last executing test programs: 2m13.256719101s ago: executing program 0 (id=270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x0, 0xdddd0000}) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.187557586s ago: executing program 0 (id=271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f0000000540)=[@request_death, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000000)="6b724b2bb14db9a06d472403034e766a5a8de7130e6db5760134d051e86b6d1fb8d772ecbde8e7ac4758509fcd0895ab3d3c78942acce92d0c89e2cbfdf89adff9ad28be6437aebb6c5e94f4fd20007e"}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) syz_usb_connect(0x4, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 2m12.660467048s ago: executing program 0 (id=276): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r2, {0x7, 0x1f, 0x5, 0xffffffff88082100, 0xfffc, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0xfffffffffffffffe, 0x4, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x401, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x4}, 'syz1\x00', 0x22}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) chown(&(0x7f0000000000)='./file0\x00', r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 2m11.747564152s ago: executing program 0 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x6}, {0x6, 0x7}, {0xfff2, 0x10}}}, 0x24}}, 0x49890) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xffffdfffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1, 0xfff, 0x6) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x6400, 0x0) dup(r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x8019, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2m11.667721498s ago: executing program 0 (id=279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e4009000a000000ffdbdf2504000000110001002f6465762f726e756c6c623000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4000, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) r6 = socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008004}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000467000/0x2000)=nil, 0x2000, 0x800008) 2m11.613320342s ago: executing program 0 (id=281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x40000, &(0x7f0000000000)="c470a91f3037f795f5d39fd17a2a17af4e78bc2c356724889bda251e0551a5173741874778476e", 0x27, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="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") (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m11.576804386s ago: executing program 32 (id=281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x40000, &(0x7f0000000000)="c470a91f3037f795f5d39fd17a2a17af4e78bc2c356724889bda251e0551a5173741874778476e", 0x27, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="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") (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m56.896575139s ago: executing program 4 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='4\x00']) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[], 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x208100, 0x0) open_tree(r5, &(0x7f0000000280)='./file0\x00', 0x100) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 1m56.775720809s ago: executing program 4 (id=535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000540)={"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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r4, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.765180949s ago: executing program 4 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r3, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r6, 0x0, 0x0, 0x20000081, &(0x7f0000000240)={0x6, 0x1, r5, 0x1, 0xa4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x134, 0x24, 0x80, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x3, 0x7}, {0x5, 0x1}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x44000}, 0x20000001) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000540)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 1m56.711163093s ago: executing program 4 (id=537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x3dd103, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="66b876000f00d8c401f9d69a3b465fa70f01b300000000b9fc0a0000b802000000ba000000000f30450f01cb44d9f4b929030000b8470d0000ba000000000f30f32e420f0050b73ef30f5d4b27026628", 0x50}], 0x1, 0x69, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f00000000c0)={0x3, 0x5}) 1m56.623664201s ago: executing program 4 (id=538): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20003, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BLKRASET(r1, 0x1262, &(0x7f00000000c0)=0x7f) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x5, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x3, 0xfffffbfc, 0x4, 0xff, 0x0, 0x45, [0x0, 0x2]}}) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000040)={0x8, 0x257a50bb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 1m56.623376761s ago: executing program 4 (id=539): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) userfaultfd(0x80000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 1m40.584023563s ago: executing program 33 (id=539): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x6, 0x2, 0x4, 0x8}, {0x8000, 0x7, 0x2, 0x5}, {0x0, 0x5, 0xa, 0x9}, {0x5, 0x40, 0x3, 0x9}, {0x401, 0xf9, 0xd, 0x1000}]}) userfaultfd(0x80000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 42.182534532s ago: executing program 1 (id=2251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$UI_DEV_CREATE(r1, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.781618094s ago: executing program 2 (id=2256): syz_open_dev$char_usb(0xc, 0xb4, 0x5) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 41.627361556s ago: executing program 1 (id=2257): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) sendmmsg$sock(r1, &(0x7f0000002240)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x6, @mcast1, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="234e7b5bd095a619a340b6364eb1b9a60c58decd0c07034004b416f7ad523ac0d939a532f152f2768b5c56ccd34e8a0d03b109094f46056a05b7997ba003a0cada389811f4aefc3fa163caf1f39828b3927f2c813e0e090228297fd14d0489ab416aff1fca16269efb1239bff8e96abe10273403f2ebd67e4047", 0x7a}, {&(0x7f00000001c0)="6c6f339dfc4fa7dfc31571d218c7cf583e3ff4f51c7ee76bf6c448e7989052ca3a96ecf694464d1a591d3818be2c6c95e5", 0x31}, {&(0x7f0000000200)="00e448c9f2b6c138f0f559ebec1bddbe519ed73d4a9faf7be48526f59e8a01284ffbb13cd9581616d5d4438a1f24311ebd87ceedb97c93bd06adb8391806d44544434bf85300e34432f6f9c5b321e3d0829e30f0d043c31c8cd77e1e65f08c94a0a71ee569a8bd1e6a177db471997e5e345e3199b7d78aee0dc5fbb115562eb447d52afa1a99f54a30a2fdfdeaa84b5cafc5d08c411b07cee63103720b7226db9a33e595725a739e0f04842681e51c3e444033591551bf24fe063adbca2e808af087ede42c3eb37c629d9a9ffe112bec4c66b5d6b532af101676d9543105913de487b2fdce0bc2a0d391434a1008733fd3dc21", 0xf3}], 0x3, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xd0}}, @timestamping={{0x14, 0x1, 0x25, 0x57}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x90}}, {{&(0x7f00000004c0)=@phonet={0x23, 0x3, 0x1, 0x1}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000540)="c06f56e80e3a08d78cf2282d38c201335f2befb860ec6fa67e4dabd4d539fa5d36c209e805c3c0a0fe1336516b2c5ab81fafb209b7fff2273d3ebc9a590ccc9f724eec24008192f2440672f9b9cbfabfe11db06605fba3a00a1c503c3ea0bf2ce23278aaef0ba60a59d579228cd791f06c8b018c3ec3240122cf85967456f5037b3b8cfeb455455236e028f2751c114c3a", 0x91}, {&(0x7f0000000600)="743af5b38c158a08ba2f227940d6a3ca10d32f70e9290c15dcf556b5fbdc203766aa9116ddf5fbdfc9d6f67b61f90dad256ac584db72c49af36c551a30b8a8abbe6d243845f7963a8eacb428a387e2f3431ea16480", 0x55}, {&(0x7f0000000680)="aa512218fe7f35cb070b0c78940face150d51b3e2e7704be0fa8b4ab7c8f4317c73276eb8784b83e819e8dd21123df1fc27e101c8c7d6307768c59048cb8fc9fd5ba81c350ec8442d8fb1cac8d1af0f5a30a039803be5f2eed3c25e8c5c73fe5e954be0978ca6402f9d4c51d11683791b6419ae8795eb06e6cb2b4dcb811f0958082ecb77fe215bddde6056bbd7bb849a52a0782c1af4f1d1915424267135c1a371c75db6c24f9ab69cbd2fac4cf5f8626d34eab0411e644633936a7c9e3443f50905a1d94dacceefab3d02c5b917568c4a2c6e2f617e4ef1d97ae0421501bd77afcbc", 0xe3}, {&(0x7f0000000780)="6dabbd29efeb06c18f02df339fae308177cca9c4a7ff027477202b169a9955e23b5f56e0b9406392ca252f1107f8ce312f46e27ee560a99aa0eac6d787190c3a39a492a0ebfebc840383eba35325910a19a6916ce0fbbe0a478cb41f0b715f84ae48eae3248e7f5e3c19befbcd2b7adbac22781f23bc25d16d75690274662aefb54013407a7637e772f37369e57e78ceb3723d01ab52103a956f54b874f9136816105adc59322964e6c6cf7be0237a89ca1b809d87037ef4cd2376", 0xbb}, {&(0x7f0000000840)="3273b8061d0c3c7f8123adb52703bbe7295848fa2cfbbe170036c8195221932fc8b577ec4006d941c31a1f82e00fbc3c500c84bbf9a0bd2a01d4b4013f5692336ef7a322b34299d0d3a7e6902d70ff38c87bba2100037c25cc2eb3041ff080da0a86d7ec079f7834158d7c32504d8fda6ff8ac4b328551a26a6fa7a71b86c602d5ee6996f07494c356a5796ac0bc53e81219e85e0e5724c771811ff6f040bd84de3ab6d713b5a425f25545d6386948aff84177f2678b48a52db842e76be014ccabafa7b42e8597b7ccd1b3be4a8441a3dd2eaec4e9c7ecf7057afe3a26ea556d03300c3411cad4bc76f05a58ee64d4007676708d9db4e0e5eb2603bb81503e300fffcba3169d4a141d6ee9702d7a98e6e592a2a54342f40146c1089709e50c34b18d5a42cef219d07f38c87f5aec090c8e7923e49ef5e39252b3b0a005ccc73c1f66ca61a2fe0c7ba5ba1e592c47d854e2be15bd37f58400e42fc11dada34b6c5cc12623edd3fd40f42bb4dad86d9c85ebf1cb3a253e46421859cdcdc2aa6b23b43ce6a7fe02b2ac33dfd76c49e269bd1ab9dd872d9e78b613727cf4667d4842a480c5a588fd432a880183fe2a8fefed065606609cbbb5a79a697570edd2029e9234a1cdd220ccab37f7de72f872d9e2fedaf68a3314e641516dbb7995d29e4ddd17d34065d5c6a87b09feeadd7a10e7771cd79ea0f1c592c7be7c0f77fad5338425bf5a70c1426044273fc2b64e7bb90cbc2244c23a5a6fe68be45273a2e0c3d69ad2b5e6beb82be8b9b57c01ef648503640098447a45290a15a71c37cee61c74a48a7ec0f8270cf7397a7f1be5ef42c5ea814aff29028a6f72dd94590f6e0ac89bc432c97474052391e4e821698a75c4a4bc531faceafe77bd4407fb6b9d643a63de0c41ff7f095d37dcaddd7ee6bc3039f8e047bc2db480e8e017c2dc15d7b4bedb90c9c76f4c5dfa02aa6466b510bd5ea1c5a8052310593b06a2efaa69fa74dd420eff14efcb34179cc6be7cad72963e80d35324c2361bdf9efaf8be75aed16770e6ffc8d83ce6cbd77b36e9bbb067c676e298899c38299affee2b9bfeef212ef3ea534417b8e80c94b478c0a9ce75fc1826e6b8676f19860eaaa2cb1b2769b47151c959f1264099492fd7b446bef2845fbc7dd2b5bea6e7f3db67575d68b5109811631837bb19646d95800bce5c93e5312832a1dd1233fbf4fbd05a15ff41908d98e8493d20f959e30b0ff1f6549c6a410875bd75bbc72c29eece2e9d3c031fe68b46387c69363f3c9ef305772bde5e477c012491d2bd0dd8e17aa4ba0622fa9a9adf5437d36e9f410d5f9b30f895ca7b13864ec7537b1f18b04db0d211d2e3818f99a645183b0d15de108b2f55ec4017684c4557072402e45e702aa062ae7de57ed605d0f616f24be7dd617b8f67afef9e85787eebae62bf3df97e2c60302c6bfedfdcb42439ad99297e1a890445278e90a609ebb1215d7c82877b5e3b0316c9ea46b2649f67f8f8061d7bad1a015f3ea465af9a4393fb13df02760223d5c5c5c491437b30c7a4d2d155783ed4848cae390228abfe799673e58f563f5382533fa2ea7501223a72bdab4a4c1322bc63d54fd242b823acdeac56aeefb5cdee6f1f27c62ee85e747ca82bde33b3a0a003b82b058b62877fde5c746cd922ecd068dd07742931880b378df3c76ae67ff0a44599c3e1dfa7464c339b1dcda5f9945afd4488fb54ebe560073919d72597b68e37a13b83a4bdd57f15114aadf06ab8ca4c5867cb4eb43f01afc1dd56e6d19ba65d2d3a03b951def70a0ec3f239304d433fb865f5c4dce5b10d24a4ae8fe9bfd2f2140303ec0e60405088d4e814fee188368da496d420c8be233bfe34eef57a83ea1c0f09e97f7e06f3f1c5922a7f8272463e6c3eec810f6a7749c9bd2669ea4ba75e4e2e7ca5cbc793fd6d53675f027877017d19e1930a0e4beca53924b54f9a79265b51e51ba8481d5f7665737dd62db49fa9c469f8bdf60d840bf4ada7524e2c9cfa7bed8f46685710823b9b69b039141b433c477cecec74dc7f3b36b5d1029010a8523c6483ff325d4ddd6a27107e3d2ee30002d8012957428c13224263d6627201feb61b170f4fd667b71328b79d197dd9b8eddbfd121e0816c1d8cec800464e7df99e0bc217e32a65975d08cc36403c8172d627f0200469a9f4ebcefac857c6072c4940fbfd615ad476bf61cd41628cba491b281c761e6014043d003ef9f083d2fc9ef922ac1c94659f979d726001c022e0000072caedd0524021912e7110cbb6eb299ae4cea870c8f51e5796554a873b0352b65265f11118f658ac8791081e0b69ca03f18790d268047527cc1985c0d8bff04c13a14f3bda248075dc15d21a4f4407fdf4d1d50ffa0d18836c1712bee075abb5341839ac88c01020f65e721743ef3bc01260d10432bf8eb90911a47a85aa7476d741ab7caa61ff268be6cd10709b24aeb7ad80063241e110b283fe28a1ea5c2b97c03a2e0a1a57b42c6fc81f083b3f6cb959868ae238aea936a507bb77ae82a9434f0baa944c174dad11d0031d60191c7324bb21374fed8029f70cdfc15b172ea103377a32f90e76f004e29d0f5f06f0a73187680e046ef6ca8b52584f21b0ddfad26df9eb4b703243cf8d3cc3dc31dff77cd8b1c38b716ed56e2a75c17bc80f4bf1f34c1e57dfdd2a896a4e8a2811b3f6a2eec5fa2df53934bd1eadb4df8993c115c28f0757f9efabb63694cac23f6e52069214cd04a302e722533f583bc516686b1b9fcd217702ce137661ec5d1b777cc716a600ef1f13986d60f031258346cf5d4c773d5775de548237ffcc6ac51dbef4a021e21eded5533f8577d4da94e1a4c4328bfadfe9335ede20f8a48e7aa393efd0bc69a58408ee418a0c5c4fb72b592d3505c619ee80abc7b5b00eb31206a875ad5988ff7428cbea3fb30420391b45cb674835599251568c6a0ede77762f3ef1da9e324622c5130a81bb55fd3b0303c53a9e2ae7d237f611d9cf51ed2d72f5defdd39148543c68840c0fae990422fffbe682a6ae5a6b372d3431a20abcc30dac4bc7c3deb9ac1e8c152497a5502d29150302c9372d33332540f1a952d8ac3fdda9272e9ef46c50ac765874cac2b13940d6e555ef96d173f7ee0a2b82d5a9e510dce394eb790e58199bb1643f136ddc6dd92e9d589ca6a4a08c6b59fc2875cd5f30b57cb37f41f7d94310bfbcb7d9be0e2f7b466293bbeb265ad4bbdcd789b37ad42d991363554a719d016e4f43aebccd9c597c7ac57a676158cefc9710ca8b2b3168c555d2f7924f423b5b822aea4753f257bb8725ff0e99fbb04f28cef1c8c6d1998a166a44d554b50bf83ba30eef781fe4b989fa4e35dc2a8af7956af45d89501cd6d89009dcfecd517ed49670c201899220a895024e38882970c8b67747bb1d1ed2942e8463440df58cba395dc744277ec1d155aab0002a25849e96f85eb07d1106372ef8bf857d90135a30d37fadd695739fd1383bdde93a35a6a9ba2d12f29971c65e6c3f9e6db085f391209bd85dfb3b73c8a397c26725d976f20910ca33d35b9292d163c34e404be38fe98b90ee380c76a22af82d6e0ed3fe2b09df5122fd80e9657ade3f65b20f80f23ff5ce1aa24e10153169c1d2895e89c7bf76d2749c489b8e5ee8c8518af37fdddf28d8a26fc03a33267ac94f0ea520a0e9dfe775d576995d793f9410cf8be40a73b5fb51cc797349c923f64c599a73de37fdc03589893d92e88fbfe886d9aec0c322938f1635c5593bd192afdb0591da3fe66f5a119194d161ec8eec8c4aaae3fb43ae03527764e68510ce52eb6d03ea774ea1e359c4e39768b432bc8022bfa299be984ea8f8d96e240a9955cf7d40cc25b17c8167ddc7dc3abc47ed98d439c9a9b614949848cc32959a74cf10ba41b69ecde7a020daf520e730ace7fecb29a31b1e13cdfc0b89c6c5f6a4b5f792238fcfc635b81dd700e2f2d76f86e3d896b0644ab63677ec17bbd872cc499134e52ad850d1b2ae8dc71e6e4a047237c871f7a32d4f0012f5e54233ff7434aa861bf5ab3e598d1f22407b2b00beda0fcb5dfa5ff70f63bb380955489f9968cbab626dbdee8a28eae0dcc9943bc0f7bba9dd219a05991ab1034fb7f949e88de41de9794bee54fb546c07bdeb8b13cd0a5e2f7b2293d8c71599b694dffbe83f3bb5189bacc215488e69e2a9bcd9c5da4b261111d9f06d859ce3be31cc44dfbcb3158cb4ff230eb5258189e24b22d7ead3a313b08e263a0ea11073c92b7245715e608ab11164d332662c775095d9a7695ccbf39f7ee2f56561f22f9fd0e85ad26b9d622102cc9c25d3343982864b7334c851c2f70f7c9dca2bbda9381ed0c1a9bb8a8250dd763c4fa73d4a84fb76e07ccf84c606c5b1adcdee22566bb530b12a4badbb7b086e60235ca587b6a6f64db47f8e1604803b2d919a95c56b74596eccad0ef667d9b0190ce3a59d843387054c784c9ea1638c082c76fbf60e32550e4a5545709d976c7936624d91ada0c29b728164fbc9a12491c4bc8e9f2e37b4da22732bff185a0a08ae3daff62fd3730bb7ca1fbf8c51a814e2c201b3abcdb2261f74be04480e9a25f60fda76a7c18b2d659662d550d792b225ebebdac4b4ded1b3f0647e5396fe814b9f36e1d4b6ba5fd2bb084485f4c06726a9cb13fc61642c93d75fb56bed1fc54e294489975403a4dbf42b3ffcdf9b1b451eada35d8c1fa043b2081ee8a88bfe05a7f39ae3f565be597df4532b06f20bd598746fdf1e6f46f137113b64d3ac51cea7e3423e9b6217b0f67451d79a1c3b5d2fe56b4dac4bac4547a31de5cbb5f44b699a77b843e3df51a544be5bb18fe791f8fb6076f7ffd196815d7777f2353eb7ba3e19645937c84513c73c14cbe76d8b2b4890c4ac14f646f99d59a608fab1b0e7fd0acb2ef68feaedd0255e10696dc4e647043fcf6ddcd7632d8d7d7adcd0fec29fca47e78eaae1c852df9f4da8b4d7fa5f926ff1a919118380db213e2c8e0691f2a8c54fc7acdc121fe0a1e66fc696e556cac1d09ef99a87d4a4f1480a09f58f8c74cfd6273f77b9e8708f5b5ba56232e87655dc33bf57f081df3e1fee5041c6a790ef80640974e7c6b9ad0fe29aa0151abdc5563bd71cba07a5658fda24720210c405b9c6d9a2bc2bb0b947c812b2c0d6821326f635834e599653a336410f926868f29820807497099a2d6268801f0912d39589048c9bdc28949cd1eddf8fcf437f5cedd87ca01b47633d289f022cd910a9cf950b6113f2ce4244822c0bca30b3fe36bbf9c875d40fa1dae2358c4b45ac697e249cc23df8e337fe0f2a76516984cb37c7d4b9542402cef109830847fab8aefd9df5d8002638f0770cc7de17258b0c32318c1c9b767e497d46d0f04b953121e07a2aea1f0711383babef1d0346db859e35dc56c4ba4761f6995ceccbf742384181fc46b436be317f298152b53ca88f37e1099955bac6d1b6d1d1143b2ca06b44cd5218fad9661950ac902e3ad6f7ef747fb50d9325fe8d9a25f700ce3d150c266ae559b00272969ed90c173bf74a6ed717cad129ae8d5576efbf7c60bc35c6f4113963327db5f243b8606d2713a3f6c9fb475d098f2f539b8eddc378033f239dcb33c9b4b156ac36ea7a6daa0f1c4f4532acbc588843a6dc60bd893ab09c00ab81673f0f19f1f56c90d681f6e6bd65ad6104ee6881b63ee98ef6bb6e4ccafac237996b3ab19c79c126483ac286131d0734653aecc7634cbb5f7952095fb550b94628d21638d0255177f780d748a0fc4fd6", 0x1000}, {&(0x7f0000001840)="f02c7049a419b3044b4a1b540b11b3baf148c5dcd26a5baf6bc28a1fd02cdd0f06155e7e27de584c14cf1881e1fb1b1cd696e810e25fd8a52ed566bb0c792e2a19b90700c072271390a1b9bf13794f9568caf0d5a42eed8f5ab2e4e24da95d13997301f1fa7e6f49236d9f4b0bd622c1ab8ecc7565400042074c2447581aad4bf83763012653008342d1694c04d36417113595e375b250c588c845dc64a5d686df620ff3fffc2d2e819230753b67300ab11f974a13a2cc1ba2188e99cc01dbd619b41f57d510f68b08ba52eeb1ee9fca90165310d76e85", 0xd7}, {&(0x7f0000001940)="27e79ab439868215d9a260287514d32fe3b21396782dbb0aa7cfe86a4483bc5eec0bb30f9ea626d9aa07870443c684b21e21ec99470dbb282b7f731a6a1d891682e329c466d8bcc039cf5fdab155671abf2714a82c0448f78d6a4505f67ed821014a0efe96929b1f132ee0d3aa6dd750b5e0e6f699353c52f4b3efde766def153fef9b693d0addcac08a3191fae5d292f466df945d93d2caf22b724c33acf2b3a48155a42cdc887d449d47797c2de37390f299701486b112880f91548dd77b3145e80112678a169ecfbadb75", 0xcc}, {&(0x7f0000001a40)="95eeafc2be56d8f87500e80017372478ef6a473f0c91de97069586098f028951690ca0d23034598b0bf7d8b74337092eff844e360ff72ffae4b1e1ee9ae689cad569f31b6468ebdc2e4cc31dced385312275155ecfee017161e7088c71a4f420bd0a6e73f21fb7981b463ade09fa2a84e95f8025db01c9c4fa11ba752f89b7e883d9b97c95ff187436815f189a9d38688522f38d4f95f36794b3ece4980f563429da4872e114ce62c1708b2661aaf30ed49f8beafbce8962ac9c99cca3e3c1b80b6a4a014f242e52a3a692f48c4065a75cb2c492bca464a93049", 0xda}, {&(0x7f0000001b40)="99487b0a34867c71c10272708e27fc1f1fab02492e9c6bc79b2e40b9124881b9681d7835f1586151a8cf55077374e8c905db40bf773c5820d1ef4bfa67fa676f615b91183b751e62ce3c6d637cfac609d20ad576b065bb807b2d90ef0c1d2bb7c679db974b89219b2708648fc826943e5f6e510fb2ce98f1ea474dec214bc04afd54176198b07c8fd99f2008abfbab598d470caf56d66f4fc8386bb8721c4ad49403e5d7d7106ec4a592df170be828fbba3c830f6b746eb61c812d4dd9e2888daf71684c373589067c50fe", 