last executing test programs: 1m0.090680024s ago: executing program 0 (id=2022): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) fadvise64(r1, 0xc, 0x8000, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xa, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 59.853389047s ago: executing program 0 (id=2023): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xb9b5, 0x0, 0x1, {0x22, 0x3a4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x84, 0x6, 0x16}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x250, 0x6, 0x47, 0xf, 0x40, 0x5}, 0x4b, &(0x7f0000000740)={0x5, 0xf, 0x4b, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x100, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "eaf0a7ee22e523466c3418639f276f8e"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xe}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x6, 0xf, 0x87, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6c3c3503f9307c90d3438ab99753331e"}]}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0xf, 0x79, {0x79, 0x0, "bdbc6d2b5e73229746d5530beb124eea70375f2cbd9abc0bbfeccfb1ed69bf9a23fd8ab61a649eb9db6957422abc3f8a70e84dda7cd34433ec1d38476436864bb9bde7e59cb5ca171eb121cdac659ea5469299842452b120aa1db2a57e9ffa1bbba1e2e4c16e7d1d22c02a0bace7326293443fd0bfd04f"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "733bcfd2f81f0fe7f32f8b64da2f8354a65ba5fb13798cb27a5d39786a9669c1338e8a94f425e2c848233b2d87b007d6ca43182ed0b4bcf04181985ccb03d1d5ae9149b0e9ca560e2d4b8e7c0fd31dc69c17e2eb72d964558946304f2559048634d19c6904a574ac2613f6c365f754015b490ab8406b8a7d934e9a79003f8e21d32bb0d792caa7445e79826117816db80c9b619b157e709b89373bcf36658eaa25b6728112c7e82a8ac8338217e2bf0891719e1fad5f3841ffff23856c178aaad3599bcb2212096f6bfd6b3b680fa13f65d4f0ee3a7e71308ca4331fc69d7905b24c922e65"}}, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, "8dedd423"}, @local=@item_4={0x3, 0x2, 0x9, "b903d9c6"}, @main=@item_4={0x3, 0x0, 0x9, "f6e7a6b7"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xea0, 0x52, 0x1, {0x22, 0xf27}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x0, 0xf, 0x78, "1872a533b6376bea2b9fe28043b3fbe4c2208de6c8e111cc14f8e256eb7952ab14ac7da85e769248ea53f17cfea60a79de66e8ee04836433ff98d16fadcf8671d92dfa7c2bf03197bae10ba553777bdaa8641f2e03ed46f44b7b863e0b6422c0261e1c64c8f35da6bbe570aa09d1020d5120df5143de09b0"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000640)={0x20, 0x1, 0x13, "fdb6cba1767334439a87ee92f397497ddbd458"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0xa}}) unlink(&(0x7f0000000080)='./file0\x00') read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect$cdc_ncm(0x4, 0xa5, &(0x7f0000000840)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x9, 0xb0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, 'f\t&7\t'}, {0x5, 0x24, 0x0, 0x2bb}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x8001, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x5, 0x1, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xa0, 0x6, 0x2, 0x8, 0x2, 0x3}, @country_functional={0xc, 0x24, 0x7, 0x42, 0x6, [0x400, 0x5, 0x7]}, @obex={0x5, 0x24, 0x15, 0xb955}, @country_functional={0xe, 0x24, 0x7, 0x7, 0xfff7, [0x9, 0xa, 0x2, 0x401]}]}, {{0x9, 0x5, 0x81, 0x3, 0x428, 0x6, 0x3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x8, 0x1}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x250, 0x9, 0x9, 0x3, 0x20, 0x7}, 0x100, &(0x7f0000000a00)={0x5, 0xf, 0x100, 0x6, [@ptm_cap={0x3}, @generic={0xaa, 0x10, 0x1, "8b2612b8a9a86b355659d8e8256d5516ff7e7acf8630d0de29dd4e4ae32f97a0f1a61d64fd7710670ea167d5504b14506c846fe542e59bf348d88890f3f355d23b8a416194ae5d3f5f51fccbe8e7f2c17ba68415908803b5b83b17b0a5d803d667f52dc1cf64ee3608ac196fdd722d989369ec20358502112d1232e076de9067319114ae1a87a1a2d856cade65f4b568ac6ea80d04df80befcb5fcc043c16eff3203638c276087"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b3f3ead2494c7fd82a973d1bcc66e7b2"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "bc384fd8e5f2b8345ae6440f4748b1d5"}, @generic={0x23, 0x10, 0xb, "3aaebf9be5daf74984e536cdc3ca168350915dd52da62b167b0a25f4de2d5170"}]}, 0x1, [{0x3c, &(0x7f0000000940)=@string={0x3c, 0x3, "2b2bdfcf4ca6648afa0a76cfc199a73b9c037ed335ac40547863d0e90fa5dcb05802c1d34a70c2126d85afc090088d1f24bb10b8710b858bc509"}}]}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, r3, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x29, 0xfffffffc, 0x20100001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x10000, 0x4) r6 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r6, 0x54a6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB="000400", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x0000000000000008,max_read=0x0000000000000009,blksize=0x0000000000000600,blksize=0x0000000000001200,max_read=0x0000000000000dbf,blksize=0x0000000000000000,allow_other,max_read=0x0000000000000e89,\x00']) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x4044001) 59.470885343s ago: executing program 2 (id=2026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xb8, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @clear_death={0x400c630f, 0x3}, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/104, 0x68, 0x2, 0x7}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}, @enter_looper, @register_looper], 0x0, 0x0, 0x0}) 59.398480014s ago: executing program 2 (id=2027): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) write$P9_RLERROR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="13"], 0x13) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100007340e120050bdaed4605010203010902240001000010000904f40002ff47d000090502020002020000090506020006000000b7e5098680422b908147b9b42ead3f89af7ad8"], 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async, rerun: 32) setuid(0xee01) (async, rerun: 32) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x80) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x86) (async) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x8, 0x7, 0xe44, 0x9f1, 0x17, "de98cd550c0f9c4a"}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c00)={0x2c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000f050000005000050000"], 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000ac14141700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba00140073686131"], 0x1f4}}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x9a, 0xc5, "c255c5198a9bb87ca630403aed7d869ff53ad7cb48f7f375ed9d35e4df86008005b0c29b2a8877908e869fda3650193164261dcdb23e1f8dc961081228556f334a35d096080bd6f7dc414a0a011467206f20a3b8d7c53451cf23740020c44ac11991ec3a66368c0d5ce90a14fbeff86ca8af6e8139e2f9a77dbbd6a93dbae7dd76382cb0bde81cfb9b01648fff6fa91c90af086f389b"}, @NL80211_ATTR_VENDOR_DATA={0x18, 0xc5, "e4ed6d7f31db813075786aacad5b8656c796d794"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x38c) (async, rerun: 64) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (rerun: 64) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000000c0), 0x3f, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 59.229453236s ago: executing program 2 (id=2028): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d02faffffff75fdda624457697e22bd14"}}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000180)=0x5, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) syz_usb_connect(0x0, 0xb96, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x8d, 0x3c, 0xd0, 0x10, 0x1bbb, 0x203, 0x1c0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb84, 0x4, 0xf, 0x8, 0x90, 0xf, [{{0x9, 0x4, 0x2, 0x3b, 0x2, 0xf7, 0xdf, 0x1e, 0x6, [@generic={0x22, 0x1, "61851547298dde6c5b8f534ca6d6ad1602d12db5fad99ccb6d32df2dc7145912"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "3cd0829ce8"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x79, 0x5, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x97}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x1, [0xfffa, 0x7, 0x0, 0x7, 0x5, 0xb6]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf3}, @mdlm={0x15, 0x24, 0x12, 0x523}, @dmm={0x7, 0x24, 0x14, 0x7, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0x3, 0x1}]}], [{{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x5e, 0x2, 0x72}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x8, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0xe7, 0x3, 0xa, 0x9d, 0xe5, 0xab, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "123b3804ad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0xa}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0xda, 0xb8, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x3, '1', "a6"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x40, 0x1, 0x7f, 0x1, "de8c1458ec24466493"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0xc, "5ee9"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x4, 0x4, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xa}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0xd3, 0x27, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}, @generic={0xd3, 0x2, "151735d849938cf3073166f8d895e686c2a29f36b219476c3bbcc50154485486eda553f48669f5da5df3b564b6f58978b2fe2dfba194a25b26567b2dbe8de5e1d68ead500843fd2377a8bf3651db4cc88a05f124fcef3bc7d796a1f466fa990304370423d91d26eb5388ed68c656d7fc36b363cb8e310fe674e70641537062c228a7df568c21100ef45f6fa6f5ae21214ed43e4026313836ef7869dfa84dd3f67d1e33102cf823278efe370c30d70801ad1768ebc134cbdcc38511a01aa30eb281ee36b75f5e6281a73c7c861c0abda7cd"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x2e, 0x6}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x6, 0x40, 0x4a}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xcd, 0x6, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x6}, @generic={0xc5, 0x4, "67294d2be07b256dff84adb3e3a629ddfb5b1a378c9a2f8d10da535588b1590f224bf04814a6332d3f6dd1c0db039501663bf8466980797acf47c54889d3501a7818b5bad9b89d23d2d9753eadc88b1831d7af27500646e5abbbd368dfa0f7e3a70ee1dcc4e6f2920b35119c41510f4bd463cbaa152066d2edda83c37a3c670ee4b239602b8d16c46125e326202098e0904a097afc0782947b4c1df679569304a223bb77506416690a8fbfab7f4a91eb217fd47e3dbc26c8cb5f428fccef3c816b4f0f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x87, 0x0, 0xd}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0xdd, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc3, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xcd, 0xe, 0xff}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xd8, 0xeb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x6, 0x6a, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xf9}]}}]}}, {{0x9, 0x4, 0x6d, 0x6, 0x10, 0x3c, 0xf8, 0xbd, 0x3, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0xb, 0xeb}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm_detail={0x82, 0x24, 0x13, 0x94, "18ad30c2d72526ab8d993da99ea0d0ea910d4cf28886faab88825071e359e43864ba0928a4853224a848f3c5bfc21499c55cbe6406937c6788df53ce762a7387700f3ac803091ab81a0ace3ae7b5b51568f0acb7c9c38dbc6c2562f5d1b6a63455704568a1d33dcfe24a405f60d0e2d2b7bfc5278eb07ed6c55f65ad3b8f"}]}, @generic={0x3d, 0x21, "2a254075fdb69ad875e48982a9f52a9768efea32572f0bd3328492a3fb8b2661fa01f288237c2967cbe1de626111899819f65ecdc14846cfff5e90"}], [{{0x9, 0x5, 0x80, 0x4, 0x40, 0x81, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0xf}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x6, 0x3, 0x0, [@generic={0x28, 0xb, "78bfd1dc3368217ec635ed6a6cf697e1b09957ba99e6989f557ea91f9ac6b7c45f83ac29798d"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0xfe, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x7, 0x9, 0x9, [@generic={0x1c, 0x30, "81231682765e8aa2a6a092e0e6d7c5205475d67233f14a54ecd7"}, @generic={0x12, 0x30, "f18de3ad7ad2322f0df520aef98ad3a9"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x80, 0x9, [@generic={0x16, 0x11, "694cfc6412ccbe79782f83f72161fe3e02567704"}, @generic={0xb7, 0xa, "1b1395b4d86b10a5370122d7e102bd5ef837e6229ca0d2afba4bf8cf20d666b87246730840e5202b8165e89d1b6d77aa9d076393c55f215f2737348f15d94cb373166581d050525e6ac7689fa64acb42789e76c8a49100c70e4085945329ca7a4e6536269e07058898c98c94a08af7de3a18e2608be2045fc9343cc2fb289a3e579546cd079e6a6b82eb64b634b3f6918580eea0cea2916f49c741d4e19f2edbe046031af7c7089564978d0b1a919add784670c12c"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x2, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xfd}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x3, 0x6, 0xb, [@generic={0x8b, 0x10, "52508168d240974c63e69e20a67ec45cae3ad095ecc4770f8bfbeda4f4a8d7c3f53254325ccf34f02b0583dab5c0419f002129824b9d8d8db5a0a1e12f7de6ff759f1e15220e650fdf8348f47cbc29922cb4d5bca15de038362fc09e17c6d765cb32ae1266bfe448a60f7a423c7b5c19621ad46150a7445ef25cfe9167221694fc790250b4546fe1a2"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0xf8, 0xf9, 0x5, [@generic={0x1a, 0x10, "cfc07ecf1f488ae5bd229bdd3d59ce7747b6097830ef24d9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x1, 0x5, [@generic={0xbe, 