last executing test programs: 1m26.19163988s ago: executing program 1 (id=1905): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x40002022) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000300)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040094, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x96}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="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", 0x153}, {&(0x7f0000000b40)="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", 0x10c}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="1a", 0x1}], 0x1}}], 0x2, 0x8040) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r3, 0x22e7c000) 1m26.012781291s ago: executing program 1 (id=1906): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x6, 0xe) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000080)={0xaa6be0241498fb80, 0xdddd0000, 0xe, 0x0, 0x6}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), &(0x7f00000000c0)={0x0, 0xfb, 0x79, 0x7, 0xf7, "05840933b7ed76f56adc6b2a835e7923", "b33bd08cf55bbb913e7fad4e072ea093a86cb6e1e63762146cb1688289bb5ec72f1d0937bd9b1b7610dd5c88b2f574f145f51d0ac737100a909fb98c57fc5d9eddeb164696d5de06fb10f90ad439c3f34ee82f4cd12b8a8626a95cce9d70aa46fd56bafc"}, 0x79, 0x2) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000810}, 0x26008890) (async) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) 1m25.974355011s ago: executing program 1 (id=1907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x39462000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "8146decb8cafd920", "dda9e5b6f33bc220a7b62e1c73ea23481f89a45bfb59accf70a1863df09acb83", "3be403b3", "293a41d083fc7508"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000c00)=@ccm_128={{0x304, 0x33}, "e12dc20a892d7dde", "a52c04ebffff7ba94ab06f060000001c", "45e67da3", "ebee76f27293fe23"}, 0x28) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0x95, &(0x7f0000000340)="f25e3fad4fe8d4e98d41a83e9118f37de07f3c8a02610832752a23553b248b13d7fa355d0dd609ca174c47653114b4d217bb7cde6cc1af7d695036e8fee9779da665ecd1c94a911e7809b7c6bc0f2c780be8bcb9f367071d954855379e458dfc7d5d61421040c81b543852e1f5362b52550e310f8ef6c3dbf95d5718edbc1b3b4e67077db4e02ed83f83010382f5d0fc3a7f7abcb6", 0x63, 0x0, &(0x7f0000000200)="6e2a2db3b08e4a54e4bc40e333390370c9519fdfa450323f9c68f881ff874404865514cc99313fc324bf9b331eb52b4101cd2894e63eac075a4e3a9173b03014b2653980b4d2c2f92609751f5887627427000daf5a75c06be8562005ea8057c0f58179"}) splice(r0, &(0x7f0000000040)=0x9e9f, r1, &(0x7f0000000080)=0x1, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) 1m25.855714052s ago: executing program 1 (id=1908): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) getpid() (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe800000bb000000000000000000001be000000200000000ffffffffffffffeeffff0000000000000000001002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r4, r4, &(0x7f0000000280)=0x3ff, 0x7) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000054c0)=0xffffffffffffffff, 0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8001000010000100fdfffffffddbdf25e0000002000000000000000000000000ac1414aa000000000000000000000000ffff0000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000df0b000000000800ffffff7f030000000b00000027bd7000fc"], 0x180}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) (async) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1m25.792947503s ago: executing program 1 (id=1910): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) r1 = creat(&(0x7f0000000440)='./file0\x00', 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) fdatasync(r0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x1763716c, 0x1, [0xfffffffffffffffc, 0x2e1, 0x4, 0xffffffffffffffff, 0x6], [0xfffffffffffffff9, 0x7, 0x0, 0x3, 0x9, 0x2, 0x8, 0x4, 0x1ff, 0xa, 0x7, 0xf4, 0x7, 0xb2, 0x7fff, 0xb8, 0x93, 0x3, 0x9, 0x0, 0xf89, 0x0, 0x2, 0x4, 0x89b3, 0x8, 0x9, 0x4, 0x7a2b, 0x7, 0x86, 0x3, 0x4, 0x4501, 0x9, 0x4, 0x8001, 0x6, 0x6958, 0x1, 0x38f6, 0x400, 0x4, 0xb, 0x0, 0x8000, 0x3, 0xffffffff, 0x8, 0x32423e17, 0x6, 0x2, 0x0, 0x5, 0x5edd, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x23fc, 0x0, 0x2, 0x2, 0x9, 0x3, 0x0, 0xfffffffffffffffb, 0x3d6fde0f, 0xffffffffffffffff, 0xbc, 0x5, 0x4, 0xf8c, 0xff, 0x7fffffffffffffff, 0x7, 0x6, 0x8, 0xfffffffffffffff9, 0x5, 0x8, 0x7, 0x1, 0x3, 0x3ff, 0x6, 0x2, 0x10003, 0x6, 0x5, 0x80000000002, 0x9, 0xfffffffffffffffc, 0x7, 0x7fff, 0x80000000, 0x2422, 0xff, 0x2, 0x7f, 0x7, 0x9, 0xff, 0x10, 0x1ff, 0x3, 0x1, 0x0, 0xfffffffffffff98d, 0xb, 0x5, 0x2, 0xbb, 0x0, 0x8, 0x0, 0x8, 0x4]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0xffffb000) (async) creat(&(0x7f0000000440)='./file0\x00', 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) fdatasync(r0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x1763716c, 0x1, [0xfffffffffffffffc, 0x2e1, 0x4, 0xffffffffffffffff, 0x6], [0xfffffffffffffff9, 0x7, 0x0, 0x3, 0x9, 0x2, 0x8, 0x4, 0x1ff, 0xa, 0x7, 0xf4, 0x7, 0xb2, 0x7fff, 0xb8, 0x93, 0x3, 0x9, 0x0, 0xf89, 0x0, 0x2, 0x4, 0x89b3, 0x8, 0x9, 0x4, 0x7a2b, 0x7, 0x86, 0x3, 0x4, 0x4501, 0x9, 0x4, 0x8001, 0x6, 0x6958, 0x1, 0x38f6, 0x400, 0x4, 0xb, 0x0, 0x8000, 0x3, 0xffffffff, 0x8, 0x32423e17, 0x6, 0x2, 0x0, 0x5, 0x5edd, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0x23fc, 0x0, 0x2, 0x2, 0x9, 0x3, 0x0, 0xfffffffffffffffb, 0x3d6fde0f, 0xffffffffffffffff, 0xbc, 0x5, 0x4, 0xf8c, 0xff, 0x7fffffffffffffff, 0x7, 0x6, 0x8, 0xfffffffffffffff9, 0x5, 0x8, 0x7, 0x1, 0x3, 0x3ff, 0x6, 0x2, 0x10003, 0x6, 0x5, 0x80000000002, 0x9, 0xfffffffffffffffc, 0x7, 0x7fff, 0x80000000, 0x2422, 0xff, 0x2, 0x7f, 0x7, 0x9, 0xff, 0x10, 0x1ff, 0x3, 0x1, 0x0, 0xfffffffffffff98d, 0xb, 0x5, 0x2, 0xbb, 0x0, 0x8, 0x0, 0x8, 0x4]}) (async) 1m25.608746114s ago: executing program 1 (id=1912): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xa, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205000000a58d45b3142ee941288ec4f41f89076a5a70a85988c5f3d88b550baf8c0cb2f22cef53f42e96cd7c90de2aa021be3a7f7bbe4b8d5ebc3a40140ee950d80b51ca889c468d291be430720e9530f26765672f9a5d167b0cbc6b89a41c390db35fbef0a26a7d1b95aca229b7884f61d952b73b2b669c046b798cc7f0cc6001008fc00a5eec828603e40f234075de113446b04d2f70c59a564cf748dae79dfb8c13e2a3ac3ec337be07cf2273e78d2da2ddb8b45b17583db81e9515a7ede08672fd4bfd652db13a"], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) getresuid(&(0x7f0000000080)=0x0, 0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '9p\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '${&@*-[^'}}, {@dont_measure}], 0x6b}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000029c0)={'wg1\x00', &(0x7f0000001980)=@ethtool_dump={0x3e, 0xfc7d, 0x3}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m13.995172538s ago: executing program 0 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x2002020, &(0x7f0000001180)=ANY=[@ANYBLOB="41989b77fce89de69b614690da67908b17eea5b80b6dfb4705cec0133f922f0b40ef132fdde228720e7c4c523645e28f1add3436d19ece4bd5272772f625b82e87598d23348c9fd58a446c9166a005cf2a08308ef24efce665f99e38811e4168c7173f3a5e94b7a457268fa139c82b8a6c2013f9be488ba210af04c1a33070dca836aa747e70fb29d9eec1f2fd26073e8534bcab455b75bcbe2155a79e55a4f23721a52ff2418cf4ca5d59ce24d292f749643dddd29c97807cedfad40b98686587469cac758627e40220ea86", @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa40, 0x0) preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000000000)=""/4083, 0xff3}], 0x1, 0x0, 0x9, 0x1b) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4400000012000900000000000c000000000000000000000024000e00d84da481ad8c72442d706fc0502872331ce7ae3d9e046f6667439902c95ce99a"], 0x44}], 0x1}, 0x0) mount(&(0x7f0000001000)=@sg0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='ext3\x00', 0x1440, 0x0) 1m13.868884818s ago: executing program 0 (id=1982): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) (async) ptrace(0x8, r0) syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) (async) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x3e, 0x0, 0x0}) 1m13.758580239s ago: executing program 0 (id=1983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 1m13.548745461s ago: executing program 0 (id=1984): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6002, 0x0) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0xf7ffffff, 0x4, 0x1d) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2241829, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000180)) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x400) inotify_init() ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000000040)) 1m13.431229552s ago: executing program 0 (id=1986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2b106b47", 0x4}], 0x1}}], 0x1, 0x4040840) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8880, 0x8) r5 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r3, 0xfffffffc, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) write(r5, &(0x7f0000000140)="f57ae60174675af11a6c465156d5410b5af640eca36a0cde1dda486432872bd3357aa61d9c54136f158ee7d01630fad7fb5f198421d0f35e506f71a2b3a380770612853f6e0444c88310e5020175202d2dcc4e4db1d7ca712cb617be39e6935ebfceb11cd74dfa228e57f3de49d9ad6feb0ec38aa19f7a8e4c66e670e6ed461f456e2fa983e51ec1045ee21cbca90f80", 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.199770943s ago: executing program 0 (id=1989): unshare(0x22020600) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x20340, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 1m12.720519046s ago: executing program 2 (id=1994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m12.719981877s ago: executing program 2 (id=1995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x7f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015c000/0x18000)=nil, 0x0, 0x0, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x10001, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x7, 0xdab, 0x5, 0x2, 0xffffffe2, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xf, &(0x7f00000009c0)=0x2, 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x8}, 0x0, 0x1}, 0xe) listen(r5, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x38}}) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x6, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="01010000340400000600001000008e25", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000400100000000000040080300008d416cfa6fc2313e"], 0x48}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.431543939s ago: executing program 2 (id=1998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, 0x0, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) 1m12.429420659s ago: executing program 2 (id=2000): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d01090050000f"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) clock_getres(0xfffffffffffffffb, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) 1m11.302231856s ago: executing program 2 (id=2004): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async, rerun: 64) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x20000}, &(0x7f0000ffe000), 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x5204) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x559, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x2, 0x3}}}}}]}}]}}, 0x0) (async, rerun: 64) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, '\x00?\x00'}, @main=@item_4={0x3, 0x0, 0x8, "0ee94f00"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) (async, rerun: 32) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async, rerun: 32) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015) (async) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x38, r5, 0x701, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9c9046, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m8.188059159s ago: executing program 32 (id=1912): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xa, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205000000a58d45b3142ee941288ec4f41f89076a5a70a85988c5f3d88b550baf8c0cb2f22cef53f42e96cd7c90de2aa021be3a7f7bbe4b8d5ebc3a40140ee950d80b51ca889c468d291be430720e9530f26765672f9a5d167b0cbc6b89a41c390db35fbef0a26a7d1b95aca229b7884f61d952b73b2b669c046b798cc7f0cc6001008fc00a5eec828603e40f234075de113446b04d2f70c59a564cf748dae79dfb8c13e2a3ac3ec337be07cf2273e78d2da2ddb8b45b17583db81e9515a7ede08672fd4bfd652db13a"], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) getresuid(&(0x7f0000000080)=0x0, 0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '9p\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_eq}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '${&@*-[^'}}, {@dont_measure}], 0x6b}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000029c0)={'wg1\x00', &(0x7f0000001980)=@ethtool_dump={0x3e, 0xfc7d, 0x3}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m3.116357865s ago: executing program 2 (id=2007): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000002c0), 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xf8, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x58c}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x23}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2a}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0d0}]}]}, 0xf8}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000100)="f30f0966b8ee008ed8c4c2019c18c4e2f92257000f79dca70fc71b670f229e670f01c92e2e0f35", 0x27}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x3, 0xff) sendto(r12, 0x0, 0x0, 0x810, 0x0, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.014788139s ago: executing program 33 (id=2007): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000002c0), 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0xf8, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x58c}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x23}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2a}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xf0d0}]}]}, 0xf8}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000100)="f30f0966b8ee008ed8c4c2019c18c4e2f92257000f79dca70fc71b670f229e670f01c92e2e0f35", 0x27}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x3, 0xff) sendto(r12, 0x0, 0x0, 0x810, 0x0, 