0xcb}], 0x9}}, {{&(0x7f0000001d00)=@ethernet={0x6}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d80)="a80cc9f88f6a282fa52df58c2532088ab18d2b0fb436c06cd83aee940f6727e0ef8b72066da6e1a8806784c76dbfc0ec5b379a8f1f004972697d54", 0x3b}], 0x1, &(0x7f0000001e00)=[@mark={{0x14, 0x1, 0x24, 0x35ad47f}}, @txtime={{0x18, 0x1, 0x3d, 0x713b}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}], 0x60}}, {{&(0x7f0000001e80)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001f00)="b6b3a4ba3e25da479b1c530e369a90194a3e56bab101c3744237b57d656949d5cf072c3f19fe9e72b88e42aa20804d9b88253ea73449a49c15cd3a0340be758ceecae3bc4dd52163f86e754382a8d8bd0e6e71a5b68fb48bade2dfb0194f2906a4a8544362902a5f81dec20269250d2066f4a07790f9fa820f848411ed0286d8d6a1f9af7911f6b05b12e094dd6196047707edb1e517f00dfb1c3d89bf8ea87f77c82056ef46a7018995ac1804ad1b6727fbcd85c348a13e3eeda9f0b1f46a2a0e7f9c1770eb8ba00bde4a2da25a111602", 0xd1}, {&(0x7f0000002000)="0e237e282e567d9b43c6c72399e2651e9211c5d0a6999ccb9b431510618e5f831ecf38a40ab9df639e0225dce7ceae2940a985324548563420f9b913751a5cd404572fa5e0e3985e43bc1701da4db1c648d9fde393ed39ffac02d51171fe48e652618058dbd607779b79e29f44587b451aa9326da1f00dfa7b7d17955ede16dd24", 0x81}, {&(0x7f00000020c0)="c453ff8e7ff7c63a8b4adbd522b055be5db7b855607e0aaa81d139435080bbe226fbb95a4ef247a9476f59303fb78d39e27ed693c4bb9b78c31deee5d1c5d240adb02a412c8ede25dd1627f65de0c24a9a4328eddf95fef747af33d8c90b917c958c7a83f0151cdf0db9dae590ac709cf87a70b85b256221468fadeaf15274184f7c469764d7e4179352b037e5aa7aa745", 0x91}], 0x3, &(0x7f00000021c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}], 0x48}}], 0x4, 0x4000040) accept4(r2, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000300)={0x2, 0x8, 0x69, 0xc, 0x7, 0xfffffffffffffffa, 0xffffffffffffffff, 0x530}, 0x0, &(0x7f0000000380)={0x30, 0x62, 0x7e7a542d, 0xffffffffffffeabc, 0x2, 0x1, 0x6, 0x800}, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) 41.559720992s ago: executing program 2 (id=2258): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x28, r3, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @dev}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000040) (async) close_range(r1, 0xffffffffffffffff, 0x0) 41.278768314s ago: executing program 2 (id=2260): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_type(r0, &(0x7f00000003c0), 0x9) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163a00, 0x0) (async) mkdir(&(0x7f0000000340)='./file1\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x4000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x8000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32) r3 = socket(0x11, 0x2, 0x0) (rerun: 32) setsockopt(r3, 0x107, 0x16, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000595000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0x268ed000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) (async) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x2, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x100, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x803, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = dup(r7) getpeername$packet(r8, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000100)=""/244, 0xf4}, {&(0x7f0000000200)=""/228, 0xe4}], 0x2) 41.08598839s ago: executing program 5 (id=2264): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r0, &(0x7f00000007c0)="25d7fe", 0x3, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x505902, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x12518, 0x0, &(0x7f0000fff000/0x1000)=nil}) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) 41.08035173s ago: executing program 5 (id=2265): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d61783d30303030303030303030303031373737373737373737372c0031c9c5560735e158a87cf71ff85fb14422d6df6670a6dc75b01c4b785aca55fd4c1b5175bf7f7e2323e31a45baf9f11af2f25e27b5882f0e7e8f90251131d2f1f121e09c6e7477876a88407e488288e516df15e760ee493f53957bbfee51f51132adc46e5894f85c84081355bcee97bb75f840bb2b872f90982cbc68f48c18eb11212316c4850c07662f9b31730747f2a44ac9d1995a8c84ee86f7421bef3897c3df05d8b02945488d070c0235b017d1f6ad16c4b284be55ed74bf7ae4238eca1c7f"]) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$vsock_stream(0x28, 0x5, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$SIOCGIFMTU(r1, 0x8913, &(0x7f00000001c0)={'veth0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x86, 0x5517, 0x5516}) ioctl$TCFLSH(r0, 0x400455c8, 0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xfe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x6, 0x80800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x7, 0x1, 0x0, r8, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in=@dev}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) 41.013973345s ago: executing program 3 (id=2266): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000024c0)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYRES8], 0x20}}, 0x2000c090) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='1-6:5/', @ANYRESOCT, @ANYRES16=r0], 0x31) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000000000000850400000000000005"]) r10 = socket(0x200000000000011, 0x2, 0x8) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r12 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendto$packet(r13, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f0000000300)={0x11, 0x3, r11, 0x1, 0x9, 0x6, @multicast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 40.886326175s ago: executing program 3 (id=2267): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'macsec0\x00', &(0x7f0000000280)=@ethtool_cmd={0x8, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x10000000, 0x1, 0x0, 0x0, 0xfd, 0x9, [0x4]}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x20040, 0x2) sendmmsg$sock(r1, &(0x7f0000001840)=[{{&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x1}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000200)="5f0f44e2cfefa24203397d695be0ef1182a7c3094b42f230ac30e94515e8e05f6e320533e941b1bc8908387b5c1a4825e0c43fe939a58683266d34c44fe882296501fc4a3439d0720151a826407a1d9a350c6bced3499ed78857689bafa2fc24d311a3238a7c28ebb456e50f598a994c34cc994b202d", 0x76}, {&(0x7f0000000300)="c4969ce7a4a689a9143b1ff6d1101ddfbe305247a371ba6e9d23f4b65c1af8d0bd2bc36a0eb5e255db85e7e5163dd47977dc32b6f69406bab9aef8d882e0281c3041a022f7411f2d452208083d6d06c051d7c49e4e3c8d51af023baa90744d5b2abb153226f8c6d20273bb4ec5d2f0e7fdcd36ffbf48cef240df5389dbe862f9e648147ad4a8f09821a214dd862fd558db1c2f066cb2c4c6c35d33e9353628c635b520e4d0bf04aff04b909d8f5af75da48e22c3d9cfb39ce6e6c083273d1179c01e628393f9001f0a21dfcaec4f46fc7f1e468034817cb6dabbf4f20893617d59f915dde0e485cf3688ff7cc732bca1f59ab491fd9501e308", 0xf9}, {&(0x7f0000000400)="d7b78f3388640c2a288e45f9705fc94317aa264fdfdf6e0c22dbd1cf50b8338aad48091eafd918be65ca4a24db752fa6ed507d3fa37791fc78aa9958decf3a61479cf25a3e5d605ca1a565ae98a720e8664f15f9b52c1287fc2da74483c1b68402738e5a6bed6ae2aec82fe6cf2f5312df8770a0f5d92a5200", 0x79}, {&(0x7f0000000480)="a4c8f71056a4176a35002e0bb06030fa7735a1b549bb638a1ef3da51e26a24a962089eb2550c7c0c0ee1169edc377e44d216d754b7fc30fd607b58a004ffa944aadd6071193cc03c0e15093f8584a27c467b2007c0447d815c996748abcec724b4f3c61295a511232567a9ca80abe08bfbbd8be4944b969afbc355f5cdf1", 0x7e}, {&(0x7f0000000500)="40d4426ff7dfed8b3baf9d715d0334e93c742c2a9341976c04c127724e6e0a3859996ec99bd19384a42e568f4c40d2cc9aec6c5a20495bc6d61a92dbff005690aa497945c4d9d5a83e2634f89d7eabfb0259b789325049404db6ebf6eeda3147e4c84d47d748da8f5114b72e86d6bb80a2b7889420534c8bbd340e546836cc0ac4e5b02dd7582dcbb8433908e36ab1048bae0d", 0x93}, {&(0x7f0000000080)="8f4768b7259fb61beaa96f0d249571d893ccbe16d29202976acb6a10db20", 0x1e}, {&(0x7f00000005c0)="e4d37f64da6a882d470ec167c805585bb976ae7e99cbd2abb7652b26440a24be0a4415c9875376e35c9904fcf0223d63ca70133cf19c66e8c6c9d14d426bfdec40556e157d4471a4e92ea6c11abd11cb4f1ba825b4d1a1577823dd649c6654837cadff896d25f9e91ba9c09c6a3c0c01b5cf875421736e792c172385bd109850b1ca2463d80b021b8ec18df5ffbc9da354dcb3fa7760ce36df8f2610ab0266cf6f5dd024c9f9808636e57b316e1966d9ad4d77df793ce74b911027e0f86d2728b9fd5e369200562774b32d65d0", 0xcd}, {&(0x7f0000000180)="26a47b", 0x3}, {&(0x7f00000006c0)="8d1242396bd301aa17fba55cb4bce3a13b49813eecf5a940865ceca8c559ca0464b392c9587474ab6a8dc0df4612ff3a461b2b82ef134faeb738bb4eb52e2d0950585d9a21a0ef39a54d34e4c8ae93704a7674ae7682ca5b755abf3950c529b84eed18fe4e4eb753ad5b57a5c1f6a71645c9f1657c265abe780ccd56f34a4cfc8944bbc1825ebe4bba7247a8bcad255e164b34d994f6a15ca3629985ed85", 0x9e}], 0x9}}, {{&(0x7f0000000840)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x5, 0x6, "5cc2c7a6bdcee6fd1f28db46f5c9fc83990a64baff772f912a2d2c2f08ad913e0be9a24d092de621b8d84f9239a2653ffb973d4d18880047c74a2b8af889a6", 0x2b}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000008c0)="a99384614e4b4626a80647f5a1d31be3404d5f9d9821276f0d284202c069d0966e3e534914de9da54ab21846bcf3ffdfa9654393f6d0413d181b57f0afecd3352cfa70b3fdb85950ba60acdeb7df1c4b4f3dc26ae458e1fc49bf072395b6b84cf428e61403f44a1cef840b8f6594d81e1d2d8d3dcb93b75ff970ad5df2f9c61b4a736dd4af3b4a0befb48c778f4ed90f178245ece91eb39f162837408b75b36d7451a9ca20b51c35552eacd636a66b57498c462366f80411e30717872d8bbc559c3ef234ea6c", 0xc6}, {&(0x7f00000009c0)="7a8c8e4fc7033e000af1551f9ea1b79e9caa2b298b0693552e0a775fccad9d1f1f60ab81f694f36b7a3dac0fc69d5f02c1d6348874f1344da0d6c0461c6d6e56f185b4f57ff6b47ca281c615ecad468089e281c91dc95cfa33abfe2683ecf580a3", 0x61}], 0x2, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0x48}}, {{&(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x1, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="f395d77268cd3362f233fb94453f91860154d7654c", 0x15}], 0x1}}, {{&(0x7f0000000c00)=@nfc_llcp={0x27, 0x0, 0x0, 0x4, 0x4, 0xe9, "e17de918007d63ed403407a097e58bd2d26ddb33ab65eb938fc679b7d3170cfcc13c987a19c7b1720880f6ecc3875c5617ef8c8324af352f734c576e9dfe76", 0x9}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)="b1c411d1d9810be8c52c8aa7d0f59612033714e5ab19e4100d79f825f99e5b786480d4ba36eda2df341513bf6cb114a8d1fb716c7e4aaef6120080001212f44af58b02e13c3d326d8f428ad0856c9d0ea8662a302bd4761a51fc7075d92612741c7c3f975cb0d4cc176fcd71f107abcb47a6c6f58b53615830897e36af84e30c50a4df3fafdac85b52206118b4fea808d70b87ac071199398ff1aaccbe47d744f53bbe78", 0xa4}], 0x1, &(0x7f0000000d80)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xf8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xc0}}, {{&(0x7f0000000e40)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000ec0)="9e98d500a449c855f3f77489740e640147113737f43105523a9773d83bacbfc2256686", 0x23}, {&(0x7f0000000f00)="7c84594836887f372ac1fd9419036edbf18e9e403ef3d960dd7760ed5b8f7e374ba41df5f414918052855ab114a37309a5a29ae241afa2a10f34b453a8dcecc68c1ceb6695aeabab2a9d1987a02495794009ebcf8caea335517b01907a22a3d740f271", 0x63}, {&(0x7f0000000f80)}, {&(0x7f0000001040)="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", 0xfe}, {&(0x7f0000001140)="8e04c78e084ef024027f4f1539cc435ac67cc896778aed8059525837c862337b19d05bb957a5d8b96e14a959ba7e13f41843ca09648c1c98a0560066c645199af801e22496fdf09da5774502f3a4af2a5c5646cb9a4da5348fcd6078ebe5b2cf15d966e1c2ee4198c81ee8723396eb07af2ad4a437879debcfd077668f681906fe36c60fa4ba0f34a29be93376ef0c29a264b0d133a9b9cc3a8aab6c12636e97df469a6bbab6078f2c0e88574d16f042fc1d68ba1e4a603f4bff1b4b21f9b65a86f6564443aa0700c5e67916a5808bc5ef0434aab1559568db92c031b4eb9b485aa8562da2ffdd32", 0xe8}, {&(0x7f0000001240)="cd249ed913cd29719582ecd8c77d73d42ec477b9f3e55bceba8de7fe998c30a4d57633eb8bd6ea9445c653f20e19f694e1958c519e0bda1f3b9f1c2d88629a01fad9d796e8cec2ac477fe3c2c42003c35405e41c2d7cb8676083a59507682d04a49b18c11b2a732486fbd6ef6273c38b17a8f1f3c7721e139acb78c6c277b2d656fa5256b02f5cc48e6ecd664240a2d8547233633847b6ad", 0x98}, {&(0x7f0000001300)="bb64a8abc637128c537182f89c982bcb45357c3518b4bb8ed745f32e68a1c6936b6fbde5049f1736ad0058f914fd58f126f5ee1f0a6fbe71b9ca72c115407e40bdde965076cf667fef16140eee0a43de1413f84e91abdaf7dffb3a02bf8e709bb878aae1dedfac9df3a9bbe047cece557030e36a8a33f48d57a1bc7dc633bb63527522440d4aee30a91b895fffa3fad6b5c1e3325a2b3d9d8a1abedb52", 0x9d}], 0x7, &(0x7f0000001440)}}, {{&(0x7f0000001480)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001500)="984e5347f411e111c73e393a20e11c9bed18fe10cf8f104cfb365ef7c86a5dcf7ef187b864435a18c6014f1ff2012cd5ebfaf2e2c3d8c4e4eb4bb9433ab58a24b9f91f15cfe99fb82ecd6f808a151b334687d556e9fb93d386287b7b11bf12b09f365bbaa9118d7c2c274c72651c33961c68ebadc2370b596bb9349b39f902ef6bc7fb3d1e5ef084c906c3d9bfdbd7ec9a89ef14d6913d05a97969f447654cc71b2b8caf0eb605387f85ed4ddb1e92c55313b7afe281079be6218160ebd4f2372968f203554d", 0xc6}], 0x1, &(0x7f0000001640)=[@txtime={{0x18, 0x1, 0x3d, 0x6c}}], 0x18}}, {{&(0x7f0000001680)=@nl=@proc={0x10, 0x0, 0xd, 0x200}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001700)="3012dfa4424e01d77aa75c4900acc963791ef28504751aa313a40507510717de2f6a1372ee18a3ca17ecdfc13580eada0c62abb6640973b49672e4fd538806ee1bbac582f745ce187db75c39ba8d0451d739b337c880c7fa14e877a46e51358a5794627655a751425bb917cac2774f169c312dd295fef50aa7d81a3d0077efb3a533e37242b746a79e89", 0x8a}], 0x1, &(0x7f0000001800)}}], 0x7, 0x200000c0) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 40.885542885s ago: executing program 3 (id=2268): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 40.851003079s ago: executing program 3 (id=2269): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7461608b"], 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) dup3(r0, r1, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x147) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000100)) 40.727321458s ago: executing program 1 (id=2270): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x4) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x57, 0x2}) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/rcu_normal', 0x100, 0x86) (async) accept4$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80000) syslog(0x2, &(0x7f0000000200), 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x57789000) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x138}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x6) (async) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000003c0)=0x7) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)=0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x6, 0x49, 0x80009, 0xfffffffc, 0x7e, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020a040007000000b6f1ff0f0100854105001a000000000000d74619edc7000000000000005a6371778de1ddf01ba2fa6c858b98ccefb41ae1"], 0x38}}, 0x4004008) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x3ef, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xae31, 0x1494, 0x2, 0x6, 0x14, "ff0aa69154820400"}) (async) syz_open_pts(r1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x6, 0x2, 0x6, 0x2, 0x9, 0x8, 0x9, 0x5, 0xfff, 0x80, 0x7772, 0x7, 0x0, 0x7, 0x80000000, 0xec], 0x10000, 0x210000}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 40.715514199s ago: executing program 1 (id=2271): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400003900120002002800000219002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) tkill(r3, 0x3c) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="010027bd7000ffdbdf2517000000080001007063690100000000000000303a30303a3130080003000000000008000b000600000006001600ff0300e305001200"/74, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67720375705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000000,\x00']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(r6, 0x5, 0x1, 0x0, 0x0) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x2000, 0x4) 40.475241098s ago: executing program 5 (id=2272): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c) r2 = dup(r1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x100) ptrace$setregs(0xd, 0x0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) socket$inet_udp(0x2, 0x2, 0x0) 40.472236909s ago: executing program 5 (id=2273): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x3f96e000) mount(0x0, 0x0, &(0x7f00000000c0)='fusectl\x00', 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10, 0x0}, 0x10) gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x4e24, @empty}, {0x1, @random="1f08b379bddd"}, 0x4, {0x2, 0x4e21, @private=0xa010102}, 'caif0\x00'}) r2 = socket(0x10, 0x803, 0x0) recvmsg(r2, 0x0, 0x142) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {0x0}], 0x7}, 0x105}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) close(0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x14, 0x45, 0xdc, 0x10, 0x763, 0x1015, 0x7773, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x2, 0x80, 0x0, [{{0x9, 0x4, 0xe, 0x9, 0x0, 0xff, 0xd3, 0x9e, 0x3}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x18, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x6, 0x81, 0x4, 0x9}, {0x9, 0xf5, 0x1, 0x3}, {0x9, 0x3, 0x40, 0x5}, {0x5, 0x1, 0x86, 0x10000}, {0x4f55, 0x4, 0xc, 0x5}]}) close_range(r4, r2, 0x0) 40.32460021s ago: executing program 2 (id=2274): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x80) fchdir(r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 40.298967133s ago: executing program 2 (id=2275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) sync_file_range(r1, 0x1899, 0x5528, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x3}], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x4000000000080002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000d00)={0x11, 0x0, r9, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, &(0x7f0000000740)) fsmount(r4, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x5) accept4(r10, 0x0, 0x0, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.863209467s ago: executing program 5 (id=2276): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x8902, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x200000, 0x0, 0xff, 0x4, 0xffff, 0x4}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9, 0x8, 0x7e}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='$*.,}\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x200000, 0x1, 0x2, 0xd, 0x7, 0x4f2}, 