0x3, "1e782e334c27ccdc0de0f821faa753b09fee5dfa2382012d46bd1ce17d55c1aea80867ddc4174b55f4f047cb4b2b6c0fcabd200c643aa159bba4826faa84b554f095ee6907d952b919b11519c2b992d6b8a02269780cf2d5b5e7224d8020d381079cf50120e8c62c77758afcd4ac2259cf26ab3f70a5be42473c4d684e1b8a115decac39d5da649ca3944ef230adad041a5ac3732c4fe4c58cdefc9b1f4d1bf7cd0e576b3c7663b21f71a989dd851de5b3734c81fa8fd4961442cb53"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0xba, 0x4, 0xff}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x4, 0x7, 0x0, [@generic={0x84, 0xe, "02020e06fdde332c8157d37f00ae7569b14c5ddab3737ec0a92492f346d1aa1fa4a1f2f453060248b22dd34b8afa2cd20fb4a7e17341d4e9a50f3d4db67bfe80cf5932fe328057aa1ae7353c22c786164ad6a910e306d6f112044121e9c2232ba563e75adc713f9e96690738a3b652616acd6b839322c6678a8825af5b92c0709a69"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x2, 0x1c, 0x3}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x64, 0xa8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @generic={0x63, 0x24, "0655ea58f0683440d3ef6f2e1b8f5d6c693ad0452be31cddbcbd367e31be70eb5808f7ddc1507cd37e29d9e652422c2e02a1504f8ec032d8c61c2b96fa358c90b63711cfa5dbcce062a3407f7e94b13b321afc4e50bb19779cdaa95049db0ec87a"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0xfe, 0x2, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x40, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x3, 0x40}}]}}, {{0x9, 0x4, 0x8, 0xaf, 0x8, 0x39, 0x67, 0x3d, 0xb, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x4, 0x7, [@generic={0xbd, 0x4, "df549ce84948c495f0eb04c1a5402ac4bc8c0cc88fc61f1ddc1faab82fdd67202af16ffbda57dd839a288c7f42c3446d417470ee7d08065f0337f69f7b849cdf2425d575a3198f1287ab95d201ccebfea7cb4ca07b2f6e29988c0b900de5dfbd54987b5dabca56135054917fdaf5d0d258f6cdbf6b80c1679a4e9a179c99b2a2dee17de5b43f75dad7a38b566c91c3c75e4d22b824469d58ae699f929db850dbca7cd891e54334c6b1ba74bd8814e980a7259bb79f10e2e2cb87b5"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x6b, 0x91, 0x5, [@generic={0x6a, 0x33, "3790abb30fdd9a89ea8c05519dee91cfa190d079efb06eceb22bdbbb9b03420e46620e77ff755ad957ece36f80aeec8cb3d554b55f62c8af7e073b9a6818b17ab39432c3edf5b77278f5081fdf1c2f3911e223fda0ceb9bc14fc4e86430155e14188a4ae34d021b5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x0, 0xff, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7f, 0x1, 0x9, [@generic={0x8e, 0x8, "65c51cec5fa5d1ac9a06a097e4f4746b8f937ea1c082efb81b212fc3c7138891288b19d59d5ccfe1b1cdd19231f8cde594000c834f35bd52eaedb5a96244ea2d5af02cf3725edb63c2ddcc83fa6b465995cc966e284175ceb5ef1e21f3302071a0857d51a661c718e83c3d954b2b3ebfadb2db8bd65bcc76cd36933408b0e3867114346f5c02dc7eacdfbbf9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x28, 0x10, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7f, 0x40, 0x8, [@generic={0xc4, 0x3, "f865e3b05d4082adcc3f140792c34754f0a56a4ca165f82156cc0c6638875e5d90f15c1ba636350e797c0934f0cba9b5ca8e5da8f8f0b2b78c585b3913429f3fc1a2e4d2323f5de488ed792690877e09539026676fb5f8689354abb31016ac0d5b6fd7af0ea5a24f16b24c02cc1b6930cbb29e959204fb93b39ea8485b8c508a8e5c7d51e3e5ca89b7359643bcabd031548250050757b56fa304d150c1e4f4c42ba7b9aab444b1885fabb432da47278ffa1151cf45e267af777bda3442093353ed92"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x4, 0x9, 0x4, [@generic={0x71, 0x7, "331e4049d11f32091044302222a3214970535bde60bc85f5ec4ab483e44598184500e0965165d0c9dfe2c14fd844a376e86ba182a780c60501dc87ee727bddf9aab9c0425f213355e3e440105b9414544752a16dbb91e297f9ccaf4b5d81884974a5121cc62eb71b104ef1dd70c470"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x4}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0x7, 0x2, 0x20, 0x8}, 0xc9, &(0x7f00000002c0)={0x5, 0xf, 0xc9, 0x6, [@ssp_cap={0x18, 0x10, 0xa, 0xc0, 0x3, 0x4, 0xf00, 0x6, [0xfff0, 0xff3f00, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xa, 0x6, 0x5}, @generic={0x8a, 0x10, 0x3, "09d295f2ed222f4d4d67d70a20b3d115bd5688dcf7099b4ffeab00c9c0ed8f37940a38ffdb56e76cfad2e595c9926ecb22a31139326069dab3db52dc2ec5b25e3bef43ccb2a87d40e62572195fac9cbab34543da06425d539096eeee1c3eeff58d49cfdc0fb98202df307d31b626d2250d89e5d64d8f89e3d5c8a35a3fccbbe828a719f59c25f9"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xf, 0x3, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0xff, 0x80}]}, 0x3, [{0xfa, &(0x7f00000003c0)=@string={0xfa, 0x3, "d2d12c94bde5d47389cc3ff9d921462c319d7cac7453d83474b6f462d5587b5584800c2447a1709c15c837532913fd4137ff34b32d1578e3fd40a8c6f643677da649cf41626c8db1a92a52bce159ee79ab8019520ba35a8a618545e37c81498d1d45736f2d6cda6936fa9a5c4dade3f2e97dd5d75146545df95df4cbb33bc2deb6488fa128f9a668d23a9302809ff4569e6e1a97a4a63104aa7ffed6e8c13d952c5e9703f7a8f14c43606d41e374ff66569abdf7c3d0b9d4124090a172a597fc31817ff078d8cc89e1a2722ca33a4872aaaeeb27d31df7fc7bbf4e4dfdc3c82a58cf32fc22dca9b742e04dc510d919fcef51a02c0df0abf7"}}, {0xf4, &(0x7f0000001140)=@string={0xf4, 0x3, "ce8f2454a2173b0228457d75636cef3a83579eff545152998112f5b8b35983f8aec1cf8efabd00ad3384f05b569c735ddce12cbfb631513ebe7dadc8d9c22d27ce378c196766f00ac62be75e37f756c539edaaaf28b4e5d0f38eaa79262940bf05573808c45d7d89e8ec1b1ee94645ced8739dd279bd986ab6a6e6e74cc9b40976612e46d1e82fad30d714ecf4193ed485d0b4cbd877ddee90d1b189850ca8c0d628d14da70a6a9550a7fac4980f356af3f93c70834604fdc98d8616d6ce396386853898b60498aa9e229602d8f2eedd62e963aed9ffbfd79e4ae5e88e3f2de0e97d2379ec0b3fb86a0ce518b9ae43da4792"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x408}}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) r3 = signalfd4(r0, &(0x7f0000000140)={[0x8000000000000005]}, 0x8, 0x80800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x4}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1001000, 0x3a, 0xffd, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xeac0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 58.418238048s ago: executing program 2 (id=2031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async, rerun: 32) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0x108}, {&(0x7f00000007c0)="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", 0xffffff50}], 0x4}}], 0x1, 0x4044805) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') (rerun: 32) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) (rerun: 32) 57.948926445s ago: executing program 2 (id=2034): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x31}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfff, 0x4) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_bt_hci(r8, 0x400448cc, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) 57.830314077s ago: executing program 2 (id=2035): syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r0, 0x0, 0x87) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000080), 0x20e800, &(0x7f0000000000)=ANY=[@ANYRES8]) 56.796605512s ago: executing program 0 (id=2041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(r0, &(0x7f00000000c0)="47596453b91f34815c7d14a24a9c6da6683a80e21c28742ce908e3ec1825d29e84aaffdfed6b4255a733ebeba359bdd94e89441e3300b532d2850f8ec1a4c5183c885e259b20f39f7e9810ee33039c1ea01197fde0d1ac7425aeab5c8e5ad25fc3dd340046914c24ed9c3cb1", 0x6c) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x1) 56.706185764s ago: executing program 0 (id=2043): ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000006) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x11) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x7b, &(0x7f0000000240), 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902"], 0x0) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xc) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x6, r0, 'id0\x00'}) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000140)) 56.440737978s ago: executing program 0 (id=2048): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x31}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfff, 0x4) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_bt_hci(r8, 0x400448cc, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) 56.31160221s ago: executing program 0 (id=2049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setresuid(0xee01, 0x0, 0x0) (async, rerun: 32) faccessat(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 32) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) (async) sendmsg$inet6(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)="1d35ad", 0x3}], 0x1}, 0x4000) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) (async) close_range(r0, 0xffffffffffffffff, 0x0) 53.869729246s ago: executing program 1 (id=2065): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r2, r1, r1, r1, r1, r2, r1]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) umount2(&(0x7f0000000040)='./cgroup/file0\x00', 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x20, 0xd, "fede930000a6ac070000588000000000000000000000000000000066080000000047f50000000000000000150008000000000000000000001200", "2809e8dbe108038948224ad54afac11d735397bdb20000000020a1a93c7540f4767f9e01177d3dd40600000061ac0000894417f108000000bc3456102b13db7a", "90be8b1c55fb64000000000000000000f300", [0x8a2, 0x6]}}) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) sync() sync() syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="2003070000000707d17d93f0fdc9f793e65989210003e128c1811af5ba3cab2f719497b1030f44f29613f826216e11edee148c40b75a5ac12e93f40d09a774806dc90d1d06378550aceee1ef9fe3dc2e03340614c3ea3b3094d8a6110156a61fcda9b794bcaaf0a998ddee00d053562ad8d6fea2a95ad13fed2fd46a442ec78199"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) 51.821169836s ago: executing program 1 (id=2066): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfffffff7, 0x80, 0x0, 0x0, 0x7, 0x8, 0xf, 0x4, 0x6, 0x0, [{0x3, 0xd7e6, 0x4}, {0x5, 0x4e7, 0x9}, {0x9, 0x6, 0x40}, {0x10000000, 0x1, 0x5}, {0x4, 0x7, 0x8}, {0x2, 0x11f6, 0x6}, {0x8, 0x8001, 0x6}, {0x4, 0x5, 0xa}, {0xd68, 0xbf9, 0x613}, {0x8, 0x2, 0xffffffff}, {0x8, 0x6, 0x4}, {0x10, 0x3, 0x38b}, {0x4, 0x8, 0x47e}, {0x1ff, 0x5, 0x4}, {0x1, 0x9, 0x9}]}) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)) ftruncate(r3, 0xffff) r8 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f00000001c0)={0x9, 0x5, 0x3, 0xf2c2, 0x18, "c57290b08b9a9368"}) r9 = socket$packet(0x11, 0x2, 0x300) r10 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_adj\x00') pread64(r10, 0x0, 0x0, 0x76) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r8, 0xd3fc6000) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) fcntl$addseals(r3, 0x409, 0x7) syz_io_uring_setup(0x702, &(0x7f0000000140)={0x0, 0xfffffffc, 0x10000, 0x7, 0x1e6}, 0x0, 0x0) socket(0x2, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_channels={0x3c, 0xe637, 0x7fffffff, 0xd, 0x2, 0x6, 0x3, 0x2b50, 0xf56}}) r11 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0xc0086202, &(0x7f0000000080)=0x2) fcntl$addseals(r2, 0x409, 0x9) 51.608589619s ago: executing program 1 (id=2067): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) (async) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x120, &(0x7f0000000440)={0xa, 0x4e22, 0x1af, @empty, 0x5}, 0x1c) (async) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 51.501773331s ago: executing program 3 (id=2068): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) (async, rerun: 64) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (rerun: 64) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/21, 0x15}, 0x5}], 0x1, 0x42, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 51.460451961s ago: executing program 3 (id=2069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000ac0)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES16=r4, @ANYRESOCT=r3], 0x2c}}, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) 51.292153944s ago: executing program 3 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x38, r1, 0x201, 0x70bd26, 0x25dfdb7c, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0xffffffffffffff76}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000200)={0x87, @rand_addr=0x64010100, 0x4e22, 0x3, 'nq\x00', 0x12, 0x80000001, 0x66}, 0x2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) copy_file_range(r4, &(0x7f0000000040)=0x9f97, r4, &(0x7f00000001c0)=0x8, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r5) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25140000001c0007"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004) socket$inet6(0xa, 0x5, 0x6) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7106000000000000000002000000000100", 0x2, 0x4}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000000)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 51.044830037s ago: executing program 3 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r3, r2, 0x0, 0x800a121) 50.137577561s ago: executing program 1 (id=2072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30103030303030303030303030303030303034303030302c75736530f2a9ef3de00b862d5109c401a467b79a6cece5a3ee07c7df6da9b453e19fd687beefd49f4405285ddae9e3217af0526703688822fda8d1cef3232d0606e65651c926fb0e289b110c5e44e3f3e011b282621ae01dbc5440026a885f02388e95b0dff7575804c11d47ea68a3dcdd9ecf88b8b5bd4c86867ec3258cc57140baa05f015554b9f6a03d5eec4f378e385acbdc2113e5218273122e2cab61e01fccc252e790cee229d44f6f7a", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) chdir(&(0x7f0000000140)='./file0\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) (async) recvmmsg(r3, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}, 