0x0) sendmsg$netlink(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.009891276s ago: executing program 3 (id=2011): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) (async) r2 = syz_io_uring_setup(0x280808d2, &(0x7f00000000c0)={0x0, 0xf1fd, 0x3010, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) (async) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup2(r5, r5) times(&(0x7f0000000000)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYBLOB="010006bd70000000000027000000180001801400020073797a5f74756e000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000000d}, 0x20000040) (async) read$FUSE(r6, &(0x7f00000047c0)={0x2020}, 0x2020) poll(&(0x7f0000000000)=[{r2, 0xd010}], 0x1, 0x9) (async) r8 = inotify_init1(0x80800) inotify_add_watch(r8, 0x0, 0xc0000484) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x12100, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002a6000/0x400000)=nil) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='incremental-fs\x00', 0x22008dc, 0x0) 41.58127332s ago: executing program 3 (id=2012): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x118) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) timer_gettime(r1, &(0x7f0000000100)) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r3], 0x0) (async) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) clock_gettime(0xa, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0xc4) sendfile(r5, r5, 0x0, 0x5) (async) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 28.756558223s ago: executing program 3 (id=2013): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 19.711582198s ago: executing program 3 (id=2014): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1054c2a, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) 19.711468188s ago: executing program 3 (id=2015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) write(r0, &(0x7f0000000000)="c4862f969c3cfccfb40ac4c4521ba3f98fef1fdc95b54882b6906af192b357915c6eb1037e44449d2839e4a5e538ddb0802bdca02aa8930c14", 0x39) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000180)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 18.140883909s ago: executing program 3 (id=2016): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4d, 0x401, 0x9, 0x9, 0x56, 0x6, 0x1, 0x18, 0x80, 0x8, [0x8, 0x8, 0x99, 0x5, 0x0, 0x2e06, 0xe7, 0x7fffffff], [0x1, 0x4, 0x1, 0xfffffff7, 0x7420bfe9, 0x6, 0x1, 0x7]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r6 = dup(r5) write$cgroup_subtree(r6, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 0s ago: executing program 34 (id=2016): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4d, 0x401, 0x9, 0x9, 0x56, 0x6, 0x1, 0x18, 0x80, 0x8, [0x8, 0x8, 0x99, 0x5, 0x0, 0x2e06, 0xe7, 0x7fffffff], [0x1, 0x4, 0x1, 0xfffffff7, 0x7420bfe9, 0x6, 0x1, 0x7]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r6 = dup(r5) write$cgroup_subtree(r6, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): nvalid length. [ 74.730384][ T2516] netlink: 9 bytes leftover after parsing attributes in process `syz.2.719'. [ 74.746695][ T2516] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 74.764556][ T2516] netlink: 9 bytes leftover after parsing attributes in process `syz.2.719'. [ 75.382485][ T36] audit: type=1400 audit(2000000011.030:375): avc: denied { bpf } for pid=2554 comm="syz.2.730" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.423087][ T36] audit: type=1400 audit(2000000011.080:376): avc: denied { read } for pid=2543 comm="syz.0.727" name="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.467140][ T36] audit: type=1400 audit(2000000011.100:377): avc: denied { open } for pid=2543 comm="syz.0.727" path="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.510655][ T36] audit: type=1400 audit(2000000011.100:378): avc: denied { setattr } for pid=2543 comm="syz.0.727" name="/" dev="configfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.125422][ T2586] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 76.169214][ T2590] fuse: Bad value for 'group_id' [ 76.174345][ T2590] fuse: Bad value for 'group_id' [ 76.180965][ T2590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.218992][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.234096][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 76.739361][ T2635] sit0: entered promiscuous mode [ 76.745482][ T2635] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 76.753243][ T2635] netlink: 9 bytes leftover after parsing attributes in process `syz.1.758'. [ 76.814130][ T36] audit: type=1400 audit(2000000012.470:379): avc: denied { name_bind } for pid=2644 comm="syz.0.763" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 77.563148][ T2682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.774'. [ 77.849065][ T36] audit: type=1400 audit(2000000013.500:380): avc: denied { accept } for pid=2698 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.222570][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 78.222602][ T488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.548746][ T36] audit: type=1400 audit(2000000014.200:381): avc: denied { mounton } for pid=2708 comm="syz.2.784" path="/file0" dev="ramfs" ino=11685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 78.603783][ T2713] tipc: Trying to set illegal importance in message [ 78.610655][ T2711] 9pnet_fd: Insufficient options for proto=fd [ 79.149910][ T36] audit: type=1400 audit(2000000014.800:382): avc: denied { sqpoll } for pid=2727 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.190038][ T36] audit: type=1326 audit(2000000014.840:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2734 comm="syz.1.792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x0 [ 79.212837][ T495] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 79.363622][ T495] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 79.372079][ T495] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 79.380224][ T495] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 79.389151][ T495] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 79.399970][ T495] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.411478][ T495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 79.422482][ T495] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 79.433498][ T495] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 79.448581][ T495] usb 4-1: string descriptor 0 read error: -22 [ 79.454859][ T495] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 79.463929][ T495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.472980][ T495] usb 4-1: config 0 descriptor?? [ 79.478233][ T2719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.485893][ T495] hub 4-1:0.0: bad descriptor, ignoring hub [ 79.491850][ T495] hub 4-1:0.0: probe with driver hub failed with error -5 [ 79.499855][ T495] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 79.833427][ T2753] /dev/loop0: Can't lookup blockdev [ 79.886708][ T36] audit: type=1400 audit(2000000015.540:384): avc: denied { map } for pid=2761 comm="syz.0.801" path="pipe:[11744]" dev="pipefs" ino=11744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.909532][ T36] audit: type=1400 audit(2000000015.540:385): avc: denied { execute } for pid=2761 comm="syz.0.801" path="pipe:[11744]" dev="pipefs" ino=11744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 79.937418][ T2765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 79.993255][ T2785] netlink: 5 bytes leftover after parsing attributes in process `syz.0.809'. [ 80.067090][ T2794] 9pnet_fd: Insufficient options for proto=fd [ 81.195817][ T2854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 81.214917][ T2854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2854 comm=syz.2.834 [ 81.597982][ T2885] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.820135][ T331] usb 4-1: USB disconnect, device number 22 [ 82.178613][ T2912] binder: Bad value for 'max' [ 82.203604][ T2917] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 82.203635][ T2917] rust_binder: Error while translating object. [ 82.212411][ T2917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.218877][ T2917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 82.256005][ T2920] loop5: detected capacity change from 0 to 7 [ 82.392579][ T2939] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.401584][ T2939] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 82.410271][ T2939] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.458953][ T2939] netlink: 136 bytes leftover after parsing attributes in process `syz.2.862'. [ 82.599522][ T36] audit: type=1326 audit(2000000018.250:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feeb3d8efc9 code=0xffff0000 [ 82.624483][ T46] tipc: Subscription rejected, illegal request [ 82.631807][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 83.103887][ T36] audit: type=1326 audit(2000000018.760:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2995 comm="syz.0.882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x0 [ 83.234066][ T580] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 83.393971][ T580] usb 4-1: unable to get BOS descriptor or descriptor too short [ 83.401734][ T580] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 83.413243][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.424231][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.434112][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.444339][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.454352][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.465478][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.475329][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.485569][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.496389][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.506631][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.508711][ T3039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=3039 comm=syz.2.898 [ 83.516347][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.538278][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.547947][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.558081][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.567663][ T580] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.577819][ T580] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.588626][ T580] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.597717][ T580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.605738][ T580] usb 4-1: Product: syz [ 83.609930][ T580] usb 4-1: Manufacturer: syz [ 83.614541][ T580] usb 4-1: SerialNumber: syz [ 83.823516][ T2979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.838950][ T2979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.862712][ T580] usb 4-1: USB disconnect, device number 23 [ 83.897921][ T36] audit: type=1400 audit(2000000019.550:388): avc: denied { nlmsg_tty_audit } for pid=3056 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 83.978316][ T3071] overlay: ./file0 is not a directory [ 83.979047][ T3073] netlink: 'syz.1.912': attribute type 12 has an invalid length. [ 84.067373][ T36] audit: type=1326 audit(2000000019.720:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3086 comm="syz.0.917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x0 [ 84.330321][ T3093] bridge0: port 3(syz_tun) entered blocking state [ 84.337005][ T3093] bridge0: port 3(syz_tun) entered disabled state [ 84.343648][ T3093] syz_tun: entered allmulticast mode [ 84.349569][ T3093] syz_tun: entered promiscuous mode [ 84.355134][ T3093] bridge0: port 3(syz_tun) entered blocking state [ 84.361655][ T3093] bridge0: port 3(syz_tun) entered forwarding state [ 84.423481][ T3102] rust_binder: 344: no such ref 0 [ 84.486313][ T36] audit: type=1326 audit(2000000020.140:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3106 comm="syz.2.924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cd418efc9 code=0x0 [ 84.523324][ T36] audit: type=1400 audit(2000000020.180:391): avc: denied { write } for pid=3104 comm="syz.3.923" path="socket:[13353]" dev="sockfs" ino=13353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.575932][ T36] audit: type=1400 audit(2000000020.230:392): avc: denied { ioctl } for pid=3104 comm="syz.3.923" path="socket:[12685]" dev="sockfs" ino=12685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.577464][ T3109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.607092][ T3109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:347 [ 84.608588][ T36] audit: type=1400 audit(2000000020.260:393): avc: denied { write } for pid=3106 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.322642][ T36] audit: type=1400 audit(2000000020.980:394): avc: denied { append } for pid=3138 comm="syz.3.933" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.352410][ T3142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 85.374619][ T36] audit: type=1400 audit(2000000021.030:395): avc: denied { write } for pid=3138 comm="syz.3.933" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.431706][ T3149] overlayfs: failed to clone upperpath [ 85.834295][ T494] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 85.993561][ T494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.007707][ T3186] tipc: Enabling of bearer rejected, failed to enable media [ 86.015971][ T494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.036902][ T494] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 86.050070][ T494] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.058207][ T494] usb 4-1: Manufacturer: syz [ 86.082363][ T494] usb 4-1: config 0 descriptor?? [ 86.133183][ T3194] overlayfs: failed to clone upperpath [ 86.140131][ T3195] overlayfs: failed to clone upperpath [ 86.169238][ T3194] netlink: 'syz.0.950': attribute type 13 has an invalid length. [ 86.198864][ T3201] 9pnet: Unknown protocol version 9 [ 86.504123][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.521554][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.532511][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.546501][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.553502][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.560533][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.567611][ T494] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 86.576105][ T494] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 86.913655][ T3219] overlayfs: failed to resolve './bus': -2 [ 86.968968][ T3224] 9pnet_fd: Insufficient options for proto=fd [ 87.857169][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 87.857200][ T36] audit: type=1400 audit(2000000023.510:402): avc: denied { setattr } for pid=3254 comm="syz.2.972" name="" dev="pipefs" ino=13087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.239370][ T36] audit: type=1326 audit(2000000023.890:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3282 comm="syz.0.982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x40000 [ 88.382683][ T3288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 88.531117][ T494] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 88.541353][ T494] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 88.549913][ T494] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 88.561484][ T494] usb 4-1: USB disconnect, device number 24 [ 88.604564][ T36] audit: type=1400 audit(2000000024.260:404): avc: denied { write } for pid=3290 comm="syz.3.985" name="vlan0" dev="proc" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.621573][ T3289] fido_id[3289]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 88.941052][ T3300] overlayfs: failed to clone upperpath [ 88.948980][ T3300] netlink: 'syz.2.988': attribute type 22 has an invalid length. [ 89.306433][ T3318] rust_binder: 3317 RLIMIT_NICE not set [ 89.454833][ T36] audit: type=1400 audit(2000000025.110:405): avc: denied { mount } for pid=3331 comm="syz.1.999" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.507672][ T3342] kvm: kvm [3341]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000200 [ 89.788609][ T3391] __vm_enough_memory: pid: 3391, comm: syz.3.1015, bytes: 18014402804453376 not enough memory for the allocation [ 89.914039][ T3396] overlayfs: overlapping lowerdir path [ 89.943262][ T3400] rust_binder: Write failure EINVAL in pid:403 [ 89.960218][ T3402] rust_binder: Error in use_page_slow: ESRCH [ 89.966505][ T3402] rust_binder: use_range failure ESRCH [ 89.973439][ T3402] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 89.979014][ T3402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.987266][ T3402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:405 [ 90.015446][ T3405] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 90.041272][ T3406] binder: Bad value for 'max' [ 90.095097][ T3412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.095861][ T3412] syz.3.1023 (3412): /proc/3411/oom_adj is deprecated, please use /proc/3411/oom_score_adj instead. [ 90.114155][ T3412] rust_binder: 415: no such ref 6 [ 90.119288][ T3412] rust_binder: 415: no such ref 3 [ 90.124691][ T3412] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 90.829167][ T3464] fuse: Bad value for 'user_id' [ 90.834123][ T3464] fuse: Bad value for 'user_id' [ 90.924672][ T36] audit: type=1400 audit(2000000026.580:406): avc: denied { map } for pid=3454 comm="syz.3.1038" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.170097][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 91.360132][ T3471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1044'. [ 91.472300][ T36] audit: type=1326 audit(2000000027.120:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.0.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x0 [ 91.724857][ T3513] 9pnet_fd: Insufficient options for proto=fd [ 91.948916][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 92.264417][ T3537] syz.2.1067 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.415453][ T3562] netlink: 'syz.1.1075': attribute type 8 has an invalid length. [ 92.789879][ T3578] 8021q: VLANs not supported on tunl0 [ 93.446950][ T3614] overlayfs: failed to clone upperpath [ 93.484697][ T3622] overlayfs: failed to clone upperpath [ 93.801881][ T36] audit: type=1400 audit(2000000029.450:408): avc: denied { bind } for pid=3635 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.831395][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 93.876364][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 93.887041][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 94.110631][ T36] audit: type=1400 audit(2000000029.760:409): avc: denied { create } for pid=3677 comm="syz.1.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 94.192523][ T494] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 94.253301][ T36] audit: type=1326 audit(2000000029.910:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3691 comm="syz.1.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x0 [ 94.347551][ T3699] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 94.355945][ T494] usb 4-1: Using ep0 maxpacket: 8 [ 94.362134][ T494] usb 4-1: config 6 has an invalid interface number: 48 but max is 3 [ 94.370618][ T494] usb 4-1: config 6 has an invalid interface number: 152 but max is 3 [ 94.379078][ T494] usb 4-1: config 6 has an invalid interface number: 247 but max is 3 [ 94.387477][ T494] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 94.396420][ T494] usb 4-1: config 6 has an invalid interface number: 238 but max is 3 [ 94.404836][ T494] usb 4-1: config 6 has no interface number 0 [ 94.411028][ T494] usb 4-1: config 6 has no interface number 1 [ 94.417384][ T494] usb 4-1: config 6 has no interface number 2 [ 94.423664][ T494] usb 4-1: config 6 has no interface number 3 [ 94.429833][ T494] usb 4-1: config 6 interface 152 altsetting 5 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 94.441100][ T494] usb 4-1: config 6 interface 247 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.452220][ T494] usb 4-1: config 6 interface 247 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.463454][ T494] usb 4-1: config 6 interface 247 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.474527][ T494] usb 4-1: config 6 interface 247 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 94.485695][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 94.496602][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 94.507559][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 94.518410][ T494] usb 4-1: config 6 interface 238 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 94.529453][ T494] usb 4-1: config 6 interface 238 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.540352][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 94.551070][ T494] usb 4-1: config 6 interface 238 altsetting 8 bulk endpoint 0xD has invalid maxpacket 16 [ 94.561061][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 94.571795][ T494] usb 4-1: config 6 interface 238 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 94.582535][ T494] usb 4-1: config 6 interface 238 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 94.593421][ T494] usb 4-1: config 6 interface 48 has no altsetting 0 [ 94.600110][ T494] usb 4-1: config 6 interface 152 has no altsetting 0 [ 94.606909][ T494] usb 4-1: config 6 interface 247 has no altsetting 0 [ 94.613800][ T494] usb 4-1: config 6 interface 238 has no altsetting 0 [ 94.621908][ T494] usb 4-1: New USB device found, idVendor=07aa, idProduct=7613, bcdDevice=15.fe [ 94.631026][ T494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.639068][ T494] usb 4-1: Product: 㪰㚭훻ų얏鮱ⶑ줭쒩翴ྥ콨쟆᱀ր٤裯ᯛ毤療♆移뼥聥危覲⣑흼촑㜒▼뮙᯺播喇땟餑蝧蔈圵䳋߆馳ꦗ꒟⛫徇䘠䈈귢覗⾛싥飐䭷᱆蟍뗔Έ [ 94.659866][ T494] usb 4-1: Manufacturer: Б [ 94.664403][ T494] usb 4-1: SerialNumber: 㣉䁔迺࡬珢ၓﺸᐦ꼡ꝏ⽱蚝뉿Ꮺ捆㢌랇炲㼑쮪햼景䍹翧률ﰍ櫬ⲍ䉚珒࢓䈔样ힻᨃ䃦ﶈ袭뢹⛙⬧彺콵뉉ꆋ뫱꓎⍱ऩ⇇炣褩‹뉏乁ꗌ듺铪왇㰒ῧ쌂퇽㱐⻀ﻳ凣쨎뢐䭈鳾׭뫼 [ 95.089660][ T3711] netlink: 'syz.1.1128': attribute type 19 has an invalid length. [ 95.093643][ T3712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.099226][ T3711] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1128'. [ 95.107021][ T3712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.318269][ T494] usb 4-1: USB disconnect, device number 25 [ 95.374475][ T3738] fuse: Unknown parameter '' [ 95.393497][ T3738] bridge0: port 3(syz_tun) entered disabled state [ 95.400937][ T3738] syz_tun (unregistering): left allmulticast mode [ 95.407667][ T3738] syz_tun (unregistering): left promiscuous mode [ 95.414102][ T3738] bridge0: port 3(syz_tun) entered disabled state [ 95.723426][ T36] audit: type=1400 audit(2000000031.380:411): avc: denied { map } for pid=3740 comm="syz.2.1139" path="socket:[14045]" dev="sockfs" ino=14045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 95.772669][ T36] audit: type=1400 audit(2000000031.430:412): avc: denied { mount } for pid=3748 comm="syz.2.1142" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 95.803070][ T3756] overlayfs: failed to clone lowerpath [ 95.812399][ T3756] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1144'. [ 96.092149][ T36] audit: type=1400 audit(2000000031.740:413): avc: denied { watch_reads } for pid=3788 comm="syz.2.1156" path="/325/file1" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.092522][ T494] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 96.272512][ T494] usb 4-1: Using ep0 maxpacket: 32 [ 96.281938][ T494] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.290475][ T494] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.299138][ T494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.308228][ T494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.317932][ T494] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.327698][ T494] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.346917][ T494] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.360865][ T494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.378818][ T494] usb 4-1: config 0 descriptor?? [ 96.585693][ T494] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.598298][ T494] usb 4-1: USB disconnect, device number 26 [ 96.604969][ T494] usblp0: removed [ 97.022544][ T494] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 97.042915][ T3854] overlayfs: failed to clone lowerpath [ 97.172503][ T494] usb 4-1: Using ep0 maxpacket: 32 [ 97.178818][ T494] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.187310][ T494] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.196183][ T494] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.218379][ T494] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.228334][ T494] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.238210][ T494] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.261424][ T494] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.282636][ T494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.291832][ T494] usb 4-1: config 0 descriptor?? [ 97.366284][ T3878] netlink: 'syz.2.1192': attribute type 12 has an invalid length. [ 97.504561][ T494] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.637699][ T3901] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 97.647333][ T3901] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1200'. [ 97.764425][ T36] audit: type=1400 audit(2000000033.420:414): avc: denied { sys_nice } for pid=3921 comm="syz.0.1208" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 97.793226][ T3923] fuse: Bad value for 'fd' [ 97.851839][ T36] audit: type=1400 audit(2000000033.500:415): avc: denied { audit_read } for pid=3930 comm="syz.0.1212" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.873701][ T36] audit: type=1400 audit(2000000033.530:416): avc: denied { read write } for pid=3763 comm="syz.3.1148" name="lp0" dev="devtmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.942409][ T36] audit: type=1400 audit(2000000033.530:417): avc: denied { open } for pid=3763 comm="syz.3.1148" path="/dev/usb/lp0" dev="devtmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.117429][ T376] usb 4-1: USB disconnect, device number 27 [ 98.126720][ T376] usblp0: removed [ 98.882519][ T376] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 99.032486][ T376] usb 4-1: Using ep0 maxpacket: 8 [ 99.039456][ T376] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.045657][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 99.045677][ T36] audit: type=1326 audit(2000000034.700:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.1.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7fc00000 [ 99.048577][ T376] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 99.084829][ T376] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping [ 99.093975][ T376] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.104217][ T376] usb 4-1: config 1 has no interface number 1 [ 99.110341][ T376] usb 4-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 99.123315][ T376] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.134278][ T376] usb 4-1: config 1 interface 4 has no altsetting 0 [ 99.142538][ T376] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.151756][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.159872][ T376] usb 4-1: Product: syz [ 99.164193][ T376] usb 4-1: Manufacturer: syz [ 99.168872][ T376] usb 4-1: SerialNumber: syz [ 99.255265][ T4028] 9pnet_fd: Insufficient options for proto=fd [ 99.294416][ T4037] bridge0: port 3(veth0_to_bridge) entered blocking state [ 99.301750][ T4037] bridge0: port 3(veth0_to_bridge) entered disabled state [ 99.309139][ T4037] veth0_to_bridge: entered allmulticast mode [ 99.315769][ T4037] veth0_to_bridge: entered promiscuous mode [ 99.321799][ T4037] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.334205][ T4037] bridge0: port 3(veth0_to_bridge) entered blocking state [ 99.341347][ T4037] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 99.376370][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.386223][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.395412][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 99.403308][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.412485][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 99.420390][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.429606][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 99.437493][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.446686][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 99.454579][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.463823][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 99.471679][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.480873][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 99.488761][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.497953][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 99.509578][ T4062] 9pnet_fd: Insufficient options for proto=fd [ 99.533653][ T4060] loop7: detected capacity change from 7 to 0 [ 99.545303][ T376] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 99.557885][ T376] usb 4-1: USB disconnect, device number 28 [ 99.570573][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.641181][ T36] audit: type=1400 audit(2000000035.290:420): avc: denied { create } for pid=4075 comm="syz.0.