0xffffffffffffff96) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c955b6c2bc368186fc31fa6145617d32fb9c4a85e4f11e13f0400c5dc68b0b8d8557362c662ae6b412d99ffbf7a421b06b32f50d84bb5db7db95df8365c09cd370515d64ee934e7240fd3048a21f1bfd29e5f027faef48e4ea433619effac2b324eea3a266e4d1f0d6c25070000005496d2ed4618ffd4cfab1fab3b81e9384698fe0cd5", @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a000000000000000007000002"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x2c) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, 0xffffffffffffffff, 0xb085c000) 39.862799947s ago: executing program 5 (id=2277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000006, 0x10010, r1, 0x4c267000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000180)=[@dead_binder_done, @exit_looper, @enter_looper, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0xffffffffffffffc6, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) 39.811006822s ago: executing program 1 (id=2278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="ba4300ed0f30d9f9f30f2c4c090f01c4660f3820700066b9800200000f32b800008ec0bad104b009ee66b9800000c00f326635000400000f30", 0x39}], 0x1, 0x54, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf) mount$incfs(0x0, 0x0, &(0x7f0000000840), 0x39e5422, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder0\x00', 0x804, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r1, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x54, 0x0, &(0x7f0000000100)="ba47245b1b09a8bf0efe865c4ab5b93456de7a8f310399c48e6f12e80a2677143c77644c58902f61d6fe2ea4a97ec4bbf3827bed9120df5aba7d95a5d4b0014eaf5e12539742b5aae524bcf4e82424489d3af253"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x313) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @decrefs={0x40046307, 0x3}], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000288c26094ceb3291129a3424f7a83f016a006b0520fd89c97dde7ab18f9f6e790f04d2a589a88311dde947b8376f145cf410ee7fa357058d74bc2eb44ad5de0dc1a4675ef9002ef8a4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c0c043f0000ecfe0e184ad645bf742eaa8721afe05e4271c9613974e4e7fdc02c616009f45d1f5603579f52e79e29ca1c4067862e13c17745f6308040ccdae95523f94c835e9158bc8a0be9f3cc8ff9261e3a82a27573315b71f1bc1ead5838c2718d4efebe596b0c4804fd5ad3943716653b0c75be1c5ea43e4c5aeea596ecfb078f8321dacd22f798c14ab26e7737627a0ad99cc8ff13db18a800b1d3e5804d8ed20d70b2d139eaa1525b7791bc554922f4fb142b8e4e58ef1eed010b06f8a722c160210bd8d9020f95d7fc34132a2dc740d5f79ee042efd25c46833cdc842420bb34a83a6937afc2fab816a422a3bc1b0bcee4b1193b7619c08621e178bf315d7c2686"], 0x0, 0x0}) syz_usb_control_io$printer(r9, 0x0, 0x0) 39.380907286s ago: executing program 2 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) close_range(r0, 0xffffffffffffffff, 0x0) 39.214782969s ago: executing program 1 (id=2280): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffb) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a80)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) (async) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001500)=""/198, 0xc6}], 0x9}, 0x12}], 0x1, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x102, 0x0, &(0x7f0000000700)="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"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x1, 0xff, {{0x1e, 0x4, 0x3, 0x2e, 0x78, 0x67, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xa5, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x2b, 0x49, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback]}, @lsrr={0x83, 0x27, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @rand_addr=0x64010100, @private=0xa010101]}, @end]}}}}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8084) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x42200, 0x43) finit_module(r9, 0x0, 0x2) r10 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) 36.589756989s ago: executing program 3 (id=2281): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "c138c257eef13a8cd0d8f68a7a302543"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "875b14c8772c2a1340c0c18fc643318b"}]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) getsockopt$MRT6(r2, 0x3a, 0xd0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mlockall(0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x800}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x11}, 0x70000}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) write$cgroup_devices(r4, 0x0, 0xffdd) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 31.551499212s ago: executing program 3 (id=2282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x7cab6ced6415603}) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r7 = syz_usb_connect(0x3, 0xf5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xd, 0x10) ioctl$BLKBSZSET(r3, 0x40081271, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 22.827252051s ago: executing program 34 (id=2277): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000006, 0x10010, r1, 0x4c267000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000180)=[@dead_binder_done, @exit_looper, @enter_looper, @acquire_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}], 0xffffffffffffffc6, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) 2.291584146s ago: executing program 35 (id=2280): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffb) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000a80)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) (async) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/154, 0x9a}, {&(0x7f0000001500)=""/198, 0xc6}], 0x9}, 0x12}], 0x1, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x102, 0x0, &(0x7f0000000700)="12eb7a08ec47fbb00622286a2a50eb23d609267953eda4c9a55c6b2fe2f9d3171911d535676e429d49462bbae23d48d8cbdfbedda86a283cfe2768e8f3b93906b7eae86f9eb0043a6dc8e6c2b7ed9d82ee5fa3376358dc376b72bc782399438e90113b450c8e8502843b9b695c797588a4a31a77701687f4ae1e33b6aca7384cbbb40defc67b617e8da055f80442737a6418c4fc952a7ca3e0396948af460d19017ffa120f5e3d20c6511bf79195d58dc6598b9be33b090ce33a150bc358739f4b9b72df0ae4401a722d3783a265b77823fd4ba5f410cbfe3b3acff0634d88c5be298c3b9afa934ae8f88ddcf0ada9d21ee76aaa8ed28c06eab591d3db35b2e3cf56"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x1, 0xff, {{0x1e, 0x4, 0x3, 0x2e, 0x78, 0x67, 0x0, 0xff, 0x29, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0xa5, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}]}, @ssrr={0x89, 0x2b, 0x49, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local, @multicast1, @loopback]}, @lsrr={0x83, 0x27, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @remote, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast, @rand_addr=0x64010100, @private=0xa010101]}, @end]}}}}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x8084) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace_dev_match', 0x42200, 0x43) finit_module(r9, 0x0, 0x2) r10 = openat$incfs(r8, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) 966.488643ms ago: executing program 36 (id=2279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=2282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x7cab6ced6415603}) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80045510, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r7 = syz_usb_connect(0x3, 0xf5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xd, 0x10) ioctl$BLKBSZSET(r3, 0x40081271, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): y [ 58.101758][ T470] usb 3-1: USB disconnect, device number 9 [ 58.340753][ T362] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.490779][ T362] usb 5-1: Using ep0 maxpacket: 32 [ 58.497281][ T362] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.505653][ T362] usb 5-1: config 3 has an invalid interface number: 243 but max is 0 [ 58.513892][ T362] usb 5-1: config 3 has no interface number 0 [ 58.519950][ T362] usb 5-1: config 3 interface 243 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 32 [ 58.530156][ T362] usb 5-1: config 3 interface 243 altsetting 9 has an endpoint descriptor with address 0x72, changing to 0x2 [ 58.541779][ T362] usb 5-1: config 3 interface 243 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 58.552683][ T362] usb 5-1: config 3 interface 243 has no altsetting 0 [ 58.560805][ T362] usb 5-1: New USB device found, idVendor=305a, idProduct=1405, bcdDevice=a4.69 [ 58.569834][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.577906][ T362] usb 5-1: Product: syz [ 58.582124][ T362] usb 5-1: Manufacturer: syz [ 58.586724][ T362] usb 5-1: SerialNumber: syz [ 58.592106][ T362] usb 5-1: Interface #243 referenced by multiple IADs [ 58.599124][ T1582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 58.777022][ T1592] overlayfs: failed to clone upperpath [ 58.810905][ T1582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.821745][ T1582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.836279][ T362] usb 5-1: USB disconnect, device number 3 [ 59.291473][ T1631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.333'. [ 59.578163][ T1642] rust_binder: Write failure EFAULT in pid:24 [ 59.596939][ T1645] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 60.481559][ T1706] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 60.482393][ T1706] rust_binder: 250: no such ref 0 [ 60.495934][ T1704] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 60.522970][ T1712] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 60.530672][ T1712] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 61.031847][ T1727] input: syz0 as /devices/virtual/input/input11 [ 61.097801][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 61.097819][ T36] audit: type=1400 audit(1755427835.590:346): avc: denied { shutdown } for pid=1728 comm="syz.2.365" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.106962][ T1729] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 61.133293][ T1729] rust_binder: 259: no such ref 2 [ 61.150830][ T1734] netlink: 'syz.2.367': attribute type 4 has an invalid length. [ 61.158481][ T1734] netlink: 17 bytes leftover after parsing attributes in process `syz.2.367'. [ 61.172011][ T1734] can0: slcan on ptm1. [ 61.211422][ T1734] can0 (unregistered): slcan off ptm1. [ 61.362374][ T1715] bridge_slave_1: left allmulticast mode [ 61.368183][ T1715] bridge_slave_1: left promiscuous mode [ 61.374039][ T1715] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.391153][ T1715] bridge_slave_0: left allmulticast mode [ 61.402160][ T1715] bridge_slave_0: left promiscuous mode [ 61.407793][ T1715] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.540794][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.547868][ T1750] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.555155][ T1750] bridge_slave_0: entered allmulticast mode [ 61.561919][ T1750] bridge_slave_0: entered promiscuous mode [ 61.568382][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.575484][ T1750] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.582781][ T1750] bridge_slave_1: entered allmulticast mode [ 61.588954][ T1750] bridge_slave_1: entered promiscuous mode [ 61.607943][ T1715] veth1_macvtap: left promiscuous mode [ 61.614019][ T1715] veth0_vlan: left promiscuous mode [ 61.680167][ T1750] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.687240][ T1750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.694540][ T1750] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.701574][ T1750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.724807][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.732484][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.741406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.748430][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.757122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.764161][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.785588][ T1750] veth0_vlan: entered promiscuous mode [ 61.798356][ T1750] veth1_macvtap: entered promiscuous mode [ 61.834812][ T36] audit: type=1400 audit(1755427836.330:347): avc: denied { bind } for pid=1772 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.855818][ T63] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 61.864194][ T36] audit: type=1400 audit(1755427836.350:348): avc: denied { connect } for pid=1772 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.041147][ T63] usb 2-1: no configurations [ 62.045940][ T63] usb 2-1: can't read configurations, error -22 [ 62.087335][ T1788] overlayfs: failed to clone lowerpath [ 62.093856][ T1788] fuse: Bad value for 'fd' [ 62.098800][ T36] audit: type=1400 audit(1755427836.590:349): avc: denied { remount } for pid=1787 comm="syz.2.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 62.180745][ T63] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 62.291792][ T1798] batadv_slave_1: entered promiscuous mode [ 62.299400][ T1797] batadv_slave_1: left promiscuous mode [ 62.341131][ T63] usb 2-1: no configurations [ 62.345809][ T63] usb 2-1: can't read configurations, error -22 [ 62.353009][ T63] usb usb2-port1: attempt power cycle [ 62.690788][ T63] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 62.711498][ T63] usb 2-1: no configurations [ 62.716120][ T63] usb 2-1: can't read configurations, error -22 [ 62.783025][ T36] audit: type=1400 audit(1755427837.280:350): avc: denied { write } for pid=1799 comm="syz.4.387" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.863921][ T63] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 62.877834][ T36] audit: type=1400 audit(1755427837.370:351): avc: denied { create } for pid=1820 comm="syz.2.393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.879224][ T1821] overlayfs: failed to resolve './file1': -2 [ 62.898628][ T36] audit: type=1400 audit(1755427837.370:352): avc: denied { mounton } for pid=1820 comm="syz.2.393" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.915081][ T63] usb 2-1: no configurations [ 62.931695][ T63] usb 2-1: can't read configurations, error -22 [ 62.937143][ T36] audit: type=1326 audit(1755427837.430:353): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1820 comm="syz.2.393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f424ef8ebe9 code=0x0 [ 62.938063][ T63] usb usb2-port1: unable to enumerate USB device [ 63.012987][ T36] audit: type=1400 audit(1755427837.510:354): avc: denied { read } for pid=1824 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.013921][ T1825] rust_binder: Write failure EFAULT in pid:64 [ 63.045337][ T36] audit: type=1400 audit(1755427837.540:355): avc: denied { ioctl } for pid=1826 comm="syz.4.395" path="net:[4026532381]" dev="nsfs" ino=4026532381 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.280778][ T63] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.430783][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 63.436933][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.447859][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.457624][ T63] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 63.466731][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.475319][ T63] usb 5-1: config 0 descriptor?? [ 63.481275][ T63] hub 5-1:0.0: USB hub found [ 63.681127][ T63] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 63.934092][ T1837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1837 comm=syz.4.395 [ 64.144357][ T63] usbhid 5-1:0.0: can't add hid device: -71 [ 64.150338][ T63] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.171133][ T63] usb 5-1: USB disconnect, device number 4 [ 64.470501][ T1844] batadv_slave_1: entered promiscuous mode [ 64.531776][ T1843] batadv_slave_1: left promiscuous mode [ 64.927472][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.005010][ T63] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 65.074037][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.084958][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.094718][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 65.103753][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.112379][ T9] usb 5-1: config 0 descriptor?? [ 65.150472][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 65.156623][ T63] usb 2-1: config 0 has an invalid interface number: 118 but max is 2 [ 65.164829][ T63] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 65.174089][ T63] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 65.182123][ T63] usb 2-1: config 0 has an invalid interface number: 152 but max is 2 [ 65.190310][ T63] usb 2-1: config 0 has an invalid interface descriptor of length 5, skipping [ 65.199187][ T63] usb 2-1: config 0 has no interface number 0 [ 65.205265][ T63] usb 2-1: config 0 has no interface number 1 [ 65.211402][ T63] usb 2-1: config 0 has no interface number 2 [ 65.217495][ T63] usb 2-1: config 0 interface 118 altsetting 99 bulk endpoint 0x8 has invalid maxpacket 1023 [ 65.227734][ T63] usb 2-1: config 0 interface 3 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 65.238584][ T63] usb 2-1: config 0 interface 152 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 65.249295][ T63] usb 2-1: config 0 interface 152 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 65.260074][ T63] usb 2-1: config 0 interface 152 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 65.270780][ T63] usb 2-1: config 0 interface 152 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 8 [ 65.283824][ T63] usb 2-1: config 0 interface 118 has no altsetting 0 [ 65.290601][ T63] usb 2-1: config 0 interface 3 has no altsetting 0 [ 65.297208][ T63] usb 2-1: config 0 interface 152 has no altsetting 0 [ 65.305250][ T63] usb 2-1: New USB device found, idVendor=0db0, idProduct=3820, bcdDevice=96.34 [ 65.314396][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.322418][ T63] usb 2-1: Product: syz [ 65.326586][ T63] usb 2-1: Manufacturer: ï“¿ [ 65.331180][ T63] usb 2-1: SerialNumber: syz [ 65.336408][ T63] usb 2-1: config 0 descriptor?? [ 65.341724][ T1847] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.543886][ T1847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.552493][ T1847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.566944][ T63] usb 2-1: USB disconnect, device number 28 [ 65.707011][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 65.713010][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.721558][ T9] usb 5-1: USB disconnect, device number 5 [ 65.889468][ T1874] overlayfs: failed to clone upperpath [ 66.098942][ T1907] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 66.442064][ T362] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.465988][ T36] audit: type=1400 audit(1755427841.019:356): avc: denied { remount } for pid=1921 