0x80}], 0x1, 0x2, 0x0) (async) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) r6 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r6], 0x20}}, 0x40816) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x72, 0x61}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x801) 49.837942015s ago: executing program 3 (id=2073): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FITHAW(r0, 0xc0045878) getrandom(0x0, 0x0, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) memfd_create(&(0x7f0000000000)='[\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, 0x0, &(0x7f0000001000)) read$FUSE(r3, &(0x7f0000002c80)={0x2020}, 0xffffffffffffffb1) 47.551269679s ago: executing program 1 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000007c0)={0x2, 0xb, 0x0, 0x6, 0x2, 0x0, 0x70bd2a, 0x25dfdbff}, 0x10}}, 0x0) sendfile(r1, r0, 0x0, 0x800a121) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x6, {0x0, 0x0, 0x0, 0x7fff, 0xf293, 0x0, 0xa, 0x1e, 0x0, "92dfcd122abb2cb222e6a489f8fd8b24b757a1188bd18f50415b1611542e98be9d7187f0b89fbe59729e9aa02bec78b649055db7c95819b12108bdf6c9e84d90", "be15a716ac1c510b6023fe977083f282b95b0beeeeb79decd9073726347d432d098afd894d9a9fec4d863809b1344a5abba56a62f7def123ad9a0a5cf210aed3", "2517f09c205b6fd5829244bab6ce70a01bd86ced91842d1094810ce2369ce348", [0xa, 0x7ff]}}) 41.474930328s ago: executing program 32 (id=2035): syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r0, 0x0, 0x87) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000080), 0x20e800, &(0x7f0000000000)=ANY=[@ANYRES8]) 39.625819246s ago: executing program 33 (id=2049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setresuid(0xee01, 0x0, 0x0) (async, rerun: 32) faccessat(0xffffffffffffffff, 0x0, 0x3) (async, rerun: 32) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) (async) sendmsg$inet6(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00)="1d35ad", 0x3}], 0x1}, 0x4000) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) (async) close_range(r0, 0xffffffffffffffff, 0x0) 38.587709081s ago: executing program 3 (id=2077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 37.885325311s ago: executing program 1 (id=2078): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x408100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002d001f03010000000000000041da32a3"], 0x7e}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r2, 0x45806000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "1d83314ba53d68650b52fe417b1e8808"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 19.62652744s ago: executing program 34 (id=2078): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x408100, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000002d001f03010000000000000041da32a3"], 0x7e}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x6) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x50, r2, 0x45806000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "1d83314ba53d68650b52fe417b1e8808"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 35 (id=2077): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0xfffffff7) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6"}) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@register_looper, @release={0x40046306, 0x7}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Write failure EINVAL in pid:384 [ 73.624793][ T2454] rust_binder: Error while translating object. [ 73.631057][ T2454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.637315][ T2454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 73.647603][ T2455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.669783][ T36] audit: type=1400 audit(1751399918.731:26059): avc: denied { append } for pid=2458 comm="syz.3.684" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.753619][ T2461] rust_binder: Write failure EINVAL in pid:393 [ 74.504755][ T2494] wireguard: wg1: Could not create IPv4 socket [ 75.386698][ T2520] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 75.395008][ T2520] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 75.405188][ T2521] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 75.615872][ T2553] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 75.616644][ T2554] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 75.636486][ T2554] netlink: 17 bytes leftover after parsing attributes in process `syz.0.716'. [ 75.754597][ T36] audit: type=1400 audit(1751399920.811:26060): avc: denied { listen } for pid=2555 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.164948][ T36] audit: type=1400 audit(1751399921.221:26061): avc: denied { create } for pid=2562 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 76.171493][ T2563] tipc: Enabling of bearer rejected, failed to enable media [ 76.245488][ T2578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 76.739490][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 76.890625][ T45] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.901810][ T45] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 76.913353][ T45] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 108 [ 76.923342][ T45] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.932502][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.944065][ T2601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.094452][ T36] audit: type=1326 audit(1751399922.151:26062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2602 comm="syz.1.735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f372e38e929 code=0x0 [ 77.153348][ T2612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.169574][ T2612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.181851][ T2611] __vm_enough_memory: pid: 2611, comm: syz.3.734, bytes: 70373039144960 not enough memory for the allocation [ 77.209203][ T9] usb 4-1: USB disconnect, device number 19 [ 77.728869][ T36] audit: type=1400 audit(1751399922.781:26063): avc: denied { execute } for pid=2628 comm="syz.3.742" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.782845][ T2635] incfs: Options parsing error. -22 [ 77.788247][ T2635] incfs: mount failed -22 [ 77.796032][ T2635] batadv_slave_0: entered promiscuous mode [ 77.804284][ T2634] batadv_slave_0: left promiscuous mode [ 77.880488][ T2646] rust_binder: Failed to allocate buffer. len:80, is_oneway:false [ 78.396356][ T2667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.759'. [ 78.480022][ T2672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2672 comm=syz.0.760 [ 78.489194][ T2671] bridge0: port 3(veth1_macvtap) entered blocking state [ 78.499752][ T2671] bridge0: port 3(veth1_macvtap) entered disabled state [ 78.506867][ T2671] veth1_macvtap: entered allmulticast mode [ 78.513176][ T2671] veth1_macvtap: left allmulticast mode [ 78.636338][ T2681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2681 comm=syz.1.764 [ 79.058760][ T36] audit: type=1400 audit(1751399924.111:26064): avc: denied { create } for pid=2691 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.156850][ T2702] /dev/loop0: Can't lookup blockdev [ 79.199237][ T36] audit: type=1400 audit(1751399924.251:26065): avc: denied { name_bind } for pid=2707 comm="syz.1.775" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.625748][ T2749] overlay: ./file0 is not a directory [ 79.638270][ T2749] /dev/nullb0: Can't lookup blockdev [ 79.899445][ T31] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 80.060238][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.068982][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.079330][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.088354][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.099626][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.110806][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.120152][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.128264][ T31] usb 4-1: Product: syz [ 80.132747][ T31] usb 4-1: Manufacturer: syz [ 80.139762][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 80.145094][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 80.151712][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 80.158464][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 80.244274][ T2764] 9pnet_fd: Insufficient options for proto=fd [ 80.340965][ T36] audit: type=1400 audit(1751399925.401:26066): avc: denied { create } for pid=2750 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 80.344780][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.369188][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.381070][ T31] usb 4-1: USB disconnect, device number 20 [ 80.732369][ T36] audit: type=1326 audit(1751399925.791:26067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2767 comm="syz.1.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f372e38e929 code=0x0 [ 80.808641][ T36] audit: type=1400 audit(1751399925.861:26068): avc: denied { map } for pid=2773 comm="syz.2.797" path="socket:[14675]" dev="sockfs" ino=14675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.840164][ T2776] netlink: 140 bytes leftover after parsing attributes in process `syz.1.795'. [ 80.861255][ T36] audit: type=1400 audit(1751399925.921:26069): avc: denied { map } for pid=2777 comm="syz.2.798" path="socket:[14225]" dev="sockfs" ino=14225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 81.106665][ T2793] input: syz0 as /devices/virtual/input/input9 [ 81.120892][ T2793] 9pnet_fd: p9_fd_create_unix (2793): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.214173][ T2800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1042 sclass=netlink_route_socket pid=2800 comm=syz.3.807 [ 81.598159][ T2824] incfs: Can't find or create .index dir in ./file0 [ 81.604967][ T2824] incfs: mount failed -30 [ 81.806921][ T36] audit: type=1400 audit(1751399926.861:26070): avc: denied { mounton } for pid=2841 comm="syz.3.820" path="/163/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 82.034600][ T36] audit: type=1400 audit(1751399927.091:26071): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 82.076513][ T2844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.821'. [ 82.339450][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 82.350238][ T2867] fuse: Unknown parameter '˙˙˙˙0x0000000000000004' [ 82.431684][ T36] audit: type=1400 audit(1751399927.491:26072): avc: denied { create } for pid=2881 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.490480][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.498393][ T2895] netlink: 9 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.505658][ T31] usb 4-1: config 0 has no interface number 0 [ 82.509753][ T2895] gretap0: entered promiscuous mode [ 82.513894][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.520638][ T2895] netlink: 5 bytes leftover after parsing attributes in process `syz.2.840'. [ 82.530495][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.539031][ T2895] 0Şî{Xą¦: renamed from gretap0 [ 82.548803][ T31] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.566422][ T31] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 82.567020][ T2895] 0Şî{Xą¦: left promiscuous mode [ 82.576049][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.582547][ T2895] 0Şî{Xą¦: entered allmulticast mode [ 82.592172][ T31] usb 4-1: config 0 descriptor?? [ 82.597877][ T2895] A link change request failed with some changes committed already. Interface 30Şî{Xą¦ may have been left with an inconsistent configuration, please check. [ 82.680014][ T2916] wireguard: wg1: Could not create IPv4 socket [ 82.729051][ T2923] x_tables: duplicate underflow at hook 2 [ 82.758667][ T36] audit: type=1400 audit(1751399927.811:26073): avc: denied { create } for pid=2933 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.783511][ T2940] overlayfs: failed to clone upperpath [ 82.799460][ T36] audit: type=1400 audit(1751399927.811:26074): avc: denied { shutdown } for pid=2933 comm="syz.0.855" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.831676][ T36] audit: type=1400 audit(1751399927.861:26075): avc: denied { search } for pid=2947 comm="syz.1.860" name="/" dev="configfs" ino=2361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.848702][ T31] usbhid 4-1:0.1: can't add hid device: -71 [ 82.876570][ T36] audit: type=1400 audit(1751399927.891:26076): avc: denied { mounton } for pid=2947 comm="syz.1.860" path="/" dev="configfs" ino=2361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.886483][ T31] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 82.919211][ T36] audit: type=1400 audit(1751399927.931:26077): avc: denied { name_bind } for pid=2952 comm="syz.3.861" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 82.943194][ T31] usb 4-1: USB disconnect, device number 21 [ 83.763757][ T2995] SELinux: security_context_str_to_sid () failed with errno=-22 [ 84.107721][ T3046] fuseblk: Bad value for 'group_id' [ 84.113005][ T3046] fuseblk: Bad value for 'group_id' [ 84.199439][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 84.350499][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.361479][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.371281][ T31] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 84.380391][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.391455][ T31] usb 4-1: config 0 descriptor?? [ 84.609952][ T3057] tmpfs: Unknown parameter 'h5ge' [ 84.800519][ T31] belkin 0003:1020:0006.0006: unknown main item tag 0x3 [ 84.808258][ T31] belkin 0003:1020:0006.0006: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 85.227196][ T3082] fuse: Bad value for 'user_id' [ 85.232137][ T3082] fuse: Bad value for 'user_id' [ 86.695795][ T3136] 9pnet_fd: Insufficient options for proto=fd [ 86.976256][ T31] usb 4-1: USB disconnect, device number 22 [ 87.279455][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 87.430489][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.442143][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.453117][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.467792][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.476965][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.485108][ T31] usb 4-1: Product: syz [ 87.489301][ T31] usb 4-1: Manufacturer: syz [ 87.494211][ T31] usb 4-1: SerialNumber: syz [ 87.516333][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 87.516354][ T36] audit: type=1400 audit(1751399932.571:26084): avc: denied { bind } for pid=3195 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.544041][ T36] audit: type=1400 audit(1751399932.601:26085): avc: denied { setopt } for pid=3195 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.606231][ T36] audit: type=1326 audit(1751399932.661:26086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.2.