last executing test programs: 1m14.800563398s ago: executing program 0 (id=2908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000200)="c9bac357996de08b7e48f731bfa4ff07fcbe3c53f1e1eee9c14e12b11d39281b63a9cad082ceb2d83206f762f39c5670788d03139be0f70a8780b022dd688c5b166950bc7de4298a9b6eba9895b527af322b7e426703"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000200)="c9bac357996de08b7e48f731bfa4ff07fcbe3c53f1e1eee9c14e12b11d39281b63a9cad082ceb2d83206f762f39c5670788d03139be0f70a8780b022dd688c5b166950bc7de4298a9b6eba9895b527af322b7e426703"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async) 1m14.784708889s ago: executing program 0 (id=2909): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x32000, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.726248465s ago: executing program 0 (id=2910): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x60) write$P9_RVERSION(r2, 0x0, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socket$netlink(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x60) (async) write$P9_RVERSION(r2, 0x0, 0x0) (async) dup(r2) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r6, r5, 0x0, 0xffffffff) (async) 1m14.685613139s ago: executing program 0 (id=2911): syz_usb_connect(0x3, 0x3d1, &(0x7f0000000840)=ANY=[@ANYBLOB="120151017cda560899040c504d99010203010902bf030180041010090459fdffffff8c7f0924020240000600100a2401ffff09020102090506102000060e0607250183023edf0905800000045f010e41235272b3f79983c4204f6b756b4be2e54563bb315b16ea4c447f23da826e92c7429a4d313ae69379ba6c045dbe2a0fea020fbf56187121ac7a2b87b21968c7e009050003ff03c507bf07250182460b80110e26920f010407250101d1040009050804ff030c0301072501810401000725010005e894090505102000ffb9109a0fda4ac0cec88ab0546378b0c5400aeb316e7b0436395e6e88ebd8eda3d763a69f5d1a5b5588eeeb62aecf249e70e583a11dd5c7a678fd3754e84b3ddddea45d58e3d8da100a2eb86c18baa82dba8017a4ee34c4553ea3f07851aeabd91495ee278cc88bf4a6a79a770b332c9c1d2616fa1325626322e709d3b1742f6a7039475c650db48674d5ca43cb2a07d08ecc764a1961b68ab571d25909050c00ff03020500ba22729b94adab4afd1d64d6f374d8ffc36591f434058eab6d1a5eef6dfa00f4fc41dbf167b89defe9f39403ec97e9727a761534c934716fdb2ac10b0abdd027d92bfa731c23cd8b53c815fcc87f17c7f19b89fc16cefb4489013a09720defafd803b0625878acc0f8a9848cdb67fcb05422f0662a2f9c6fcef8716b500fc446cbed3c6477a5335840e5de12f9f54e33a71c93eb948690140ada1f7192214fd48695f2b552f278a6d8eeca4d38b555544504f6413d20b579633c26c479e6c71e446907080e41459816481709050a00080008012407250181026a1fbe10cbd9865ad72e8f7224e263d7778537a000ffb875357a8761eabaa65eea295e5565c896dd9a3ab17f87f6e891449ac75a5382e0f9e8a90a3ca4080d41cc27db4a46601af2fe3705f60da560b36fe5d413d64f34f223206e41976e9a26033167e7fd86c7f66ffea026e2ee0f9ebcd301efaf9bd73d5e18b56b70a791efc0bfa1fb431e83f5ef0dd6612957bb7d09a88d134271c79028815cdb7f64aee489aa3ca0222cf8f0f163ce0e4fd69a2ee4441a0b4053ed8c5b738684174fc20d09050600ff03b60502c50aa92b8546660a5b2142b293c978c828093b8fb53ba0a5462a0398176d683e85a77bc1e538411660a0068e0875c33348f426ccaf484aca2320d02c61f5db5c2a06d9fe7cdbc76fbb67786513794818cc4f65bd921e752c193824e6d285d89db3f23df45a6ffeddd4701577e86b8d32e6071787f41ef9ab221adb30b37c85e29d92ed17268ead1c841093b324273d3bdaf4ed36a0f91f60f89f8eaf0848415fdd56ab4c2b604f7ee09a0d175fe7322bf20b07644ee22b714e065cb0fb62e7ba870991a46ec11e2c55697d625b90fa403270a71604d5cfd6f1e9d9efe98911f9e2a2b14f3e06dbb30cb7e5df810d04cd4cab2f0a70f93483a84da26c"], &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f05000017a2a1874d7a"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x0, 0x10001, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0xf1590000) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x10001, @remote, 0x2}, 0x1c, 0x0}}], 0x2, 0x4000004) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x7, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000400)={0x5, {{0xa, 0x4e21, 0x200000b, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) 1m13.690251177s ago: executing program 1 (id=2924): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$igmp6(0xa, 0x3, 0x2) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socketpair(0x29, 0x1, 0x7, &(0x7f0000000180)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x3, {0xa, 0x4e23, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000005c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x8, 0x7, 0x10006, 0x6}}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r6 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r6, 0x0) ftruncate(r6, 0x3) write(r5, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c4276", 0x5f5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) accept4(r4, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000140)=0x80, 0x80000) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e72, 0x0, 0x0, 0x0) 1m13.438420112s ago: executing program 3 (id=2926): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002800010023bd700000000000050000000c000000000000f7ffffffff"], 0x24}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00$'], 0x30}], 0x1}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010129bd70fb979b76e424"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(r5, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x10, r0, 0xffffb000) 1m12.866253698s ago: executing program 3 (id=2927): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1m12.862308299s ago: executing program 1 (id=2928): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x130, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6ed2be8d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2552}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_ORIG={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf4}]}, 0x130}, 0x1, 0x0, 0x0, 0x404c000}, 0x240440c0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x50) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) 1m12.85129665s ago: executing program 1 (id=2929): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5900000065ffff0010000008023950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0xffffffff) 1m12.815720973s ago: executing program 1 (id=2930): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x317, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x36) 1m12.702102974s ago: executing program 1 (id=2931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x1003, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000002700)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009050003ff030c0000ebbac564734796af53f8a5fcbfe39cd1c81963ccf220498f4b260ef6453e08b2e31f03f1f8612ec32fabea6d6d70"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000240), 0x10007f, 0x10100) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="edfa5358e1cb95f584dedf9479e1337d7c", @ANYBLOB="c5153284fbedf3cf903a41a14adf070731125250c271a679984b55ee432d58", @ANYBLOB="010028bd7000fcdbdf25190000002000018008000300060000001400020076657468315f6d616376746170000000", @ANYRES16=r0, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x20008810}, 0x91) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, 0x0) r5 = socket$inet(0xa, 0x801, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000280)) accept4(r5, 0x0, 0x0, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$P9_RXATTRCREATE(r8, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{}, 0x2}}, 0x6f) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0xfffffffd}}, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket(0x840000000002, 0x3, 0xff) 1m12.701176064s ago: executing program 3 (id=2932): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x600900, 0x70) syz_io_uring_setup(0x1e72, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) io_setup(0xe4, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x80001}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', '', [], 0xa, "d943f459535ea6824ac85972d7"}, 0x11) sendfile(r4, r5, &(0x7f0000000100)=0x10, 0x746) io_setup(0x7, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000600)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40060}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000001c0)=0x2000, 0x4) ioctl$TIOCSIG(r6, 0x40045436, 0x6) 1m11.907683143s ago: executing program 3 (id=2933): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000a40)={0x2020}, 0xc7) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'rose0\x00', @local}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m11.22721953s ago: executing program 0 (id=2934): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = dup(r0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000240)={&(0x7f0000000140), &(0x7f0000000180)=""/188, 0xbc}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x84ae}}, 0x30) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80001, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) 1m10.833337618s ago: executing program 3 (id=2935): r0 = eventfd(0x7e) write$eventfd(r0, &(0x7f0000000040)=0x5, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000300), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r3 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x7}) sendmmsg$inet6(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)="04f360710f55c24abb24327a6e6ed0f4e530cccaec1dd6d3b7dc2038c5585825495d3466780d7bee13b83a77ff9c973444d97c78f11cf6f57d5685c63b72bac03530b1f4ffe62fc66b4fc769f3f7000852529e188c5b98ffd0fbd433c201988783019775710b0ffaae196584ccc0f0e2d4227f7e8094016e6e236e9576fcbf0a9e237e387c3d3d3171dbdd2c00ae57366006dac5b55742", 0x97}, {&(0x7f0000000400)="859dd2bf22305c73bd05446e0d447ceb336d9e826ea7b1fac9d65a2a239387537a1b2f2826b24da55b34dc74545984982295b15bf2ac67f37424166513c556d69b91ad82d6f47c00a1982e3c6966cfcf56b84cc1d3815f3e889f1769619d7e22874b718c3896a5f9d85328ce043e894e9921f59fd0e8afc8dd44e8ec9563287de69a3fca8a464a954b86f6c5197a48f47b885bab4aca1b742c1f96a551c3c510e684f6c521b5df3c58c305a0e0f4e53788a4e6a3d0aaeeafcbe2ee5d2eba186f75d34fe7f3d515106cc6841bba4f11271f810a35d5c01f412734fbf0912fc54546", 0xe1}, {&(0x7f0000000140)="b7ce648a03711de81bf66009b2678454d32475c161591ff4496792ac4643b2062829c6259e991282c5500e0dc4f7aba86324ee80dbf35d40e0a34627dc74c3d3852396", 0x43}, {&(0x7f0000000500)="2c5b5614d0433fe662721bb3b283ced7310784aa41fb94986c4c3b9e71586ed07fc1d3da35041585523b685d8e921c85eca0888b51f5c200fb1392482b617c5b83520e6fd6b4ae6856c2167368569090658f885586b74f0e368d938b69add358e31975e170c12529f05d6653681ae5c295419972a2b3e217530b8727c601802ee6aa8840d31980645a87c54b2dd5467db81c3dad90bb4f3a0f043bd49d4f21da", 0xa0}, {&(0x7f00000005c0)="e9de4ae9e4421fdcd906e1da59e35aef712c315fe5d9635a1f1d53a79f4176dea5e800bc45150777fba7e002f58e13de984de5d0eed93e14085526b6603f4ebab4b759153a3ab20f7b7c643d2af4aa82954ce34087f8432fe72686f54dfe6c3a8ebcacaba935b3b65a45152413352ecac5383ed9b6e3227db9d630bb4a156e38f6861e289446c3839ba54c1e2427c1dd1cbbbba2e744756bc5d14c9760f3f9e405768563618269bb", 0xa8}, {&(0x7f0000000680)="38d685a7e596c350d0de907c746418c38b6c04bae90deda84d00692839fb7fded1e9bdf7deccb80b52d2acc751e3540ab313fefea86842f86c2ed8268de6664ea19898484707635a64f2f1921d6b4506286e4bbc5bc7fb29dd44dadfedeb9d7a940ac6cd14d067c5e528aecc65276e5268d01efcd53766a7b9bb90232d76944a723d45933aa4b5ce85b30b36bd573700a308966f08c3d0d58ab792a9e803b72009a4be6e09d3232c2d64222e88258ce82bc146aff993bd6b644bbcce044e284dbaf13d8f9c00d302261cecec811ae4498741fb51252acfeba65d0ab647f27b378ada3e5ed5caa2cd62db9b6fed4ac043e531a7ed", 0xf4}, {&(0x7f0000000780)="80b24d90a8995a45ad3ff4a0d49c2b2c53f92634088d51ead6956431dcbcb6d903373250ac3027e7e6", 0x29}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000007c0)="16ee4048a013c9fa6bc755a208fa1da89aa3a990a7f6b551402e2f0b5c95b822955fb4f0ab4679e6543b575ff0e61cc1ceba31d99a6b283c33ee5ebe8bb2f798523a03b890c5a72f12f66306613459d67b96", 0x52}, {&(0x7f0000000840)}], 0xa, &(0x7f0000001980)=[@dontfrag={{0x14, 0x29, 0x3e, 0xffffffc0}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x87, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x8, [0xfff, 0x9, 0x2]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}}}], 0x60}}], 0x1, 0x24000084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x54, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0xca, 0x2, 0x11}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 1m0.344901441s ago: executing program 1 (id=2937): preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0xffffffff, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0xc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f08b99c030000b800000000ba000000000f3066bad004b011ee66ba4000b800000000ef47cf66b824018ec0c7442400c1000000c744240226ea6e57ff1c24430f0198acb500003e67410fc7590066470f6f3e", 0x54}], 0x1, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r8, 0x1, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) fremovexattr(r0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x94893, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000100)=@arm64={0x75, 0x0, 0x6, '\x00', 0x4be}) 58.41757304s ago: executing program 0 (id=2938): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b8e0102030109021b0001000000b3090400000101293000090509"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x16) 57.465704324s ago: executing program 3 (id=2939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x4c, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) 56.214900037s ago: executing program 2 (id=2940): openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) 42.845564883s ago: executing program 32 (id=2938): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b8e0102030109021b0001000000b3090400000101293000090509"], 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x16) 41.680443377s ago: executing program 33 (id=2937): preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0xffffffff, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0xc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x16, 0x0, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f08b99c030000b800000000ba000000000f3066bad004b011ee66ba4000b800000000ef47cf66b824018ec0c7442400c1000000c744240226ea6e57ff1c24430f0198acb500003e67410fc7590066470f6f3e", 0x54}], 0x1, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r8, 0x1, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) fremovexattr(r0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x94893, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r10, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000100)=@arm64={0x75, 0x0, 0x6, '\x00', 0x4be}) 41.224654163s ago: executing program 2 (id=2943): r0 = socket(0x10, 0x80000, 0x6) write(r0, &(0x7f0000000100)="240000001e005f0214ffffffffff03000000000000000000000008000800090020000000", 0x24) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000040)=0x9, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x800, 0x5, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051016e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407eb12bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x1]}) 40.933209461s ago: executing program 34 (id=2939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x4c, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0x1, 0x4) 31.942152136s ago: executing program 2 (id=2945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 28.484208376s ago: executing program 2 (id=2946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') (async) rename(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup/file0\x00') ioctl$TCFLSH(r1, 0x400455c8, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 16.978023528s ago: executing program 2 (id=2947): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0xa, 0x3, 0x87) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x6, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = getpgrp(0x0) ioprio_set$pid(0x1, r4, 0x6000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x18}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0xa0, 0x0, &(0x7f0000000500)=[@acquire, @increfs={0x40046304, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3a}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) 