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.223546][ T4118] overlayfs: failed to clone lowerpath [ 100.230786][ T4118] overlayfs: failed to clone lowerpath [ 100.363623][ T4127] 9pnet_fd: Insufficient options for proto=fd [ 100.786516][ T4187] netlink: 'syz.1.1298': attribute type 16 has an invalid length. [ 100.794470][ T4187] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1298'. [ 100.841753][ T36] audit: type=1400 audit(2000000036.448:421): avc: denied { ioctl } for pid=4195 comm="syz.1.1301" path="socket:[15304]" dev="sockfs" ino=15304 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.975375][ T4198] loop5: detected capacity change from 0 to 7 [ 101.054226][ T4201] overlayfs: failed to clone upperpath [ 101.061447][ T4199] Invalid logical block size (1) [ 101.139350][ T4202] Invalid logical block size (1) [ 101.222810][ T36] audit: type=1400 audit(2000000036.804:422): avc: denied { associate } for pid=4212 comm="syz.3.1308" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.478844][ T36] audit: type=1400 audit(2000000000.065:423): avc: denied { view } for pid=4225 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 101.692559][ T36] audit: type=1400 audit(2000000000.262:424): avc: denied { mounton } for pid=4232 comm="syz.0.1315" path="/446/file0" dev="tmpfs" ino=2432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.975167][ T4236] 9pnet_fd: Insufficient options for proto=fd [ 101.997229][ T4240] tipc: Started in network mode [ 102.004713][ T4240] tipc: Node identity 00000000400500008, cluster identity 4711 [ 102.444745][ T4255] overlayfs: failed to clone lowerpath [ 102.457627][ T4255] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1322'. [ 102.473497][ T4263] binder: Unknown parameter '' [ 102.479088][ T36] audit: type=1400 audit(2000000000.994:425): avc: denied { map } for pid=4253 comm="syz.2.1322" path="socket:[15604]" dev="sockfs" ino=15604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.492018][ T4263] binder: Unknown parameter '' [ 102.509128][ T36] audit: type=1400 audit(2000000000.994:426): avc: denied { read accept } for pid=4253 comm="syz.2.1322" path="socket:[15604]" dev="sockfs" ino=15604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.582044][ T36] audit: type=1400 audit(2000000001.088:427): avc: denied { module_load } for pid=4279 comm="syz.3.1332" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 102.622255][ T36] audit: type=1400 audit(2000000001.135:428): avc: denied { execute } for pid=4276 comm="syz.0.1331" path="/dev/ashmem" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.870328][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.073904][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.085521][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.096665][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.106478][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.119413][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.128669][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.137623][ T45] usb 4-1: config 0 descriptor?? [ 103.601630][ T45] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 103.611831][ T45] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.558446][ T4384] fuse: Unknown parameter 'f}S?J 0x0000000000000004' [ 104.786537][ T4399] incfs: Options parsing error. -22 [ 104.792015][ T4399] incfs: mount failed -22 [ 105.644349][ T4404] 9pnet_fd: Insufficient options for proto=fd [ 105.711564][ T4428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 105.751627][ T4438] netlink: 'syz.1.1387': attribute type 13 has an invalid length. [ 106.089671][ T45] usb 4-1: USB disconnect, device number 29 [ 106.298511][ T4475] rust_binder: Error while translating object. [ 106.298568][ T4475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.304901][ T4475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496 [ 106.382458][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 106.382479][ T36] audit: type=1400 audit(2000000004.662:431): avc: denied { watch watch_reads } for pid=4490 comm="syz.1.1407" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 106.401881][ T4491] 8021q: VLANs not supported on xfrm0 [ 106.451705][ T4500] overlayfs: failed to clone upperpath [ 106.579580][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 106.740885][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.749405][ T45] usb 4-1: config 2 has an invalid interface number: 34 but max is 2 [ 106.757567][ T45] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 106.765611][ T45] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 106.775754][ T45] usb 4-1: config 2 has no interface number 0 [ 106.781908][ T45] usb 4-1: config 2 has no interface number 2 [ 106.788061][ T45] usb 4-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 106.799050][ T45] usb 4-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 106.810996][ T45] usb 4-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.823955][ T45] usb 4-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 106.834691][ T45] usb 4-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 106.847884][ T45] usb 4-1: config 2 interface 1 has no altsetting 0 [ 106.854632][ T45] usb 4-1: config 2 interface 34 has no altsetting 0 [ 106.858427][ T4514] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 106.861391][ T45] usb 4-1: config 2 interface 6 has no altsetting 0 [ 106.877491][ T45] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 106.887075][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.895452][ T45] usb 4-1: Product: syz [ 106.899908][ T45] usb 4-1: Manufacturer: syz [ 106.904578][ T45] usb 4-1: SerialNumber: syz [ 107.126477][ T4479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.130972][ T45] usb 4-1: selecting invalid altsetting 0 [ 107.150646][ T45] usb 4-1: USB disconnect, device number 30 [ 107.167134][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.378026][ T36] audit: type=1400 audit(2000000005.591:432): avc: denied { execute_no_trans } for pid=4557 comm="syz.0.1431" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.395244][ T4560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4560 comm=syz.0.1432 [ 107.602083][ T4596] overlayfs: failed to clone upperpath [ 107.614886][ T36] audit: type=1400 audit(2000000005.826:433): avc: denied { accept } for pid=4600 comm="syz.2.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.733976][ T4619] rust_binder: 505: no such ref 3 [ 107.757451][ T4623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:507 [ 107.801636][ T36] audit: type=1400 audit(2000000005.995:434): avc: denied { module_load } for pid=4631 comm="syz.3.1455" path="/bus" dev="ramfs" ino=15933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 107.803952][ T4633] Invalid ELF header magic: != ELF [ 109.091802][ T4701] sock: sock_set_timeout: `syz.2.1470' (pid 4701) tries to set negative timeout [ 109.175473][ T4703] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1471'. [ 109.221452][ T4711] fuse: Bad value for 'user_id' [ 109.226485][ T4711] fuse: Bad value for 'user_id' [ 109.231837][ T4711] tmpfs: Unknown parameter '' [ 109.677713][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 109.761525][ T4671] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.803022][ T4750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1487'. [ 109.812156][ T4750] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1487'. [ 109.821336][ T4750] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1487'. [ 110.313633][ T4776] overlayfs: failed to clone lowerpath [ 110.320501][ T4776] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1496'. [ 110.352822][ T4780] overlayfs: failed to resolve './file0': -2 [ 110.797693][ T4798] 9pnet_fd: Insufficient options for proto=fd [ 110.862380][ T4808] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.916988][ T4809] @0: renamed from bond_slave_1 [ 111.248570][ T36] audit: type=1326 audit(2000000009.231:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.271999][ T36] audit: type=1326 audit(2000000009.231:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.295574][ T36] audit: type=1326 audit(2000000009.241:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.319160][ T36] audit: type=1326 audit(2000000009.241:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.342545][ T36] audit: type=1326 audit(2000000009.241:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.365844][ T36] audit: type=1326 audit(2000000009.241:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4827 comm="syz.1.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c7b8efc9 code=0x7ffc0000 [ 111.417459][ T4834] overlayfs: failed to clone lowerpath [ 111.452377][ T4839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=4839 comm=syz.1.1519 [ 111.697364][ T4878] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1525'. [ 111.908882][ T488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.908912][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 112.544672][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 112.544690][ T36] audit: type=1326 audit(2000000010.442:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.581646][ T36] audit: type=1326 audit(2000000010.442:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.620762][ T36] audit: type=1326 audit(2000000010.479:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.644191][ T36] audit: type=1326 audit(2000000010.479:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.667925][ T36] audit: type=1326 audit(2000000010.479:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.692226][ T36] audit: type=1326 audit(2000000010.507:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.700318][ T4935] rust_binder: Error while translating object. [ 112.715764][ T36] audit: type=1326 audit(2000000010.507:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.716212][ T4935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.729211][ T36] audit: type=1326 audit(2000000010.507:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.752118][ T4935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 112.765535][ T36] audit: type=1326 audit(2000000010.507:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.810601][ T36] audit: type=1326 audit(2000000010.507:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4925 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e05d8efc9 code=0x7ffc0000 [ 112.843669][ T4944] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 112.843695][ T4944] rust_binder: Error while translating object. [ 112.852680][ T4944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.858905][ T4944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 113.093414][ T4963] overlayfs: failed to clone upperpath [ 113.134954][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 113.144248][ T4967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1554'. [ 113.283864][ T580] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 113.412493][ T4975] netlink: 'syz.0.1556': attribute type 27 has an invalid length. [ 113.466994][ T580] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 113.476131][ T580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.484983][ T580] usb 4-1: config 0 descriptor?? [ 113.730789][ T4988] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 114.143327][ T5014] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 114.153474][ T5014] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 114.163158][ T5014] tipc: Started in network mode [ 114.168077][ T5014] tipc: Node identity ac14140f, cluster identity 4711 [ 114.175168][ T5014] tipc: New replicast peer: 255.255.255.255 [ 114.181456][ T5014] tipc: Enabled bearer , priority 10 [ 114.188564][ T5014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5014 comm=syz.0.1568 [ 114.349793][ T580] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.359914][ T580] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 114.381760][ T580] asix 4-1:0.0: probe with driver asix failed with error -71 [ 114.391936][ T580] usb 4-1: USB disconnect, device number 31 [ 114.507769][ T5026] netlink: 'syz.2.1571': attribute type 32 has an invalid length. [ 115.149389][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 115.246700][ T494] tipc: Node number set to 2886997007 [ 115.310280][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 115.318196][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.329405][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.340781][ T45] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.351022][ T45] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 115.364688][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.371790][ T45] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 115.381397][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.390711][ T45] usb 4-1: config 0 descriptor?? [ 116.042516][ T5040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.216584][ T5083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1588'. [ 116.219053][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 116.239267][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.252994][ T45] usb 4-1: USB disconnect, device number 32 [ 116.607393][ T5122] netlink: 'syz.3.1601': attribute