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x0 [ 87.708313][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 87.908216][ T36] audit: type=1400 audit(1751399932.961:26087): avc: denied { create } for pid=3177 comm="syz.3.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.166220][ T3206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 88.666587][ T3291] netlink: 'syz.0.974': attribute type 6 has an invalid length. [ 88.689175][ T3296] netlink: 136 bytes leftover after parsing attributes in process `syz.0.975'. [ 88.728391][ T36] audit: type=1400 audit(1751399933.781:26088): avc: denied { listen } for pid=3299 comm="syz.0.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.733208][ T3340] tipc: Enabling of bearer rejected, failed to enable media [ 89.999505][ T9] usb 4-1: USB disconnect, device number 23 [ 90.019617][ T9] usblp0: removed [ 90.059201][ T36] audit: type=1400 audit(1751399935.111:26089): avc: denied { create } for pid=3357 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 90.149181][ T36] audit: type=1400 audit(1751399935.201:26090): avc: denied { read } for pid=3353 comm="syz.3.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.344980][ T36] audit: type=1326 audit(1751399935.401:26091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3381 comm="syz.2.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x7fc00000 [ 90.568984][ T36] audit: type=1326 audit(1751399935.621:26092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x7ffc0000 [ 90.598832][ T36] audit: type=1326 audit(1751399935.621:26093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x7ffc0000 [ 90.653114][ T3408] kvm: kvm [3407]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 91.672036][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 91.689927][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 91.792935][ T3479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 93.619477][ T407] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 93.767734][ T3531] fuse: Bad value for 'fd' [ 93.777154][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 93.790049][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.801411][ T407] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 93.810860][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.820931][ T407] usb 4-1: config 0 descriptor?? [ 94.232911][ T407] elo 0003:04E7:0030.0007: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.3-1/input0 [ 94.428078][ T3527] rust_binder: Error while translating object. [ 94.428108][ T3527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.434506][ T3527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:573 [ 94.445196][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.463207][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.479288][ T407] usb 4-1: USB disconnect, device number 24 [ 94.486033][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 94.486052][ T36] audit: type=1400 audit(1751399939.541:26117): avc: denied { create } for pid=3558 comm="syz.1.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 94.515696][ T36] audit: type=1400 audit(1751399939.571:26118): avc: denied { read } for pid=3560 comm="syz.3.1063" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.557567][ T36] audit: type=1400 audit(1751399939.571:26119): avc: denied { open } for pid=3560 comm="syz.3.1063" path="/189/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.593549][ T36] audit: type=1400 audit(1751399939.601:26120): avc: denied { ioctl } for pid=3560 comm="syz.3.1063" path="/189/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.606176][ T3565] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 94.627049][ T3565] rust_binder: Write failure EINVAL in pid:580 [ 95.542830][ T36] audit: type=1400 audit(1751399940.601:26121): avc: denied { ioctl } for pid=3617 comm="syz.3.1081" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.714476][ T3626] bpf: Bad value for 'mode' [ 95.733649][ T3629] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 95.789521][ T3634] tmpfs: Bad value for 'uid' [ 95.794318][ T3634] tmpfs: Bad value for 'uid' [ 95.851343][ T36] audit: type=1400 audit(1751399940.911:26122): avc: denied { mounton } for pid=3642 comm="syz.0.1092" path="/301/file0" dev="tmpfs" ino=1682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.005270][ T36] audit: type=1326 audit(1751399941.061:26123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.1.1096" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372e38e929 code=0x0 [ 96.110044][ T3668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.110083][ T3668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 96.121079][ T3668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.389512][ T31] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 96.550743][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 96.559053][ T31] usb 4-1: config 1 has no interface number 0 [ 96.565214][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 96.573513][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 96.582685][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.590852][ T31] usb 4-1: Product: syz [ 96.595128][ T31] usb 4-1: Manufacturer: syz [ 96.599930][ T31] usb 4-1: SerialNumber: syz [ 96.799616][ T3696] overlayfs: failed to clone upperpath [ 96.809846][ T31] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 96.820224][ T31] usb 4-1: USB disconnect, device number 25 [ 96.843530][ T3706] /dev/rnullb0: Can't lookup blockdev [ 96.885094][ T3723] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 97.029024][ T36] audit: type=1326 audit(1751399942.081:26124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.0.1127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bf418e929 code=0x0 [ 97.058755][ T3757] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1129'. [ 97.093161][ T36] audit: type=1400 audit(1751399942.151:26125): avc: denied { mount } for pid=3762 comm="syz.0.1130" name="/" dev="ramfs" ino=18628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.599424][ T407] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 97.619913][ T36] audit: type=1400 audit(1751399942.681:26126): avc: denied { accept } for pid=3782 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 97.655346][ T3787] netlink: 'syz.2.1140': attribute type 9 has an invalid length. [ 97.682507][ T3790] netlink: 'syz.2.1141': attribute type 10 has an invalid length. [ 97.760548][ T407] usb 4-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 97.771273][ T407] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.780363][ T407] usb 4-1: New USB device found, idVendor=e157, idProduct=5012, bcdDevice= 0.00 [ 97.790983][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.800128][ T407] usb 4-1: config 0 descriptor?? [ 98.316109][ T3814] netlink: 'syz.1.1149': attribute type 7 has an invalid length. [ 98.323951][ T3814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1149'. [ 99.890156][ T3836] 9pnet_fd: Insufficient options for proto=fd [ 100.265264][ T3874] tmpfs: Unknown parameter 'indo64' [ 100.387723][ T31] usb 4-1: USB disconnect, device number 26 [ 100.428288][ T3896] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 100.535386][ T3915] devpts: called with bogus options [ 100.542472][ T3915] fuse: Bad value for 'user_id' [ 100.547355][ T3915] fuse: Bad value for 'user_id' [ 100.709429][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 100.734287][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 100.734307][ T36] audit: type=1400 audit(1751399945.791:26131): avc: denied { bind } for pid=3952 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.760617][ T36] audit: type=1400 audit(1751399945.791:26132): avc: denied { bind } for pid=3952 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.788850][ T3959] SELinux: security_context_str_to_sid (‡) failed with errno=-22 [ 100.879415][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 100.885652][ T31] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 100.894320][ T31] usb 4-1: config 0 has no interface number 0 [ 100.900542][ T31] usb 4-1: config 0 interface 113 has no altsetting 0 [ 100.908686][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 100.917883][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.925923][ T31] usb 4-1: Product: syz [ 100.930221][ T31] usb 4-1: Manufacturer: syz [ 100.934862][ T31] usb 4-1: SerialNumber: syz [ 100.940350][ T31] usb 4-1: config 0 descriptor?? [ 101.149215][ T407] usb 4-1: USB disconnect, device number 27 [ 101.668322][ T3970] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 101.668344][ T3970] rust_binder: Error while translating object. [ 101.680719][ T3970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.687020][ T3970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:631 [ 101.709875][ T3973] exFAT-fs (rnullb0): invalid boot record signature [ 101.725682][ T3973] exFAT-fs (rnullb0): failed to read boot sector [ 101.732063][ T3973] exFAT-fs (rnullb0): failed to recognize exfat type [ 101.753810][ T36] audit: type=1326 audit(1751399946.811:26133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.755997][ T3975] syz.3.1205: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 101.778075][ T36] audit: type=1326 audit(1751399946.811:26134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.792759][ T3975] CPU: 0 UID: 0 PID: 3975 Comm: syz.3.1205 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 101.792800][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.792824][ T3975] Call Trace: [ 101.792833][ T3975] [ 101.792843][ T3975] __dump_stack+0x21/0x30 [ 101.792889][ T3975] dump_stack_lvl+0x10c/0x190 [ 101.792919][ T3975] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.792953][ T3975] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 101.792981][ T3975] dump_stack+0x19/0x20 [ 101.793010][ T3975] warn_alloc+0x1bc/0x2a0 [ 101.793038][ T3975] ? stack_depot_save_flags+0x38/0x800 [ 101.793074][ T3975] ? __cfi_warn_alloc+0x10/0x10 [ 101.793101][ T3975] ? kasan_save_track+0x4f/0x80 [ 101.793137][ T3975] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 101.793171][ T3975] ? xskq_create+0x68/0x2a0 [ 101.793199][ T3975] ? xsk_init_queue+0xb6/0x120 [ 101.793225][ T3975] ? xsk_setsockopt+0x43f/0x6f0 [ 101.793251][ T3975] ? do_sock_setsockopt+0x26d/0x400 [ 101.793279][ T3975] ? __x64_sys_setsockopt+0x1b8/0x250 [ 101.793307][ T3975] ? x64_sys_call+0x2adc/0x2ee0 [ 101.793342][ T3975] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.793373][ T3975] __vmalloc_node_range_noprof+0x135/0x1420 [ 101.793410][ T3975] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 101.793440][ T3975] ? avc_has_perm+0x144/0x220 [ 101.793471][ T3975] ? kasan_save_alloc_info+0x40/0x50 [ 101.793500][ T3975] ? __kasan_kmalloc+0x96/0xb0 [ 101.793538][ T3975] vmalloc_user_noprof+0x77/0x90 [ 101.793567][ T3975] ? xskq_create+0xdb/0x2a0 [ 101.793606][ T3975] xskq_create+0xdb/0x2a0 [ 101.793636][ T3975] xsk_init_queue+0xb6/0x120 [ 101.793664][ T3975] xsk_setsockopt+0x43f/0x6f0 [ 101.793692][ T3975] ? __cfi_xsk_setsockopt+0x10/0x10 [ 