15.521548882s ago: executing program 2 (id=2948): unshare(0x62040200) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x1c0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x0, 0x2) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000280)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto(r0, &(0x7f0000000180)="b8fed7c18d8e727fbba33dd92ab6abb735d66790493f3d30b1697f43f8e9854de581364f9821d269486d650bbc20527014c38e877cd4cbb8fd5a3064dfb6186ce9e952b9f41c1688eabca37d1f", 0x4d, 0x24044080, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "21865b629e1b9a97e49a4fdd8ab7a47ba0a8274722bb48e80adf7495be6ff5080259a7be369e09e2d31eeafd5690ea73dc4f25ab42d210eb49e6c789f6210d", 0x2b}, 0x80) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "ff8d4b9ce7be848e", "dfdd86d8a0f4a7df387e88f00cebfc2472ce9f48c1a2761247cd247d6307041b", "be7ea708", "9ea2a49b106de4f4"}, 0x38) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000) 0s ago: executing program 35 (id=2948): unshare(0x62040200) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x1c0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x0, 0x2) (async) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000280)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto(r0, &(0x7f0000000180)="b8fed7c18d8e727fbba33dd92ab6abb735d66790493f3d30b1697f43f8e9854de581364f9821d269486d650bbc20527014c38e877cd4cbb8fd5a3064dfb6186ce9e952b9f41c1688eabca37d1f", 0x4d, 0x24044080, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "21865b629e1b9a97e49a4fdd8ab7a47ba0a8274722bb48e80adf7495be6ff5080259a7be369e09e2d31eeafd5690ea73dc4f25ab42d210eb49e6c789f6210d", 0x2b}, 0x80) (async) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) (async) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "ff8d4b9ce7be848e", "dfdd86d8a0f4a7df387e88f00cebfc2472ce9f48c1a2761247cd247d6307041b", "be7ea708", "9ea2a49b106de4f4"}, 0x38) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000) kernel console output (not intermixed with test programs): k 0, async page read [ 145.537417][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.546594][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 145.554707][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.563833][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.282515][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.291724][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.300396][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.309675][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.317783][ T110] loop2: unable to read partition table [ 146.326682][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.335836][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.339727][ T6013] rust_binder: Error while translating object. [ 146.343904][ T6013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.343906][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.343933][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.350693][ T6013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:990 [ 146.360467][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 146.384600][ T6016] overlayfs: failed to resolve './file0': -2 [ 146.385522][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.413457][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.505108][ T36] audit: type=1400 audit(1761334973.050:831): avc: denied { execstack } for pid=6022 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.681747][ T36] audit: type=1400 audit(1761334973.230:832): avc: denied { create } for pid=6055 comm="syz.3.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 146.841408][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.848722][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.855956][ T6070] bridge_slave_0: entered allmulticast mode [ 146.867172][ T6070] bridge_slave_0: entered promiscuous mode [ 146.874861][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.882739][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.897490][ T6070] bridge_slave_1: entered allmulticast mode [ 146.904136][ T6070] bridge_slave_1: entered promiscuous mode [ 146.938717][ T36] audit: type=1326 audit(1761334973.490:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.1933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff484d8efc9 code=0x0 [ 147.003052][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.010155][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.017431][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.024496][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.046133][ T36] audit: type=1400 audit(1761334973.590:834): avc: denied { sys_module } for pid=6070 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.076333][ T6070] veth0_vlan: entered promiscuous mode [ 147.090606][ T6070] veth1_macvtap: entered promiscuous mode [ 147.115922][ T36] audit: type=1400 audit(1761334973.660:835): avc: denied { mounton } for pid=6070 comm="syz-executor" path="/root/syzkaller.P1BBLc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 147.337690][ T110] loop2: unable to read partition table [ 147.358617][ T6106] binder: Bad value for 'max' [ 147.374080][ T6109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.374456][ T6108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.381147][ T6108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 147.415357][ T6115] syzkaller1: entered promiscuous mode [ 147.429899][ T6115] syzkaller1: entered allmulticast mode [ 147.543141][ T6123] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 147.550590][ T6123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 147.778782][ T6129] tipc: Enabling of bearer rejected, already enabled [ 147.840842][ T6138] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1949'. [ 147.853609][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 147.863909][ T110] loop2: unable to read partition table [ 147.875983][ T6145] /dev/rnullb0: Can't open blockdev [ 147.888720][ T110] loop2: unable to read partition table [ 147.917952][ T110] loop2: unable to read partition table [ 147.929565][ T36] audit: type=1400 audit(1761334974.481:836): avc: denied { read write } for pid=6150 comm="syz.2.1954" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.953204][ T36] audit: type=1400 audit(1761334974.481:837): avc: denied { open } for pid=6150 comm="syz.2.1954" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.008912][ T110] loop2: unable to read partition table [ 148.025879][ T110] loop2: unable to read partition table [ 148.063135][ T110] loop2: unable to read partition table [ 148.307329][ T708] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 148.392749][ T6175] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 148.400488][ T6175] rust_binder: Write failure EINVAL in pid:28 [ 148.468510][ T708] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 148.472456][ T36] audit: type=1400 audit(1761334975.021:838): avc: denied { map } for pid=6182 comm="syz.0.1967" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.474710][ T708] usb 3-1: config 0 has no interface number 0 [ 148.511815][ T708] usb 3-1: config 0 interface 41 has no altsetting 0 [ 148.519892][ T708] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 148.529037][ T708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.537017][ T708] usb 3-1: Product: syz [ 148.541183][ T708] usb 3-1: Manufacturer: syz [ 148.545769][ T708] usb 3-1: SerialNumber: syz [ 148.550955][ T708] usb 3-1: config 0 descriptor?? [ 148.768566][ T6192] loop2: unable to read partition table [ 148.774311][ T6192] loop_reread_partitions: partition scan of loop2 (7࢕cＦpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 149.247075][ T4920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.357693][ T708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 149.388696][ T6218] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1980'. [ 149.397034][ T4920] usb 1-1: Using ep0 maxpacket: 16 [ 149.397904][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 149.403896][ T4920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.417080][ T6219] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1980'. [ 149.422203][ T4920] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 149.431765][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 149.448224][ T4920] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.462098][ T4920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.471081][ T4920] usb 1-1: SerialNumber: syz [ 149.477168][ T4920] usb 1-1: bad CDC descriptors [ 149.526548][ T6223] >: renamed from veth0_vlan (while UP) [ 149.571666][ T6162] netlink: 'syz.2.1958': attribute type 2 has an invalid length. [ 149.621757][ T6233] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1985'. [ 149.686042][ T4920] usb 1-1: USB disconnect, device number 13 [ 149.780482][ T6162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 149.780514][ T6162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1015 [ 149.791397][ T708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 149.793822][ T6242] 9pnet_fd: Insufficient options for proto=fd [ 149.800722][ T708] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 149.826814][ T708] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 149.839186][ T708] usb 3-1: USB disconnect, device number 42 [ 149.929306][ T36] audit: type=1400 audit(1761334976.481:839): avc: denied { nlmsg_write } for pid=6252 comm="syz.3.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 149.956009][ T6255] netlink: 'syz.3.1995': attribute type 3 has an invalid length. [ 149.966875][ T36] audit: type=1400 audit(1761334976.521:840): avc: denied { sys_nice } for pid=6254 comm="syz.3.1995" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 150.221266][ T6269] rust_binder: Error while translating object. [ 150.221325][ T6269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 150.227672][ T6269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:47 [ 150.307404][ T110] loop2: unable to read partition table [ 150.312853][ T6280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1017 [ 150.336259][ T110] loop2: unable to read partition table [ 150.374336][ T110] loop2: unable to read partition table [ 150.422857][ T6296] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 150.453074][ T110] loop2: unable to read partition table [ 150.487296][ C0] blk_print_req_error: 81 callbacks suppressed [ 150.487307][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.502616][ C0] buffer_io_error: 80 callbacks suppressed [ 150.502632][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.516387][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.525568][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.533418][ T6298] loop2: unable to read partition table [ 150.539204][ T6298] loop_reread_partitions: partition scan of loop2 (7࢕cＦpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 150.554409][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.563647][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.571914][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.581066][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.589786][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.598982][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.607204][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.616336][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.624406][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.633818][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.696932][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.706147][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.714143][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.723398][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.731337][ T110] loop2: unable to read partition table [ 150.743104][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 150.752305][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 150.846193][ T6316] __vm_enough_memory: pid: 6316, comm: syz.2.2013, bytes: 18014402804453376 not enough memory for the allocation [ 151.519733][ T6361] overlayfs: failed to clone upperpath [ 151.525868][ T6362] overlayfs: failed to clone upperpath [ 151.545738][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 151.545753][ T36] audit: type=1326 audit(1761334978.091:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.0.2034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda3cb8efc9 code=0x0 [ 151.580814][ T110] loop2: unable to read partition table [ 151.593823][ T6370] overlayfs: failed to resolve './file1': -2 [ 151.605767][ T110] loop2: unable to read partition table [ 151.610645][ T6373] rust_binder: 1046: no such ref 0 [ 151.616623][ T6373] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 151.623837][ T6373] rust_binder: 1046: no such ref 2 [ 151.629216][ T6373] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 151.640970][ T110] loop2: unable to read partition table [ 151.693124][ T110] loop2: unable to read partition table [ 151.695849][ T6377] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 151.706090][ T6377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1050 [ 151.713813][ T110] loop2: unable to read partition table [ 151.742732][ T110] loop2: unable to read partition table [ 151.764354][ T110] loop2: unable to read partition table [ 151.780588][ T110] loop2: unable to read partition table [ 152.370325][ T6416] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2050'. [ 152.398071][ T6421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=6421 comm=syz.3.2052 [ 152.414038][ T6421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=6421 comm=syz.3.2052 [ 152.468591][ T6430] binder: Bad value for 'max' [ 153.077879][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 153.110764][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2079'. [ 153.600635][ T36] audit: type=1400 audit(1761334980.152:847): avc: denied { setopt } for pid=6541 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.631431][ T6544] 9pnet_fd: Insufficient options for proto=fd [ 153.658042][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 153.742823][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 154.491418][ T6570] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2107'. [ 154.540081][ T6579] overlayfs: failed to clone upperpath [ 154.556936][ T6584] fuse: Unknown parameter '' [ 154.872616][ T6622] overlayfs: failed to clone lowerpath [ 154.916584][ T110] loop2: unable to read partition table [ 154.978171][ T6638] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2130'. [ 154.991841][ T110] loop2: unable to read partition table [ 155.025210][ T36] audit: type=1400 audit(1761334981.572:848): avc: denied { relabelto } for pid=6643 comm="syz.0.2132" name="NETLINK" dev="sockfs" ino=32462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 155.066058][ T110] loop2: unable to read partition table [ 155.114555][ T6656] overlayfs: failed to clone upperpath [ 155.125322][ T6646] netlink: 'syz.0.2133': attribute type 2 has an invalid length. [ 155.161978][ T110] loop2: unable to read partition table [ 155.226357][ T110] loop2: unable to read partition table [ 155.262523][ T110] loop2: unable to read partition table [ 155.378048][ T110] loop2: unable to read partition table [ 155.456346][ T6688] overlayfs: workdir and upperdir must reside under the same mount [ 155.489452][ T110] loop2: unable to read partition table [ 155.503119][ C1] blk_print_req_error: 116 callbacks suppressed [ 155.503138][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.518586][ C1] buffer_io_error: 116 callbacks suppressed [ 155.518602][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.532504][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.541915][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.549896][ T110] loop2: unable to read partition table [ 155.558264][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.567995][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.576107][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.585272][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.593372][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.602574][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.610932][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.620128][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 155.628277][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.637438][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 156.242126][ T6717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2155'. [ 156.345763][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.348748][ T6721] SELinux: security_context_str_to_sid () failed with errno=-22 [ 156.355080][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 156.371280][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.380480][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 156.388378][ T110] loop2: unable to read partition table [ 156.397146][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.406342][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 156.418849][ T6723] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 156.428112][ T110] loop2: unable to read partition table [ 156.483913][ T36] audit: type=1400 audit(1761334983.033:849): avc: denied { execute } for pid=6725 comm="syz.2.2159" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.811958][ T6753] fuse: Unknown parameter '0x0000000000000003' [ 156.827884][ T6755] netlink: 'syz.1.2168': attribute type 4 has an invalid length. [ 156.975714][ T36] audit: type=1400 audit(1761334983.533:850): avc: denied { read } for pid=6774 comm="syz.1.