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.534947][ T1946] fuse: Bad value for 'fd' [ 66.569779][ T1959] overlayfs: failed to clone upperpath [ 66.588009][ T362] usb 5-1: Using ep0 maxpacket: 32 [ 66.594323][ T362] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 66.602550][ T362] usb 5-1: config 0 has no interface number 0 [ 66.608649][ T362] usb 5-1: config 0 interface 184 has no altsetting 0 [ 66.616751][ T362] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 66.625828][ T362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.633824][ T362] usb 5-1: Product: syz [ 66.637999][ T362] usb 5-1: Manufacturer: syz [ 66.642594][ T362] usb 5-1: SerialNumber: syz [ 66.647733][ T362] usb 5-1: config 0 descriptor?? [ 66.653329][ T362] smsc75xx v1.0.0 [ 66.744121][ T36] audit: type=1400 audit(1755427841.306:357): avc: denied { create } for pid=1965 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 67.050135][ T362] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 67.061033][ T362] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 67.071181][ T362] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 67.081436][ T362] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 67.092510][ T362] usb 5-1: USB disconnect, device number 6 [ 67.174610][ T1999] fuse: Unknown parameter 'fä' [ 67.192225][ T36] audit: type=1326 audit(1755427842.749:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2003 comm="syz.3.455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5aa378ebe9 code=0x0 [ 67.337551][ T36] audit: type=1400 audit(1755427842.899:359): avc: denied { map } for pid=2018 comm="syz.2.460" path="socket:[12664]" dev="sockfs" ino=12664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.360851][ T36] audit: type=1400 audit(1755427842.919:360): avc: denied { read } for pid=2018 comm="syz.2.460" path="socket:[12664]" dev="sockfs" ino=12664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.492833][ T36] audit: type=1400 audit(1755427843.059:361): avc: denied { listen } for pid=2048 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.513276][ T36] audit: type=1400 audit(1755427843.079:362): avc: denied { map } for pid=2048 comm="syz.1.471" path="socket:[11924]" dev="sockfs" ino=11924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.602624][ T2058] fuse: Bad value for 'fd' [ 67.623816][ T2064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 68.033790][ T2078] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 68.302302][ T2092] netlink: 'syz.3.485': attribute type 4 has an invalid length. [ 68.686395][ T36] audit: type=1400 audit(1755427844.249:363): avc: denied { execute } for pid=2097 comm="syz.1.488" name="file0" dev="ramfs" ino=11990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 68.686412][ T2098] process 'syz.1.488' launched './file0' with NULL argv: empty string added [ 68.717017][ T36] audit: type=1400 audit(1755427844.249:364): avc: denied { execute_no_trans } for pid=2097 comm="syz.1.488" path="/file0" dev="ramfs" ino=11990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 68.757727][ T2102] netlink: 124 bytes leftover after parsing attributes in process `syz.1.490'. [ 69.041683][ T2131] 9pnet_fd: Insufficient options for proto=fd [ 69.094300][ T2143] overlayfs: failed to clone upperpath [ 69.109038][ T2145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 69.292070][ T2153] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 69.299784][ T2153] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.509'. [ 70.265253][ T2176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 70.268092][ T36] audit: type=1400 audit(1755427845.747:365): avc: denied { name_bind } for pid=2175 comm="syz.1.516" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 70.340188][ T2190] netlink: 'syz.1.520': attribute type 27 has an invalid length. [ 70.558541][ T2236] fuse: Bad value for 'user_id' [ 70.563547][ T2236] fuse: Bad value for 'user_id' [ 70.565542][ T2237] overlay: Unknown parameter 'smackfsdef' [ 71.314018][ T2273] fuse: Bad value for 'fd' [ 71.452863][ T2299] overlayfs: failed to clone upperpath [ 72.082327][ T2318] 9pnet_fd: Insufficient options for proto=fd [ 72.320321][ T2339] 9pnet_fd: Insufficient options for proto=fd [ 72.698704][ T2356] overlayfs: missing 'lowerdir' [ 72.901285][ T2365] overlayfs: failed to clone upperpath [ 73.660580][ T2417] bpf: Bad value for 'mode' [ 73.676598][ T2419] tipc: Enabling of bearer rejected, failed to enable media [ 73.826478][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 73.826494][ T36] audit: type=1400 audit(1755427849.076:370): avc: denied { accept } for pid=2432 comm="syz.3.605" path="socket:[14365]" dev="sockfs" ino=14365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.253422][ T2438] sock: sock_set_timeout: `syz.1.607' (pid 2438) tries to set negative timeout [ 74.519736][ T36] audit: type=1400 audit(1755427849.730:371): avc: denied { setattr } for pid=2450 comm="syz.2.612" name="XDP" dev="sockfs" ino=14380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.568633][ T36] audit: type=1326 audit(1755427849.777:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.3.611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5aa378ebe9 code=0x0 [ 74.623423][ T36] audit: type=1326 audit(1755427849.833:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.3.611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5aa378ebe9 code=0x0 [ 74.685092][ T36] audit: type=1400 audit(1755427849.889:374): avc: denied { sqpoll } for pid=2446 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 75.119382][ T2474] tmpfs: Unsupported parameter 'mpol' [ 75.708138][ T2480] overlayfs: failed to clone upperpath [ 75.719245][ T36] audit: type=1400 audit(1755427850.852:375): avc: denied { create } for pid=2481 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 75.743519][ T36] audit: type=1400 audit(1755427850.852:376): avc: denied { read } for pid=2481 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 76.321084][ T2489] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 77.315082][ T2520] 9pnet_fd: Insufficient options for proto=fd [ 78.138719][ T36] audit: type=1400 audit(1755427853.115:377): avc: denied { bind } for pid=2588 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.177430][ T36] audit: type=1400 audit(1755427853.115:378): avc: denied { name_bind } for pid=2588 comm="syz.1.656" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 78.225466][ T36] audit: type=1400 audit(1755427853.115:379): avc: denied { node_bind } for pid=2588 comm="syz.1.656" saddr=255.255.255.255 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 78.639510][ T2614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 78.920228][ T2629] overlayfs: failed to clone upperpath [ 79.435423][ T2636] overlayfs: failed to clone upperpath [ 79.805371][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 79.805386][ T36] audit: type=1400 audit(1755427854.677:382): avc: denied { setattr } for pid=2643 comm="syz.1.675" name="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.212554][ T2715] fuse: Unknown parameter '¯´ØÔ‹ˆ:B½1z2úͲRLžw`ÜÒ¼uæ°'<éê4ÊrgÂóº˜-™7a ¨2„`Ä·/:RlÞIŒ†Åt—ÊGs’óþO„Kˆ ¿ëC>C¶T~DIŒ' [ 81.489213][ T2739] netlink: 'syz.2.706': attribute type 5 has an invalid length. [ 81.505530][ T2739] netlink: 'syz.2.706': attribute type 5 has an invalid length. [ 81.524017][ T2739] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.706'. [ 81.911403][ T36] audit: type=1400 audit(1755427856.641:383): avc: denied { read } for pid=2740 comm="syz.3.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 82.003449][ T36] audit: type=1400 audit(1755427856.725:384): avc: denied { map } for pid=2740 comm="syz.3.707" path="socket:[13799]" dev="sockfs" ino=13799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.027948][ T36] audit: type=1400 audit(1755427856.725:385): avc: denied { accept } for pid=2740 comm="syz.3.707" path="socket:[13799]" dev="sockfs" ino=13799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 82.564445][ T36] audit: type=1400 audit(1755427857.249:386): avc: denied { execute_no_trans } for pid=2781 comm="syz.2.721" path="/141/file2" dev="tmpfs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.593735][ T36] audit: type=1400 audit(1755427857.277:387): avc: denied { shutdown } for pid=2785 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.594796][ T2787] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 82.634301][ T36] audit: type=1400 audit(1755427857.314:388): avc: denied { relabelto } for pid=2785 comm="syz.2.722" name="cgroup" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:traceroute_exec_t:s0" [ 82.661996][ T36] audit: type=1400 audit(1755427857.314:389): avc: denied { associate } for pid=2785 comm="syz.2.722" name="cgroup" dev="tmpfs" ino=798 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:traceroute_exec_t:s0" [ 82.929923][ T2802] overlayfs: failed to clone upperpath [ 83.064890][ T2821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2821 comm=syz.3.732 [ 83.095564][ T2825] fuse: Bad value for 'fd' [ 83.685004][ T2836] mmap: syz.2.737 (2836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.899927][ T36] audit: type=1400 audit(1755427859.437:390): avc: denied { accept } for pid=2895 comm="syz.1.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.009076][ T2921] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.236578][ T2939] netlink: 200 bytes leftover after parsing attributes in process `syz.3.769'. [ 85.246126][ T2939] tc_dump_action: action bad kind [ 85.594509][ T36] audit: type=1326 audit(1755427861.088:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.1.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x0 [ 85.623529][ T2953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 86.254613][ T2967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 86.263418][ T2967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'. [ 86.318224][ T2968] overlayfs: failed to clone upperpath [ 86.481147][ T36] audit: type=1400 audit(1755427861.920:392): avc: denied { setopt } for pid=2974 comm="syz.2.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.669569][ T36] audit: type=1400 audit(1755427862.088:393): avc: denied { ioctl } for pid=3007 comm="syz.2.793" path="socket:[15469]" dev="sockfs" ino=15469 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.001388][ T328] bridge_slave_1: left allmulticast mode [ 87.007970][ T328] bridge_slave_1: left promiscuous mode [ 87.014048][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.021953][ T328] bridge_slave_0: left allmulticast mode [ 87.027672][ T328] bridge_slave_0: left promiscuous mode [ 87.033308][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.157472][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.164592][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.171632][ T3025] bridge_slave_0: entered allmulticast mode [ 87.177882][ T3025] bridge_slave_0: entered promiscuous mode [ 87.184112][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.191302][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.198536][ T3025] bridge_slave_1: entered allmulticast mode [ 87.204832][ T3025] bridge_slave_1: entered promiscuous mode [ 87.213921][ T328] veth1_macvtap: left promiscuous mode [ 87.219789][ T328] veth0_vlan: left promiscuous mode [ 87.293342][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.300441][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.307756][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.314788][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.336881][ T1715] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.344048][ T1715] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.352855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.359939][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.368584][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.375610][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.397873][ T3025] veth0_vlan: entered promiscuous mode [ 87.407619][ T3025] veth1_macvtap: entered promiscuous mode [ 87.441309][ T36] audit: type=1400 audit(1755427862.808:394): avc: denied { mounton } for pid=3039 comm="syz.5.795" path="/proc/2/task" dev="proc" ino=14153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.618328][ T3063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.618884][ T3062] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 87.632495][ T3062] rust_binder: 5: no such ref 2 [ 87.801316][ T3071] tipc: Enabling of bearer rejected, failed to enable media [ 87.810449][ T3072] tipc: Enabling of bearer rejected, failed to enable media [ 87.915512][ T3087] netlink: 'syz.5.820': attribute type 4 has an invalid length. [ 87.929726][ T3087] netlink: 116 bytes leftover after parsing attributes in process `syz.5.820'. [ 88.122433][ T3095] capability: warning: `syz.1.823' uses 32-bit capabilities (legacy support in use) [ 88.346243][ T36] audit: type=1400 audit(1755427863.659:395): avc: denied { getopt } for pid=3156 comm="syz.3.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.493053][ T36] audit: type=1400 audit(1755427863.799:396): avc: denied { create } for pid=3159 comm="syz.5.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.887780][ T3184] 9pnet_fd: Insufficient options for proto=fd [ 88.904212][ T36] audit: type=1400 audit(1755427864.183:397): avc: denied { create } for pid=3185 comm="syz.3.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.013073][ T3217] 9pnet_fd: Insufficient options for proto=fd [ 89.080808][ T3236] overlayfs: failed to clone upperpath [ 89.112608][ T3240] batadv_slave_1: entered promiscuous mode [ 89.125779][ T3239] batadv_slave_1: left promiscuous mode [ 89.280944][ T3255] overlayfs: failed to clone upperpath [ 89.449890][ T3259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.458425][ T3259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.535611][ T3267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.535894][ T3266] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 89.551327][ T36] audit: type=1400 audit(1755427864.790:398): avc: denied { execute } for pid=3268 comm="syz.5.881" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.599738][ T3274] rust_binder: Write failure EFAULT in pid:51 [ 89.617552][ T3282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.651572][ T3284] tipc: Enabling of bearer rejected, failed to enable media [ 89.680955][ T3282] rust_binder: Failed to allocate buffer. len:5264, is_oneway:false [ 90.253442][ T3299] overlayfs: failed to clone upperpath [ 90.910428][ T3339] 9pnet_fd: Insufficient options for proto=fd [ 90.927518][ T362] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 91.074284][ T36] audit: type=1326 audit(1755427866.212:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3354 comm="syz.1.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc53e38ebe9 code=0x0 [ 91.082525][ T3357] No source specified [ 91.096980][ T362] usb 6-1: Using ep0 maxpacket: 16 [ 91.104947][ T3357] overlayfs: failed to clone upperpath [ 91.107168][ T362] usb 6-1: config 7 has an invalid interface number: 77 but max is 1 [ 91.121344][ T362] usb 6-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 91.131537][ T36] audit: type=1326 audit(1755427866.268:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3354 comm="syz.1.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc53e38ebe9 code=0x0 [ 91.154321][ T362] usb 6-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 91.163375][ T362] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 91.164921][ T3365] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 91.173758][ T362] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 91.191916][ T362] usb 6-1: config 7 has no interface number 0 [ 91.198189][ T362] usb 6-1: config 7 interface 77 altsetting 106 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 91.212748][ T362] usb 6-1: config 7 interface 77 has no altsetting 0 [ 91.222260][ T362] usb 6-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=60.a8 [ 91.231339][ T362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.239342][ T362] usb 6-1: Product: Щ [ 91.243402][ T362] usb 6-1: Manufacturer: ည [ 91.247979][ T362] usb 6-1: SerialNumber: 㴶샃틮峵켘뇥í”ì½ê‚種暋鑜⑮欗å¼ë±±ã¦µë¥™æ«‡ìž¾é‚“葯췜涫漚â†ê¿Œê·šæ¦ä‹‡âŸ†ë±›ì•¤ï»´ï æ›´â­Šä¨®æ¡êº‡éœ³å¬ƒã½—æ‰ä’閷億뗥꓊쩡æ¡ç©îˆ‚㚰豤뚽㘪妵Ꞡ㮃鴽䋺ㆎ矑桗㶵鴻갓୒曉輑ꕋ쟒긠ृ䛗瘔ꑆಉ촣⒔Ð⑯ê¦à§—⺬鸠ä’á¯è““ᚻ厓ౡ싃ᢩ⥮ִ뭕럲➴í€äˆœëŽ”㻎◃ê–쳟㔺 [ 91.283927][ T362] r8152-cfgselector 6-1: Unknown version 0x0000 [ 91.328132][ T36] audit: type=1400 audit(1755427866.445:401): avc: denied { write } for pid=3378 comm="syz.1.916" name="file0" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.350788][ T36] audit: type=1400 audit(1755427866.445:402): avc: denied { open } for pid=3378 comm="syz.1.916" path="/216/file0" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.373442][ T36] audit: type=1400 audit(1755427866.445:403): avc: denied { read } for pid=3378 comm="syz.1.916" name="file0" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.395708][ T36] audit: type=1400 audit(1755427866.445:404): avc: denied { ioctl } for pid=3378 comm="syz.1.916" path="/216/file0" dev="tmpfs" ino=1168 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.510608][ T362] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 91.814631][ T36] audit: type=1400 audit(1755427866.904:405): avc: denied { nlmsg_read } for pid=3397 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.015686][ T3421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 92.104824][ T36] audit: type=1400 audit(1755427867.175:406): avc: denied { create } for pid=3441 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 92.162515][ T3463] netlink: 96 bytes leftover after parsing attributes in process `syz.1.944'. [ 92.684472][ T3485] netlink: 'syz.2.951': attribute type 13 has an invalid length. [ 92.693074][ T3485] erspan0: refused to change device tx_queue_len [ 93.170532][ T3502] 9pnet_fd: Insufficient options for proto=fd [ 93.185967][ T36] audit: type=1400 audit(1755427868.184:407): avc: denied { mount } for pid=3503 comm="syz.3.960" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 93.243181][ T36] audit: type=1400 audit(1755427868.241:408): avc: denied { shutdown } for pid=3509 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.966818][ T3551] tc_dump_action: action bad kind [ 94.215128][ T3560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.982'. [ 94.279281][ T3560] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.287270][ T3560] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 94.295760][ T3560] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 94.303702][ T3560] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 94.322078][ T3563] FAT-fs (rnullb0): bogus number of reserved sectors [ 94.328808][ T3563] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 94.347169][ T3565] can0: slcan on ptm0. [ 94.606651][ T362] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 94.768099][ T362] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.778265][ T362] usb 6-1: config 0 has no interfaces? [ 94.783725][ T362] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 94.792754][ T362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.801251][ T362] usb 6-1: config 0 descriptor?? [ 95.021685][ T63] usb 6-1: USB disconnect, device number 4 [ 95.046534][ T3565] can0 (unregistered): slcan off ptm0. [ 95.116726][ T3628] overlayfs: failed to clone lowerpath [ 95.123842][ T3628] overlayfs: failed to clone lowerpath [ 95.178451][ T3651] overlayfs: failed to clone upperpath [ 95.462451][ T3697] 9pnet_fd: Insufficient options for proto=fd [ 95.469310][ T3699] 9pnet_fd: Insufficient options for proto=fd [ 95.552577][ T3705] overlayfs: failed to clone lowerpath [ 95.858004][ T362] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.997056][ T362] usb 6-1: device descriptor read/64, error -71 [ 96.253713][ T362] usb 6-1: device descriptor read/64, error -71 [ 96.470648][ T3728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3728 comm=syz.3.1028 [ 96.483975][ T3728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=3728 comm=syz.3.1028 [ 96.521086][ T362] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.660127][ T362] usb 6-1: device descriptor read/64, error -71 [ 96.916814][ T362] usb 6-1: device descriptor read/64, error -71 [ 97.036555][ T362] usb usb6-port1: attempt power cycle [ 97.089229][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 97.089245][ T36] audit: type=1400 audit(1755427871.840:412): avc: denied { create } for pid=3753 comm="syz.3.