101.793719][ T3975] ? __secure_computing+0x2b0/0x2b0 [ 101.793758][ T3975] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 101.793786][ T3975] ? security_socket_setsockopt+0x33/0xd0 [ 101.793822][ T3975] ? __cfi_xsk_setsockopt+0x10/0x10 [ 101.793847][ T3975] do_sock_setsockopt+0x26d/0x400 [ 101.793876][ T3975] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 101.793907][ T3975] __x64_sys_setsockopt+0x1b8/0x250 [ 101.793936][ T3975] x64_sys_call+0x2adc/0x2ee0 [ 101.793974][ T3975] do_syscall_64+0x58/0xf0 [ 101.793998][ T3975] ? clear_bhb_loop+0x50/0xa0 [ 101.794030][ T3975] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.794061][ T3975] RIP: 0033:0x7f098098e929 [ 101.794090][ T3975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.794114][ T3975] RSP: 002b:00007f09817fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.794143][ T3975] RAX: ffffffffffffffda RBX: 00007f0980bb5fa0 RCX: 00007f098098e929 [ 101.794164][ T3975] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 101.794182][ T3975] RBP: 00007f0980a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 101.794200][ T3975] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 101.794219][ T3975] R13: 0000000000000000 R14: 00007f0980bb5fa0 R15: 00007fffdf4b8238 [ 101.794243][ T3975] [ 101.794257][ T3975] Mem-Info: [ 101.842926][ T36] audit: type=1326 audit(1751399946.811:26135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.850124][ T3975] active_anon:8460 inactive_anon:5 isolated_anon:0 [ 101.850124][ T3975] active_file:21774 inactive_file:2224 isolated_file:0 [ 101.850124][ T3975] unevictable:0 dirty:45 writeback:0 [ 101.850124][ T3975] slab_reclaimable:5949 slab_unreclaimable:70477 [ 101.850124][ T3975] mapped:24343 shmem:424 pagetables:1268 [ 101.850124][ T3975] sec_pagetables:0 bounce:0 [ 101.850124][ T3975] kernel_misc_reclaimable:0 [ 101.850124][ T3975] free:1523914 free_pcp:2397 free_cma:0 [ 101.850203][ T3975] Node 0 active_anon:33840kB inactive_anon:20kB active_file:87096kB inactive_file:8896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97372kB dirty:180kB writeback:0kB shmem:1696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:4920kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no [ 101.862773][ T36] audit: type=1326 audit(1751399946.811:26136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.872626][ T3975] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:4528kB free_cma:0kB [ 101.885328][ T36] audit: type=1326 audit(1751399946.811:26137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f098098d290 code=0x7ffc0000 [ 101.890171][ T3975] lowmem_reserve[]: [ 101.904824][ T36] audit: type=1326 audit(1751399946.811:26138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f098098d290 code=0x7ffc0000 [ 101.916637][ T3975] 0 [ 101.925506][ T3980] overlayfs: failed to clone upperpath [ 101.934744][ T3975] 3921 [ 101.937480][ T36] audit: type=1326 audit(1751399946.811:26139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.943955][ T3975] 3921 [ 101.948338][ T36] audit: type=1326 audit(1751399946.811:26140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f098098e929 code=0x7ffc0000 [ 101.963960][ T3975] [ 102.199447][ T664] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 102.228274][ T3975] Normal free:3134628kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33896kB inactive_anon:20kB active_file:87096kB inactive_file:8896kB unevictable:0kB writepending:180kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:1852kB free_cma:0kB [ 102.389454][ T664] usb 4-1: device descriptor read/64, error -71 [ 102.391223][ T3975] lowmem_reserve[]: 0 0 0 [ 102.444150][ T3975] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 102.461283][ T3975] Normal: 20*4kB (UME) 382*8kB (UME) 659*16kB (UME) 668*32kB (UME) 822*64kB (UME) 238*128kB (UME) 66*256kB (UME) 39*512kB (UME) 23*1024kB (UME) 12*2048kB (ME) 716*4096kB (UM) = 3135856kB [ 102.480317][ T3975] 24425 total pagecache pages [ 102.485061][ T3975] 5 pages in swap cache [ 102.489243][ T3975] Free swap = 124372kB [ 102.493453][ T3975] Total swap = 124996kB [ 102.497641][ T3975] 2097051 pages RAM [ 102.501605][ T3975] 0 pages HighMem/MovableOnly [ 102.506399][ T3975] 351521 pages reserved [ 102.510616][ T3975] 0 pages cma reserved [ 102.516804][ T3975] Memory allocations: [ 102.520846][ T3975] 0 B 0 init/main.c:1370 func:do_initcalls [ 102.528062][ T3975] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 102.536560][ T3975] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 102.544603][ T3975] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 102.552648][ T3975] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 102.560730][ T3975] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 102.569495][ T3975] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 102.577493][ T3975] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 102.586858][ T3975] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 102.595570][ T3975] 0 B 0 init/initramfs.c:101 func:find_link [ 102.639440][ T664] usb 4-1: device descriptor read/64, error -71 [ 102.879547][ T664] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.009437][ T664] usb 4-1: device descriptor read/64, error -71 [ 103.189293][ T4014] overlayfs: failed to resolve './file0': -2 [ 103.249505][ T664] usb 4-1: device descriptor read/64, error -71 [ 103.359526][ T664] usb usb4-port1: attempt power cycle [ 103.699505][ T664] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 103.720438][ T664] usb 4-1: device descriptor read/8, error -71 [ 103.850574][ T664] usb 4-1: device descriptor read/8, error -71 [ 103.982021][ T4025] overlayfs: failed to clone upperpath [ 103.999112][ T4027] sit0: entered promiscuous mode [ 104.005242][ T4027] netlink: 'syz.0.1223': attribute type 1 has an invalid length. [ 104.013313][ T4027] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1223'. [ 104.099503][ T664] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 104.120480][ T664] usb 4-1: device descriptor read/8, error -71 [ 104.250924][ T664] usb 4-1: device descriptor read/8, error -71 [ 104.359578][ T664] usb usb4-port1: unable to enumerate USB device [ 105.209473][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 105.370474][ T45] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.381732][ T45] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.392034][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.398838][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 105.408446][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.418421][ T45] usb 4-1: config 0 descriptor?? [ 105.840258][ T4078] random: crng reseeded on system resumption [ 105.945939][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.967961][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.329527][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 106.335624][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.344678][ T45] usb 4-1: USB disconnect, device number 32 [ 106.650315][ T4144] overlayfs: failed to clone upperpath [ 106.667801][ T4146] /dev/rnullb0: Can't lookup blockdev [ 106.740396][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 106.740416][ T36] audit: type=1400 audit(1751399951.801:26152): avc: denied { listen } for pid=4152 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.780370][ T36] audit: type=1400 audit(1751399951.831:26153): avc: denied { getopt } for pid=4152 comm="syz.1.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.810459][ T36] audit: type=1400 audit(1751399951.861:26154): avc: denied { setattr } for pid=4156 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 107.059453][ T4167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1273'. [ 107.116555][ T4175] 9p: Unknown Cache mode or invalid value 딊 [ 107.314175][ T4190] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=4190 comm=syz.3.1279 [ 107.412766][ T36] audit: type=1400 audit(1751399952.471:26155): avc: denied { write } for pid=4193 comm="syz.3.1281" name="raw6" dev="proc" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 107.447119][ T4197] fuse: Unknown parameter 'fä' [ 107.452738][ T4197] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1282'. [ 107.537357][ T4201] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1284'. [ 107.546435][ T4201] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1284'. [ 107.555595][ T4201] netlink: 'syz.3.1284': attribute type 6 has an invalid length. [ 107.563390][ T4201] netlink: 'syz.3.1284': attribute type 5 has an invalid length. [ 107.571300][ T4201] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1284'. [ 107.636303][ T4206] batadv_slave_1: entered promiscuous mode [ 107.637192][ T4207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.642536][ T4204] batadv_slave_1: left promiscuous mode [ 107.642821][ T4207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:685 [ 107.653188][ T4203] /dev/loop0: Can't lookup blockdev [ 107.804661][ T4227] exFAT-fs (rnullb0): invalid boot record signature [ 107.815812][ T4227] exFAT-fs (rnullb0): failed to read boot sector [ 107.822472][ T4227] exFAT-fs (rnullb0): failed to recognize exfat type [ 108.276783][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 108.529311][ T4297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1318'. [ 108.531632][ T664] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 108.560057][ T664] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.572828][ T36] audit: type=1326 audit(1751399953.631:26156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.2.1322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2551b8e929 code=0x0 [ 108.651268][ T4305] exFAT-fs (rnullb0): invalid boot record signature [ 108.657937][ T4305] exFAT-fs (rnullb0): failed to read boot sector [ 108.664331][ T4305] exFAT-fs (rnullb0): failed to recognize exfat type [ 108.760212][ T4316] overlayfs: failed to resolve './file0': -2 [ 109.366226][ T36] audit: type=1400 audit(1751399954.421:26157): avc: denied { create } for pid=4326 comm="syz.0.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.619467][ T664] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 109.770506][ T664] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.780690][ T664] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.791147][ T664] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.800269][ T664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.808283][ T664] usb 4-1: Product: syz [ 109.812489][ T664] usb 4-1: Manufacturer: syz [ 109.817097][ T664] usb 4-1: SerialNumber: syz [ 110.029852][ T664] usb 4-1: 0:2 : does not exist [ 110.036879][ T664] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 110.059506][ T664] usb 4-1: USB disconnect, device number 33 [ 110.070052][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.548633][ T4374] rust_binder: Error while translating object. [ 110.548665][ T4374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 110.555593][ T4374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:716 [ 111.424971][ T4395] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.443276][ T4395] tipc: MTU too low for tipc bearer [ 111.731809][ T4435] fuse: Unknown parameter 'gootmowe' [ 111.815091][ T36] audit: type=1400 audit(1751399956.871:26158): avc: denied { ioctl } for pid=4434 comm="syz.3.1365" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.868783][ T4450] batadv_slave_1: entered promiscuous mode [ 112.001521][ T4453] batadv_slave_1: left promiscuous mode [ 112.279507][ T4468] 9pnet_fd: Insufficient options for proto=fd [ 112.401618][ T4478] overlayfs: failed to clone upperpath [ 112.699422][ T664] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 112.720251][ T4503] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1387'. [ 112.869428][ T664] usb 4-1: Using ep0 maxpacket: 8 [ 112.875897][ T664] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.884403][ T664] usb 4-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 112.894703][ T664] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.903662][ T664] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.918640][ T664] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.927772][ T664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.935825][ T664] usb 4-1: Product: syz [ 112.940015][ T664] usb 4-1: Manufacturer: syz [ 112.944649][ T664] usb 4-1: SerialNumber: syz [ 113.272557][ T4515] tipc: Enabling of bearer rejected, failed to enable media [ 113.297895][ T36] audit: type=1400 audit(1751399958.351:26159): avc: denied { ioctl } for pid=4513 comm="syz.0.1391" path="socket:[21029]" dev="sockfs" ino=21029 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.353275][ T36] audit: type=1400 audit(1751399958.411:26160): avc: denied { accept } for pid=4521 comm="syz.0.1394" path="socket:[21550]" dev="sockfs" ino=21550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.430419][ T4533] overlayfs: failed to clone upperpath [ 113.610279][ T664] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 113.617203][ T664] cdc_ncm 4-1:1.0: bind() failure [ 113.623525][ T664] usb 4-1: USB disconnect, device number 34 [ 114.170093][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 114.171797][ T36] audit: type=1400 audit(1751399959.221:26161): avc: denied { execute } for pid=4566 comm="syz.3.1410" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.182570][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'. [ 114.325072][ T36] audit: type=1400 audit(1751399959.381:26162): avc: denied { append } for pid=4580 comm="syz.3.1415" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.336435][ T4581] rust_binder: Error while translating object. [ 114.362824][ T4581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.377249][ T4581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 114.399140][ T36] audit: type=1326 audit(1751399959.451:26163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4583 comm="syz.1.