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.130241][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 157.139205][ T6791] tc_dump_action: action bad kind [ 157.216097][ T36] audit: type=1400 audit(1761334983.773:851): avc: denied { setattr } for pid=6804 comm="syz.1.2185" name="NETLINK" dev="sockfs" ino=32671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.244481][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5883 sclass=netlink_route_socket pid=6807 comm=syz.1.2186 [ 157.270876][ T110] loop2: unable to read partition table [ 157.333855][ T110] loop2: unable to read partition table [ 157.355109][ T110] loop2: unable to read partition table [ 157.383207][ T110] loop2: unable to read partition table [ 157.399823][ T110] loop2: unable to read partition table [ 157.404070][ T6840] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 157.463438][ T110] loop2: unable to read partition table [ 157.540152][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 157.608471][ T6868] netlink: 'syz.1.2207': attribute type 13 has an invalid length. [ 157.640004][ T6868] netlink: 'syz.1.2207': attribute type 13 has an invalid length. [ 157.665062][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 157.692103][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.699232][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.706467][ T6869] bridge_slave_0: entered allmulticast mode [ 157.712667][ T6869] bridge_slave_0: entered promiscuous mode [ 157.719295][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.726371][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.733521][ T6869] bridge_slave_1: entered allmulticast mode [ 157.739750][ T6869] bridge_slave_1: entered promiscuous mode [ 157.800981][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.808072][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.815369][ T6869] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.822387][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.849754][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.857294][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.867354][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.874436][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.883895][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.890976][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.915575][ T6869] veth0_vlan: entered promiscuous mode [ 157.927076][ T6869] veth1_macvtap: entered promiscuous mode [ 157.981298][ T6886] loop2: detected capacity change from 0 to 7 [ 157.987917][ T6886] loop2: unable to read partition table [ 157.993629][ T6886] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 158.257942][ T36] audit: type=1400 audit(1761334984.813:852): avc: denied { mounton } for pid=6891 comm="syz.1.2211" path="/551/file0" dev="tmpfs" ino=3075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 158.257963][ T6892] fuse: Bad value for 'fd' [ 158.294285][ T36] audit: type=1400 audit(1761334984.843:853): avc: denied { shutdown } for pid=6896 comm="syz.1.2213" laddr=172.20.20.11 lport=255 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.362355][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 158.379814][ T6913] overlayfs: failed to clone lowerpath [ 158.389137][ T6913] overlayfs: failed to clone upperpath [ 158.574870][ T708] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 158.680713][ T6923] 9pnet_fd: Insufficient options for proto=fd [ 158.689206][ T6924] 9pnet_fd: Insufficient options for proto=fd [ 158.724883][ T708] usb 3-1: Using ep0 maxpacket: 32 [ 158.731013][ T708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.741968][ T708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.751813][ T708] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 158.761067][ T708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.772720][ T708] usb 3-1: config 0 descriptor?? [ 159.184566][ T708] waltop 0003:172F:0038.000C: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 161.339869][ T4920] usb 3-1: USB disconnect, device number 43 [ 168.026376][ T5084] bridge_slave_1: left allmulticast mode [ 168.032026][ T5084] bridge_slave_1: left promiscuous mode [ 168.037723][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.045165][ T5084] bridge_slave_0: left allmulticast mode [ 168.050801][ T5084] bridge_slave_0: left promiscuous mode [ 168.056550][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.074671][ T5084] bridge0 (unregistering): left allmulticast mode [ 168.175093][ T5084] tipc: Disabling bearer [ 168.180416][ T5084] tipc: Left network mode [ 168.295620][ T5084] veth1_macvtap: left promiscuous mode [ 168.301143][ T5084] veth0_vlan: left promiscuous mode [ 173.025412][ T6941] /dev/rnullb0: Can't open blockdev [ 173.047769][ T6946] @: renamed from vlan0 (while UP) [ 173.200812][ T36] audit: type=1400 audit(173.176:854): avc: denied { create } for pid=6970 comm="syz.1.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.274848][ T4920] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 173.425904][ T4920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.436977][ T4920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.446746][ T4920] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 173.455847][ T4920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.464404][ T4920] usb 4-1: config 0 descriptor?? [ 173.695973][ T6980] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 173.704756][ T6980] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 173.714051][ T6980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.728050][ T6985] cgroup: noprefix used incorrectly [ 173.873443][ T4920] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x7 [ 173.905367][ T7007] overlayfs: failed to clone lowerpath [ 174.013343][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 174.037781][ T7019] /dev/rnullb0: Can't open blockdev [ 174.072165][ T4920] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 174.097517][ T4920] usb 4-1: USB disconnect, device number 25 [ 174.098998][ T7025] rust_binder: Write failure EFAULT in pid:1140 [ 174.129262][ T7028] rust_binder: Write failure EFAULT in pid:1142 [ 174.263102][ T7034] rust_binder: Error while translating object. [ 174.269547][ T7034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 174.276429][ T7034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1147 [ 174.320340][ T7038] netlink: 37 bytes leftover after parsing attributes in process `syz.2.2260'. [ 174.339270][ T7038] /dev/rnullb0: Can't open blockdev [ 174.598229][ T7040] binder: Bad value for 'max' [ 174.790817][ T7069] 9pnet_fd: Insufficient options for proto=fd [ 174.956571][ T36] audit: type=1400 audit(174.916:855): avc: denied { append } for pid=7079 comm="syz.2.2275" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 175.055487][ T7103] tmpfs: Unknown parameter '01777777777777777777777' [ 175.092267][ T7117] rust_binder: Error while translating object. [ 175.092310][ T7117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.098887][ T7117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1168 [ 175.112303][ T7121] 9pnet_fd: Insufficient options for proto=fd [ 175.524923][ T4919] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 175.563770][ T7160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 175.563794][ T7160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:21 [ 175.623833][ T7167] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2304'. [ 175.685978][ T4919] usb 3-1: config 1 has an invalid interface number: 239 but max is 0 [ 175.694307][ T4919] usb 3-1: config 1 has no interface number 0 [ 175.700520][ T4919] usb 3-1: config 1 interface 239 has no altsetting 0 [ 175.708996][ T4919] usb 3-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 175.718309][ T4919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.726472][ T4919] usb 3-1: Product: syz [ 175.728007][ T7173] binder: Unknown parameter 'Qazytime' [ 175.730638][ T4919] usb 3-1: Manufacturer: syz [ 175.740987][ T4919] usb 3-1: SerialNumber: syz [ 175.751576][ T7175] rust_binder: 35: no such ref 1 [ 175.756614][ T7175] rust_binder: 35: no such ref 0 [ 175.821480][ T7177] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 175.829041][ T7177] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 176.115086][ T4919] ums-sddr09 3-1:1.239: USB Mass Storage device detected [ 176.158651][ T4919] usb 3-1: USB disconnect, device number 44 [ 176.213448][ T36] audit: type=1400 audit(176.186:856): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=642 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 176.234432][ T36] audit: type=1400 audit(176.186:857): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=642 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 176.256574][ T36] audit: type=1400 audit(176.186:858): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=642 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 176.263111][ T7200] random: crng reseeded on system resumption [ 176.280136][ T36] audit: type=1326 audit(176.236:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ed8efc9 code=0x7ffc0000 [ 176.308635][ T36] audit: type=1326 audit(176.236:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f801ed8efc9 code=0x7ffc0000 [ 176.331556][ T36] audit: type=1326 audit(176.236:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ed8efc9 code=0x7ffc0000 [ 176.354295][ T36] audit: type=1326 audit(176.236:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f801ed8efc9 code=0x7ffc0000 [ 176.377157][ T36] audit: type=1326 audit(176.236:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801ed8efc9 code=0x7ffc0000 [ 176.422016][ T7202] rust_binder: Write failure EFAULT in pid:47 [ 176.422833][ T7202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.431863][ T7203] rust_binder: Write failure EFAULT in pid:47 [ 176.461746][ T7209] overlayfs: failed to clone lowerpath [ 176.676975][ T7232] overlayfs: failed to resolve './file1': -2 [ 176.804999][ T4912] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 176.955058][ T4912] usb 4-1: Using ep0 maxpacket: 8 [ 176.961244][ T4912] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 176.971196][ T4912] usb 4-1: config 0 has no interface number 0 [ 176.977779][ T4912] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 176.989916][ T4912] usb 4-1: config 0 interface 96 has no altsetting 0 [ 176.998084][ T4912] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 177.007472][ T4912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.015784][ T4912] usb 4-1: Product: syz [ 177.020254][ T4912] usb 4-1: Manufacturer: syz [ 177.025103][ T4912] usb 4-1: SerialNumber: syz [ 177.030619][ T4912] usb 4-1: config 0 descriptor?? [ 177.239634][ T4912] usb 4-1: USB disconnect, device number 26 [ 177.717092][ T7312] rust_binder: 1213: no such ref 1 [ 177.830304][ T5085] bridge_slave_1: left allmulticast mode [ 177.836148][ T5085] bridge_slave_1: left promiscuous mode [ 177.841931][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.850142][ T5085] bridge_slave_0: left allmulticast mode [ 177.855942][ T5085] bridge_slave_0: left promiscuous mode [ 177.861821][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.944127][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.951367][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.958490][ T7310] bridge_slave_0: entered allmulticast mode [ 177.965059][ T7310] bridge_slave_0: entered promiscuous mode [ 177.971503][ T5085] tipc: Disabling bearer [ 177.977006][ T5085] tipc: Left network mode [ 177.977027][ T7339] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2361'. [ 177.990701][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.997865][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.005666][ T7310] bridge_slave_1: entered allmulticast mode [ 178.010370][ T7345] rust_binder: got new transaction with bad transaction stack [ 178.011652][ T7345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 178.012109][ T7310] bridge_slave_1: entered promiscuous mode [ 178.037789][ T7341] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2361'. [ 178.059947][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 178.072921][ T7355] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000002 not found [ 178.075466][ T7352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.081314][ T7355] rust_binder: Write failure EINVAL in pid:1223 [ 178.083292][ T7352] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 178.095574][ T5085] veth1_macvtap: left promiscuous mode [ 178.109512][ T5085] >: left promiscuous mode [ 178.166770][ T7361] netlink: 'syz.2.2367': attribute type 4 has an invalid length. [ 178.185615][ T7361] netlink: 'syz.2.2367': attribute type 17 has an invalid length. [ 178.277464][ T7369] overlayfs: overlapping lowerdir path [ 178.284189][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.291250][ T7310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.298543][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.305580][ T7310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.314149][ T7369] rust_binder: Error while translating object. [ 178.314189][ T7369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 178.320471][ T7369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 178.331344][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.350286][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.357367][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.379726][ T7310] veth0_vlan: entered promiscuous mode [ 178.392276][ T7310] veth1_macvtap: entered promiscuous mode [ 178.439226][ T7387] netlink: 'syz.3.2373': attribute type 16 has an invalid length. [ 178.447430][ T7386] netlink: 'syz.3.2373': attribute type 16 has an invalid length. [ 178.464930][ T7390] rust_binder: Fixups oob 178 180 369 186 [ 178.464955][ T7390] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 178.470931][ T7390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.480620][ T7390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 178.493449][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 178.493467][ T36] audit: type=1400 audit(178.466:908): avc: denied { shutdown } for pid=7389 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.580349][ T7395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.580990][ T7395] rust_binder: Error while translating object. [ 178.588690][ T7395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.595247][ T7395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 178.695032][ T4919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 178.829028][ T7414] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2380'. [ 178.850677][ T36] audit: type=1400 audit(178.826:909): avc: denied { create } for pid=7416 comm="syz.2.