-1: Invalid ep0 maxpacket: 32 [ 345.255629][ T330] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 345.435601][ T330] usb 5-1: Invalid ep0 maxpacket: 32 [ 345.449893][ T403] cdc_ncm 2-1:1.0: failed to get mac address [ 345.467277][ T330] usb usb5-port1: attempt power cycle [ 345.475639][ T403] cdc_ncm 2-1:1.0: bind() failure [ 345.500935][ T403] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 345.526477][T11950] netlink: 'syz.1.3784': attribute type 4 has an invalid length. [ 345.545616][ T403] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 345.566807][T11950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316 [ 345.592209][ T403] usb 2-1: USB disconnect, device number 98 [ 345.838105][T11961] rust_binder: Error while translating object. [ 345.838156][T11961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.850966][ T330] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 345.888475][T11961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 345.939431][ T330] usb 5-1: Invalid ep0 maxpacket: 32 [ 346.085067][T11973] netlink: 'syz.1.3794': attribute type 15 has an invalid length. [ 346.108923][T11975] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 346.116652][ T330] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 346.129091][T11975] rust_binder: Write failure EINVAL in pid:324 [ 346.147839][ T330] usb 5-1: Invalid ep0 maxpacket: 32 [ 346.181259][ T330] usb usb5-port1: unable to enumerate USB device [ 346.304850][T11993] netlink: 'syz.3.3801': attribute type 11 has an invalid length. [ 346.354830][T11998] overlayfs: failed to clone upperpath [ 346.394348][T12002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 346.394386][T12002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:339 [ 346.680208][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 347.228447][T12027] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 347.701838][T12048] random: crng reseeded on system resumption [ 348.549210][T12103] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 348.707100][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.807727][T12115] .N: renamed from veth0_to_bond (while UP) [ 348.827703][T12115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=12115 comm=syz.2.3841 [ 348.979315][T12136] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3847'. [ 348.990576][T12136] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3847'. [ 349.023617][T12136] netlink: 'syz.3.3847': attribute type 6 has an invalid length. [ 349.049905][T12136] netlink: 'syz.3.3847': attribute type 5 has an invalid length. [ 349.071750][T12136] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3847'. [ 349.217591][T12158] overlayfs: failed to resolve './bus': -2 [ 349.323796][T12167] overlayfs: failed to clone upperpath [ 349.441073][ T36] audit: type=1400 audit(2000000100.935:39150): avc: denied { setattr } for pid=12175 comm="syz.3.3859" name="" dev="pipefs" ino=71951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 349.498693][T12178] fuse: Unknown parameter 'uid' [ 349.911809][T12217] netlink: 1367 bytes leftover after parsing attributes in process `syz.3.3873'. [ 350.314438][T12242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3882'. [ 350.829582][T12281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 350.829619][T12281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:464 [ 351.082840][T12298] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 351.108951][T12301] overlayfs: failed to clone upperpath [ 351.124417][T12298] rust_binder: Write failure EINVAL in pid:468 [ 351.127539][T12301] overlayfs: failed to clone upperpath [ 351.192526][T12310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.196132][T12310] fuse: Bad value for 'group_id' [ 351.226678][T12310] fuse: Bad value for 'group_id' [ 351.240483][T12310] tap0: tun_chr_ioctl cmd 1074025675 [ 351.246092][T12310] tap0: persist enabled [ 351.250581][T12310] tap0: tun_chr_ioctl cmd 1074025675 [ 351.256177][T12310] tap0: persist disabled [ 351.260995][T12310] tap0: tun_chr_ioctl cmd 1074025675 [ 351.268931][T12310] tap0: persist disabled [ 351.274102][T12310] rust_binder: 353: no such ref 3 [ 351.295040][T12310] rust_binder: Write failure EINVAL in pid:353 [ 351.378237][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.423846][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.468837][T12333] FAT-fs (rnullb0): bogus number of reserved sectors [ 351.475965][T12333] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 351.547652][ T36] audit: type=1400 audit(2000000103.055:39151): avc: denied { accept } for pid=12338 comm="syz.1.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 351.605285][ T330] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 351.755280][ T330] usb 5-1: device descriptor read/64, error -71 [ 351.995243][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.235239][ T330] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 352.385259][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.415892][ T36] audit: type=1326 audit(2000000103.925:39152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12361 comm="syz.3.3924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf30f8ec29 code=0x0 [ 352.450612][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'. [ 352.498961][T12367] overlayfs: failed to clone upperpath [ 352.528942][T12373] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3927'. [ 352.647075][T12384] binder: Unknown parameter 'defcontext01777777777777777777777' [ 352.655229][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.697999][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xccec [ 352.707101][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x12d7 [ 352.720683][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xc570 [ 352.732814][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xe85b [ 352.743038][T12378] kvm: kvm [12377]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d46 [ 352.754441][T12389] tipc: Enabling of bearer rejected, failed to enable media [ 352.765332][ T330] usb usb5-port1: attempt power cycle [ 352.779181][T12389] overlay: Unknown parameter 'appraise_type' [ 352.936445][T12391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 352.936484][T12391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:375 [ 353.118097][ T330] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 353.157390][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.266215][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 353.296142][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.448836][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.469089][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.495260][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 