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372e38e929 code=0x0 [ 114.611628][ T45] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 114.619686][ T45] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.637959][ T4606] fido_id[4606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.745226][ T4609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.745608][ T4608] rust_binder: Failed copying into alloc: EFAULT [ 114.752696][ T4608] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 114.759254][ T4608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.767897][ T4608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:772 [ 114.789140][ T4615] overlayfs: failed to clone upperpath [ 114.811306][ T36] audit: type=1400 audit(1751399959.871:26164): avc: denied { map } for pid=4616 comm="syz.3.1428" path="/proc/775/mountinfo" dev="proc" ino=21800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 114.953941][ T4645] batadv_slave_1: entered promiscuous mode [ 114.960156][ T4644] batadv_slave_1: left promiscuous mode [ 115.136906][ T4676] overlayfs: failed to clone upperpath [ 115.281801][ T4678] overlayfs: failed to resolve './file1': -2 [ 115.360279][ T4703] bridge0: port 3(veth0_to_bridge) entered blocking state [ 115.367558][ T4703] bridge0: port 3(veth0_to_bridge) entered disabled state [ 115.374808][ T4703] veth0_to_bridge: entered allmulticast mode [ 115.381186][ T4703] veth0_to_bridge: entered promiscuous mode [ 115.387161][ T4703] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.399525][ T4703] bridge0: port 3(veth0_to_bridge) entered blocking state [ 115.406662][ T4703] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 115.446428][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 115.808124][ T36] audit: type=1400 audit(1751399960.861:26165): avc: denied { bind } for pid=4755 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.183595][ T4760] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.283990][ T36] audit: type=1400 audit(1751399961.341:26166): avc: denied { map } for pid=4763 comm="syz.3.1475" path="socket:[22244]" dev="sockfs" ino=22244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.307861][ T36] audit: type=1400 audit(1751399961.341:26167): avc: denied { read } for pid=4763 comm="syz.3.1475" path="socket:[22244]" dev="sockfs" ino=22244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.367019][ T4775] netlink: 'syz.0.1480': attribute type 12 has an invalid length. [ 116.419199][ T4794] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1486'. [ 117.139839][ T36] audit: type=1400 audit(1751399962.201:26168): avc: denied { lock } for pid=4857 comm="syz.2.1507" path="socket:[22410]" dev="sockfs" ino=22410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 117.194385][ T36] audit: type=1400 audit(1751399962.251:26169): avc: denied { accept } for pid=4864 comm="syz.2.1509" path="socket:[22419]" dev="sockfs" ino=22419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.544928][ T4897] 9pnet_fd: Insufficient options for proto=fd [ 117.586164][ T36] audit: type=1400 audit(1751399962.641:26170): avc: denied { setattr } for pid=4903 comm="syz.1.1521" name="UDPLITEv6" dev="sockfs" ino=22511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.038879][ T36] audit: type=1400 audit(1751399963.091:26171): avc: denied { write } for pid=4943 comm="syz.2.1537" path="socket:[23590]" dev="sockfs" ino=23590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.212245][ T4949] overlayfs: failed to resolve './file1': -2 [ 118.291229][ T4968] rust_binder: 4968: no such ref 1 [ 118.316625][ T4972] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1547'. [ 118.696923][ T36] audit: type=1400 audit(1751399963.748:26172): avc: denied { read } for pid=4995 comm="syz.0.1556" name="/" dev="configfs" ino=2361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.719397][ T36] audit: type=1400 audit(1751399963.748:26173): avc: denied { open } for pid=4995 comm="syz.0.1556" path="/" dev="configfs" ino=2361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.738781][ T4998] tipc: Enabling of bearer rejected, failed to enable media [ 118.814228][ T5011] tipc: Started in network mode [ 118.819130][ T5011] tipc: Node identity 0000ae010000000009, cluster identity 4711 [ 118.849467][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 118.961810][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 118.974583][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 118.987479][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.000230][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.012845][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 119.013192][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.019732][ T4989] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 119.030979][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.051720][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.054168][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.065886][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.072868][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 119.084733][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.092360][ T9] usb 4-1: can't read configurations, error -71 [ 119.104968][ T5016] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1540 sclass=netlink_xfrm_socket pid=5016 comm=syz.0.1564 [ 119.416754][ T5030] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1569'. [ 119.538920][ T36] audit: type=1400 audit(1751399964.588:26174): avc: denied { getopt } for pid=5063 comm="syz.2.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.573919][ T5069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840 [ 119.601645][ T36] audit: type=1326 audit(1751399964.658:26175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.2.1584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2551b8e929 code=0x0 [ 119.626750][ T5079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:844 [ 119.696469][ T36] audit: type=1400 audit(1751399964.748:26176): avc: denied { ioctl } for pid=5086 comm="syz.3.1587" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.735197][ T36] audit: type=1400 audit(1751399964.788:26177): avc: denied { map } for pid=5088 comm="syz.0.1588" path="socket:[23155]" dev="sockfs" ino=23155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.446496][ T5119] overlayfs: failed to resolve './file0': -2 [ 120.464878][ T5124] /dev/rnullb0: Can't lookup blockdev [ 120.589435][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 120.749460][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 120.755865][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 120.764164][ T31] usb 4-1: config 0 has no interface number 0 [ 120.771715][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 120.780802][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.788799][ T31] usb 4-1: Product: syz [ 120.792991][ T31] usb 4-1: Manufacturer: syz [ 120.797611][ T31] usb 4-1: SerialNumber: syz [ 120.802874][ T31] usb 4-1: config 0 descriptor?? [ 120.808616][ T31] smsc95xx v2.0.0 [ 120.812543][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 120.823004][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 120.843920][ T5151] tmpfs: Bad value for 'uid' [ 120.848606][ T5151] tmpfs: Bad value for 'uid' [ 121.009732][ T5106] overlay: filesystem on ./bus not supported as upperdir [ 121.021875][ T9] usb 4-1: USB disconnect, device number 37 [ 121.511178][ T5198] overlayfs: failed to clone upperpath [ 121.912225][ T5239] __vm_enough_memory: pid: 5239, comm: syz.2.1637, bytes: 21200403767296 not enough memory for the allocation [ 122.182776][ T5266] /dev/loop0: Can't lookup blockdev [ 122.223664][ T5276] overlayfs: failed to clone upperpath [ 122.281368][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 122.281387][ T36] audit: type=1326 audit(1751399967.338:26181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.2.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x0 [ 122.339423][ T664] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 122.502007][ T664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.513180][ T664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.523428][ T664] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 122.532786][ T664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.542010][ T664] usb 4-1: config 0 descriptor?? [ 122.915875][ T5313] 9pnet_fd: Insufficient options for proto=fd [ 122.949699][ T664] belkin 0003:1020:0006.000A: unknown main item tag 0x3 [ 122.959195][ T664] belkin 0003:1020:0006.000A: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 122.994912][ T5326] 9pnet_fd: p9_fd_create_tcp (5326): problem connecting socket to 127.0.0.1 [ 123.056220][ T5335] bpf: Bad value for 'mode' [ 123.671710][ T36] audit: type=1400 audit(1751399968.728:26182): avc: denied { name_bind } for pid=5366 comm="syz.2.1683" src=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 123.708483][ T36] audit: type=1326 audit(1751399968.758:26183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5370 comm="syz.2.1685" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2551b8e929 code=0x0 [ 123.847291][ T36] audit: type=1326 audit(1751399968.898:26184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5396 comm="syz.2.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2551b8e929 code=0x0 [ 123.941641][ T5399] tipc: Enabling of bearer rejected, already enabled [ 124.588090][ T5420] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1698'. [ 124.713184][ T5422] batadv_slave_1: entered promiscuous mode [ 124.729341][ T5421] batadv_slave_1: left promiscuous mode [ 125.142445][ T306] usb 4-1: USB disconnect, device number 38 [ 125.177117][ T5449] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1710'. [ 125.186617][ T5448] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1710'. [ 125.211190][ T5451] random: crng reseeded on system resumption [ 125.245268][ T36] audit: type=1400 audit(1751399970.298:26185): avc: denied { ioctl } for pid=5450 comm="syz.3.1711" path="socket:[24288]" dev="sockfs" ino=24288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 125.286833][ T5463] 9pnet_fd: Insufficient options for proto=fd [ 125.364672][ T5477] binder: Unknown parameter 'contextŔ' [ 125.757230][ T5512] overlayfs: overlapping lowerdir path [ 125.781026][ T5515] cgroup: Unknown subsys name 'measure' [ 125.789996][ T5516] input: syz1 as /devices/virtual/input/input11 [ 125.967092][ T5536] fuseblk: Bad value for 'fd' [ 126.020071][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1740'. [ 126.692842][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'. [ 126.762261][ T36] audit: type=1400 audit(126.755:26186): avc: denied { view } for pid=5592 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 126.952093][ T5610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:939 [ 126.967967][ T5614] tc_dump_action: action bad kind [ 127.054994][ T5618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1765'. [ 127.132510][ T5625] rust_binder: 5625: no such ref 3 [ 127.182849][ T5627] rust_binder: Write failure EINVAL in pid:945 [ 127.317821][ T36] audit: type=1400 audit(127.305:26187): avc: denied { setcurrent } for pid=5639 comm="syz.3.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 127.352379][ T5642] rust_binder: 5642: no such ref 0 [ 127.357893][ T5642] rust_binder: 5642: no such ref 0 [ 127.388812][ T36] audit: type=1400 audit(127.375:26188): avc: denied { create } for pid=5647 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 127.412375][ T36] audit: type=1400 audit(127.405:26189): avc: denied { associate } for pid=5647 comm="syz.3.1778" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.433647][ T36] audit: type=1400 audit(127.405:26190): avc: granted { setsecparam } for pid=5647 comm="syz.3.1778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 127.521526][ T5666] rust_binder: 5658 RLIMIT_NICE not set [ 127.714505][ T5700] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 127.751233][ T664] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 127.760245][ T664] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.287199][ T5724] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1803'. [ 128.310128][ T36] audit: type=1400 audit(128.305:26191): avc: denied { write } for pid=5725 comm="syz.0.