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.236870][ T36] audit: type=1400 audit(1755427871.971:413): avc: denied { setopt } for pid=3781 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.395892][ T3790] overlayfs: failed to clone upperpath [ 97.408826][ T362] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.431333][ T362] usb 6-1: device descriptor read/8, error -71 [ 97.570332][ T362] usb 6-1: device descriptor read/8, error -71 [ 97.825920][ T362] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.848289][ T362] usb 6-1: device descriptor read/8, error -71 [ 97.987299][ T362] usb 6-1: device descriptor read/8, error -71 [ 98.025538][ T3809] x_tables: duplicate underflow at hook 2 [ 98.105726][ T362] usb usb6-port1: unable to enumerate USB device [ 98.108649][ T3824] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 98.707629][ T36] audit: type=1400 audit(1755427873.346:414): avc: denied { getopt } for pid=3833 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.861528][ T3841] rust_binder: Write failure EFAULT in pid:105 [ 98.955266][ T3853] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 63) [ 98.961523][ T3853] rust_binder: Error while translating object. [ 98.972139][ T3853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.978377][ T3853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 99.248367][ T524] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 99.431245][ T524] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.439655][ T524] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.450087][ T524] usb 6-1: config 220 has no interface number 2 [ 99.456587][ T524] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.469916][ T524] usb 6-1: config 220 interface 0 has no altsetting 0 [ 99.476859][ T524] usb 6-1: config 220 interface 76 has no altsetting 0 [ 99.483886][ T524] usb 6-1: config 220 interface 1 has no altsetting 0 [ 99.492098][ T524] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.501418][ T524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.509519][ T524] usb 6-1: Product: syz [ 99.513798][ T524] usb 6-1: Manufacturer: syz [ 99.518593][ T524] usb 6-1: SerialNumber: syz [ 99.538042][ T3868] overlayfs: failed to clone upperpath [ 99.745574][ T3861] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 99.761013][ T3860] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 99.784278][ T524] usb 6-1: selecting invalid altsetting 0 [ 99.799409][ T524] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 99.806570][ T524] usb 6-1: No valid video chain found. [ 99.818112][ T3892] 9pnet_fd: Insufficient options for proto=fd [ 99.830102][ T524] usb 6-1: USB disconnect, device number 9 [ 100.042936][ T3912] netlink: 'syz.3.1092': attribute type 4 has an invalid length. [ 100.078518][ T3912] netlink: 'syz.3.1092': attribute type 4 has an invalid length. [ 100.116616][ T36] audit: type=1400 audit(1755427874.655:415): avc: denied { accept } for pid=3910 comm="syz.3.1092" path="socket:[18678]" dev="sockfs" ino=18678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.169282][ T3915] overlayfs: failed to clone upperpath [ 100.575652][ T3931] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1099'. [ 100.647360][ T36] audit: type=1400 audit(1755427875.160:416): avc: denied { mounton } for pid=3932 comm="syz.5.1100" path="/40/file0" dev="tmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.749329][ T3938] overlayfs: failed to clone upperpath [ 100.880707][ T3949] 9pnet_fd: Insufficient options for proto=fd [ 100.933475][ T36] audit: type=1400 audit(1755427875.431:417): avc: denied { write } for pid=3966 comm="syz.2.1111" name="/" dev="configfs" ino=2376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.001408][ T3987] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1117'. [ 101.032778][ T3996] overlayfs: missing 'lowerdir' [ 101.038618][ T3996] overlayfs: missing 'lowerdir' [ 101.051020][ T4000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 101.059930][ T4000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 101.518430][ T4023] overlayfs: failed to clone upperpath [ 101.643057][ T36] audit: type=1326 audit(1755427876.085:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.5.1136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x0 [ 101.713301][ T36] audit: type=1400 audit(1755428132.160:419): avc: denied { ioctl } for pid=4058 comm="syz.2.1143" path="socket:[18199]" dev="sockfs" ino=18199 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.002388][ T4061] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1144'. [ 102.061115][ T36] audit: type=1326 audit(1755428132.478:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 102.084739][ T36] audit: type=1326 audit(1755428132.478:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4077 comm="syz.1.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 102.194226][ T4086] fuse: Bad value for 'fd' [ 102.262299][ T4092] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1153'. [ 102.334300][ T4119] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1164'. [ 102.395302][ T4122] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1165'. [ 102.544758][ T4131] 9pnet_fd: Insufficient options for proto=fd [ 102.624331][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4137 comm=syz.5.1170 [ 102.636814][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=4137 comm=syz.5.1170 [ 102.649242][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=4137 comm=syz.5.1170 [ 102.949693][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 102.949709][ T36] audit: type=1400 audit(1755428133.319:428): avc: denied { create } for pid=4144 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 103.611443][ T36] audit: type=1326 audit(1755428133.927:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.1183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f424ef8ebe9 code=0x0 [ 103.634247][ T36] audit: type=1326 audit(1755428133.927:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.2.1183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f424ef8ebe9 code=0x0 [ 103.936812][ T4190] overlayfs: failed to clone lowerpath [ 104.338164][ T4242] overlayfs: failed to clone upperpath [ 104.410614][ T4249] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.1211'. [ 104.638025][ T4272] fuseblk: Bad value for 'group_id' [ 104.643664][ T4272] fuseblk: Bad value for 'group_id' [ 104.651427][ T4274] tipc: Enabling of bearer rejected, failed to enable media [ 104.690073][ T4283] overlayfs: failed to clone upperpath [ 104.770373][ T4301] syz.3.1230 uses obsolete (PF_INET,SOCK_PACKET) [ 104.937369][ T4313] fuse: Bad value for 'user_id' [ 104.943889][ T4313] fuse: Bad value for 'user_id' [ 105.070172][ T4323] fuse: Bad value for 'fd' [ 105.221058][ T36] audit: type=1400 audit(1755428135.441:431): avc: denied { listen } for pid=4347 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.559809][ T36] audit: type=1400 audit(1755428135.759:432): avc: denied { map } for pid=4357 comm="syz.1.1249" path="socket:[19134]" dev="sockfs" ino=19134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.624102][ T4371] 9pnet_fd: Insufficient options for proto=fd [ 105.684821][ T4379] overlayfs: failed to clone upperpath [ 105.830361][ T4410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=4410 comm=syz.2.1267 [ 106.146486][ T4412] syzkaller0: entered allmulticast mode [ 106.152221][ T4412] syzkaller0: entered promiscuous mode [ 106.158405][ T4411] syzkaller0: left promiscuous mode [ 106.163699][ T4411] syzkaller0: left allmulticast mode [ 106.218834][ T4419] 9pnet_fd: Insufficient options for proto=fd [ 106.238776][ T4424] overlayfs: failed to clone lowerpath [ 106.275277][ T4437] overlayfs: failed to clone upperpath [ 106.281564][ T36] audit: type=1400 audit(1755428136.433:433): avc: denied { create } for pid=4438 comm="syz.5.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 106.302931][ T36] audit: type=1400 audit(1755428136.442:434): avc: denied { create } for pid=4438 comm="syz.5.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.323384][ T36] audit: type=1400 audit(1755428136.470:435): avc: denied { mounton } for pid=4442 comm="syz.5.1279" path="/83/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.343815][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1281'. [ 106.380738][ T36] audit: type=1400 audit(1755428136.517:436): avc: denied { execute } for pid=4440 comm="syz.1.1278" path="/dev/rnullb0" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.408674][ T4452] fuseblk: Unknown parameter 'grouq_id' [ 106.978732][ T4491] 9pnet_fd: Insufficient options for proto=fd [ 107.221184][ T4495] cgroup: subsys name conflicts with all [ 107.237328][ T4497] tipc: Enabled bearer , priority 0 [ 107.608346][ T4524] 9pnet_fd: Insufficient options for proto=fd [ 107.615557][ T4524] overlay: ./file1 is not a directory [ 107.621614][ T4524] 9pnet_fd: p9_fd_create_tcp (4524): problem connecting socket to 127.0.0.1 [ 108.158457][ T36] audit: type=1400 audit(1755428138.190:437): avc: denied { map } for pid=4533 comm="syz.1.1313" path="socket:[19324]" dev="sockfs" ino=19324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.178554][ T4536] overlayfs: failed to clone upperpath [ 108.236116][ T4547] overlay: filesystem on ./bus is read-only [ 108.257681][ T4549] overlayfs: failed to clone upperpath [ 108.328078][ T4555] overlayfs: failed to clone upperpath [ 108.343669][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 108.343685][ T36] audit: type=1400 audit(1755428138.359:441): avc: denied { accept } for pid=4556 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 108.424850][ T524] tipc: Node number set to 3786898079 [ 109.069530][ T36] audit: type=1400 audit(1755428139.041:442): avc: denied { write } for pid=4595 comm="syz.2.1335" path="socket:[19869]" dev="sockfs" ino=19869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.595566][ T4615] overlayfs: failed to clone upperpath [ 109.602885][ T4615] overlayfs: failed to clone upperpath [ 110.272160][ T4665] : renamed from bond_slave_0 [ 110.278441][ T4666] overlayfs: failed to clone upperpath [ 110.298585][ T4671] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1363'. [ 110.313910][ T4674] 9pnet_fd: Insufficient options for proto=fd [ 110.465957][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 110.901362][ T4709] overlayfs: missing 'lowerdir' [ 110.907296][ T36] audit: type=1400 audit(1755428140.755:443): avc: denied { create } for pid=4708 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.934375][ T4715] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1378'. [ 111.083416][ T4728] overlayfs: failed to clone upperpath [ 111.089642][ T4728] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 111.133243][ T36] audit: type=1400 audit(1755428140.970:444): avc: denied { execmod } for pid=4737 comm="syz.3.1385" path="/438/blkio.bfq.io_merged" dev="tmpfs" ino=2428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.162035][ T4740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1386'. [ 111.178982][ T4742] overlayfs: failed to clone upperpath [ 111.204850][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1390'. [ 111.215079][ T4754] TCP: TCP_TX_DELAY enabled [ 111.479398][ T4790] tipc: Enabling of bearer rejected, failed to enable media [ 111.491819][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 111.509281][ T4803] overlayfs: failed to resolve './file1': -2 [ 111.516365][ T4803] overlayfs: failed to clone lowerpath [ 111.551049][ T4817] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1410'. [ 112.072096][ T36] audit: type=1400 audit(1755428141.849:445): avc: denied { setattr } for pid=4821 comm="syz.2.1412" name="UDP-Lite" dev="sockfs" ino=20684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.243938][ T4879] overlayfs: failed to clone upperpath [ 112.448919][ T36] audit: type=1326 audit(1755428142.195:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4899 comm="syz.5.1440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x0 [ 112.679026][ T4926] 9pnet: Could not find request transport: f!„^Í ß0x0000000000000003 [ 112.738302][ T4936] overlayfs: failed to clone upperpath [ 112.832352][ T4956] 9pnet_fd: Insufficient options for proto=fd [ 113.046327][ T4983] netlink: 393 bytes leftover after parsing attributes in process `syz.2.1466'. [ 113.047863][ T36] audit: type=1400 audit(1755428142.756:447): avc: denied { create } for pid=4968 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.437733][ T36] audit: type=1326 audit(1755428143.121:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x7fc00000 [ 113.587933][ T4997] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1471'. [ 113.704448][ T36] audit: type=1326 audit(1755428143.364:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.2.1476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f424ef8ebe9 code=0x0 [ 113.795799][ T5016] overlayfs: failed to clone upperpath [ 113.801883][ T5016] 9pnet_fd: Insufficient options for proto=fd [ 114.438084][ T5035] 9pnet_fd: Insufficient options for proto=fd [ 115.005077][ T36] audit: type=1400 audit(1755428144.589:450): avc: denied { append } for pid=5071 comm="syz.1.1497" name="file0" dev="tmpfs" ino=1818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.006981][ T5072] overlay: ./file0 is not a directory [ 115.166843][ T36] audit: type=1400 audit(1755428144.738:451): avc: denied { module_load } for pid=5094 comm="syz.1.1506" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 115.238692][ T36] audit: type=1400 audit(1755428144.804:452): avc: denied { setattr } for pid=5103 comm="syz.5.1509" name="" dev="pipefs" ino=20979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.736182][ T5132] fuse: Bad value for 'fd' [ 115.749561][ T5134] cgroup: none used incorrectly [ 117.003565][ T5172] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 117.021469][ T36] audit: type=1400 audit(1755428146.468:453): avc: denied { nlmsg_write } for pid=5173 comm="syz.2.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 117.320678][ T36] audit: type=1400 audit(1755428146.749:454): avc: denied { connect } for pid=5208 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.681817][ T5287] overlayfs: failed to clone upperpath [ 118.280646][ T5304] overlayfs: failed to clone upperpath [ 118.324104][ T5310] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 118.412186][ T5320] fuse: Bad value for 'group_id' [ 118.417216][ T5320] fuse: Bad value for 'group_id' [ 118.440445][ T36] audit: type=1400 audit(1755428147.796:455): avc: denied { create } for pid=5328 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.776241][ T36] audit: type=1326 audit(1755428148.104:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.1.1593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x0 [ 118.916162][ T5344] raw_sendmsg: syz.5.1594 forgot to set AF_INET. Fix it! [ 120.731110][ T5440] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1627'. [ 121.364411][ T36] audit: type=1400 audit(1755428150.526:457): avc: denied { execute } for pid=5465 comm="syz.3.1635" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.428771][ T36] audit: type=1326 audit(1755428150.592:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.452291][ T36] audit: type=1326 audit(1755428150.592:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.475776][ T36] audit: type=1326 audit(1755428150.592:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.499269][ T36] audit: type=1326 audit(1755428150.592:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.527408][ T36] audit: type=1326 audit(1755428150.592:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.551017][ T36] audit: type=1326 audit(1755428150.592:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.574499][ T36] audit: type=1326 audit(1755428150.592:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.597866][ T36] audit: type=1326 audit(1755428150.592:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 121.621408][ T36] audit: type=1326 audit(1755428150.592:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5465 comm="syz.3.