353.507540][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.525551][ T10] usb 2-1: SerialNumber: syz [ 353.555168][ T330] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 353.596371][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.753262][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.840838][ T10] usb 2-1: 0:2 : does not exist [ 353.869681][ T10] usb 2-1: USB disconnect, device number 99 [ 353.876679][ T330] usb usb5-port1: unable to enumerate USB device [ 353.900402][ T7410] udevd[7410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 354.825107][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 355.016834][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 355.040981][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.051306][T12438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3947'. [ 355.065842][ T10] usb 5-1: config 0 descriptor?? [ 355.319173][ T10] usb 5-1: Cannot read MAC address [ 355.324429][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 355.360680][ T10] usb 5-1: USB disconnect, device number 30 [ 355.475048][ T364] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 356.145749][T12464] 9pnet_fd: Insufficient options for proto=fd [ 356.186904][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.236387][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.315070][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.555931][ T364] usb 2-1: device descriptor read/64, error -71 [ 356.733338][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.765714][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.796951][T12471] bridge_slave_0: entered allmulticast mode [ 356.821207][T12471] bridge_slave_0: entered promiscuous mode [ 356.836861][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.861107][ T364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.878014][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.905100][ T364] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 356.919110][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.943198][T12471] bridge_slave_1: entered allmulticast mode [ 356.954568][ T364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.979510][T12471] bridge_slave_1: entered promiscuous mode [ 356.991492][ T364] usb 2-1: config 0 descriptor?? [ 357.217390][ T364] usbhid 2-1:0.0: can't add hid device: -71 [ 357.234990][ T364] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.252136][ T364] usb 2-1: USB disconnect, device number 100 [ 357.367303][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.374432][T12471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.381769][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.388849][T12471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.495359][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.517382][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.541227][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.548436][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.612115][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.619239][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.701857][T12471] veth0_vlan: entered promiscuous mode [ 357.757289][T12471] veth1_macvtap: entered promiscuous mode [ 357.767221][T12494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.767676][T12494] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 134217728 [ 357.817568][T12494] rust_binder: Write failure EINVAL in pid:404 [ 357.919878][T12499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.384905][ T1427] Bluetooth: hci0: command 0x1003 tx timeout [ 358.387896][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.768310][T12525] tipc: Enabling of bearer rejected, failed to enable media [ 359.339229][T12554] netlink: 'syz.3.3981': attribute type 4 has an invalid length. [ 359.347298][T12554] netlink: 'syz.3.3981': attribute type 6 has an invalid length. [ 359.355446][T12554] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3981'. [ 359.444613][T12558] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 359.618911][T12569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3986'. [ 359.628087][T12570] syzkaller1: entered allmulticast mode [ 359.635101][T12570] rust_binder: 24: no such ref 3 [ 359.640584][ T36] audit: type=1326 audit(2000000111.146:39153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.2.3986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4897f8ec29 code=0x0 [ 359.647355][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.663819][T12570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 359.663868][T12570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 359.682173][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.692696][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.699149][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.705912][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.712088][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.719539][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.725932][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.732191][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.739583][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.746380][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.752716][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.759282][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.766652][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.773000][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.779421][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.785793][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.791956][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.799442][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.805719][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.811979][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.819360][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.826655][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.832808][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.839265][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.845948][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.852472][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.858768][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.865190][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.871375][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.892748][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.899886][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.906946][T12571] rust_binder: Write failure EINVAL in pid:24 [ 359.989958][ T36] audit: type=1326 audit(2000000111.496:39154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12577 comm="syz.3.3988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf30f8ec29 code=0x7ffe0000 [ 360.315734][T12590] veth1: entered allmulticast mode [ 360.597274][T12593] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 360.620897][T12596] binder: Bad value for 'stats' [ 360.768144][T12603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 360.768178][T12603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 361.015471][T12613] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.323668][T12589] veth1: left allmulticast mode [ 361.337300][ T36] audit: type=1400 audit(2000000112.846:39155): avc: denied { remove_name } for pid=12614 comm="syz.4.4000" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.434362][ T36] audit: type=1400 audit(2000000112.846:39156): avc: denied { unlink } for pid=12614 comm="syz.4.4000" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 361.652271][T12619] veth0_virt_wifi: entered allmulticast mode [ 361.818411][T12621] veth0_virt_wifi: left allmulticast mode [ 362.118085][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 362.312868][T12624] veth0_virt_wifi: entered allmulticast mode [ 362.465903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.478147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.490353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.502556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.514780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.526972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.539163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.551348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.563571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.575754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.732421][ T10] usb 2-1: device not accepting address 101, error -71 [ 367.474567][ C1] net_ratelimit: 20188 callbacks suppressed [ 367.474593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.492945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.505267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.517618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.529858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.542109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.554397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.566641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.578885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.591132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.484154][ C1] net_ratelimit: 21604 callbacks suppressed [ 372.484180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.502372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.514583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.526797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.539003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.551198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.563389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.575594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.587797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.600042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.494076][ C1] net_ratelimit: 15711 callbacks suppressed [ 377.494100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.512313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.524580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.536840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.549090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.561360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.573616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.585873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.598262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 377.610566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.503637][ C1] net_ratelimit: 9176 callbacks suppressed [ 382.503660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.522079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.534541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.547042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.559495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.571954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.584447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.596914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.609424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.622017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.513748][ C1] net_ratelimit: 7564 callbacks suppressed [ 387.513772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.532251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.544976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.557603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.570275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.582911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.595563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.608191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.620926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 387.633608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.523346][ C1] net_ratelimit: 7215 callbacks suppressed [ 392.523368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.541962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.554664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.567340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.580046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.592756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.605525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.618228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.630909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 392.643632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.532922][ C1] net_ratelimit: 7190 callbacks suppressed [ 397.532947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.551491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.572847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.585737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.598610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.611530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.624340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.637018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.649659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 397.662285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.542976][ C1] net_ratelimit: 7437 callbacks suppressed [ 