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 178.875145][ T4919] usb 4-1: Using ep0 maxpacket: 32 [ 178.881421][ T4919] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 178.890392][ T4919] usb 4-1: config 0 has no interface number 0 [ 178.896810][ T4919] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 178.914988][ T36] audit: type=1400 audit(178.896:910): avc: denied { relabelfrom } for pid=7416 comm="syz.2.2382" name="RAW" dev="sockfs" ino=35388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.919180][ T4919] usb 4-1: config 0 interface 196 has no altsetting 0 [ 178.938893][ T7418] SELinux: Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped). [ 178.963255][ T4919] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 178.973149][ T4919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.977086][ T36] audit: type=1400 audit(178.956:911): avc: denied { relabelto } for pid=7416 comm="syz.2.2382" name="RAW" dev="sockfs" ino=35388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:ptmx_t:s0" [ 178.986549][ T4919] usb 4-1: Product: syz [ 179.012111][ T4919] usb 4-1: Manufacturer: syz [ 179.016967][ T4919] usb 4-1: SerialNumber: syz [ 179.022927][ T4919] usb 4-1: config 0 descriptor?? [ 179.031031][ T7386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.207754][ T36] audit: type=1400 audit(179.186:912): avc: denied { execute } for pid=7436 comm="syz.1.2390" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.242932][ T4919] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 179.251153][ T4919] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 179.266341][ T4919] usb 4-1: USB disconnect, device number 27 [ 179.773780][ T7475] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 179.781026][ T7475] rust_binder: Write failure EINVAL in pid:1250 [ 179.798810][ T36] audit: type=1400 audit(179.776:913): avc: denied { write accept } for pid=7476 comm="syz.2.2406" path="socket:[35513]" dev="sockfs" ino=35513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.799071][ T7477] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 179.829503][ T7477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 179.837753][ T7477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1252 [ 179.921068][ T7485] syzkaller0: refused to change device tx_queue_len [ 180.376325][ T5083] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.406564][ T7525] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2425'. [ 180.436564][ T7529] /dev/rnullb0: Can't open blockdev [ 180.517471][ T7540] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2431'. [ 180.540012][ T7544] 9pnet_fd: Insufficient options for proto=fd [ 180.609673][ T7551] overlayfs: failed to clone upperpath [ 181.044852][ T4910] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 181.175503][ T36] audit: type=1400 audit(181.155:914): avc: denied { mount } for pid=7554 comm="syz.0.2438" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 181.198161][ T4910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.209364][ T4910] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 181.218628][ T4910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.227989][ T4910] usb 4-1: config 0 descriptor?? [ 181.233986][ T7553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.337817][ T7567] rust_binder: Error in use_page_slow: ESRCH [ 181.337836][ T7567] rust_binder: use_range failure ESRCH [ 181.343915][ T7567] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 181.349465][ T7567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.357663][ T7567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1288 [ 181.643887][ T4910] hid-generic 0003:04F3:0755.000E: unknown main item tag 0x0 [ 181.660510][ T4910] hid-generic 0003:04F3:0755.000E: unknown main item tag 0x0 [ 181.668314][ T4910] hid-generic 0003:04F3:0755.000E: unknown main item tag 0x0 [ 181.675728][ T4910] hid-generic 0003:04F3:0755.000E: unknown main item tag 0x0 [ 181.683102][ T4910] hid-generic 0003:04F3:0755.000E: unknown main item tag 0x0 [ 181.691035][ T4910] hid-generic 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 181.734366][ T7580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.759534][ T36] audit: type=1400 audit(181.735:915): avc: denied { write } for pid=7586 comm="syz.2.2448" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.786501][ T7591] fuse: Bad value for 'fd' [ 181.787529][ T36] audit: type=1400 audit(181.735:916): avc: denied { remove_name } for pid=7586 comm="syz.2.2448" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.813907][ T36] audit: type=1400 audit(181.735:917): avc: denied { unlink } for pid=7586 comm="syz.2.2448" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.821247][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2451'. [ 181.993560][ T7553] loop2: detected capacity change from 0 to 7 [ 182.371232][ T7604] overlayfs: failed to clone upperpath [ 182.424851][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 182.424965][ T986] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.735949][ T7616] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 182.749493][ T7618] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 182.763287][ T7618] overlayfs: missing 'lowerdir' [ 183.004900][ T4921] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 183.024874][ T4910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 183.154847][ T4921] usb 3-1: Using ep0 maxpacket: 16 [ 183.161063][ T4921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 183.171541][ T4921] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 183.175946][ T4910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.180785][ T4921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.192494][ T4910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.200828][ T4921] usb 3-1: Product: syz [ 183.211788][ T4910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 183.215866][ T4921] usb 3-1: Manufacturer: syz [ 183.226292][ T4910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.235966][ T4921] usb 3-1: SerialNumber: syz [ 183.249438][ T4910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.249702][ T4921] usb 3-1: config 0 descriptor?? [ 183.263506][ T4910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.265006][ T4921] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 183.278986][ T4910] usb 2-1: config 0 descriptor?? [ 183.284662][ T7625] overlay: Unknown parameter 'subj_role' [ 183.290760][ T4921] usb 3-1: Detected FT232R [ 183.465135][ T4921] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 183.625218][ T708] usb 4-1: USB disconnect, device number 28 [ 183.682653][ T4910] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 183.691618][ T4910] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 183.754952][ T708] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 183.904848][ T708] usb 4-1: Using ep0 maxpacket: 32 [ 183.911126][ T708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.922120][ T708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.931941][ T708] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 183.941012][ T708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.949734][ T708] usb 4-1: config 0 descriptor?? [ 184.365970][ T708] savu 0003:1E7D:2D5A.0010: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 184.666420][ T7647] binder: Unknown parameter 'context[7' [ 184.676957][ T7649] netlink: 'syz.0.2471': attribute type 21 has an invalid length. [ 184.684922][ T7649] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2471'. [ 184.986540][ T708] usb 4-1: USB disconnect, device number 29 [ 185.510364][ T7661] binder: Unknown parameter 'defcontextsb/00#/00#' [ 185.592342][ T7665] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 185.744612][ T7675] loop2: detected capacity change from 0 to 7 [ 185.763419][ T4921] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 185.771463][ T4921] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 185.782652][ T4921] usb 3-1: USB disconnect, device number 45 [ 185.804131][ T4921] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 185.813851][ T4921] ftdi_sio 3-1:0.0: device disconnected [ 185.854582][ T7681] netlink: 'syz.2.2486': attribute type 40 has an invalid length. [ 185.871241][ T7681] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 185.871268][ T7681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 185.879534][ T7681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1319 [ 185.943349][ T7689] loop9: detected capacity change from 0 to 7 [ 185.959811][ T6949] buffer_io_error: 60 callbacks suppressed [ 185.959827][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.974192][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.982227][ T6949] loop9: unable to read partition table [ 185.989580][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.997678][ T7689] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.005917][ T7689] loop9: unable to read partition table [ 186.012636][ T7690] /dev/rnullb0: Can't open blockdev [ 186.019057][ T7689] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 186.019057][ T7689] ) failed (rc=-5) [ 186.032796][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.040676][ T4910] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 186.047995][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.048458][ T4912] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 186.056633][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.064512][ T4910] usb 2-1: device reset changed ep0 maxpacket size! [ 186.075633][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.079071][ T4909] usb 2-1: USB disconnect, device number 21 [ 186.091376][ T6949] Buffer I/O error on dev loop9, logical block 0, async page read [ 186.133296][ T7698] fuse: Bad value for 'fd' [ 186.224853][ T4909] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 186.232463][ T4912] usb 4-1: Using ep0 maxpacket: 32 [ 186.238729][ T4912] usb 4-1: config 0 has an invalid interface number: 72 but max is 0 [ 186.246868][ T4912] usb 4-1: config 0 has no interface number 0 [ 186.253242][ T4912] usb 4-1: config 0 interface 72 has no altsetting 0 [ 186.261781][ T4912] usb 4-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 186.271380][ T4912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.279863][ T4912] usb 4-1: Product: syz [ 186.284058][ T4912] usb 4-1: Manufacturer: syz [ 186.288706][ T4912] usb 4-1: SerialNumber: syz [ 186.293759][ T4912] usb 4-1: config 0 descriptor?? [ 186.384823][ T4909] usb 2-1: Using ep0 maxpacket: 16 [ 186.390972][ T4909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.401103][ T4909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.410017][ T4910] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 186.418990][ T4909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.428442][ T4909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.436621][ T4909] usb 2-1: Product: syz [ 186.440845][ T4909] usb 2-1: Manufacturer: syz [ 186.445486][ T4909] usb 2-1: SerialNumber: syz [ 186.544868][ T4910] usb 3-1: device descriptor read/64, error -71 [ 186.595508][ T7716] rust_binder: Error while translating object. [ 186.595550][ T7716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.601745][ T7716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 186.653915][ T7671] rust_binder: Write failure EFAULT in pid:54 [ 186.663753][ T36] audit: type=1400 audit(186.645:918): avc: denied { setattr } for pid=7670 comm="syz.1.2480" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.707594][ T4909] usb 2-1: 0:2 : does not exist [ 186.712496][ T4909] usb 2-1: unit 6 not found! [ 186.719290][ T4909] usb 2-1: USB disconnect, device number 22 [ 186.725865][ T4912] usb 4-1: MIDIStreaming interface descriptor not found [ 186.737086][ T4912] usb 4-1: USB disconnect, device number 30 [ 186.750989][ T6947] udevd[6947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.72/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 186.814876][ T4910] usb 3-1: device descriptor read/64, error -71 [ 187.054842][ T4910] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 187.124668][ T7720] x_tables: duplicate underflow at hook 2 [ 187.148190][ T7727] netlink: 'syz.3.2501': attribute type 27 has an invalid length. [ 187.184884][ T4910] usb 3-1: device descriptor read/64, error -71 [ 187.222161][ T7736] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 187.243847][ T7739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58 [ 187.253046][ T7741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2506'. [ 187.271837][ T7741] SELinux: security_context_str_to_sid () failed with errno=-22 [ 187.309537][ T7746] sit0: entered promiscuous mode [ 187.315519][ T7746] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 187.323474][ T7746] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2508'. [ 187.405785][ T7770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2515'. [ 187.415866][ T7770] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 187.424837][ T4910] usb 3-1: device descriptor read/64, error -71 [ 187.441634][ T7772] overlayfs: failed to clone upperpath [ 187.447546][ T7773] overlayfs: failed to clone upperpath [ 187.506464][ T36] audit: type=1400 audit(188.484:919): avc: denied { map } for pid=7759 comm="syz.1.2513" path="socket:[37370]" dev="sockfs" ino=37370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.535099][ T4910] usb usb3-port1: attempt power cycle [ 187.874875][ T4910] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 187.895975][ T4910] usb 3-1: device descriptor read/8, error -71 [ 188.026057][ T4910] usb 3-1: device descriptor read/8, error -71 [ 188.221893][ T7792] rust_binder: Write failure EFAULT in pid:75 [ 188.264864][ T4910] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 188.296047][ T4910] usb 3-1: device descriptor read/8, error -71 [ 188.387374][ T7810] netlink: 'syz.1.2530': attribute type 4 has an invalid length. [ 188.427093][ T4910] usb 3-1: device descriptor read/8, error -71 [ 188.467693][ T7813] binder: Bad value for 'max' [ 188.534988][ T4910] usb usb3-port1: unable to enumerate USB device [ 188.544590][ T7833] overlay: Bad value for 'uuid' [ 188.784316][ T7840] netlink: 556 bytes leftover after parsing attributes in process `syz.3.2541'. [ 188.802000][ T7845] overlayfs: failed to clone lowerpath [ 188.808067][ T7845] overlay: Unknown parameter '/' [ 188.846257][ T7857] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 188.941718][ T7864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7864 comm=syz.3.2549 [ 188.979980][ T7874] overlayfs: missing 'lowerdir' [ 189.353681][ T7899] rust_binder: Error while translating object. [ 189.353709][ T7899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 189.360189][ T7899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1345 [ 189.390479][ T7903] rust_binder: Write failure EFAULT in pid:91 [ 189.418434][ T7901] sit0: entered promiscuous mode [ 189.430361][ T7901] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2561'. [ 189.440571][ T7903] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 189.440593][ T7903] rust_binder: Error while translating object. [ 189.440706][ T7901] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 189.449747][ T7903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.455692][ T7901] rust_binder: Error while translating object. [ 189.455738][ T7901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.455760][ T7901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1347 [ 189.493194][ T7903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 189.521270][ T7908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=7908 comm=syz.3.2564 [ 189.543813][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2564'. [ 189.621539][ T7914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.652414][ T7917] rust_binder: 1354: no such ref 1 [ 189.664070][ T7917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1354 [ 189.726614][ T5083] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.742328][ T5083] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.894840][ T708] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 190.044904][ T708] usb 2-1: Using ep0 maxpacket: 16 [ 190.051054][ T708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.061172][ T708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.071588][ T708] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.081177][ T708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.089726][ T708] usb 2-1: Product: syz [ 190.093959][ T708] usb 2-1: Manufacturer: syz [ 190.098837][ T708] usb 2-1: SerialNumber: syz [ 190.127891][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 190.311927][ T7919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.311951][ T7919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 190.322792][ T708] usb 2-1: 0:2 : does not exist [ 190.338807][ T708] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 190.349652][ T708] usb 2-1: USB disconnect, device number 23 [ 190.807117][ T36] audit: type=1400 audit(191.784:920): avc: denied { execmod } for pid=7982 comm="syz.0.2593" path="/dev/rnullb0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.892749][ T7992] overlayfs: overlapping lowerdir path [ 190.899035][ T7992] overlayfs: overlapping lowerdir path [ 191.341955][ T8022] netlink: 'syz.1.2603': attribute type 1 has an invalid length. [ 191.358714][ T8025] 9pnet_fd: Insufficient options for proto=fd [ 191.775796][ T8031] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 191.784859][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 191.785154][ T986] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.791690][ T8031] netlink: 'syz.0.2606': attribute type 4 has an invalid length. [ 192.200340][ T8047] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2612'. [ 192.211326][ T8047] netlink: 'syz.1.2612': attribute type 29 has an invalid length. [ 192.329537][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2615'. [ 192.383151][ T8059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=8059 comm=syz.2.2616 [ 192.408023][ T8061] rust_binder: Failed to allocate buffer. len:4336, is_oneway:true [ 192.408054][ T8061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 192.416310][ T8061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1368 [ 192.442623][ T8068] !@: renamed from xfrm0 (while UP) [ 192.448437][ T36] audit: type=1326 audit(193.424:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.0.2620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda3cb8efc9 code=0x0 [ 192.481535][ T8069] input: syz1 as /devices/virtual/input/input29 [ 192.574834][ T708] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 192.724867][ T708] usb 2-1: Using ep0 maxpacket: 32 [ 192.731294][ T708] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 192.739777][ T708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.750151][ T708] usb 2-1: config 0 has no interface number 0 [ 192.756284][ T708] usb 2-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.769542][ T708] usb 2-1: config 0 interface 196 has no altsetting 0 [ 192.777894][ T708] usb 2-1: New USB device found, idVendor=05ac, idProduct=97c2, bcdDevice=eb.3a [ 192.787076][ T708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.796120][ T708] usb 2-1: Product: syz [ 192.800357][ T708] usb 2-1: Manufacturer: syz [ 192.805120][ T708] usb 2-1: SerialNumber: syz [ 192.813532][ T708] usb 2-1: config 0 descriptor?? [ 192.815184][ T36] audit: type=1400 audit(193.784:922): avc: denied { create } for pid=8089 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 192.821255][ T708] ipheth 2-1:0.196: Unable to find endpoints [ 192.875570][ T8099] overlayfs: failed to clone lowerpath [ 192.899161][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 192.925177][ T36] audit: type=1326 audit(193.904:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801ed8efc9 code=0x0 [ 192.976836][ T36] audit: type=1326 audit(193.954:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.3.2633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801ed8efc9 code=0x0 [ 193.031560][ T8054] rust_binder: got new transaction with bad transaction stack [ 193.031583][ T8054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 193.372849][ T8127] Unsupported ieee802154 address type: 0 [ 193.388628][ T8127] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.455449][ T8133] tmpfs: Bad value for 'huge' [ 193.486679][ T8135] __vm_enough_memory: pid: 8135, comm: syz.2.2644, bytes: 18014402804453376 not enough memory for the allocation [ 193.554611][ T36] audit: type=1400 audit(194.524:925): avc: denied { lock } for pid=8144 comm="syz.3.2647" path="socket:[38415]" dev="sockfs" ino=38415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.594750][ T8149] Unsupported ieee802154 address type: 0 [ 193.846324][ T8165] netlink: 182 bytes leftover after parsing attributes in process `syz.0.2653'. [ 194.080643][ T36] audit: type=1400 audit(195.054:926): avc: denied { create } for pid=8179 comm="syz.0.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 194.106176][ T8183] netlink: 'syz.0.2660': attribute type 28 has an invalid length. [ 194.158800][ T8196] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 194.168335][ T8196] overlayfs: failed to clone lowerpath [ 194.174436][ T8196] overlayfs: failed to resolve 'appraise_type=imasig': -2 [ 194.450085][ T8220] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2673'. [ 194.553437][ T8225] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 194.722723][ T8227] overlayfs: failed to clone upperpath [ 194.971266][ T8238] overlayfs: failed to clone upperpath [ 195.113755][ T36] audit: type=1326 audit(196.084:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.0.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda3cb8efc9 code=0x0 [ 195.291267][ T708] usb 2-1: USB disconnect, device number 24 [ 195.314642][ T8258] rust_binder: Fixups oob 178 180 369 186 [ 195.314664][ T8258] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 195.321010][ T8258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.329358][ T8258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 195.506681][ T8275] rust_binder: 153: no such ref 3 [ 195.520899][ T8275] rust_binder: Read failure Err(EAGAIN) in pid:153 [ 195.584850][ T4910] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 195.745862][ T4910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 195.756835][ T4910] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 195.765878][ T4910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.774431][ T4910] usb 3-1: config 0 descriptor?? [ 195.779686][ T8265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.786994][ T4919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 195.944869][ T4919] usb 2-1: Using ep0 maxpacket: 32 [ 195.951127][ T4919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.962053][ T4919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.971818][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.984634][ T4919] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 195.992410][ T4910] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0 [ 195.993714][ T4919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.005081][ T4910] hid-generic 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 196.027066][ T4919] usb 2-1: config 0 descriptor?? [ 196.039125][ T36] audit: type=1400 audit(197.014:928): avc: denied { create } for pid=8285 comm="syz.0.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 196.346943][ T4921] usb 3-1: USB disconnect, device number 50 [ 196.379573][ T8316] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2705'. [ 196.635809][ T8283] 9pnet_fd: Insufficient options for proto=fd [ 196.643712][ T4919] usbhid 2-1:0.0: can't add hid device: -71 [ 196.649698][ T4919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.658618][ T4919] usb 2-1: USB disconnect, device number 25 [ 196.724891][ T4921] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 196.874875][ T4921] usb 3-1: Using ep0 maxpacket: 16 [ 196.881062][ T4921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 196.887718][ T4921] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 196.896767][ T4921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.905342][ T4921] usb 3-1: config 0 descriptor?? [ 197.120221][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 197.167604][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'. [ 197.176588][ T8346] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 197.312848][ T4921] sony 0003:1345:3008.0012: item fetching failed at offset 3/5 [ 197.320622][ T4921] sony 0003:1345:3008.0012: parse failed [ 197.326313][ T4921] sony 0003:1345:3008.0012: probe with driver sony failed with error -22 [ 197.399396][ T8358] rust_binder: Error while translating object. [ 197.399423][ T8360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.399437][ T8358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.412056][ T8358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 197.520161][ T8319] batadv_slave_0: mtu less than device minimum [ 197.784856][ T4910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 197.934863][ T4910] usb 2-1: Using ep0 maxpacket: 8 [ 197.940931][ T4910] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 197.949848][ T4910] usb 2-1: config 0 has no interface number 0 [ 197.959928][ T4910] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 197.972239][ T4910] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 197.983482][ T4910] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 197.994965][ T4910] usb 2-1: config 0 interface 200 has no altsetting 0 [ 198.003117][ T4910] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 198.012479][ T4910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.020689][ T4910] usb 2-1: Product: syz [ 198.024883][ T4910] usb 2-1: Manufacturer: syz [ 198.029474][ T4910] usb 2-1: SerialNumber: syz [ 198.035314][ T4910] usb 2-1: config 0 descriptor?? [ 198.040602][ T8365] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 198.255845][ T4910] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input31 [ 198.269106][ T4910] usb 2-1: USB disconnect, device number 26 [ 198.300318][ T8364] /dev/rnullb0: Can't open blockdev [ 198.391709][ T8416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8416 comm=syz.0.2739 [ 198.604941][ T36] audit: type=1400 audit(199.584:929): avc: denied { read } for pid=8436 comm="syz.3.2745" name="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.613793][ T8437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2745'. [ 198.626406][ T36] audit: type=1400 audit(199.584:930): avc: denied { open } for pid=8436 comm="syz.3.2745" path="/" dev="configfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.656763][ T36] audit: type=1400 audit(199.584:931): avc: denied { ioctl } for pid=8436 comm="syz.3.2745" path="/" dev="configfs" ino=2489 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.005544][ T8459] x_tables: duplicate underflow at hook 1 [ 199.011261][ T8460] x_tables: duplicate underflow at hook 1 [ 199.029232][ T8462] overlayfs: failed to clone upperpath [ 199.035871][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2754'. [ 199.372252][ T4910] usb 3-1: USB disconnect, device number 51 [ 199.391236][ T8468] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 199.430157][ T8478] rust_binder: 1422: no such ref 3 [ 199.435408][ T8478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 199.442562][ T8479] rust_binder: 1422: no such ref 3 [ 199.447714][ T8479] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 199.454735][ T8478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 199.461962][ T8478] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 199.469444][ T8479] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 199.476993][ T8479] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 199.497888][ T8481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.498513][ T8481] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 199.505078][ T8481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 199.513110][ T8481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1425 [ 199.537460][ T8486] netlink: 'syz.3.2763': attribute type 16 has an invalid length. [ 199.555129][ T8486] netlink: 'syz.3.2763': attribute type 3 has an invalid length. [ 199.562990][ T8486] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2763'. [ 199.606731][ T36] audit: type=1400 audit(200.584:932): avc: denied { create } for pid=8494 comm="syz.0.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 199.674849][ T8531] binder: Unknown parameter '' [ 199.679555][ T8533] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.2773'. [ 199.713681][ T8539] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.723789][ T8539] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.784493][ T36] audit: type=1400 audit(200.764:933): avc: denied { map } for pid=8544 comm="syz.2.2778" path="socket:[40000]" dev="sockfs" ino=40000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 199.890380][ T8554] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.965005][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2780'. [ 200.237379][ T36] audit: type=1400 audit(201.214:934): avc: denied { accept } for pid=8579 comm="syz.3.