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa378ebe9 code=0x7ffc0000 [ 122.211369][ T5496] overlayfs: failed to clone lowerpath [ 122.217384][ T5494] overlayfs: missing 'lowerdir' [ 122.217433][ T5495] overlayfs: failed to clone upperpath [ 122.503134][ T5510] 9pnet_fd: Insufficient options for proto=fd [ 122.712427][ T5533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=5533 comm=syz.1.1657 [ 123.096218][ T5555] overlayfs: failed to clone lowerpath [ 123.102965][ T5555] tipc: Enabling of bearer rejected, failed to enable media [ 123.232252][ T5569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19959 sclass=netlink_route_socket pid=5569 comm=syz.3.1669 [ 124.012967][ T5645] fuse: Bad value for 'fd' [ 124.587786][ T5678] 9pnet_fd: Insufficient options for proto=fd [ 124.807009][ T5713] overlayfs: failed to clone upperpath [ 124.813815][ T5713] overlayfs: missing 'workdir' [ 125.058533][ T5747] overlayfs: failed to resolve './file1': -2 [ 125.072575][ T5749] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.100407][ T5756] netlink: 'syz.5.1731': attribute type 25 has an invalid length. [ 125.604954][ T5790] overlayfs: failed to clone upperpath [ 125.694461][ T5807] netlink: 'syz.5.1749': attribute type 27 has an invalid length. [ 125.777330][ T5830] incfs: Error accessing: ./file0. [ 125.782580][ T5830] incfs: mount failed -20 [ 126.338526][ T5848] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1760'. [ 126.348386][ T5848] tmpfs: Bad value for 'nr_blocks' [ 126.401286][ T5860] cgroup: Name too long [ 126.416689][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1766'. [ 126.425772][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1766'. [ 126.769035][ T5887] netlink: 'syz.3.1776': attribute type 4 has an invalid length. [ 126.776849][ T5887] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1776'. [ 126.786122][ T5887] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 126.793878][ T5887] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 126.982390][ T5907] 9pnet_fd: Insufficient options for proto=fd [ 127.351601][ T5917] futex_wake_op: syz.1.1787 tries to shift op by 144; fix this program [ 127.360577][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 127.360592][ T36] audit: type=1400 audit(1755428156.136:501): avc: denied { associate } for pid=5915 comm="syz.1.1787" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 127.388765][ T36] audit: type=1400 audit(1755428156.136:502): avc: denied { execute } for pid=5915 comm="syz.1.1787" path="/memory.events" dev="rootfs" ino=23086 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 127.540324][ T5960] overlayfs: failed to clone upperpath [ 127.545850][ T36] audit: type=1326 audit(1755428156.304:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.575648][ T36] audit: type=1326 audit(1755428156.304:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.592554][ T5969] 9pnet_fd: Insufficient options for proto=fd [ 127.600826][ T36] audit: type=1326 audit(1755428156.304:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.629115][ T36] audit: type=1326 audit(1755428156.304:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.655762][ T36] audit: type=1326 audit(1755428156.304:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.687641][ T36] audit: type=1326 audit(1755428156.304:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.721641][ T36] audit: type=1326 audit(1755428156.304:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.726859][ T5998] overlayfs: missing 'workdir' [ 127.745339][ T36] audit: type=1326 audit(1755428156.304:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.1.1803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53e38ebe9 code=0x7ffc0000 [ 127.795328][ T6005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6005 comm=syz.1.1818 [ 127.906429][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1820'. [ 127.915412][ T6011] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1820'. [ 127.956896][ T6022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=6022 comm=syz.5.1824 [ 128.909397][ T6071] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 128.934355][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 128.945229][ T6075] overlayfs: failed to resolve './file0': -2 [ 129.801867][ T6132] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 129.810175][ T6132] overlayfs: missing 'lowerdir' [ 130.024941][ T6136] 9pnet_fd: Insufficient options for proto=fd [ 130.150267][ T6140] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 130.520680][ T6175] tipc: Enabling of bearer rejected, failed to enable media [ 130.941051][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'. [ 130.950198][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 130.981568][ T6217] overlayfs: failed to resolve './file0': -2 [ 131.035108][ T6237] 9pnet_fd: Insufficient options for proto=fd [ 131.079030][ T6249] overlayfs: failed to clone upperpath [ 131.179147][ T6271] overlayfs: failed to clone upperpath [ 131.406311][ T6308] netlink: 1327 bytes leftover after parsing attributes in process `syz.5.1929'. [ 131.432038][ T6312] overlayfs: failed to clone upperpath [ 132.241285][ T6376] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.250303][ T6376] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.259440][ T6376] netlink: 'syz.5.1954': attribute type 6 has an invalid length. [ 132.267199][ T6376] netlink: 'syz.5.1954': attribute type 5 has an invalid length. [ 132.275025][ T6376] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.285115][ T6377] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.294104][ T6377] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.303049][ T6377] netlink: 'syz.5.1954': attribute type 6 has an invalid length. [ 132.310774][ T6377] netlink: 'syz.5.1954': attribute type 5 has an invalid length. [ 132.318493][ T6377] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1954'. [ 132.363320][ T6385] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1957'. [ 132.731861][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'. [ 132.779556][ T6398] 9pnet_fd: Insufficient options for proto=fd [ 132.800358][ T6404] 9pnet_fd: Insufficient options for proto=fd [ 132.939359][ T6437] overlayfs: failed to clone upperpath [ 132.988197][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1974'. [ 133.333398][ T6466] fuse: Unknown parameter 'j' [ 133.422435][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 133.679787][ T6535] overlayfs: missing 'lowerdir' [ 133.976052][ T6546] netlink: 'syz.2.2017': attribute type 13 has an invalid length. [ 134.037780][ T6558] incfs: Options parsing error. -22 [ 134.043068][ T6558] incfs: mount failed -22 [ 134.265421][ T6578] overlay: ./file0 is not a directory [ 136.266761][ T6694] overlayfs: failed to clone upperpath [ 136.303963][ T6703] 9pnet_fd: Insufficient options for proto=fd [ 136.688247][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 136.688263][ T36] audit: type=1400 audit(1755428164.860:517): avc: denied { map } for pid=6733 comm="syz.1.2082" path="/489" dev="tmpfs" ino=2656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.971074][ T36] audit: type=1326 audit(1755428165.131:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6752 comm="syz.5.2090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a5738ebe9 code=0x0 [ 137.133057][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.145658][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.153030][ T6756] bridge_slave_0: entered allmulticast mode [ 137.159395][ T6756] bridge_slave_0: entered promiscuous mode [ 137.166079][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.173144][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.180404][ T6756] bridge_slave_1: entered allmulticast mode [ 137.187779][ T6756] bridge_slave_1: entered promiscuous mode [ 137.212343][ T1715] bridge_slave_1: left allmulticast mode [ 137.218377][ T1715] bridge_slave_1: left promiscuous mode [ 137.224097][ T1715] ÿÿÿÿÿÿ: port 2(bridge_slave_1) entered disabled state [ 137.232229][ T1715] bridge_slave_0: left allmulticast mode [ 137.238033][ T1715] bridge_slave_0: left promiscuous mode [ 137.243691][ T1715] ÿÿÿÿÿÿ: port 1(bridge_slave_0) entered disabled state [ 137.354623][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.361714][ T6756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.369032][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.376060][ T6756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.387101][ T1715] veth1_macvtap: left promiscuous mode [ 137.392646][ T1715] veth0_vlan: left promiscuous mode [ 137.458996][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.476632][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.491546][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.498627][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.506806][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.513843][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.541695][ T6756] veth0_vlan: entered promiscuous mode [ 137.555176][ T6756] veth1_macvtap: entered promiscuous mode [ 137.688869][ T6788] netlink: 'syz.1.2099': attribute type 6 has an invalid length. [ 137.696662][ T6788] netlink: 'syz.1.2099': attribute type 4 has an invalid length. [ 137.704644][ T6788] netlink: 'syz.1.2099': attribute type 6 has an invalid length. [ 137.712538][ T6788] netlink: 'syz.1.2099': attribute type 13 has an invalid length. [ 137.720426][ T6788] netlink: 'syz.1.2099': attribute type 15 has an invalid length. [ 137.728230][ T6788] netlink: 'syz.1.2099': attribute type 19 has an invalid length. [ 137.736443][ T6788] __nla_validate_parse: 2 callbacks suppressed [ 137.736457][ T6788] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.2099'. [ 137.758972][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'. [ 138.792148][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2121'. [ 139.456701][ T6873] fuse: Unknown parameter 'uid<18446744073709551615' [ 139.524120][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2131'. [ 139.969084][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53143 sclass=netlink_route_socket pid=6893 comm=syz.3.2136 [ 140.192432][ T36] audit: type=1400 audit(1755428168.141:519): avc: denied { setattr } for pid=6917 comm="syz.1.2146" name="PPPOL2TP" dev="sockfs" ino=26099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.235921][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6924 comm=syz.2.2147 [ 140.267536][ T6924] 9pnet_fd: Insufficient options for proto=fd [ 140.814092][ T6946] overlayfs: failed to clone upperpath [ 141.055562][ T6968] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 141.062878][ T6968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 141.420425][ T6981] futex_wake_op: syz.2.2168 tries to shift op by 32; fix this program [ 141.430206][ T63] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.439167][ T6981] 9p: Unknown Cache mode or invalid value OZ‡readahebÅê·¦kbï æ˜äP¦¾Ø‘$F¾éû¤¦"B‰¯ [ 141.579894][ T63] usb 4-1: device descriptor read/64, error -71 [ 141.836575][ T63] usb 4-1: device descriptor read/64, error -71 [ 142.093310][ T63] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 142.103321][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2175'. [ 142.243013][ T63] usb 4-1: device descriptor read/64, error -71 [ 142.506310][ T63] usb 4-1: device descriptor read/64, error -71 [ 142.628103][ T63] usb usb4-port1: attempt power cycle [ 142.686749][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.693911][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.701015][ T7029] bridge_slave_0: entered allmulticast mode [ 142.707287][ T7029] bridge_slave_0: entered promiscuous mode [ 142.717154][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.724221][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.731290][ T7029] bridge_slave_1: entered allmulticast mode [ 142.737607][ T7029] bridge_slave_1: entered promiscuous mode [ 142.774420][ T7037] /dev/loop0: Can't lookup blockdev [ 142.804011][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.811063][ T7029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.818287][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.825311][ T7029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.845093][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.852399][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.862022][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.869090][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.877808][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.884871][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.908644][ T7029] veth0_vlan: entered promiscuous mode [ 142.918565][ T7029] veth1_macvtap: entered promiscuous mode [ 142.944175][ T7045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 142.991814][ T63] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 143.025649][ T63] usb 4-1: device descriptor read/8, error -71 [ 143.163769][ T63] usb 4-1: device descriptor read/8, error -71 [ 143.299333][ T7092] netlink: 'syz.5.2199': attribute type 10 has an invalid length. [ 143.330153][ T7102] overlayfs: failed to clone upperpath [ 143.430271][ T63] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.452516][ T63] usb 4-1: device descriptor read/8, error -71 [ 143.472938][ T336] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.591612][ T63] usb 4-1: device descriptor read/8, error -71 [ 143.634431][ T336] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.645984][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.656867][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.666673][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.679544][ T336] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.688652][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.697280][ T336] usb 3-1: config 0 descriptor?? [ 143.708347][ T63] usb usb4-port1: unable to enumerate USB device [ 143.979752][ T7148] bridge0: port 3(veth0_to_bridge) entered blocking state [ 143.987045][ T7148] bridge0: port 3(veth0_to_bridge) entered disabled state [ 143.994311][ T7148] veth0_to_bridge: entered allmulticast mode [ 144.000878][ T7148] veth0_to_bridge: entered promiscuous mode [ 144.006927][ T7148] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.019639][ T7148] bridge0: port 3(veth0_to_bridge) entered blocking state [ 144.026767][ T7148] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 144.043358][ T36] audit: type=1400 audit(1755428171.741:520): avc: denied { create } for pid=7151 comm="syz.1.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.131787][ T336] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 144.141720][ T336] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 144.150520][ T336] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 144.182581][ T36] audit: type=1400 audit(1755428171.872:521): avc: denied { create } for pid=7165 comm="syz.1.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.208015][ T36] audit: type=1400 audit(1755428171.891:522): avc: denied { execmem } for pid=7170 comm="syz.1.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 144.349719][ T7196] binder: Unknown parameter '01777777777777777777777' [ 144.351683][ T7078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.367748][ T7078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.371407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.387532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.399606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.411612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.423788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.435893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.448094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.460133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.472220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.484278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.508317][ T7198] input: syz1 as /devices/virtual/input/input12 [ 144.562589][ T7203] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 144.570691][ T7203] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 144.582280][ T7203] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 144.590494][ T7203] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 144.613747][ T336] usb 3-1: USB disconnect, device number 10 [ 144.694153][ T36] audit: type=1400 audit(1755428172.349:523): avc: denied { relabelfrom } for pid=7211 comm="syz.5.2240" name="" dev="pipefs" ino=27823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 144.741889][ T36] audit: type=1400 audit(1755428172.386:524): avc: denied { write } for pid=7215 comm="syz.5.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.762421][ T7216] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2241'. [ 144.783552][ T36] audit: type=1400 audit(1755428172.405:525): avc: denied { nlmsg_write } for pid=7215 comm="syz.5.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.906091][ T470] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 145.067612][ T470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.092626][ T470] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.121721][ T470] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.140022][ T470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.167379][ T470] usb 4-1: SerialNumber: syz [ 145.403897][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.419923][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.439945][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.461630][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.495607][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.525763][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.539367][ T7258] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 145.560687][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.583287][ T7258] overlayfs: missing 'lowerdir' [ 145.602374][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.612931][ T7258] 9pnet_virtio: no channels available for device syz [ 145.656724][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.713976][ T7260] exFAT-fs (rnullb0): invalid boot record signature [ 145.714414][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.745857][ T7260] exFAT-fs (rnullb0): failed to read boot sector [ 145.766609][ T470] usb 4-1: 0:2 : does not exist [ 145.775695][ T7260] exFAT-fs (rnullb0): failed to recognize exfat type [ 145.787844][ T470] usb 4-1: USB disconnect, device number 13 [ 145.874209][ T7264] tipc: Enabling of bearer rejected, failed to enable media [ 146.050406][ T36] audit: type=1326 audit(1755428173.611:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.5.