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.370921][ T36] audit: type=1400 audit(128.365:26192): avc: denied { execmod } for pid=5736 comm="syz.1.1808" path="/dev/rnullb0" dev="tmpfs" ino=573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 128.416489][ T36] audit: type=1400 audit(128.405:26193): avc: denied { create } for pid=5738 comm="syz.1.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.436942][ T36] audit: type=1400 audit(128.435:26194): avc: denied { setopt } for pid=5738 comm="syz.1.1809" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.461120][ T36] audit: type=1400 audit(128.455:26195): avc: denied { create } for pid=5744 comm="syz.0.1811" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.488178][ T36] audit: type=1400 audit(128.475:26196): avc: denied { mounton } for pid=5747 comm="syz.1.1812" path="/500/file0" dev="tmpfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.572841][ T5753] overlayfs: failed to clone upperpath [ 129.276773][ T5807] overlayfs: failed to clone upperpath [ 129.503129][ T5817] syz_tun: tun_net_xmit 42 [ 129.507734][ T5817] syz_tun: tun_net_xmit 42 [ 129.512546][ T5817] syz_tun: tun_net_xmit 42 [ 129.517292][ T5817] syz_tun: tun_net_xmit 42 [ 129.522566][ T5817] syz_tun: tun_net_xmit 42 [ 129.527153][ T5817] syz_tun: tun_net_xmit 42 [ 129.532975][ T5817] syz_tun: tun_net_xmit 42 [ 129.537730][ T5817] syz_tun: tun_net_xmit 42 [ 129.543816][ T5817] syz_tun: tun_net_xmit 42 [ 129.548780][ T5817] syz_tun: tun_net_xmit 42 [ 129.554371][ T5817] syz_tun: tun_net_xmit 42 [ 129.559830][ T5817] syz_tun: tun_net_xmit 42 [ 129.635703][ T5831] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 129.887233][ T5846] __vm_enough_memory: pid: 5846, comm: syz.3.1844, bytes: 70373039144960 not enough memory for the allocation [ 130.159406][ T306] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 130.331113][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.342982][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.352813][ T306] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 130.354816][ T5889] batadv_slave_1: entered promiscuous mode [ 130.362122][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.369953][ T5888] batadv_slave_1: left promiscuous mode [ 130.377909][ T306] usb 4-1: config 0 descriptor?? [ 130.794527][ T306] belkin 0003:1020:0006.000C: unknown main item tag 0x3 [ 130.802796][ T306] belkin 0003:1020:0006.000C: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 131.004867][ T5915] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1867'. [ 131.235769][ T5948] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1879'. [ 131.273609][ T5950] overlayfs: failed to clone upperpath [ 132.340138][ T36] kauditd_printk_skb: 274 callbacks suppressed [ 132.340156][ T36] audit: type=1326 audit(132.335:26471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf418e929 code=0x7fc00000 [ 132.448358][ T36] audit: type=1400 audit(132.435:26472): avc: denied { listen } for pid=5979 comm="syz.0.1891" path=2F3535342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 132.808878][ T36] audit: type=1400 audit(132.795:26473): avc: denied { create } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.828005][ T36] audit: type=1400 audit(132.805:26474): avc: denied { bind } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.846945][ T36] audit: type=1400 audit(132.805:26475): avc: denied { listen } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.866233][ T36] audit: type=1400 audit(132.805:26476): avc: denied { connect } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.885489][ T36] audit: type=1400 audit(132.805:26477): avc: denied { accept } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.904824][ T36] audit: type=1400 audit(132.805:26478): avc: denied { setopt } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.924063][ T36] audit: type=1400 audit(132.805:26479): avc: denied { read } for pid=5988 comm="syz.2.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.936297][ T45] usb 4-1: USB disconnect, device number 39 [ 132.946803][ T36] audit: type=1400 audit(132.935:26480): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.080250][ T6001] mmap: syz.3.1899 (6001): VmData 29077504 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 133.323867][ T6029] rust_binder: Write failure EINVAL in pid:1001 [ 133.381879][ T6038] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 133.388215][ T6038] rust_binder: Error while translating object. [ 133.398834][ T6038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.405130][ T6038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1006 [ 133.417249][ T6040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.434257][ T6041] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 133.434344][ T6041] rust_binder: Error while translating object. [ 133.445812][ T6041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.454963][ T6041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1006 [ 133.536347][ T6045] selinux_netlink_send: 50 callbacks suppressed [ 133.536374][ T6045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6045 comm=syz.3.1915 [ 133.627703][ T6033] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.808484][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1924'. [ 133.844218][ T6075] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1925'. [ 133.855149][ T6075] /dev/loop0: Can't lookup blockdev [ 133.932657][ T6085] /dev/loop0: Can't lookup blockdev [ 133.941186][ T6088] /dev/loop0: Can't lookup blockdev [ 134.485436][ T6116] __vm_enough_memory: pid: 6116, comm: syz.3.1935, bytes: 21199898824704 not enough memory for the allocation [ 134.653385][ T6137] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1946'. [ 135.170221][ T6196] overlayfs: failed to clone upperpath [ 135.449273][ T6220] /dev/loop0: Can't lookup blockdev [ 135.465149][ T6220] overlayfs: failed to clone upperpath [ 135.754915][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.762044][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.769226][ T6225] bridge_slave_0: entered allmulticast mode [ 135.776327][ T6225] bridge_slave_0: entered promiscuous mode [ 135.783844][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.792191][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.799520][ T6225] bridge_slave_1: entered allmulticast mode [ 135.806005][ T6225] bridge_slave_1: entered promiscuous mode [ 135.971598][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.978720][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.986257][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.993353][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.075182][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.082567][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.108723][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.115929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.124893][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.131991][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.141541][ T6245] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1985'. [ 136.228082][ T6252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.228120][ T6252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1031 [ 136.262843][ T6225] veth0_vlan: entered promiscuous mode [ 136.299102][ T6225] veth1_macvtap: entered promiscuous mode [ 136.492363][ T6285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=262 sclass=netlink_tcpdiag_socket pid=6285 comm=syz.1.1997 [ 136.551614][ T6289] binder: Unknown parameter 'rÂŹ‘Ôłş' [ 136.888490][ T6330] overlayfs: failed to clone upperpath [ 136.915989][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2008'. [ 136.916372][ T6336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2008'. [ 137.091544][ T6343] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 137.219948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.232246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.243218][ T6360] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2014'. [ 137.244516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.265473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.277696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.289964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.302173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.314344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.326541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.338698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 137.377498][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 137.377519][ T36] audit: type=1400 audit(137.365:26975): avc: denied { create } for pid=6361 comm="syz.1.2015" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.436528][ T36] audit: type=1400 audit(137.395:26976): avc: denied { ioctl } for pid=6361 comm="syz.1.2015" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28831 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 137.477799][ T36] audit: type=1400 audit(137.415:26977): avc: denied { create } for pid=6363 comm="syz.1.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.522478][ T36] audit: type=1400 audit(137.425:26978): avc: denied { ioctl } for pid=6346 comm="syz.3.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.620184][ T36] audit: type=1400 audit(137.495:26979): avc: denied { ioctl } for pid=6346 comm="syz.3.2011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.645223][ T31] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 137.707902][ T36] audit: type=1400 audit(137.555:26980): avc: denied { read write } for pid=6225 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.739553][ T36] audit: type=1400 audit(137.555:26981): avc: denied { open } for pid=6225 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.763866][ T36] audit: type=1400 audit(137.555:26982): avc: denied { ioctl } for pid=6225 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.790133][ T36] audit: type=1400 audit(137.565:26983): avc: denied { create } for pid=6370 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.810655][ T36] audit: type=1400 audit(137.565:26984): avc: denied { write } for pid=6370 comm="syz.2.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 138.266225][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 138.291443][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 138.340454][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 138.360768][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.379287][ T6398] bridge0: port 2(veth1_macvtap) entered blocking state [ 138.409116][ T6398] bridge0: port 2(veth1_macvtap) entered disabled state [ 138.437005][ T6398] veth1_macvtap: entered allmulticast mode [ 138.453840][ T6398] veth1_macvtap: left allmulticast mode [ 138.470647][ T31] usb 4-1: config 0 descriptor?? [ 138.495236][ T6348] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.550621][ T6402] bridge0: port 2(veth0_to_bridge) entered blocking state [ 138.572001][ T6402] bridge0: port 2(veth0_to_bridge) entered disabled state [ 138.590070][ T6402] veth0_to_bridge: entered allmulticast mode [ 138.606736][ T6402] veth0_to_bridge: entered promiscuous mode [ 138.619494][ T6402] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.649413][ T6402] bridge0: port 2(veth0_to_bridge) entered blocking state [ 138.656697][ T6402] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 139.020648][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 139.026670][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.295351][ T6412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2819963470 (5639926940 ns) > initial count (357466572 ns). Using initial count to start timer. [ 139.569622][ T31] usb 4-1: USB disconnect, device number 40 [ 139.653321][ T6419] rust_binder: Write failure EINVAL in pid:1055 [ 140.599534][ T6430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1063 [ 140.985032][ T6439] rust_binder: 6439: no such ref 0 [ 141.081643][ T6439] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.081671][ T6439] rust_binder: Read failure Err(EFAULT) in pid:1071 [ 141.132969][ T6439] rust_binder: Write failure EINVAL in pid:1071 [ 141.183774][ T6441] ptm ptm60: ldisc open failed (-12), clearing slot 60 [ 141.268026][ T6449] fuse: Bad value for 'user_id' [ 141.294880][ T6449] fuse: Bad value for 'user_id' [ 141.573162][ T6454] overlayfs: unescaped trailing colons in lowerdir mount option. [ 142.229395][ C1] net_ratelimit: 64380 callbacks suppressed [ 