type 4 has an invalid length. [ 116.636522][ T5127] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 116.699256][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1600'. [ 116.799871][ T5146] netlink: 'syz.3.1607': attribute type 28 has an invalid length. [ 116.841907][ T5148] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1608'. [ 117.034600][ T5155] 9pnet_fd: Insufficient options for proto=fd [ 117.050626][ T5155] 9pnet_fd: Insufficient options for proto=fd [ 117.057052][ T5173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 117.057080][ T5173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:579 [ 117.238221][ T5186] 9pnet_fd: Insufficient options for proto=fd [ 117.333295][ T5191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=5191 comm=syz.0.1621 [ 117.391559][ T5198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5198 comm=syz.2.1624 [ 118.003804][ T36] kauditd_printk_skb: 49 callbacks suppressed [ 118.003823][ T36] audit: type=1400 audit(2000000015.564:567): avc: denied { create } for pid=5218 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 118.030226][ T36] audit: type=1400 audit(2000000015.583:568): avc: denied { write } for pid=5218 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 118.036371][ T580] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 118.053563][ T36] audit: type=1400 audit(2000000015.592:569): avc: denied { read write } for pid=5214 comm="syz.3.1630" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.081415][ T580] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.092332][ T36] audit: type=1400 audit(2000000015.592:570): avc: denied { open } for pid=5214 comm="syz.3.1630" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.191468][ T5220] overlayfs: missing 'lowerdir' [ 119.261472][ T36] audit: type=1326 audit(2000000016.737:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5293 comm="syz.2.1660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cd418efc9 code=0x0 [ 119.418720][ T5318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5318 comm=syz.1.1668 [ 119.431628][ T5318] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1668'. [ 119.440653][ T580] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 119.605614][ T580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.616600][ T580] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.626407][ T580] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.639340][ T580] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.648429][ T580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.657069][ T580] usb 4-1: config 0 descriptor?? [ 120.090632][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.098177][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.105700][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.113149][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.120599][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.128070][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.135492][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.142958][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.150407][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.157830][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.165308][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.172752][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.180207][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.187649][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.195196][ T580] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 120.202832][ T580] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 120.215383][ T580] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 120.267599][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'. [ 120.277514][ T5358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5358 comm=syz.2.1685 [ 120.361979][ T424] usb 4-1: USB disconnect, device number 33 [ 120.588465][ T36] audit: type=1326 audit(2000000017.994:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5199 comm="syz.0.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e05d8efc9 code=0x7fc00000 [ 120.656985][ T5374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=5374 comm=syz.0.1690 [ 120.670096][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 120.695417][ T5377] 9pnet_fd: Insufficient options for proto=fd [ 120.717915][ T5385] overlayfs: failed to clone upperpath [ 120.737159][ T5389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5389 comm=syz.0.1695 [ 120.740076][ T5391] overlayfs: failed to clone upperpath [ 121.022980][ T5414] /dev/rnullb0: Can't open blockdev [ 121.641755][ T5451] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1718'. [ 121.663882][ T36] audit: type=1400 audit(2000000018.998:573): avc: denied { read } for pid=5465 comm="syz.0.1724" path="socket:[18249]" dev="sockfs" ino=18249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.762094][ T36] audit: type=1400 audit(2000000019.092:574): avc: denied { map } for pid=5469 comm="syz.0.1725" path="socket:[18261]" dev="sockfs" ino=18261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 121.787536][ T36] audit: type=1400 audit(2000000019.092:575): avc: denied { accept } for pid=5469 comm="syz.0.1725" path="socket:[18261]" dev="sockfs" ino=18261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 122.075676][ T5500] tipc: Enabled bearer , priority 26 [ 122.139835][ T36] audit: type=1400 audit(2000000019.439:576): avc: denied { getopt } for pid=5507 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 122.827386][ T5572] 9pnet_fd: Insufficient options for proto=fd [ 122.859475][ T5577] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.860490][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 122.960827][ T5578] @0: renamed from bond_slave_1 (while UP) [ 123.026461][ T5585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 123.231041][ T5592] Invalid ELF header len 1 [ 123.734983][ T5612] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 123.745014][ T5612] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 123.754987][ T5612] binder: Bad value for 'max' [ 123.931974][ T5621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 123.932011][ T5621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:653 [ 123.956282][ T5627] netlink: 'syz.3.1778': attribute type 64 has an invalid length. [ 123.973340][ T5627] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1778'. [ 124.230372][ T580] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 124.390244][ T580] usb 4-1: Using ep0 maxpacket: 8 [ 124.397057][ T580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 124.407055][ T580] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 124.418333][ T580] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.427433][ T580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.435467][ T580] usb 4-1: Product: ゲ맗ⱘ厓꒓襄蚲湜ඡ伧妙ﯻ篿⌓먤閇뇋(귭媦涚볾ຸ붯⥄땂玟鼂䌅梘毳済슆宇༩鐜썉吡슒劅卒మ⯅娇쪭鵙〸洕둅폌൳쟬に喃藻袣鿄婎鼂㘔ᨒ鳹죙Ⅽఇ轙〰꾶理쬁쪽ཕ嫼祝ꨳ얿灈ᮔᒾᨵ̽濝馰싖٠됡꺃ꡖ뚿ソ싸걸㑯铘䭍 [ 124.466526][ T580] usb 4-1: Manufacturer: ᷤ≚Dz馘␌৚熍鶳胥९죂ﰒ਋꓀捯睪鏿垌曶荺날궑䃞쥎ꃿ者뎞⹤벷㶛䏭坜൶请߉孻鶡㕦䮿扸㾞憦䢪䟀ꮸ扁什뫥ۭ㸘뭙喹源戙ፆ穢ἔ䊃랴뽫僧餶᠍嚇뽤Ḣ캘꘺鄮ꠧ蜷嘒嘼⠠諧䐠鶦鄳௬읳角Ǜ뽍妶딡뙆蝕卣㷴聇䒝꠶ [ 124.502736][ T580] usb 4-1: SerialNumber: ⓼㏠麯ࠥ澱礙吹啣ͮẓ⠊혢雅졓땳࿍醶誡潯ᬧ賄뇂厥勯㛭䦈郉齭ᒬ硧뜨鮸饳简籹깑뱖ឺ阙뗒黑ꋆ睉鳒䉿닪牨剸뺘꾓Ꙛ糇 [ 124.737256][ T5627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.745929][ T5627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.754500][ T5627] __vm_enough_memory: pid: 5627, comm: syz.3.1778, bytes: 18014402804453376 not enough memory for the allocation [ 124.769437][ T580] cdc_ncm 4-1:1.0: bind() failure [ 124.775370][ T580] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 124.782310][ T580] cdc_ncm 4-1:1.1: bind() failure [ 124.788589][ T580] usb 4-1: USB disconnect, device number 34 [ 125.244151][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 125.244171][ T36] audit: type=1400 audit(2000000022.357:606): avc: denied { accept } for pid=5662 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.488887][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 125.517648][ T36] audit: type=1400 audit(2000000022.610:607): avc: granted { setsecparam } for pid=5685 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 125.648169][ T5687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.649162][ T36] audit: type=1400 audit(2000000022.741:608): avc: denied { create } for pid=5685 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.672839][ T5688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.675388][ T36] audit: type=1400 audit(2000000022.741:609): avc: denied { create } for pid=5685 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.701104][ T5688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.704925][ T36] audit: type=1400 audit(2000000022.751:610): avc: denied { read write } for pid=5685 comm="syz.3.1798" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.733801][ T36] audit: type=1400 audit(2000000022.751:611): avc: denied { open } for pid=5685 comm="syz.3.1798" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.757356][ T36] audit: type=1400 audit(2000000022.751:612): avc: denied { ioctl } for pid=5685 comm="syz.3.1798" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.836786][ T36] audit: type=1400 audit(2000000022.910:613): avc: denied { execmem } for pid=5700 comm="syz.1.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 126.145798][ T5722] fuse: Bad value for 'group_id' [ 126.150948][ T5722] fuse: Bad value for 'group_id' [ 126.262845][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 126.266194][ T36] audit: type=1400 audit(2000000023.314:614): avc: denied { create } for pid=5739 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.299136][ T36] audit: type=1400 audit(2000000023.323:615): avc: denied { write } for pid=5739 comm="syz.1.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.343919][ T5748] netlink: 'syz.1.1818': attribute type 4 has an invalid length. [ 127.410581][ T5773] overlayfs: missing 'lowerdir' [ 127.466260][ T5782] 9pnet_fd: Insufficient options for proto=fd [ 127.493477][ T5784] 9pnet_fd: Insufficient options for proto=fd [ 127.730073][ T5811] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1841'. [ 127.739645][ T5811] 9pnet_fd: Insufficient options for proto=fd [ 128.406999][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1849'. [ 128.548859][ T5858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'. [ 128.742391][ T5881] netlink: 'syz.1.1869': attribute type 17 has an invalid length. [ 128.800700][ T5888] netlink: 'syz.1.1872': attribute type 4 has an invalid length. [ 128.868633][ T5892] rust_binder: Write failure EFAULT in pid:681 [ 128.880467][ T5895] /dev/rnullb0: Can't open blockdev [ 128.906826][ T5898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.906854][ T5898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:686 [ 128.930617][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 128.967183][ T5902] binder: Unknown parameter 'seclAcel9*' [ 129.660872][ T5961] 9pnet_fd: Insufficient options for proto=fd [ 130.180388][ T5969] fuse: Unknown parameter '' [ 130.247860][ T5970] futex_wake_op: syz.3.1898 tries to shift op by 32; fix this program [ 130.720707][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.730499][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.751993][ T5979] bridge_slave_0: entered allmulticast mode [ 130.758498][ T5979] bridge_slave_0: entered promiscuous mode [ 130.768572][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.776007][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.783263][ T5979] bridge_slave_1: entered allmulticast mode [ 130.790425][ T5979] bridge_slave_1: entered promiscuous mode [ 130.798541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.810713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.822833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.834918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.847039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.859166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.871288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.883404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.895523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.907640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.103425][ T5998] overlayfs: failed to clone upperpath [ 131.257152][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.264280][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.271630][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.278727][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.351381][ T580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65380 sclass=netlink_tcpdiag_socket pid=580 comm=kworker/0:5 [ 131.391360][ T580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=104 sclass=netlink_tcpdiag_socket pid=580 comm=kworker/0:5 [ 131.451250][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.462535][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.514907][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.522040][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.563538][ T331] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 131.580814][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.587950][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.699056][ T5979] veth0_vlan: entered promiscuous mode [ 131.737442][ T5979] veth1_macvtap: entered promiscuous mode [ 131.767507][ T331] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.799729][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.826135][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.863898][ T331] usb 4-1: Product: syz [ 131.886145][ T331] usb 4-1: Manufacturer: syz [ 131.909236][ T331] usb 4-1: SerialNumber: syz [ 132.789320][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.972773][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.983991][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.001612][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.015398][ T331] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 133.024001][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.035662][ T331] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 133.043386][ T331] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 133.054067][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.073135][ T10] usb 1-1: config 0 descriptor?? [ 133.285550][ T6044] /dev/rnullb0: Can't open blockdev [ 133.304676][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.315682][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.761959][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 133.772008][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 133.784474][ T10] usb 1-1: USB disconnect, device number 13 [ 134.534397][ T331] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 134.563407][ T331] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 134.616078][ T331] usb 4-1: USB disconnect, device number 36 [ 134.644600][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 134.671860][ T331] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 134.878496][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 134.920593][ T10] usb 1-1: can't read configurations, error -61 [ 135.102474][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 135.331714][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 135.358111][ T10] usb 1-1: can't read configurations, error -61 [ 135.369056][ T10] usb usb1-port1: attempt power cycle [ 135.609469][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 135.609490][ T36] audit: type=1400 audit(2000000031.195:622): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 135.638422][ T36] audit: type=1400 audit(2000000031.232:623): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.659905][ T36] audit: type=1400 audit(2000000031.232:624): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.681725][ T36] audit: type=1400 audit(2000000031.232:625): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.705587][ T36] audit: type=1400 audit(2000000031.232:626): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2534 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.729057][ T36] audit: type=1400 audit(2000000031.392:627): avc: denied { read } for pid=6074 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.752272][ T36] audit: type=1400 audit(2000000031.392:628): avc: denied { open } for pid=6074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.777321][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 135.785453][ T36] audit: type=1400 audit(2000000031.392:629): avc: denied { getattr } for pid=6074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.810986][ T36] audit: type=1400 audit(2000000031.617:630): avc: denied { write } for pid=6073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.834927][ T36] audit: type=1400 audit(2000000031.617:631): avc: denied { add_name } for pid=6073 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.858634][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 135.866277][ T10] usb 1-1: can't read configurations, error -61 [ 136.008230][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 136.031835][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 136.039559][ T10] usb 1-1: can't read configurations, error -61 [ 136.046349][ T10] usb usb1-port1: unable to enumerate USB device [ 136.136103][ C1] net_ratelimit: 79443 callbacks suppressed [ 136.136125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.154171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.166218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.178246][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.190281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.202409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.214527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.226626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.238632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.250663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.360663][ T6127] netlink: 'syz.3.1941': attribute type 4 has an invalid length. [ 137.766896][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 137.947233][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.965242][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.007540][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.036546][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.074813][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 138.108105][ T6161] rust_binder: Error in use_page_slow: ESRCH [ 138.108131][ T6161] rust_binder: use_range failure ESRCH [ 138.125007][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.150675][ T6161] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 138.150707][ T6161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 138.171955][ T6161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:31 [ 138.200594][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.252720][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.285645][ T10] usb 4-1: config 0 descriptor?? [ 138.349321][ T6170] rust_binder: 34: no such ref 3 [ 138.354353][ T6170] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 138.361420][ T6170] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 65537 [ 138.368854][ T6170] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 138.375915][ T6170] rust_binder: 34: no such ref 0 [ 138.386958][ T6131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.616869][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.637101][ T10] usb 4-1: USB disconnect, device number 37 [ 138.645153][ T10] usblp0: removed [ 139.099260][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 139.259108][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 139.266466][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.280418][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.297410][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.317296][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.344399][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.375797][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.408757][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.429273][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.451211][ T10] usb 4-1: config 0 descriptor?? [ 139.657538][ T6186] binder: Unknown parameter 'maxUoW8Nx8Y pg [ 139.657538][ T6186] 5*ߘ:1c;d)@9e|CՌ' [ 139.687440][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.090523][ T580] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 140.250368][ T580] usb 1-1: Using ep0 maxpacket: 16 [ 140.257910][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.269255][ T580] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 140.285687][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.295209][ T580] usb 1-1: config 0 descriptor?? [ 140.748886][ T580] wacom 0003:056A:006B.000D: Unknown device_type for 'HID 056a:006b'. Assuming pen. [ 140.771292][ T580] wacom 0003:056A:006B.000D: hidraw0: USB HID v0.02 Device [HID 056a:006b] on usb-dummy_hcd.0-1/input0 [ 140.787133][ T580] input: Wacom Bamboo1 5x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:006B.000D/input/input10 [ 141.160418][ T10] usb 4-1: USB disconnect, device number 38 [ 141.191156][ T10] usblp0: removed [ 141.476151][ C1] net_ratelimit: 86766 callbacks suppressed [ 141.476176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.494291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.506450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.518602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.530662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.542746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.554851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.567015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.579163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.591306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.983162][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 141.983181][ T36] audit: type=1400 audit(2000000038.062:645): avc: denied { accept } for pid=6214 comm="syz.2.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 142.221178][ T6228] syz.3.1977: attempt to access beyond end of device [ 142.221178][ T6228] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 142.245377][ T6229] bridge0: port 4(veth0_to_bridge) entered blocking state [ 142.252774][ T6228] FAT-fs (loop3): unable to read boot sector [ 142.261130][ T6229] bridge0: port 4(veth0_to_bridge) entered disabled state [ 142.286248][ T6229] veth0_to_bridge: entered allmulticast mode [ 142.305666][ T6229] veth0_to_bridge: entered promiscuous mode [ 142.326229][ T6229] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.342541][ T6232] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 142.342667][ T6232] rust_binder: Write failure EINVAL in pid:748 [ 142.350874][ T6232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.359504][ T6229] bridge0: port 4(veth0_to_bridge) entered blocking state [ 142.373192][ T6229] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 142.765853][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 142.936424][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 142.953862][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.971062][ T331] usb 1-1: USB disconnect, device number 18 [ 142.998398][ T10] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 143.051835][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 143.098573][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.135283][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.149602][ T6246] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.149625][ T6246] rust_binder: Read failure Err(EFAULT) in pid:51 [ 143.181080][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 143.241434][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.261668][ T6249] overlayfs: workdir and upperdir must be separate subtrees [ 143.271363][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.296420][ T10] usb 4-1: Product: syz [ 143.306053][ T10] usb 4-1: Manufacturer: syz [ 143.312568][ T6249] rust_binder: 56: no such ref 1 [ 143.320077][ T36] audit: type=1400 audit(2000000039.310:646): avc: denied { setopt } for pid=6248 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.350268][ T10] usb 4-1: SerialNumber: syz [ 143.515665][ T6254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1985'. [ 143.546622][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1985'. [ 143.702006][ T4670] bridge_slave_1: left allmulticast mode [ 143.707775][ T4670] bridge_slave_1: left promiscuous mode [ 143.716802][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.748676][ T4670] bridge_slave_0: left allmulticast mode [ 143.767512][ T4670] bridge_slave_0: left promiscuous mode [ 143.779345][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.035252][ T4670] veth1_macvtap: left promiscuous mode [ 144.049149][ T4670] veth0_vlan: left promiscuous mode [ 144.263660][ T6282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1995'. [ 144.281963][ T6282] netlink: 'syz.2.1995': attribute type 6 has an invalid length. [ 144.290441][ T6282] netlink: 'syz.2.1995': attribute type 5 has an invalid length. [ 144.298651][ T6282] netlink: 'syz.2.1995': attribute type 4 has an invalid length. [ 144.399175][ T36] audit: type=1400 audit(2000000040.333:647): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.534693][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.556493][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.573132][ T6274] bridge_slave_0: entered allmulticast mode [ 144.585850][ T6274] bridge_slave_0: entered promiscuous mode [ 144.593274][ T6296] /dev/rnullb0: Can't open blockdev [ 144.696741][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.703943][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.711409][ T6274] bridge_slave_1: entered allmulticast mode [ 144.718169][ T6274] bridge_slave_1: entered promiscuous mode [ 144.994904][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2003'. [ 145.031188][ T6306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6306 comm=syz.3.2003 [ 146.816159][ C1] net_ratelimit: 69988 callbacks suppressed [ 146.816184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.834293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.846332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.858362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.870435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.882578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.894694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.906788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.918824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.930930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.561207][ T10] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 149.982316][ T10] usb 4-1: 2:1 : format type 9 is not supported yet [ 152.156125][ C1] net_ratelimit: 70900 callbacks suppressed [ 152.156148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.156240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.162189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.174454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.186130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.198375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.210109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 152.222157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.234008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.246068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.693405][ T6322] rust_binder: 773: no such ref 2 [ 153.771299][ T6322] rust_binder: 773: no such ref 1 [ 153.803427][ T6322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:773 [ 157.496151][ C1] net_ratelimit: 81106 callbacks suppressed [ 157.496175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.496180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 157.496363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.505462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.511547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 