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x7ffc0000 [ 146.102432][ T36] audit: type=1326 audit(1755428173.639:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.5.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x7ffc0000 [ 146.134140][ T36] audit: type=1326 audit(1755428173.639:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.5.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5738ebe9 code=0x7ffc0000 [ 146.168702][ T7272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.536157][ T7290] rust_binder: Write failure EFAULT in pid:49 [ 146.566414][ T7292] binder: Bad value for 'stats' [ 146.800924][ T7304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7304 comm=syz.1.2271 [ 147.168784][ T7314] rust_binder: inc_ref_done called when no active inc_refs [ 149.729620][ C1] net_ratelimit: 119034 callbacks suppressed [ 149.729643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.729649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.729715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.737004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.742907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.754925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.766908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 149.778814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.790699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.802611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.793768][ C0] sched: DL replenish lagged too much [ 155.087902][ C1] net_ratelimit: 169277 callbacks suppressed [ 155.087925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.087950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.093989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.105985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.117847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.129792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.141779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.153703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.165520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.177368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.446188][ C1] net_ratelimit: 160763 callbacks suppressed [ 160.446211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.446307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.452294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.464158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.476113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.488139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.500050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.511910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.523894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.535757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.804452][ C1] net_ratelimit: 155201 callbacks suppressed [ 165.804474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.804591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.810544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.822514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.834470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.846509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.858358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.870225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.882160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.894128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.162733][ C1] net_ratelimit: 158151 callbacks suppressed [ 171.162756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.162766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.162847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.168838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.180801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.192650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.204624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.216607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.228575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 171.240405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.521038][ C0] net_ratelimit: 159619 callbacks suppressed [ 176.521060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.521111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.527133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 176.539078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.551045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.563025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.575041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.586742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.598702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.610654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.879304][ C1] net_ratelimit: 160992 callbacks suppressed [ 181.879326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.879461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.885423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.897265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.909252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.921245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.933086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.945020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.956996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.968958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.237607][ C1] net_ratelimit: 153914 callbacks suppressed [ 187.237627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.237690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.243733][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.255565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.267550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.279532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.291373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.303306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.315332][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.327350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.435535][ T368] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 192.595919][ C1] net_ratelimit: 158584 callbacks suppressed [ 192.595940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.596021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.602020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.613964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.625941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.637967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.649852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.661721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.673765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.685679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.954184][ C1] net_ratelimit: 160978 callbacks suppressed [ 197.954205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.954221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.954270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.960302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.972193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.984132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.996067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.008049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.020020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.031934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.312486][ C1] net_ratelimit: 154208 callbacks suppressed [ 203.312508][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.312552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.318559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.330552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.342505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.354396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 203.366358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.378210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.390166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.402305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.251426][ T368] usb 4-1: device descriptor read/64, error -110 [ 207.120389][ T368] usb 4-1: device descriptor read/64, error -32 [ 207.464842][ T368] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.670793][ C1] net_ratelimit: 156000 callbacks suppressed [ 208.670815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.670858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.676907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.688864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.700852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.712932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.724746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.736738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.748708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.760590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.029060][ C1] net_ratelimit: 156294 callbacks suppressed [ 214.029082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.029109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 214.035139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.047136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.059098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.070950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.082957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.094833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.106722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.118523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.567461][ T368] usb 4-1: device descriptor read/64, error -32 [ 219.387371][ C1] net_ratelimit: 158521 callbacks suppressed [ 219.387393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.387462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.393492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.405365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.417316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.429331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.441267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.453183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 219.465123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.476979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.616691][ T368] usb 4-1: device descriptor read/64, error -32 [ 224.745613][ C1] net_ratelimit: 158838 callbacks suppressed [ 224.745636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.745694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 224.751724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.763634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.775537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.787492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.799493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.811357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.823287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.835235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.465370][ T368] usb usb4-port1: attempt power cycle [ 228.584181][ T368] raw-gadget.0 gadget.3: failed to queue reset event [ 229.273770][ T368] raw-gadget.0 gadget.3: failed to queue resume event [ 230.103894][ C1] net_ratelimit: 161293 callbacks suppressed [ 230.103912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.103937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.109995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.121953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.133884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.145860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.157783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.169786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 230.181815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.193671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.462188][ C0] net_ratelimit: 153751 callbacks suppressed [ 235.462210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.462256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.468253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.480243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.492209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.504073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.516056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.527934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.539810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.551683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.590606][ T368] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 235.892515][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 235.923378][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 236.467400][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 236.474553][ T368] usb 4-1: device descriptor read/8, error -32 [ 236.759131][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 240.820506][ C1] net_ratelimit: 155412 callbacks suppressed [ 240.820527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.820540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.820604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.826640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.838508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.850383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.862212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.874093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.886090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.898015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.424894][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 241.443599][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 241.450698][ T368] usb 4-1: device descriptor read/8, error -32 [ 241.600039][ T368] raw-gadget.0 gadget.3: failed to queue suspend event [ 243.748076][ T368] raw-gadget.0 gadget.3: failed to queue reset event [ 244.047506][ T368] raw-gadget.0 gadget.3: failed to queue resume event [ 244.938523][ T368] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.077534][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 246.098914][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 246.138041][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 246.158974][ T368] usb 4-1: device descriptor read/8, error -32 [ 246.178757][ C1] net_ratelimit: 151156 callbacks suppressed [ 246.178776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.178934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.184957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.196863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.208674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.220619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.232584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.244557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.256442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.268456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.458090][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 248.540751][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 248.561461][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 248.568571][ T368] usb 4-1: device descriptor read/8, error -32 [ 249.407580][ T368] raw-gadget.0 gadget.3: failed to queue suspend event [ 250.919635][ T368] usb usb4-port1: unable to enumerate USB device [ 251.537041][ C0] net_ratelimit: 151489 callbacks suppressed [ 251.537062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.537124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.543157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.554982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.566964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.578974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.590912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 251.602676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.614635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.626595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.895338][ C1] net_ratelimit: 153497 callbacks suppressed [ 256.895360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.895427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.901455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.913293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.925231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.937224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.949087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.960952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.972794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.984812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.940139][ T328] bridge_slave_1: left allmulticast mode [ 261.135725][ T328] bridge_slave_1: left promiscuous mode [ 261.164136][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.230752][ T328] bridge_slave_0: left allmulticast mode [ 261.330450][ T328] bridge_slave_0: left promiscuous mode [ 261.538575][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.253618][ C0] net_ratelimit: 153088 callbacks suppressed [ 262.253641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.253694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.259698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.271674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.283814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.295512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.307449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.319440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.331427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.343380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.611881][ C0] net_ratelimit: 154714 callbacks suppressed [ 