402.543017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.561596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.574236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.586931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.599551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.612161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.624799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.637512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.650161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 402.662786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.552344][ C1] net_ratelimit: 7556 callbacks suppressed [ 407.552370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.572751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.585607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.598402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.611264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.624010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.636642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.649257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.661880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 407.682712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.562176][ C1] net_ratelimit: 7371 callbacks suppressed [ 412.562200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.580718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.593369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.606060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.618689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.631304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.643916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.656607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.669230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.681893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.571601][ C1] net_ratelimit: 7196 callbacks suppressed [ 417.571626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.590168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.602853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.615545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.628191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.640904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.653580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.666254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.678898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.691576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.581540][ C1] net_ratelimit: 7442 callbacks suppressed [ 422.581564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.600115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.612785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.625369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.638022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.650819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.663479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.676153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.688847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.701500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.591527][ C1] net_ratelimit: 7379 callbacks suppressed [ 427.591554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.610150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.622827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.635563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.648350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.661044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.673771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.686473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.699124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.711818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.601238][ C1] net_ratelimit: 7500 callbacks suppressed [ 432.601261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.619828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.632462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.645070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.660683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.673611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.686518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.699418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.720693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 432.733502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.611000][ C1] net_ratelimit: 7148 callbacks suppressed [ 437.611035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.629531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.642222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.654872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.667530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.680216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.692929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.705606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.718257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.730915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.620184][ C1] net_ratelimit: 6891 callbacks suppressed [ 442.620208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.640949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.653835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.666830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.679757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.698444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.711130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.723768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.736492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.749199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.630452][ C1] net_ratelimit: 6550 callbacks suppressed [ 447.630477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.648942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.661571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.674232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.686881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.699546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.712171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.724766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.737449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 447.750140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.639901][ C1] net_ratelimit: 7280 callbacks suppressed [ 