157.523391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.535480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.547254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.559431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 157.571322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.836141][ C1] net_ratelimit: 97545 callbacks suppressed [ 162.836181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.836289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 162.842307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 162.854221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.866325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.878122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.890069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.902094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 162.913948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.925904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.176186][ C1] net_ratelimit: 108860 callbacks suppressed [ 168.176209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.176256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 168.182343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 168.194495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.206575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.218370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.230274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.242169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.254087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.266141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 170.906212][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 170.926093][ C1] sched: DL replenish lagged too much [ 173.516156][ C1] net_ratelimit: 109817 callbacks suppressed [ 173.516179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.516199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.522307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.534430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 173.546285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.558417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.570305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.582228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.594101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.606074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.856215][ C1] net_ratelimit: 115228 callbacks suppressed [ 178.856237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.856258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 178.862373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.874479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.886477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 178.898453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.910492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.922348][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.934672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.946664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 180.636329][ T6328] syz_tun (unregistering): left allmulticast mode [ 181.396077][ T6328] syz_tun (unregistering): left promiscuous mode [ 181.632426][ T6328] bridge0: port 3(syz_tun) entered disabled state [ 184.196235][ C1] net_ratelimit: 116771 callbacks suppressed [ 184.196258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.196281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 184.202502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.214509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.226428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.238417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.250340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.262300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.274178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.286382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 189.536199][ C0] net_ratelimit: 119609 callbacks suppressed [ 189.536221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.536236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.542369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.554274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.566267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 189.578159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.590146][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.602017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.614063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.625934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.338236][ T36] audit: type=1326 audit(2000000084.212:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.3.2013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeb3d8efc9 code=0x0 [ 194.653819][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.660929][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.876218][ C0] net_ratelimit: 126986 callbacks suppressed [ 194.876240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.876345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.882360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.894318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.906363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 194.918288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.930219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.942127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.954154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.966041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.164963][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.172084][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.216254][ C0] net_ratelimit: 125850 callbacks suppressed [ 200.216277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.216299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.222422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.234315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.246199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.258225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.270112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.282005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.294007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.305918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.221066][ T6356] rust_binder: Write failure EFAULT in pid:795 [ 205.556246][ C0] net_ratelimit: 127173 callbacks suppressed [ 205.556271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.556273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 205.556473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.562570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.568667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.580543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.592561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.604553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 205.616328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.628392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.896249][ C1] net_ratelimit: 126956 callbacks suppressed [ 210.896273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.896326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.902400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.914388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 210.926297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 210.938348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.950428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.962286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.974161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.986014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.236242][ C1] net_ratelimit: 124567 callbacks suppressed [ 216.236264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.236336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.242389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.254374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.266276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.278126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.290117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.302115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.314012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.325901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.501375][ T10] usb 4-1: USB disconnect, device number 39 [ 221.576260][ C1] net_ratelimit: 121809 callbacks suppressed [ 221.576281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 221.576328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.582627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.594446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.606493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.618358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.630254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.642217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.654071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.666211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 226.916267][ C1] net_ratelimit: 128730 callbacks suppressed [ 226.916291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.916390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 226.922460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.934590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.946492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.958425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.970341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.982141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.994208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.006309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.256283][ C1] net_ratelimit: 129327 callbacks suppressed [ 232.256304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.256317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.256403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.262451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.274332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.286219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.298229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.310200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.322108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.333993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.596306][ C1] net_ratelimit: 123715 callbacks suppressed [ 237.596330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.596358][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.602476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.614394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.626288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.638382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.650189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.662270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 237.674186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.686142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.936304][ C0] net_ratelimit: 125483 callbacks suppressed [ 242.936326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.936327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.936404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.942492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.954396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.966385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.978334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.990356][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.002362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.014247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.276305][ C1] net_ratelimit: 124655 callbacks suppressed [ 248.276326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.276377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.282441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.294443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.306415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.318425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.330317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.342222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.354164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.366104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 250.220530][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.281414][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.288546][ T6359] bridge_slave_0: entered allmulticast mode [ 250.357851][ T6359] bridge_slave_0: entered promiscuous mode [ 250.527089][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.534263][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.557419][ T6359] bridge_slave_1: entered allmulticast mode [ 250.590912][ T6359] bridge_slave_1: entered promiscuous mode [ 253.616369][ C1] net_ratelimit: 127124 callbacks suppressed [ 253.616392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.616397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.616471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.622639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.634586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.646491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.658457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.670539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.682491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 253.694231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 257.116554][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.134366][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.141637][ T6368] bridge_slave_0: entered allmulticast mode [ 257.176683][ T6368] bridge_slave_0: entered promiscuous mode [ 257.848656][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.855753][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.891800][ T6368] bridge_slave_1: entered allmulticast mode [ 257.922959][ T6368] bridge_slave_1: entered promiscuous mode [ 