267.611903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.611918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.617977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.629852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.641707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.653737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.665596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.677446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.689468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.701322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.970276][ C0] net_ratelimit: 155944 callbacks suppressed [ 272.970300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 272.970823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.976375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.988352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.000193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.012152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.024145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.035988][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.047920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.059848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.328459][ C0] net_ratelimit: 156534 callbacks suppressed [ 278.328479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.328543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.334727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.346432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.358379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.370337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.382294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.394129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.406131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.417980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.686742][ C0] net_ratelimit: 160586 callbacks suppressed [ 283.686763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.686830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.692819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.704785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.716811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.728665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.740476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.752455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.764401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.776267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.045050][ C0] net_ratelimit: 153350 callbacks suppressed [ 289.045073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.045129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.051126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.063128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.075083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.086932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.098935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.110782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.122612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.134589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.403313][ C1] net_ratelimit: 157819 callbacks suppressed [ 294.403334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.403360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.409420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.421261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.433242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.445232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.457103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.469061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.480886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.492849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.761625][ C0] net_ratelimit: 159882 callbacks suppressed [ 299.761646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.761683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.767686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.779716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.791614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:0a:31:25:13:5f, vlan:0) [ 299.803396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.815399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.827352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.839162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.851140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.119891][ C1] net_ratelimit: 158704 callbacks suppressed [ 305.119912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.119920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.119975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.126022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.137905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.149795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.161645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.173524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.185452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.197470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.213710][ T37] INFO: task syz.5.2277:7320 blocked for more than 124 seconds. [ 308.276180][ T37] Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 [ 308.286608][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.295330][ T37] task:syz.5.2277 state:D stack:0 pid:7320 tgid:7319 ppid:3025 flags:0x00004004 [ 308.305535][ T37] Call Trace: [ 308.308920][ T37] [ 308.311852][ T37] __schedule+0x1322/0x1df0 [ 308.316370][ T37] ? __sched_text_start+0x10/0x10 [ 308.321412][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 308.326792][ T37] ? _raw_spin_unlock+0x45/0x60 [ 308.331712][ T37] ? __kasan_check_write+0x18/0x20 [ 308.336842][ T37] schedule+0xc6/0x240 [ 308.340939][ T37] schedule_timeout+0xb2/0x3a0 [ 308.345708][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 308.351102][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 308.356655][ T37] ? __smp_call_single_queue+0xd8/0x390 [ 308.362233][ T37] ? generic_exec_single+0x201/0x500 [ 308.367530][ T37] wait_for_common+0x359/0x630 [ 308.372316][ T37] ? wait_for_completion+0x40/0x40 [ 308.377434][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 308.382915][ T37] wait_for_completion+0x1c/0x40 [ 308.387865][ T37] rcu_barrier+0x415/0x530 [ 308.392295][ T37] netdev_run_todo+0x10e/0xcb0 [ 308.397124][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 308.402421][ T37] ? unregister_vlan_dev+0x24c/0x320 [ 308.407728][ T37] rtnl_unlock+0x12/0x20 [ 308.411984][ T37] vlan_ioctl_handler+0x1e4/0x680 [ 308.417044][ T37] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 308.422596][ T37] ? do_futex+0x309/0x500 [ 308.426951][ T37] ? __cfi_do_futex+0x10/0x10 [ 308.431633][ T37] ? alloc_file_pseudo+0x171/0x1c0 [ 308.436762][ T37] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 308.442401][ T37] sock_ioctl+0x52f/0x7b0 [ 308.446747][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 308.451599][ T37] ? __fget_files+0x2c5/0x340 [ 308.456288][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 308.461292][ T37] ? security_file_ioctl+0x34/0xd0 [ 308.466411][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 308.471278][ T37] __se_sys_ioctl+0x135/0x1b0 [ 308.475960][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 308.480607][ T37] x64_sys_call+0x1878/0x2ee0 [ 308.485295][ T37] do_syscall_64+0x58/0xf0 [ 308.489734][ T37] ? clear_bhb_loop+0x50/0xa0 [ 308.494413][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.500401][ T37] RIP: 0033:0x7f8a5738ebe9 [ 308.504824][ T37] RSP: 002b:00007f8a58151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.513256][ T37] RAX: ffffffffffffffda RBX: 00007f8a575b5fa0 RCX: 00007f8a5738ebe9 [ 308.521242][ T37] RDX: 0000200000002800 RSI: 0000000000008982 RDI: 0000000000000003 [ 308.529215][ T37] RBP: 00007f8a57411e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.537206][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.545187][ T37] R13: 00007f8a575b6038 R14: 00007f8a575b5fa0 R15: 00007ffef4e8d758 [ 308.553184][ T37] [ 308.556269][ T37] NMI backtrace for cpu 1 [ 308.556284][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 308.556314][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.556326][ T37] Call Trace: [ 308.556333][ T37] [ 308.556341][ T37] __dump_stack+0x21/0x30 [ 308.556369][ T37] dump_stack_lvl+0x10c/0x190 [ 308.556393][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 308.556418][ T37] dump_stack+0x19/0x20 [ 308.556440][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 308.556462][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 308.556485][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 308.556506][ T37] ? sched_show_task+0x379/0x560 [ 308.556529][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 308.556550][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.556572][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.556594][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 308.556616][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 308.556638][ T37] watchdog+0xd8f/0xed0 [ 308.556663][ T37] ? __cfi_watchdog+0x10/0x10 [ 308.556685][ T37] ? __kasan_check_read+0x15/0x20 [ 308.556709][ T37] ? __kthread_parkme+0x138/0x180 [ 308.556727][ T37] ? schedule+0xc6/0x240 [ 308.556750][ T37] kthread+0x2ca/0x370 [ 308.556768][ T37] ? __cfi_watchdog+0x10/0x10 [ 308.556791][ T37] ? __cfi_kthread+0x10/0x10 [ 308.556809][ T37] ret_from_fork+0x67/0xa0 [ 308.556833][ T37] ? __cfi_kthread+0x10/0x10 [ 308.556850][ T37] ret_from_fork_asm+0x1a/0x30 [ 308.556876][ T37] [ 308.556884][ T37] Sending NMI from CPU 1 to CPUs 0: [ 308.760319][ C0] NMI backtrace for cpu 0 [ 308.760334][ C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 308.760355][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.760364][ C0] RIP: 0010:update_stack_state+0x405/0x4b0 [ 308.760388][ C0] Code: 74 08 4c 89 f7 e8 1b dd 97 00 4d 8b 36 48 83 c3 48 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1e de 97 00 4c 89 33 <43> 80 3c 27 00 4c 8b 75 b8 74 08 4c 89 f7 e8 e8 dc 97 00 b3 01 49 [ 308.760400][ C0] RSP: 0018:ffffc900000069b8 EFLAGS: 00000246 [ 308.760414][ C0] RAX: 1ffff92000000d6a RBX: ffffc90000006b50 RCX: ffffc90000007801 [ 308.760426][ C0] RDX: ffffc900000078d0 RSI: 1ffff92000000d62 RDI: ffffc90000006b60 [ 308.760437][ C0] RBP: ffffc90000006a78 R08: ffffc90000006bd0 R09: ffffc90000006bc8 [ 308.760448][ C0] R10: 000000000000000e R11: ffffffff81743d30 R12: dffffc0000000000 [ 308.760459][ C0] R13: ffffc90000006b30 R14: ffffffff84ffafe6 R15: 1ffff92000000d69 [ 308.760471][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 308.760484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.760495][ C0] CR2: 00007f34b963507c CR3: 000000010c278000 CR4: 00000000003526b0 [ 308.760508][ C0] Call Trace: [ 308.760513][ C0] [ 308.760522][ C0] unwind_next_frame+0x3c2/0x750 [ 308.760539][ C0] ? __kernel_text_address+0x11/0x40 [ 308.760556][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 308.760576][ C0] arch_stack_walk+0x139/0x170 [ 308.760596][ C0] ? br_handle_frame+0x5a6/0xba0 [ 308.760615][ C0] stack_trace_save+0x9d/0xe0 [ 308.760632][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 308.760651][ C0] ? unwind_next_frame+0x3c2/0x750 [ 308.760666][ C0] kasan_save_track+0x3e/0x80 [ 308.760680][ C0] ? kasan_save_track+0x3e/0x80 [ 308.760692][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 308.760709][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 308.760722][ C0] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 308.760742][ C0] ? ref_tracker_alloc+0x153/0x540 [ 308.760755][ C0] ? dst_init+0xcf/0x420 [ 308.760773][ C0] ? dst_alloc+0x163/0x250 [ 308.760790][ C0] ? ip_route_input_rcu+0x184a/0x2520 [ 308.760808][ C0] ? ip_route_input_noref+0xbf/0x130 [ 308.760824][ C0] ? arp_process+0x89d/0x1740 [ 308.760838][ C0] ? NF_HOOK+0x157/0x1b0 [ 308.760857][ C0] ? arp_rcv+0x2f8/0x490 [ 308.760870][ C0] ? netif_receive_skb+0x22d/0x7b0 [ 308.760886][ C0] ? br_pass_frame_up+0x126/0x1c0 [ 308.760903][ C0] ? br_handle_frame_finish+0x12d9/0x1720 [ 308.760925][ C0] ? __netif_receive_skb_core+0xf48/0x3940 [ 308.760941][ C0] ? process_backlog+0x3e5/0xae0 [ 308.760957][ C0] kasan_save_alloc_info+0x40/0x50 [ 308.760974][ C0] __kasan_kmalloc+0x96/0xb0 [ 308.760988][ C0] __kmalloc_cache_noprof+0x1a5/0x3c0 [ 308.761006][ C0] ? ref_tracker_alloc+0x153/0x540 [ 308.761020][ C0] ref_tracker_alloc+0x153/0x540 [ 308.761034][ C0] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 308.761050][ C0] dst_init+0xcf/0x420 [ 308.761068][ C0] dst_alloc+0x163/0x250 [ 308.761087][ C0] ip_route_input_rcu+0x184a/0x2520 [ 308.761107][ C0] ? ip_route_input_noref+0x130/0x130 [ 308.761126][ C0] ? __asan_memcpy+0x5a/0x80 [ 308.761145][ C0] ? arpt_do_table+0x1b6c/0x1d50 [ 308.761159][ C0] ip_route_input_noref+0xbf/0x130 [ 308.761176][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 308.761194][ C0] ? __asan_memcpy+0x5a/0x80 [ 308.761212][ C0] arp_process+0x89d/0x1740 [ 308.761226][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761241][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761254][ C0] NF_HOOK+0x157/0x1b0 [ 308.761267][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761280][ C0] ? arp_xmit+0x1f0/0x1f0 [ 308.761293][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761307][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 308.761324][ C0] arp_rcv+0x2f8/0x490 [ 308.761338][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 308.761351][ C0] netif_receive_skb+0x22d/0x7b0 [ 308.761368][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 308.761384][ C0] ? br_flood+0x67e/0x730 [ 308.761400][ C0] br_pass_frame_up+0x126/0x1c0 [ 308.761418][ C0] br_handle_frame_finish+0x12d9/0x1720 [ 308.761437][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 308.761457][ C0] br_handle_frame+0x5a6/0xba0 [ 308.761475][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 308.761493][ C0] __netif_receive_skb_core+0xf48/0x3940 [ 308.761509][ C0] ? dst_release+0xe3/0x240 [ 308.761528][ C0] ? arp_process+0xd81/0x1740 [ 308.761543][ C0] ? qdisc_run_end+0x120/0x120 [ 308.761558][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761571][ C0] ? NF_HOOK+0x157/0x1b0 [ 308.761584][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761597][ C0] ? arp_xmit+0x1f0/0x1f0 [ 308.761610][ C0] ? __cfi_arp_process+0x10/0x10 [ 308.761624][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 308.761639][ C0] process_backlog+0x3e5/0xae0 [ 308.761658][ C0] __napi_poll+0xd0/0x610 [ 308.761673][ C0] net_rx_action+0x584/0xce0 [ 308.761690][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 308.761707][ C0] ? sched_clock+0x44/0x60 [ 308.761723][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 308.761741][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 308.761756][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 308.761773][ C0] handle_softirqs+0x1ab/0x630 [ 308.761793][ C0] __do_softirq+0xf/0x16 [ 308.761811][ C0] do_softirq+0xa6/0x100 [ 308.761828][ C0] [ 308.761834][ C0] [ 308.761839][ C0] ? __cfi_do_softirq+0x10/0x10 [ 308.761862][ C0] ? dst_destroy+0x37d/0x460 [ 308.761881][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 308.761900][ C0] __local_bh_enable_ip+0x74/0x80 [ 308.761918][ C0] rcu_do_batch+0x5c6/0xd20 [ 308.761937][ C0] ? rcu_core+0xd20/0xd20 [ 308.761953][ C0] ? __kasan_check_write+0x18/0x20 [ 308.761970][ C0] ? _raw_spin_lock+0x8c/0x120 [ 308.761986][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 308.762004][ C0] ? __kasan_check_read+0x15/0x20 [ 308.762022][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 308.762040][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 308.762060][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 308.762078][ C0] ? __kasan_check_write+0x18/0x20 [ 308.762095][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 308.762112][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 308.762128][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 308.762145][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 308.762158][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 308.762172][ C0] ? __kasan_check_read+0x15/0x20 [ 308.762189][ C0] ? __kthread_parkme+0x138/0x180 [ 308.762202][ C0] ? schedule+0xc6/0x240 [ 308.762219][ C0] kthread+0x2ca/0x370 [ 308.762233][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 308.762251][ C0] ? __cfi_kthread+0x10/0x10 [ 308.762265][ C0] ret_from_fork+0x67/0xa0 [ 308.762282][ C0] ? __cfi_kthread+0x10/0x10 [ 308.762296][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.762317][ C0] [ 310.478201][ C1] net_ratelimit: 139682 callbacks suppressed [ 310.478222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.478269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.484286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.496234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.508186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.520322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.532119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.543971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.555974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.567811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.930490][ T36] kauditd_printk_skb: 144 callbacks suppressed [ 310.930511][ T36] audit: type=1400 audit(1755428326.727:671): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1638]" dev="pipefs" ino=1638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 315.836505][ C1] net_ratelimit: 159907 callbacks suppressed [ 315.836527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.836567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.842594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.854544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.866524][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.878485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.890322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.902297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.914163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.926083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)