452.639925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.658391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.680243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.693135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.705990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.718912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.740206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.753101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.765997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 452.778896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.649751][ C1] net_ratelimit: 7448 callbacks suppressed [ 457.649775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.668253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.680888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.693619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.706222][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.718838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.731453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.744072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.756720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.769401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.659582][ C1] net_ratelimit: 7565 callbacks suppressed [ 462.659614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.678049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.690723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.703306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.715947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.728592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.741205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.753802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.766523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.779220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.669272][ C1] net_ratelimit: 7532 callbacks suppressed [ 467.669295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.687824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.709369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.722149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.734899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.747637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.760334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.772936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.785577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 467.798191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.679053][ C1] net_ratelimit: 10764 callbacks suppressed [ 472.679078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.697105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.719147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.731275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.744289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.756399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.769314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.781416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.794356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 472.806452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.688171][ C1] net_ratelimit: 13439 callbacks suppressed [ 477.688195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.706932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.719005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.731655][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.743717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.756401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.768463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.781221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.793303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.805975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.697870][ C1] net_ratelimit: 13438 callbacks suppressed [ 482.697894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.716545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.728601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.741244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.753295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.765980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.778029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.790602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.802650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 482.815244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.708082][ C1] net_ratelimit: 13235 callbacks suppressed [ 487.708106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.726195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.738881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.750930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.763582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.775633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.788278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.800369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.813013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.825066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.717286][ C1] net_ratelimit: 12901 callbacks suppressed [ 492.717311][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.737376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.749468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.762232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.774578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.787414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.799510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.812328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.824501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.837351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.232019][ T37] INFO: task kworker/u8:4:472 blocked for more than 122 seconds. [ 496.289642][ T37] Not tainted syzkaller #0 [ 496.348220][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 496.356938][ T37] task:kworker/u8:4 state:D stack:0 pid:472 tgid:472 ppid:2 flags:0x00004000 [ 496.370119][ T36] audit: type=1400 audit(2000000247.833:39157): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2788]" dev="pipefs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 496.675459][ T37] Workqueue: ipv6_addrconf addrconf_verify_work [ 496.681857][ T37] Call Trace: [ 496.685164][ T37] [ 496.688135][ T37] __schedule+0x1322/0x1df0 [ 496.692681][ T37] ? __sched_text_start+0x10/0x10 [ 496.697777][ T37] ? stack_trace_save+0x9d/0xe0 [ 496.702669][ T37] ? kthread_data+0x54/0xc0 [ 496.707214][ T37] ? wq_worker_sleeping+0x69/0x260 [ 496.712358][ T37] ? trace_contention_begin+0xc0/0xc0 [ 496.717868][ T37] schedule+0xc6/0x240 [ 496.721976][ T37] schedule_preempt_disabled+0x14/0x30 [ 496.727497][ T37] __mutex_lock+0x81e/0x1b50 [ 496.732130][ T37] ? sched_clock_noinstr+0xd/0x30 [ 496.737213][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 496.744012][ T37] ? __kasan_check_write+0x18/0x20 [ 496.749182][ T37] ? __switch_to+0xc7b/0x1310 [ 496.753899][ T37] ? _raw_spin_unlock+0x45/0x60 [ 496.758861][ T37] ? finish_task_switch+0x13a/0x780 [ 496.764104][ T37] __mutex_lock_slowpath+0xe/0x20 [ 496.769188][ T37] mutex_lock+0x102/0x1c0 [ 496.773554][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 496.778458][ T37] rtnl_lock+0x19/0x20 [ 496.782638][ T37] addrconf_verify_work+0x1d/0x50 [ 496.787731][ T37] process_scheduled_works+0x7d5/0x1020 [ 496.793322][ T37] worker_thread+0xc58/0x1250 [ 496.798047][ T37] kthread+0x2c7/0x370 [ 496.802143][ T37] ? __cfi_worker_thread+0x10/0x10 [ 496.807320][ T37] ? __cfi_kthread+0x10/0x10 [ 496.811972][ T37] ret_from_fork+0x67/0xa0 [ 496.816430][ T37] ? __cfi_kthread+0x10/0x10 [ 496.821193][ T37] ret_from_fork_asm+0x1a/0x30 [ 496.826000][ T37] [ 497.371335][ T37] INFO: task syz.2.4003:12624 blocked for more than 123 seconds. [ 497.416494][ T37] Not tainted syzkaller #0 [ 497.421540][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 497.430272][ T37] task:syz.2.4003 state:D stack:0 pid:12624 tgid:12623 ppid:12471 flags:0x00004004 [ 497.440483][ T37] Call Trace: [ 497.443785][ T37] [ 497.446737][ T37] __schedule+0x1322/0x1df0 [ 497.451316][ T37] ? __sched_text_start+0x10/0x10 [ 497.456374][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 497.461802][ T37] ? _raw_spin_unlock+0x45/0x60 [ 497.466682][ T37] ? __kasan_check_write+0x18/0x20 [ 497.471866][ T37] schedule+0xc6/0x240 [ 497.475974][ T37] schedule_timeout+0xb2/0x3a0 [ 497.480790][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 497.486205][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 497.491812][ T37] ? __smp_call_single_queue+0xd8/0x390 [ 497.497444][ T37] ? generic_exec_single+0x201/0x500 [ 497.502788][ T37] wait_for_common+0x359/0x630 [ 497.507616][ T37] ? wait_for_completion+0x40/0x40 [ 497.512767][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 497.518275][ T37] wait_for_completion+0x1c/0x40 [ 497.523247][ T37] rcu_barrier+0x415/0x530 [ 497.527711][ T37] br_multicast_dev_del+0x5aa/0x600 [ 497.532957][ T37] ? ndisc_netdev_event+0x305/0x660 [ 497.538205][ T37] ? ipv6_mc_netdev_event+0x85/0x4c0 [ 497.543521][ T37] ? __cfi_br_multicast_dev_del+0x10/0x10 [ 497.549306][ T37] ? notifier_call_chain+0x29c/0x2c0 [ 497.554631][ T37] br_dev_uninit+0x20/0x40 [ 497.559092][ T37] ? __cfi_br_dev_uninit+0x10/0x10 [ 497.564228][ T37] unregister_netdevice_many_notify+0x155f/0x1bd0 [ 497.570710][ T37] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 497.577554][ T37] ? __call_rcu_common+0x41f/0x700 [ 497.582706][ T37] ? __kasan_check_read+0x15/0x20 [ 497.587807][ T37] unregister_netdevice_queue+0x339/0x380 [ 497.593561][ T37] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 497.599859][ T37] br_dev_delete+0x100/0x130 [ 497.604570][ T37] ? br_del_bridge+0xb1/0xf0 [ 497.609206][ T37] br_del_bridge+0xbb/0xf0 [ 497.613652][ T37] br_ioctl_stub+0x4d0/0x9e0 [ 497.618302][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 497.623623][ T37] ? __cfi_br_ioctl_stub+0x10/0x10 [ 497.628799][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 497.634381][ T37] ? __kasan_check_write+0x18/0x20 [ 497.639588][ T37] ? mutex_lock+0x92/0x1c0 [ 497.644044][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 497.648955][ T37] ? do_futex+0x309/0x500 [ 497.653317][ T37] ? __cfi_do_futex+0x10/0x10 [ 497.658043][ T37] ? __cfi_br_ioctl_stub+0x10/0x10 [ 497.663186][ T37] sock_ioctl+0x403/0x7b0 [ 497.667578][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 497.672470][ T37] ? __fget_files+0x2c5/0x340 [ 497.677200][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 497.682181][ T37] ? security_file_ioctl+0x34/0xd0 [ 497.687360][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 497.692246][ T37] __se_sys_ioctl+0x132/0x1b0 [ 497.696951][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 497.701596][ T37] x64_sys_call+0x1878/0x2ee0 [ 497.706306][ T37] do_syscall_64+0x58/0xf0 [ 497.710781][ T37] ? clear_bhb_loop+0x50/0xa0 [ 497.715483][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 497.721433][ T37] RIP: 0033:0x7f4897f8ec29 [ 497.725888][ T37] RSP: 002b:00007f48969e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.734364][ T37] RAX: ffffffffffffffda RBX: 00007f48981d5fa0 RCX: 00007f4897f8ec29 [ 497.742397][ T37] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000006 [ 497.750430][ T37] RBP: 00007f4898011e41 R08: 0000000000000000 R09: 0000000000000000 [ 497.758539][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.766537][ T37] R13: 00007f48981d6038 R14: 00007f48981d5fa0 R15: 00007ffc79560148 [ 497.774567][ T37] [ 497.777696][ C1] net_ratelimit: 11809 callbacks suppressed [ 497.777714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.795734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.808408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.820505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.833162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.845499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.858176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.870226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.882959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.895040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 497.958339][ T37] INFO: task syz.2.4003:12625 blocked for more than 124 seconds. [ 497.966236][ T37] Not tainted syzkaller #0 [ 498.020550][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.127841][ T37] task:syz.2.4003 state:D stack:0 pid:12625 tgid:12623 ppid:12471 flags:0x00000004 [ 498.182367][ T37] Call Trace: [ 498.185702][ T37] [ 498.193780][ T37] __schedule+0x1322/0x1df0 [ 498.198371][ T37] ? __sched_text_start+0x10/0x10 [ 498.203430][ T37] ? __kasan_check_write+0x18/0x20 [ 498.208625][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 498.213861][ T37] ? __kasan_check_write+0x18/0x20 [ 498.219050][ T37] ? trace_contention_begin+0xc0/0xc0 [ 498.224460][ T37] schedule+0xc6/0x240 [ 498.228588][ T37] schedule_preempt_disabled+0x14/0x30 [ 498.234087][ T37] __mutex_lock+0x81e/0x1b50 [ 498.238762][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 498.245575][ T37] ? ioctl_has_perm+0x384/0x4d0 [ 498.250504][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 498.255473][ T37] ? futex_wake+0x5fb/0x900 [ 498.260030][ T37] ? futex_setup_timer+0xb4/0xd0 [ 498.264999][ T37] ? futex_wait+0x29a/0x7a0 [ 498.269550][ T37] ? __cfi_futex_wait+0x10/0x10 [ 