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 200.452601][ T8607] overlayfs: failed to clone upperpath [ 200.582115][ T36] audit: type=1326 audit(201.554:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.3.2799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801ed8efc9 code=0x0 [ 200.605224][ T36] audit: type=1326 audit(201.554:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.3.2799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801ed8efc9 code=0x0 [ 200.830991][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'. [ 200.884976][ T4921] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 201.054843][ T4921] usb 3-1: Using ep0 maxpacket: 32 [ 201.061773][ T4921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.070715][ T4921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.079774][ T4921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.089033][ T4921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.098965][ T4921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.108847][ T4921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.122114][ T4921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.131361][ T4921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.140332][ T4921] usb 3-1: config 0 descriptor?? [ 201.351115][ T4921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 201.363285][ T4921] usb 3-1: USB disconnect, device number 52 [ 201.370013][ T4921] usblp0: removed [ 201.428169][ T36] audit: type=1400 audit(202.404:937): avc: denied { mount } for pid=8661 comm="syz.3.2817" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.664837][ T4921] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 201.814833][ T4921] usb 3-1: Using ep0 maxpacket: 32 [ 201.821191][ T4921] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 201.829674][ T4921] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 201.838615][ T4921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 201.847594][ T4921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.857283][ T4921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.866978][ T4921] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.880563][ T4921] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.889904][ T4921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.898436][ T4921] usb 3-1: config 0 descriptor?? [ 202.109771][ T4921] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 202.394259][ T8694] /dev/rnullb0: Can't open blockdev [ 202.699875][ T8711] incfs_lookup_dentry err:-13 [ 202.704591][ T8711] incfs: Can't find or create .index dir in ./file0 [ 202.711322][ T8711] incfs: mount failed -13 [ 202.808425][ T4910] usb 3-1: USB disconnect, device number 53 [ 202.816016][ T4910] usblp0: removed [ 202.833385][ T8715] 9pnet_fd: Insufficient options for proto=fd [ 202.852291][ T36] audit: type=1400 audit(203.824:938): avc: denied { write } for pid=8716 comm="syz.2.2836" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.958797][ T8727] overlayfs: failed to clone upperpath [ 203.264877][ T4910] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 203.319443][ T8737] rust_binder: Write failure EFAULT in pid:200 [ 203.364944][ T8739] /dev/rnullb0: Can't open blockdev [ 203.424848][ T4910] usb 3-1: Using ep0 maxpacket: 16 [ 203.431805][ T4910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.441812][ T8743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.445451][ T4910] usb 3-1: config 157 has an invalid interface number: 116 but max is 0 [ 203.460297][ T4910] usb 3-1: config 157 has no interface number 0 [ 203.466944][ T4910] usb 3-1: config 157 interface 116 altsetting 241 endpoint 0xE has invalid maxpacket 510, setting to 64 [ 203.478211][ T4910] usb 3-1: config 157 interface 116 has no altsetting 0 [ 203.492372][ T4910] usb 3-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=9c.e8 [ 203.503192][ T4910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.511427][ T4910] usb 3-1: Product: syz [ 203.515657][ T4910] usb 3-1: Manufacturer: syz [ 203.520241][ T4910] usb 3-1: SerialNumber: syz [ 203.560069][ T8753] fuse: Bad value for 'user_id' [ 203.564091][ T8755] overlayfs: failed to clone upperpath [ 203.565005][ T8753] fuse: Bad value for 'user_id' [ 203.599278][ T8761] IPv6: A: Disabled Multicast RS [ 203.605761][ T8761] overlayfs: failed to resolve './file0': -2 [ 203.724860][ T4922] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 203.732429][ T4910] zaurus 3-1:157.116: skipping garbage [ 203.740429][ T4910] usb 3-1: bad CDC descriptors [ 203.754656][ T4910] usb 3-1: USB disconnect, device number 54 [ 203.894830][ T4922] usb 2-1: Using ep0 maxpacket: 32 [ 203.900352][ T4922] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 203.909547][ T4922] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 203.917258][ T4922] usb 2-1: can't read configurations, error -61 [ 203.987230][ T8812] overlayfs: missing 'lowerdir' [ 203.992894][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 204.045355][ T4922] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 204.049047][ T8818] bridge0: port 3(veth0_to_bridge) entered blocking state [ 204.060496][ T8818] bridge0: port 3(veth0_to_bridge) entered disabled state [ 204.067897][ T8818] veth0_to_bridge: entered allmulticast mode [ 204.074414][ T8818] veth0_to_bridge: entered promiscuous mode [ 204.080499][ T8818] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.092833][ T8818] bridge0: port 3(veth0_to_bridge) entered blocking state [ 204.099977][ T8818] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 204.166683][ T8831] overlayfs: failed to clone lowerpath [ 204.186313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.194856][ T4922] usb 2-1: Using ep0 maxpacket: 32 [ 204.198627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.203968][ T4922] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 204.215656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.224630][ T4922] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.235783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.244006][ T4922] usb 2-1: can't read configurations, error -61 [ 204.255305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.261959][ T4922] usb usb2-port1: attempt power cycle [ 204.273449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.290785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.302818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.314916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.326943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.373981][ T8846] rust_binder: Write failure EFAULT in pid:1463 [ 204.614908][ T4922] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 204.645217][ T4922] usb 2-1: Using ep0 maxpacket: 32 [ 204.650959][ T4922] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 204.660870][ T4922] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.674226][ T4922] usb 2-1: can't read configurations, error -61 [ 204.814872][ T4922] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 204.835214][ T4922] usb 2-1: Using ep0 maxpacket: 32 [ 204.842986][ T4922] usb 2-1: too many configurations: 114, using maximum allowed: 8 [ 204.854178][ T4922] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 204.862127][ T4922] usb 2-1: can't read configurations, error -61 [ 204.868778][ T4922] usb usb2-port1: unable to enumerate USB device [ 205.975720][ T8909] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 206.214839][ T4919] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 206.364847][ T4919] usb 3-1: Using ep0 maxpacket: 16 [ 206.372357][ T4919] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 206.382131][ T4919] usb 3-1: config 0 has no interface number 0 [ 206.390789][ T4919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 206.400897][ T4919] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 206.411174][ T4919] usb 3-1: config 0 interface 41 has no altsetting 0 [ 206.421961][ T4919] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 206.431429][ T4919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.441398][ T4919] usb 3-1: Product: syz [ 206.445808][ T4919] usb 3-1: Manufacturer: syz [ 206.450491][ T4919] usb 3-1: SerialNumber: syz [ 206.458652][ T4919] usb 3-1: config 0 descriptor?? [ 206.465340][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.472654][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.567842][ T8928] rust_binder: Write failure EFAULT in pid:214 [ 206.596041][ T8931] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.612613][ T8931] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.683813][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.703837][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.977516][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2922'. [ 206.996188][ T8952] erspan0: default FDB implementation only supports local addresses [ 207.126072][ T4919] Error reading MAC address [ 207.131448][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.141359][ T8907] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.372868][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 208.396759][ T45] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 209.194818][ C0] net_ratelimit: 141675 callbacks suppressed [ 209.194840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.194882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 209.200887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.212906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 209.224913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.236771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 209.248731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.260679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 209.272626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.284587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 209.326429][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.825948][ T4919] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 4e:6b:6e:be:8c:ac [ 209.845748][ T45] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 210.056202][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.096849][ T4919] usb 3-1: USB disconnect, device number 55 [ 210.103201][ T4919] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 210.126400][ T45] usb 2-1: config 0 descriptor?? [ 210.266954][ T8982] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.927851][ T45] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 211.807310][ T8982] tipc: Can't bind to reserved service type 0 [ 212.358345][ T8991] rust_binder: Write failure EINVAL in pid:1477 [ 214.204841][ C0] net_ratelimit: 136963 callbacks suppressed [ 214.204863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.204957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 214.210932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.222878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.234799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.246810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 214.258592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.270627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.282577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.294491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 214.363250][ T8992] rust_binder: Write failure EINVAL in pid:1477 [ 217.501970][ T8991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.108052][ C0] sched: DL replenish lagged too much [ 219.214860][ C0] net_ratelimit: 145858 callbacks suppressed [ 219.214883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.214928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.220945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.233002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 219.244792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.256820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.269053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.280961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 219.292740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.304809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.224833][ C0] net_ratelimit: 144496 callbacks suppressed [ 224.224856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.225603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 224.234864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.242976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.254851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.266913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 224.278782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.290662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.302564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.314606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 229.234824][ C0] net_ratelimit: 147484 callbacks suppressed [ 229.234846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.234881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 229.240903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.253038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.264935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.276915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 229.288726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.300620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.312521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.324576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 234.244808][ C1] net_ratelimit: 146235 callbacks suppressed [ 234.244831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.244866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.250949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 234.262787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.274830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.286785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.298667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 234.310468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.322460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.334384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.254819][ C0] net_ratelimit: 133363 callbacks suppressed [ 239.254840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.254884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.260938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.272897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 239.284658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.296698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.308744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.320665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 239.332438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.344455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.264844][ C0] net_ratelimit: 141840 callbacks suppressed [ 244.264865][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.264874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 244.264998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.270917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.283042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 244.295009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.306858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.318694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.330778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 244.342838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.274816][ C0] net_ratelimit: 140104 callbacks suppressed [ 249.274837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.274868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.280910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.292851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 249.304698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.316723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.328629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.340584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 249.352376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.364280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.960724][ T9018] rust_binder: Write failure EINVAL in pid:1489 [ 254.284829][ C0] net_ratelimit: 136392 callbacks suppressed [ 254.284851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.284960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 254.291160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.297212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.309026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.321084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 254.332961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.344926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.356722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.368767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 259.294858][ C1] net_ratelimit: 141373 callbacks suppressed [ 259.294882][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.294904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.301020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 