258.043128][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.056525][ T6367] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.083047][ T6367] bridge_slave_0: entered allmulticast mode [ 258.110548][ T6367] bridge_slave_0: entered promiscuous mode [ 258.956351][ C0] net_ratelimit: 127348 callbacks suppressed [ 258.956374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.956374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.956475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.962579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 258.974535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.986545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.998416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.010456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.022360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.034264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.440880][ T6367] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.450410][ T6367] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.469743][ T6367] bridge_slave_1: entered allmulticast mode [ 259.490575][ T6367] bridge_slave_1: entered promiscuous mode [ 260.100577][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.110437][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.162013][ T6370] bridge_slave_0: entered allmulticast mode [ 260.183139][ T6370] bridge_slave_0: entered promiscuous mode [ 260.955877][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.970899][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.978030][ T6370] bridge_slave_1: entered allmulticast mode [ 261.035587][ T6370] bridge_slave_1: entered promiscuous mode [ 264.296357][ C1] net_ratelimit: 125928 callbacks suppressed [ 264.296379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.296407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.302498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.314415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.326418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.338436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.350360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.362214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.374107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 264.386168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 269.636345][ C0] net_ratelimit: 125105 callbacks suppressed [ 269.636368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.636437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.642562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.654480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.666434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.678370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.690375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.702298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.714156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.726078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.976400][ C1] net_ratelimit: 114128 callbacks suppressed [ 274.976422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.976582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 274.982528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9e:a6:e9:e8:a8:a8, vlan:0) [ 274.994628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.006704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.018557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.030447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.042340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.054322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.066267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.519793][ T37] INFO: task kworker/0:2:331 blocked for more than 122 seconds. [ 279.559640][ T37] Not tainted syzkaller #0 [ 279.564637][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.621055][ T36] audit: type=1400 audit(2000000167.187:649): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2336]" dev="pipefs" ino=2336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.990436][ T37] task:kworker/0:2 state:D stack:0 pid:331 tgid:331 ppid:2 flags:0x00004000 [ 280.000738][ T37] Workqueue: events fqdir_free_fn [ 280.005844][ T37] Call Trace: [ 280.009193][ T37] [ 280.012156][ T37] __schedule+0x1322/0x1df0 [ 280.016719][ T37] ? __sched_text_start+0x10/0x10 [ 280.021812][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 280.026972][ T37] ? wake_up_process+0x14/0x20 [ 280.031846][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 280.037088][ T37] schedule+0xc6/0x240 [ 280.041221][ T37] schedule_timeout+0xb2/0x3a0 [ 280.046029][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 280.051489][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 280.057073][ T37] ? generic_exec_single+0x201/0x500 [ 280.062426][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 280.068088][ T37] wait_for_common+0x359/0x630 [ 280.072919][ T37] ? wait_for_completion+0x40/0x40 [ 280.078080][ T37] ? __kasan_check_write+0x18/0x20 [ 280.083260][ T37] ? __pwq_activate_work+0x308/0x410 [ 280.088583][ T37] wait_for_completion+0x1c/0x40 [ 280.093583][ T37] rcu_barrier+0x415/0x530 [ 280.098031][ T37] fqdir_free_fn+0x36/0x150 [ 280.102568][ T37] process_scheduled_works+0x7d2/0x1020 [ 280.108194][ T37] worker_thread+0xc58/0x1250 [ 280.112906][ T37] kthread+0x2ca/0x370 [ 280.117032][ T37] ? __cfi_worker_thread+0x10/0x10 [ 280.122168][ T37] ? __cfi_kthread+0x10/0x10 [ 280.126840][ T37] ret_from_fork+0x67/0xa0 [ 280.131292][ T37] ? __cfi_kthread+0x10/0x10 [ 280.135933][ T37] ret_from_fork_asm+0x1a/0x30 [ 280.140736][ T37] [ 280.316391][ C1] net_ratelimit: 102273 callbacks suppressed [ 280.316415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.316530][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 280.322617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.334746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.346648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.358548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.370515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.382344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.394333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.406397][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.477175][ T37] NMI backtrace for cpu 0 [ 280.477204][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 280.477235][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.477249][ T37] Call Trace: [ 280.477257][ T37] [ 280.477266][ T37] __dump_stack+0x21/0x30 [ 280.477301][ T37] dump_stack_lvl+0x10c/0x190 [ 280.477332][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 280.477365][ T37] dump_stack+0x19/0x20 [ 280.477393][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 280.477421][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 280.477450][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 280.477485][ T37] ? sched_show_task+0x379/0x560 [ 280.477514][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 280.477541][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.477571][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.477601][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 280.477631][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 280.477661][ T37] watchdog+0xd8f/0xed0 [ 280.477693][ T37] ? __cfi_watchdog+0x10/0x10 [ 280.477724][ T37] ? __kasan_check_read+0x15/0x20 [ 280.477758][ T37] ? __kthread_parkme+0x138/0x180 [ 280.477778][ T37] ? schedule+0xc6/0x240 [ 280.477810][ T37] kthread+0x2ca/0x370 [ 280.477833][ T37] ? __cfi_watchdog+0x10/0x10 [ 280.477863][ T37] ? __cfi_kthread+0x10/0x10 [ 280.477886][ T37] ret_from_fork+0x67/0xa0 [ 280.477916][ T37] ? __cfi_kthread+0x10/0x10 [ 280.477939][ T37] ret_from_fork_asm+0x1a/0x30 [ 280.477975][ T37] [ 280.477983][ T37] Sending NMI from CPU 0 to CPUs 1: [ 280.674907][ C1] NMI backtrace for cpu 1 [ 280.674923][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 280.674945][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.674957][ C1] RIP: 0010:fib6_rule_action+0x1d7/0xbc0 [ 280.674988][ C1] Code: 00 44 8b 74 24 04 4c 8b 7c 24 08 e9 80 01 00 00 4d 8d 74 24 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 02 08 00 00 41 8b 36 48 8b 7c 24 08 e8 94 98 f4 ff 48 [ 280.675002][ C1] RSP: 0018:ffffc9000022ffc0 EFLAGS: 00000a03 [ 280.675018][ C1] RAX: 0000000000000000 RBX: ffffc90000230280 RCX: dffffc0000000000 [ 280.675030][ C1] RDX: ffffffff84f47893 RSI: ffffffff87b43f30 RDI: 0000000000000001 [ 280.675042][ C1] RBP: ffffc900002300b0 R08: ffff88810367b900 R09: 0000000000000003 [ 280.675053][ C1] R10: 0000000000000008 R11: 0000000000000100 R12: ffff888106e43800 [ 280.675064][ C1] R13: 1ffff92000046000 R14: ffff888106e43824 R15: ffffffff84e6c4c0 [ 280.675077][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 280.675091][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.675102][ C1] CR2: 00007ffe99b0afbc CR3: 0000000107ae2000 CR4: 00000000003526b0 [ 280.675118][ C1] Call Trace: [ 280.675123][ C1] [ 280.675131][ C1] ? __cfi_fib6_rule_action+0x10/0x10 [ 280.675157][ C1] ? netif_rx_internal+0xab/0x340 [ 280.675173][ C1] ? fib6_rule_match+0x6cd/0x940 [ 280.675187][ C1] ? __cfi_fib6_rule_action+0x10/0x10 [ 280.675210][ C1] fib_rules_lookup+0x4b4/0xa30 [ 280.675228][ C1] ? __dev_forward_skb2+0x4ab/0x770 [ 280.675246][ C1] ? __cfi_fib_rules_lookup+0x10/0x10 [ 280.675265][ C1] fib6_rule_lookup+0x171/0x6b0 [ 280.675289][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 280.675308][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 280.675333][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 280.675351][ C1] ? ip6t_do_table+0x1dc/0x14d0 [ 280.675372][ C1] ip6_route_input+0x59f/0x8d0 [ 280.675390][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 280.675410][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 280.675430][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 280.675453][ C1] ip6_rcv_finish+0x15a/0x3e0 [ 280.675470][ C1] ipv6_rcv+0xed/0x220 [ 280.675493][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 280.675509][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 280.675530][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 280.675547][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 280.675569][ C1] netif_receive_skb+0x147/0x7b0 [ 280.675591][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 280.675612][ C1] ? br_flood+0x67e/0x730 [ 280.675633][ C1] br_pass_frame_up+0x126/0x1c0 [ 280.675656][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 280.675681][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 280.675707][ C1] br_handle_frame+0x5a6/0xba0 [ 280.675730][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 280.675752][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 280.675773][ C1] ? ip6_mc_input+0x4f3/0x670 [ 280.675792][ C1] ? ip6_mc_input+0x4f3/0x670 [ 280.675809][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 280.675827][ C1] ? qdisc_run_end+0x120/0x120 [ 280.675847][ C1] ? ip6_rcv_finish+0x360/0x3e0 [ 280.675864][ C1] ? ipv6_rcv+0xed/0x220 [ 280.675880][ C1] ? __cfi_arp_process+0x10/0x10 [ 280.675897][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 280.675914][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 280.675932][ C1] process_backlog+0x3e5/0xae0 [ 280.675956][ C1] __napi_poll+0xd3/0x610 [ 280.675975][ C1] net_rx_action+0x584/0xce0 [ 280.675998][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 280.676018][ C1] ? sched_clock+0x44/0x60 [ 280.676038][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 280.676060][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 280.676085][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 280.676107][ C1] handle_softirqs+0x1ab/0x630 [ 280.676122][ C1] __do_softirq+0xf/0x16 [ 280.676145][ C1] do_softirq+0xa6/0x100 [ 280.676168][ C1] [ 280.676174][ C1] [ 280.676180][ C1] ? __cfi_do_softirq+0x10/0x10 [ 280.676203][ C1] ? dst_destroy+0x37d/0x460 [ 280.676217][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 280.676232][ C1] __local_bh_enable_ip+0x74/0x80 [ 280.676256][ C1] rcu_do_batch+0x5c6/0xd20 [ 280.676280][ C1] ? rcu_core+0xd20/0xd20 [ 280.676301][ C1] ? __kasan_check_write+0x18/0x20 [ 280.676325][ C1] ? _raw_spin_lock+0x8c/0x120 [ 280.676345][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 280.676367][ C1] ? __kasan_check_read+0x15/0x20 [ 280.676390][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 280.676432][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 280.676458][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 280.676482][ C1] ? __kasan_check_write+0x18/0x20 [ 280.676512][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 280.676534][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 280.676554][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 280.676576][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 280.676593][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 280.676610][ C1] ? __kasan_check_read+0x15/0x20 [ 280.676634][ C1] ? __kthread_parkme+0x138/0x180 [ 280.676660][ C1] ? schedule+0xc6/0x240 [ 280.676682][ C1] kthread+0x2ca/0x370 [ 280.676698][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 280.676721][ C1] ? __cfi_kthread+0x10/0x10 [ 280.676737][ C1] ret_from_fork+0x67/0xa0 [ 280.676759][ C1] ? __cfi_kthread+0x10/0x10 [ 280.676775][ C1] ret_from_fork_asm+0x1a/0x30 [ 280.676801][ C1] [ 285.656469][ C0] net_ratelimit: 104067 callbacks suppressed [ 285.656491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.656542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.662602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.674683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.686543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.698441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.710406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.722327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.734691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5a:94:b0:7b:92:15, vlan:0) [ 285.746252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)