498.274431][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 498.279524][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 498.284843][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 498.290444][ T37] __mutex_lock_slowpath+0xe/0x20 [ 498.295511][ T37] mutex_lock+0x102/0x1c0 [ 498.299941][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 498.304834][ T37] ? do_futex+0x309/0x500 [ 498.309242][ T37] ? __cfi_do_futex+0x10/0x10 [ 498.313946][ T37] sock_ioctl+0x3d0/0x7b0 [ 498.318345][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 498.323240][ T37] ? __fget_files+0x2c5/0x340 [ 498.327977][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 498.332954][ T37] ? security_file_ioctl+0x34/0xd0 [ 498.338134][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 498.343114][ T37] __se_sys_ioctl+0x132/0x1b0 [ 498.347846][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 498.352547][ T37] x64_sys_call+0x1878/0x2ee0 [ 498.357285][ T37] do_syscall_64+0x58/0xf0 [ 498.361733][ T37] ? clear_bhb_loop+0x50/0xa0 [ 498.366441][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 498.372400][ T37] RIP: 0033:0x7f4897f8ec29 [ 498.376846][ T37] RSP: 002b:00007f48969c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.385405][ T37] RAX: ffffffffffffffda RBX: 00007f48981d6090 RCX: 00007f4897f8ec29 [ 498.393439][ T37] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000004 [ 498.401562][ T37] RBP: 00007f4898011e41 R08: 0000000000000000 R09: 0000000000000000 [ 498.409572][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.417592][ T37] R13: 00007f48981d6128 R14: 00007f48981d6090 R15: 00007ffc79560148 [ 498.425593][ T37] [ 498.559462][ T37] INFO: task syz.2.4003:12626 blocked for more than 124 seconds. [ 498.607599][ T37] Not tainted syzkaller #0 [ 498.618835][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.627619][ T37] task:syz.2.4003 state:D stack:0 pid:12626 tgid:12623 ppid:12471 flags:0x00000004 [ 498.637844][ T37] Call Trace: [ 498.641149][ T37] [ 498.644096][ T37] __schedule+0x1322/0x1df0 [ 498.648668][ T37] ? __sched_text_start+0x10/0x10 [ 498.653725][ T37] ? __kasan_check_write+0x18/0x20 [ 498.658902][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 498.664142][ T37] ? __kasan_check_write+0x18/0x20 [ 498.669334][ T37] ? trace_contention_begin+0xc0/0xc0 [ 498.674755][ T37] ? stack_depot_save_flags+0x38/0x800 [ 498.680285][ T37] schedule+0xc6/0x240 [ 498.684428][ T37] schedule_preempt_disabled+0x14/0x30 [ 498.689943][ T37] __mutex_lock+0x81e/0x1b50 [ 498.694574][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 498.701410][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 498.706822][ T37] ? cred_has_capability+0x281/0x380 [ 498.712165][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 498.717937][ T37] ? unwind_get_return_address+0x51/0x90 [ 498.723612][ T37] __mutex_lock_slowpath+0xe/0x20 [ 498.728730][ T37] mutex_lock+0x102/0x1c0 [ 498.733095][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 498.738000][ T37] ? ns_capable+0x91/0xf0 [ 498.742367][ T37] ? netlink_net_capable+0x129/0x160 [ 498.747702][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 498.752668][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 498.758115][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 498.763605][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 498.769032][ T37] ? avc_has_perm+0x144/0x220 [ 498.773743][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 498.778592][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 498.784096][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 498.789443][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 498.794529][ T37] ? is_vmalloc_addr+0x11/0x40 [ 498.799353][ T37] rtnetlink_rcv+0x20/0x30 [ 498.803805][ T37] netlink_unicast+0x8c3/0xa60 [ 498.808638][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 498.813448][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 498.818811][ T37] ? folio_add_new_anon_rmap+0x475/0x910 [ 498.824500][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 498.829846][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 498.835341][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 498.840685][ T37] ____sys_sendmsg+0xa18/0xa70 [ 498.845488][ T37] ? __sys_sendmsg_sock+0x50/0x50 [ 498.850578][ T37] ? cgroup_rstat_updated+0x132/0x7f0 [ 498.855992][ T37] ? import_iovec+0x81/0xb0 [ 498.860554][ T37] ___sys_sendmsg+0x220/0x2a0 [ 498.865273][ T37] ? __sys_sendmsg+0x280/0x280 [ 498.870095][ T37] ? handle_mm_fault+0x169b/0x1b90 [ 498.875250][ T37] __x64_sys_sendmsg+0x1eb/0x2c0 [ 498.880337][ T37] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 498.885834][ T37] ? __kasan_check_read+0x15/0x20 [ 498.890928][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 498.897045][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 498.903146][ T37] x64_sys_call+0x2a4c/0x2ee0 [ 498.907901][ T37] do_syscall_64+0x58/0xf0 [ 498.912342][ T37] ? clear_bhb_loop+0x50/0xa0 [ 498.917062][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 498.922991][ T37] RIP: 0033:0x7f4897f8ec29 [ 498.927445][ T37] RSP: 002b:00007f48969a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.935890][ T37] RAX: ffffffffffffffda RBX: 00007f48981d6180 RCX: 00007f4897f8ec29 [ 498.943978][ T37] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.951999][ T37] RBP: 00007f4898011e41 R08: 0000000000000000 R09: 0000000000000000 [ 498.960022][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.968040][ T37] R13: 00007f48981d6218 R14: 00007f48981d6180 R15: 00007ffc79560148 [ 498.976041][ T37] [ 498.997123][ T37] NMI backtrace for cpu 1 [ 498.997154][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 498.997185][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.997201][ T37] Call Trace: [ 498.997210][ T37] [ 498.997220][ T37] __dump_stack+0x21/0x30 [ 498.997257][ T37] dump_stack_lvl+0x10c/0x190 [ 498.997288][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 498.997322][ T37] dump_stack+0x19/0x20 [ 498.997352][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 498.997378][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 498.997408][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 498.997432][ T37] ? sched_show_task+0x379/0x560 [ 498.997463][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 498.997490][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.997521][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.997551][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 498.997578][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 498.997615][ T37] watchdog+0xd8f/0xed0 [ 498.997648][ T37] ? __cfi_watchdog+0x10/0x10 [ 498.997679][ T37] ? __kasan_check_read+0x15/0x20 [ 498.997713][ T37] ? __kthread_parkme+0x138/0x180 [ 498.997735][ T37] ? schedule+0xc6/0x240 [ 498.997764][ T37] kthread+0x2c7/0x370 [ 498.997788][ T37] ? __cfi_watchdog+0x10/0x10 [ 498.997819][ T37] ? __cfi_kthread+0x10/0x10 [ 498.997843][ T37] ret_from_fork+0x67/0xa0 [ 498.997874][ T37] ? __cfi_kthread+0x10/0x10 [ 498.997897][ T37] ret_from_fork_asm+0x1a/0x30 [ 498.997933][ T37] [ 498.997942][ T37] Sending NMI from CPU 1 to CPUs 0: [ 499.222186][ C0] NMI backtrace for cpu 0 [ 499.222204][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 26040f0ed9382bf65720d717d6d6db2d10869199 [ 499.222230][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.222243][ C0] RIP: 0010:stack_depot_save_flags+0xd5/0x800 [ 499.222274][ C0] Code: 29 cf 44 89 c9 c1 c1 10 31 f9 45 01 c1 89 c8 c1 c0 13 41 29 c8 44 31 c0 44 01 c9 41 29 c1 41 89 c4 41 c1 c4 04 45 31 cc 01 c8 <83> c6 fd 48 83 c2 0c 83 fe 03 77 93 83 fe 01 7f 17 85 f6 8b 75 bc [ 499.222291][ C0] RSP: 0018:ffffc90000007310 EFLAGS: 00000217 [ 499.222323][ C0] RAX: 0000000012d495a0 RBX: 0000000000000820 RCX: 0000000072cf9557 [ 499.222338][ C0] RDX: ffffc90000007398 RSI: 0000000000000016 RDI: 000000007922a3de [ 499.222352][ C0] RBP: ffffc90000007370 R08: 000000003de0127b R09: 0000000030844152 [ 499.222366][ C0] R10: 000000000000000e R11: ffffffff817441e0 R12: 0000000030d445c8 [ 499.222380][ C0] R13: 0000000000000100 R14: ffffc90000007380 R15: ffffc90000007380 [ 499.222395][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 499.222412][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.222426][ C0] CR2: 0000559cf51c2b98 CR3: 0000000120062000 CR4: 00000000003526b0 [ 499.222444][ C0] Call Trace: [ 499.222451][ C0] [ 499.222463][ C0] kasan_save_track+0x4f/0x80 [ 499.222484][ C0] ? kasan_save_track+0x3e/0x80 [ 499.222503][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 499.222529][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 499.222550][ C0] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 499.222581][ C0] ? skb_clone+0x229/0x460 [ 499.222610][ C0] ? br_flood+0x661/0x730 [ 499.222631][ C0] ? br_handle_frame_finish+0x12bb/0x1720 [ 499.222655][ C0] ? br_handle_frame+0x5a6/0xba0 [ 499.222678][ C0] ? __netif_receive_skb_core+0xf4b/0x3940 [ 499.222700][ C0] ? process_backlog+0x3e5/0xae0 [ 499.222722][ C0] ? __napi_poll+0xd3/0x610 [ 499.222741][ C0] ? net_rx_action+0x584/0xce0 [ 499.222763][ C0] ? handle_softirqs+0x1ab/0x630 [ 499.222791][ C0] ? __do_softirq+0xf/0x16 [ 499.222814][ C0] ? do_softirq+0xa6/0x100 [ 499.222841][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 499.222869][ C0] ? rcu_do_batch+0x5c6/0xd20 [ 499.222894][ C0] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 499.222921][ C0] ? kthread+0x2c7/0x370 [ 499.222941][ C0] ? ret_from_fork+0x67/0xa0 [ 499.222967][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 499.223001][ C0] ? __copy_skb_header+0x453/0x5e0 [ 499.223034][ C0] kasan_save_alloc_info+0x40/0x50 [ 499.223060][ C0] __kasan_slab_alloc+0x73/0x90 [ 499.223082][ C0] kmem_cache_alloc_noprof+0x131/0x3a0 [ 499.223110][ C0] ? skb_clone+0x229/0x460 [ 499.223134][ C0] skb_clone+0x229/0x460 [ 499.223158][ C0] br_flood+0x661/0x730 [ 499.223181][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 499.223208][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 499.223247][ C0] br_handle_frame+0x5a6/0xba0 [ 499.223272][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 499.223296][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 499.223322][ C0] ? dst_release+0xe3/0x240 [ 499.223349][ C0] ? arp_process+0xd81/0x1740 [ 499.223369][ C0] ? qdisc_run_end+0x120/0x120 [ 499.223389][ C0] ? __cfi_arp_process+0x10/0x10 [ 499.223405][ C0] ? NF_HOOK+0x157/0x1b0 [ 499.223433][ C0] ? __cfi_arp_process+0x10/0x10 [ 499.223450][ C0] ? arp_xmit+0x1f0/0x1f0 [ 499.223477][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 499.223499][ C0] ? __cfi_arp_process+0x10/0x10 [ 499.223519][ C0] process_backlog+0x3e5/0xae0 [ 499.223544][ C0] __napi_poll+0xd3/0x610 [ 499.223566][ C0] net_rx_action+0x584/0xce0 [ 499.223591][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 499.223612][ C0] ? sched_clock+0x44/0x60 [ 499.223636][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 499.223662][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 499.223684][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 499.223711][ C0] handle_softirqs+0x1ab/0x630 [ 499.223741][ C0] __do_softirq+0xf/0x16 [ 499.223764][ C0] do_softirq+0xa6/0x100 [ 499.223791][ C0] [ 499.223798][ C0] [ 499.223805][ C0] ? __cfi_do_softirq+0x10/0x10 [ 499.223833][ C0] ? dst_destroy+0x37d/0x460 [ 499.223859][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 499.223885][ C0] __local_bh_enable_ip+0x74/0x80 [ 499.223913][ C0] rcu_do_batch+0x5c6/0xd20 [ 499.223940][ C0] ? rcu_core+0xd20/0xd20 [ 499.223965][ C0] ? __kasan_check_write+0x18/0x20 [ 499.223993][ C0] ? _raw_spin_lock+0x8c/0x120 [ 499.224014][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 499.224036][ C0] ? __kasan_check_read+0x15/0x20 [ 499.224063][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 499.224091][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 499.224120][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 499.224148][ C0] ? __kasan_check_write+0x18/0x20 [ 499.224175][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 499.224197][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 499.224218][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 499.224249][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 499.224266][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 499.224283][ C0] ? __kasan_check_read+0x15/0x20 [ 499.224314][ C0] ? __kthread_parkme+0x138/0x180 [ 499.224329][ C0] ? schedule+0xc6/0x240 [ 499.224349][ C0] kthread+0x2c7/0x370 [ 499.224366][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 499.224391][ C0] ? __cfi_kthread+0x10/0x10 [ 499.224408][ C0] ret_from_fork+0x67/0xa0 [ 499.224430][ C0] ? __cfi_kthread+0x10/0x10 [ 499.224448][ C0] ret_from_fork_asm+0x1a/0x30 [ 499.224474][ C0] [ 502.786759][ C1] net_ratelimit: 8854 callbacks suppressed [ 502.786783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.804696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.817370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.829434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.842152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.854210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.866924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.878987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.891640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.903693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)