259.312834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.324870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.336846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.348760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 259.360530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.372535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.384455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.304827][ C0] net_ratelimit: 138080 callbacks suppressed [ 264.304849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.304903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.310892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.323414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 264.335239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.347151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.359324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.371354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 264.383133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.395163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.314850][ C0] net_ratelimit: 140303 callbacks suppressed [ 269.314871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.314938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.320940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.332925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 269.344705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.356775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.368691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.380673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 269.392460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.404550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.321843][ T110] udevd[110]: worker [6949] /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.41/net/eth1 is taking a long time [ 272.395547][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.402614][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.425056][ T9014] bridge_slave_0: entered allmulticast mode [ 272.448143][ T9014] bridge_slave_0: entered promiscuous mode [ 272.726226][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.733283][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.796541][ T9014] bridge_slave_1: entered allmulticast mode [ 272.826684][ T9014] bridge_slave_1: entered promiscuous mode [ 273.047698][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.065102][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.072219][ T9016] bridge_slave_0: entered allmulticast mode [ 273.136142][ T9016] bridge_slave_0: entered promiscuous mode [ 273.656937][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.664004][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.684904][ T9016] bridge_slave_1: entered allmulticast mode [ 273.715246][ T9016] bridge_slave_1: entered promiscuous mode [ 273.788331][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.807383][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.814774][ T9015] bridge_slave_0: entered allmulticast mode [ 273.866325][ T9015] bridge_slave_0: entered promiscuous mode [ 273.948377][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.965789][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.972893][ T9015] bridge_slave_1: entered allmulticast mode [ 274.000677][ T9015] bridge_slave_1: entered promiscuous mode [ 274.324820][ C0] net_ratelimit: 142275 callbacks suppressed [ 274.324841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.324909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.330936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.342929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 274.354721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.366762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.378658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.390719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 274.402509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.414532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.334838][ C0] net_ratelimit: 139358 callbacks suppressed [ 279.334860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.334888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 279.340913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.352964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.364897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.376941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 279.388610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.400578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 279.412556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.424481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.344856][ C0] net_ratelimit: 135190 callbacks suppressed [ 284.344878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.344893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 284.350915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.362985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.374911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.386971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 284.398651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.410598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 284.422541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.434566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.354836][ C1] net_ratelimit: 140197 callbacks suppressed [ 289.354858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 289.354896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.360948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 289.373080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.385137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.397535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.409575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.421329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.433400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 289.445159][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.364826][ C0] net_ratelimit: 137527 callbacks suppressed [ 294.364846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.364880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 294.370908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.382957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.394856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.407019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.418838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.430771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 294.442509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.454481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 299.374883][ C1] net_ratelimit: 143109 callbacks suppressed [ 299.374904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.374928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.381082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.392862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.404846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 299.416646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.428510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 299.440465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.452474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.464372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.384834][ C1] net_ratelimit: 136304 callbacks suppressed [ 304.384854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 304.384867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.384920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.391041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.402990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.415096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.426887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.438777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 304.450599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.462478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 309.394842][ C0] net_ratelimit: 146900 callbacks suppressed [ 309.394868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.394868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.395043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.400939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.412920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 309.424711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.436600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 309.448526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.460555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.472472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.404835][ C0] net_ratelimit: 151082 callbacks suppressed [ 314.404856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.404906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 314.410916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.422802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 314.435070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.447081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.458958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.471082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.482859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.494921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 319.414827][ C0] net_ratelimit: 147337 callbacks suppressed [ 319.414849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.414925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.420902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.432888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 319.444724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.456829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 319.468783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.480809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.492691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.504822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.424841][ C0] net_ratelimit: 143332 callbacks suppressed [ 324.424862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.425024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.430908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.442996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 324.454901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.466792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 324.478759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.490765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.502639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.514796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.434831][ C1] net_ratelimit: 145594 callbacks suppressed [ 329.434852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 329.434881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.440967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.452962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.464948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.476664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.488690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 329.500495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.512341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 329.524320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.444854][ C0] net_ratelimit: 138486 callbacks suppressed [ 334.444876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.444910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.450950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.462900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 334.474721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.486668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 334.498617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.510620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.522545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.534536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.947380][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.954459][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.985456][ T9038] bridge_slave_0: entered allmulticast mode [ 338.008555][ T9038] bridge_slave_0: entered promiscuous mode [ 338.316144][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.323206][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.539121][ T9038] bridge_slave_1: entered allmulticast mode [ 338.575850][ T9038] bridge_slave_1: entered promiscuous mode [ 339.454834][ C1] net_ratelimit: 133624 callbacks suppressed [ 339.454854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.454864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.454964][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.460982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 339.472859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.484710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 339.496667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.508679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.520591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.532910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.464810][ C1] net_ratelimit: 141937 callbacks suppressed [ 344.464832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 344.464838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.464879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.470889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 344.482904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.504966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.506744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.518857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.530541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.542627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 349.474830][ C1] net_ratelimit: 140843 callbacks suppressed [ 349.474851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.474868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.481026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.492828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.504752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 349.516557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.528529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 349.540477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.552534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.564942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.907005][ T37] INFO: task kworker/1:6:4919 blocked for more than 122 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.914772][ T37] Not tainted syzkaller #0 [ 351.054171][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.106701][ T36] audit: type=1400 audit(351.974:939): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2950]" dev="pipefs" ino=2950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 351.169046][ T37] task:kworker/1:6 state:D stack:0 pid:4919 tgid:4919 ppid:2 flags:0x00004000 [ 351.179280][ T37] Workqueue: usb_hub_wq hub_event [ 351.184348][ T37] Call Trace: [ 351.187666][ T37] [ 351.190613][ T37] __schedule+0x1322/0x1df0 [ 351.195151][ T37] ? __sched_text_start+0x10/0x10 [ 351.200186][ T37] ? __kasan_check_write+0x18/0x20 [ 351.205337][ T37] ? kthread_data+0x54/0xc0 [ 351.209852][ T37] ? wq_worker_sleeping+0x69/0x260 [ 351.214987][ T37] ? trace_contention_begin+0xc0/0xc0 [ 351.220375][ T37] schedule+0xc6/0x240 [ 351.224468][ T37] schedule_preempt_disabled+0x14/0x30 [ 351.229955][ T37] __mutex_lock+0x81e/0x1b50 [ 351.234567][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 351.239539][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 351.246321][ T37] ? __kasan_check_write+0x18/0x20 [ 351.251473][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 351.256962][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 351.262862][ T37] ? stack_depot_save_flags+0x38/0x800 [ 351.268350][ T37] ? ref_tracker_free+0x4d7/0x7d0 [ 351.273392][ T37] ? unregister_netdevice_many_notify+0x1869/0x1bd0 [ 351.280000][ T37] ? unregister_netdev+0x151/0x1c0 [ 351.285128][ T37] ? usbnet_disconnect+0xd5/0x390 [ 351.290163][ T37] ? usb_unbind_interface+0x2a7/0xa30 [ 351.295560][ T37] ? device_release_driver+0x1d/0x30 [ 351.300859][ T37] ? bus_remove_device+0x359/0x380 [ 351.305986][ T37] ? device_del+0x562/0xce0 [ 351.310492][ T37] ? usb_disable_device+0x3af/0x770 [ 351.315716][ T37] ? usb_disconnect+0x322/0x8f0 [ 351.320580][ T37] ? hub_event+0x1adb/0x4270 [ 351.325214][ T37] __mutex_lock_slowpath+0xe/0x20 [ 351.330251][ T37] mutex_lock+0x102/0x1c0 [ 351.334583][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 351.339453][ T37] ? __kasan_check_write+0x18/0x20 [ 351.344574][ T37] rcu_barrier+0x4d/0x530 [ 351.348925][ T37] netdev_run_todo+0x10e/0xcb0 [ 351.353693][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 351.359003][ T37] ? mutex_lock+0x92/0x1c0 [ 351.363516][ T37] rtnl_unlock+0x12/0x20 [ 351.367786][ T37] unregister_netdev+0x156/0x1c0 [ 351.372737][ T37] ? __cfi_unregister_netdev+0x10/0x10 [ 351.378253][ T37] usbnet_disconnect+0xd5/0x390 [ 351.383116][ T37] usb_unbind_interface+0x2a7/0xa30 [ 351.388351][ T37] ? kernfs_remove_by_name_ns+0x124/0x160 [ 351.394085][ T37] ? __cfi_usb_unbind_interface+0x10/0x10 [ 351.399831][ T37] device_release_driver_internal+0x4c5/0x790 [ 351.405935][ T37] device_release_driver+0x1d/0x30 [ 351.411075][ T37] bus_remove_device+0x359/0x380 [ 351.416312][ T37] device_del+0x562/0xce0 [ 351.420652][ T37] ? kfree_const+0x3d/0x50 [ 351.425098][ T37] ? __cfi_device_del+0x10/0x10 [ 351.429954][ T37] ? kobject_put+0x238/0x2a0 [ 351.434555][ T37] ? device_unregister+0x2b/0x40 [ 351.439524][ T37] usb_disable_device+0x3af/0x770 [ 351.444561][ T37] usb_disconnect+0x322/0x8f0 [ 351.449279][ T37] hub_event+0x1adb/0x4270 [ 351.453721][ T37] ? __cfi_hub_event+0x10/0x10 [ 351.458513][ T37] ? __kasan_check_write+0x18/0x20 [ 351.463637][ T37] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 351.469057][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.474616][ T37] ? kick_pool+0xb9/0x550 [ 351.478967][ T37] process_scheduled_works+0x7d2/0x1020 [ 351.484529][ T37] worker_thread+0xc58/0x1250 [ 351.489231][ T37] kthread+0x2ca/0x370 [ 351.493309][ T37] ? __cfi_worker_thread+0x10/0x10 [ 351.498443][ T37] ? __cfi_kthread+0x10/0x10 [ 351.503040][ T37] ret_from_fork+0x67/0xa0 [ 351.507501][ T37] ? __cfi_kthread+0x10/0x10 [ 351.512094][ T37] ret_from_fork_asm+0x1a/0x30 [ 351.516891][ T37] [ 351.556791][ T37] INFO: task syz.1.2931:8993 blocked for more than 123 seconds. [ 351.564517][ T37] Not tainted syzkaller #0 [ 351.597995][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.606747][ T37] task:syz.1.2931 state:D stack:0 pid:8993 tgid:8993 ppid:7310 flags:0x00004006 [ 351.616962][ T37] Call Trace: [ 351.620246][ T37] [ 351.623178][ T37] __schedule+0x1322/0x1df0 [ 351.627720][ T37] ? __sched_text_start+0x10/0x10 [ 351.632769][ T37] ? __sched_text_start+0x10/0x10 [ 351.637836][ T37] ? llist_add_batch+0x109/0x1e0 [ 351.642787][ T37] schedule+0xc6/0x240 [ 351.646921][ T37] schedule_timeout+0xb2/0x3a0 [ 351.651698][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 351.657100][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.662666][ T37] ? preempt_schedule+0xb0/0xd0 [ 351.667562][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 351.672943][ T37] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 351.679135][ T37] wait_for_common+0x359/0x630 [ 351.683912][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 351.689313][ T37] ? __cfi_native_send_call_func_single_ipi+0x10/0x10 [ 351.696113][ T37] ? wait_for_completion+0x40/0x40 [ 351.701237][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 351.707768][ T37] ? xa_find+0x145/0x170 [ 351.712009][ T37] wait_for_completion+0x1c/0x40 [ 351.716983][ T37] rcu_barrier+0x415/0x530 [ 351.721402][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 351.726802][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 351.731582][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 351.736734][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 351.742386][ T37] ? __kasan_check_write+0x18/0x20 [ 351.747531][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 351.753171][ T37] ? free_pages+0x86/0x90 [ 351.757713][ T37] kvm_put_kvm+0xb04/0x12c0 [ 351.762224][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 351.767360][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 351.772993][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 351.778225][ T37] kvm_vm_release+0x47/0x70 [ 351.782736][ T37] __fput+0x1fb/0xa00 [ 351.786768][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.792327][ T37] ____fput+0x20/0x30 [ 351.796356][ T37] task_work_run+0x1e0/0x250 [ 351.800953][ T37] ? __cfi_task_work_run+0x10/0x10 [ 351.806099][ T37] ? __kasan_check_write+0x18/0x20 [ 351.811218][ T37] do_exit+0x9bc/0x2630 [ 351.815406][ T37] ? __cfi_do_exit+0x10/0x10 [ 351.819999][ T37] ? do_nanosleep+0x445/0x590 [ 351.824680][ T37] ? pte_offset_map_rw_nolock+0xba/0x110 [ 351.830355][ T37] ? __kasan_check_write+0x18/0x20 [ 351.835496][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 351.840612][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 351.846189][ T37] do_group_exit+0x22a/0x300 [ 351.850781][ T37] ? __kasan_check_write+0x18/0x20 [ 351.855938][ T37] get_signal+0x139d/0x14f0 [ 351.860448][ T37] arch_do_signal_or_restart+0x96/0x720 [ 351.866025][ T37] ? common_nsleep+0x93/0xb0 [ 351.870613][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 351.876795][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 351.882552][ T37] ? __kasan_check_read+0x15/0x20 [ 351.887603][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 351.893676][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 351.899159][ T37] do_syscall_64+0x64/0xf0 [ 351.903584][ T37] ? clear_bhb_loop+0x50/0xa0 [ 351.908285][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 351.914532][ T37] RIP: 0033:0x7f27a4bc1885 [ 351.918988][ T37] RSP: 002b:00007f27a5ae3f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 351.927427][ T37] RAX: 0000000000000000 RBX: 00007f27a4de5fa0 RCX: 00007f27a4bc1885 [ 351.935418][ T37] RDX: 00007f27a5ae3fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.943392][ T37] RBP: 00007f27a4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.951391][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.959388][ T37] R13: 00007f27a4de6038 R14: 00007f27a4de5fa0 R15: 00007ffee5d653a8 [ 351.967389][ T37] [ 352.257236][ T37] NMI backtrace for cpu 0 [ 352.257263][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 352.257289][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.257301][ T37] Call Trace: [ 352.257308][ T37] [ 352.257316][ T37] __dump_stack+0x21/0x30 [ 352.257346][ T37] dump_stack_lvl+0x10c/0x190 [ 352.257370][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 352.257395][ T37] dump_stack+0x19/0x20 [ 352.257417][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 352.257441][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 352.257464][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 352.257487][ T37] ? sched_show_task+0x379/0x560 [ 352.257510][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 352.257538][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.257562][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.257586][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 352.257610][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 352.257633][ T37] watchdog+0xd8f/0xed0 [ 352.257659][ T37] ? __cfi_watchdog+0x10/0x10 [ 352.257681][ T37] ? __kasan_check_read+0x15/0x20 [ 352.257708][ T37] ? __kthread_parkme+0x138/0x180 [ 352.257725][ T37] ? schedule+0xc6/0x240 [ 352.257751][ T37] kthread+0x2ca/0x370 [ 352.257769][ T37] ? __cfi_watchdog+0x10/0x10 [ 352.257793][ T37] ? __cfi_kthread+0x10/0x10 [ 352.257812][ T37] ret_from_fork+0x67/0xa0 [ 352.257835][ T37] ? __cfi_kthread+0x10/0x10 [ 352.257854][ T37] ret_from_fork_asm+0x1a/0x30 [ 352.257881][ T37] [ 352.257889][ T37] Sending NMI from CPU 0 to CPUs 1: [ 352.446654][ C1] NMI backtrace for cpu 1 [ 352.446667][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 352.446687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.446697][ C1] RIP: 0010:netif_skb_features+0x457/0x14f0 [ 352.446721][ C1] Code: 18 0f 85 2c 03 00 00 e8 37 98 16 fd 4c 8b 6c 24 10 4d 8d b5 81 00 00 00 4d 8d bd 84 00 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 0f 0c 00 00 4c 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 0f [ 352.446734][ C1] RSP: 0018:ffffc90000230060 EFLAGS: 00000a02 [ 352.446747][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888103664c00 [ 352.446759][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.446769][ C1] RBP: ffffc90000230170 R08: ffff8881612d4c23 R09: 1ffff1102c25a984 [ 352.446780][ C1] R10: dffffc0000000000 R11: ffffed102c25a985 R12: ffff88815fea5500 [ 352.446792][ C1] R13: ffff88815fea5500 R14: ffff88815fea5581 R15: ffff88815fea5584 [ 352.446803][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 352.446816][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.446827][ C1] CR2: 00007fe2f0b15000 CR3: 000000010a652000 CR4: 00000000003526b0 [ 352.446840][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 352.446851][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 352.446862][ C1] Call Trace: [ 352.446867][ C1] [ 352.446874][ C1] ? update_stack_state+0x16b/0x4b0 [ 352.446892][ C1] ? __cfi_netif_skb_features+0x10/0x10 [ 352.446909][ C1] validate_xmit_skb+0xe2/0xdb0 [ 352.446925][ C1] ? unwind_next_frame+0x3c2/0x750 [ 352.446940][ C1] ? __kernel_text_address+0x11/0x40 [ 352.446958][ C1] ? validate_xmit_skb_list+0x130/0x130 [ 352.446974][ C1] ? arch_stack_walk+0x139/0x170 [ 352.446987][ C1] ? netdev_core_pick_tx+0x1f0/0x380 [ 352.447004][ C1] __dev_queue_xmit+0x1512/0x3790 [ 352.447020][ C1] ? __dev_queue_xmit+0x24c/0x3790 [ 352.447038][ C1] ? kasan_save_track+0x3e/0x80 [ 352.447053][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 352.447071][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 352.447085][ C1] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 352.447099][ C1] ? skb_clone+0x229/0x460 [ 352.447117][ C1] ? br_flood+0x4ed/0x730 [ 352.447134][ C1] ? br_handle_frame_finish+0x12bb/0x1720 [ 352.447153][ C1] ? br_handle_frame+0x5a6/0xba0 [ 352.447170][ C1] ? __netif_receive_skb_core+0xf4b/0x3940 [ 352.447189][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 352.447204][ C1] ? __do_softirq+0xf/0x16 [ 352.447223][ C1] ? do_softirq+0xa6/0x100 [ 352.447242][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 352.447267][ C1] ? rcu_do_batch+0x5c6/0xd20 [ 352.447284][ C1] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 352.447302][ C1] ? kthread+0x2ca/0x370 [ 352.447316][ C1] ? ret_from_fork+0x67/0xa0 [ 352.447334][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 352.447356][ C1] ? __copy_skb_header+0x453/0x5e0 [ 352.447375][ C1] br_dev_queue_push_xmit+0x553/0x6d0 [ 352.447392][ C1] ? __copy_skb_header+0x453/0x5e0 [ 352.447410][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 352.447427][ C1] ? __skb_clone+0x47a/0x7a0 [ 352.447445][ C1] __br_forward+0x25c/0x390 [ 352.447462][ C1] br_flood+0x50e/0x730 [ 352.447480][ C1] br_handle_frame_finish+0x12bb/0x1720 [ 352.447500][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 352.447521][ C1] br_handle_frame+0x5a6/0xba0 [ 352.447540][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 352.447558][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 352.447575][ C1] ? ip6_mc_input+0x4f3/0x670 [ 352.447591][ C1] ? ip6_mc_input+0x4f3/0x670 [ 352.447607][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 352.447622][ C1] ? qdisc_run_end+0x120/0x120 [ 352.447638][ C1] ? ip6_rcv_finish+0x360/0x3e0 [ 352.447653][ C1] ? ipv6_rcv+0xed/0x220 [ 352.447667][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 352.447682][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 352.447696][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 352.447714][ C1] process_backlog+0x3e5/0xae0 [ 352.447733][ C1] __napi_poll+0xd3/0x610 [ 352.447749][ C1] net_rx_action+0x584/0xce0 [ 352.447768][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 352.447784][ C1] ? sched_clock+0x44/0x60 [ 352.447801][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 352.447818][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 352.447834][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 352.447852][ C1] handle_softirqs+0x1ab/0x630 [ 352.447865][ C1] __do_softirq+0xf/0x16 [ 352.447882][ C1] do_softirq+0xa6/0x100 [ 352.447900][ C1] [ 352.447905][ C1] [ 352.447911][ C1] ? __cfi_do_softirq+0x10/0x10 [ 352.447929][ C1] ? dst_destroy+0x37d/0x460 [ 352.447942][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 352.447955][ C1] __local_bh_enable_ip+0x74/0x80 [ 352.447973][ C1] rcu_do_batch+0x5c6/0xd20 [ 352.447992][ C1] ? rcu_core+0xd20/0xd20 [ 352.448009][ C1] ? __kasan_check_write+0x18/0x20 [ 352.448028][ C1] ? _raw_spin_lock+0x8c/0x120 [ 352.448045][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 352.448062][ C1] ? __kasan_check_read+0x15/0x20 [ 352.448081][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 352.448099][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 352.448119][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 352.448137][ C1] ? __kasan_check_write+0x18/0x20 [ 352.448156][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 352.448173][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 352.448190][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 352.448207][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 352.448221][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 352.448235][ C1] ? __kasan_check_read+0x15/0x20 [ 352.448254][ C1] ? __kthread_parkme+0x138/0x180 [ 352.448271][ C1] ? schedule+0xc6/0x240 [ 352.448289][ C1] kthread+0x2ca/0x370 [ 352.448302][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 352.448321][ C1] ? __cfi_kthread+0x10/0x10 [ 352.448334][ C1] ret_from_fork+0x67/0xa0 [ 352.448352][ C1] ? __cfi_kthread+0x10/0x10 [ 352.448366][ C1] ret_from_fork_asm+0x1a/0x30 [ 352.448386][ C1] [ 354.484825][ C0] net_ratelimit: 117563 callbacks suppressed [ 354.484848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.484909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.490903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.503034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.514799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.526886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 354.538709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.550546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 354.562486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.574529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.494832][ C0] net_ratelimit: 147501 callbacks suppressed [ 359.494853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.494896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 359.500924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.512791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0) [ 359.524767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.536783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.548667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.560759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.574820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.584488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:b5:aa:ec:39:60, vlan:0)