142.229417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.247703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.259874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.271959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.284116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.296167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.308617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 142.320894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.332980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.345142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.392979][ T36] kauditd_printk_skb: 216 callbacks suppressed [ 142.392999][ T36] audit: type=1400 audit(142.385:27201): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.552903][ T36] audit: type=1400 audit(142.425:27202): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.612242][ T6470] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 142.688081][ T36] audit: type=1400 audit(142.425:27203): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.790414][ T36] audit: type=1400 audit(142.505:27204): avc: denied { read } for pid=6469 comm="syz.3.2054" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.879390][ T36] audit: type=1400 audit(142.505:27205): avc: denied { open } for pid=6469 comm="syz.3.2054" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 142.972820][ T36] audit: type=1400 audit(142.505:27206): avc: denied { ioctl } for pid=6469 comm="syz.3.2054" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.077896][ T36] audit: type=1400 audit(142.545:27207): avc: denied { read write } for pid=6469 comm="syz.3.2054" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.169408][ T36] audit: type=1400 audit(142.545:27208): avc: denied { open } for pid=6469 comm="syz.3.2054" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.259401][ T36] audit: type=1400 audit(142.545:27209): avc: denied { create } for pid=6471 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.349530][ T36] audit: type=1400 audit(142.575:27210): avc: denied { write } for pid=6469 comm="syz.3.2054" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.379364][ C1] sched: DL replenish lagged too much [ 146.265827][ T6518] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 146.407537][ T6521] rust_binder: Write failure EINVAL in pid:1096 [ 146.527479][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2070'. [ 146.600919][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2070'. [ 147.239400][ C1] net_ratelimit: 73822 callbacks suppressed [ 147.239425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.257630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 147.269828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.281905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.294063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.306215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.318370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.330488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.342639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.354700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.730253][ T36] kauditd_printk_skb: 110 callbacks suppressed [ 147.730274][ T36] audit: type=1400 audit(147.655:27321): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.834538][ T36] audit: type=1400 audit(147.655:27322): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.210601][ T6527] fuse: Bad value for 'rootmode' [ 149.630785][ T36] audit: type=1400 audit(147.655:27323): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.796644][ T36] audit: type=1400 audit(149.205:27324): avc: denied { mounton } for pid=6526 comm="syz.1.2072" path="/585/file0" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.382895][ T36] audit: type=1400 audit(149.685:27325): avc: denied { read } for pid=6530 comm="syz.3.2073" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 152.249370][ C0] net_ratelimit: 162983 callbacks suppressed [ 152.249395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.249430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.255504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.267533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.279533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.291480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.303456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.315434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.327371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.339381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.613089][ T36] audit: type=1400 audit(149.685:27326): avc: denied { open } for pid=6530 comm="syz.3.2073" path="net:[4026532486]" dev="nsfs" ino=4026532486 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 156.662169][ T36] audit: type=1400 audit(149.685:27327): avc: denied { create } for pid=6530 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.259387][ C1] net_ratelimit: 174195 callbacks suppressed [ 157.259410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.259449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.265530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.277649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.289784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.301700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.313602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.325597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.337682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.349642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.686756][ T36] audit: type=1400 audit(149.775:27328): avc: denied { ioctl } for pid=6530 comm="syz.3.2073" path="socket:[28420]" dev="sockfs" ino=28420 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.676632][ T36] audit: type=1400 audit(149.965:27329): avc: denied { read write } for pid=6530 comm="syz.3.2073" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.803381][ T36] audit: type=1400 audit(149.965:27330): avc: denied { open } for pid=6530 comm="syz.3.2073" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 162.269383][ C0] net_ratelimit: 182575 callbacks suppressed [ 162.269406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.269409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.269478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.275500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.287452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.299508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.311415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.323366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.335373][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.347260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.429971][ T36] audit: type=1400 audit(149.965:27331): avc: denied { mounton } for pid=6530 comm="syz.3.2073" path="/364/file0" dev="tmpfs" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.401835][ T36] audit: type=1400 audit(149.995:27332): avc: denied { mount } for pid=6530 comm="syz.3.2073" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 167.279374][ C0] net_ratelimit: 193451 callbacks suppressed [ 167.279399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.279439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.285503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.297434][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.309430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.321410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.333313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.345204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.357087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.369078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.653273][ T36] audit: type=1400 audit(150.015:27333): avc: denied { execmem } for pid=6530 comm="syz.3.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 171.182413][ T36] audit: type=1400 audit(156.205:27334): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 171.512062][ T36] audit: type=1400 audit(157.795:27335): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.289381][ C0] net_ratelimit: 128100 callbacks suppressed [ 172.289405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.289433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:1b:e8:40:46:94, vlan:0) [ 172.295522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.307542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.319908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.331486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.343383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.355371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.367700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.379241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.570384][ T36] audit: type=1400 audit(157.795:27336): avc: denied { open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.299364][ C1] net_ratelimit: 130926 callbacks suppressed [ 177.299388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.299452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.305485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.317515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.329513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.341510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.353453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.365635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.377252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.389224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.631060][ T36] audit: type=1400 audit(157.795:27337): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.309373][ C1] net_ratelimit: 138075 callbacks suppressed [ 182.309397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.309409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.309484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.315574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.327499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.339488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.351751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.363494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.379436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.387318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.849430][ T36] audit: type=1400 audit(157.875:27338): avc: denied { execmem } for pid=6534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 183.521014][ T36] audit: type=1400 audit(157.955:27339): avc: denied { create } for pid=6535 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.319386][ C1] net_ratelimit: 172240 callbacks suppressed [ 187.319409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.319473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.325518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.337475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.349596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.361623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.373625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.385906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.397412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.409402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.909645][ T36] audit: type=1400 audit(157.955:27340): avc: denied { write } for pid=6535 comm="syz.1.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.329359][ C1] net_ratelimit: 168259 callbacks suppressed [ 192.329383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.329499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.335497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.347553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.359401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.371283][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.383276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.395263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.407272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.419965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.409200][ T36] audit: type=1400 audit(159.295:27341): avc: denied { execmem } for pid=6537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 197.339380][ C0] net_ratelimit: 178883 callbacks suppressed [ 197.339402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.339445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.345522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.357503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.369547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.381531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.393806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.405532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.417566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.429405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.349383][ C1] net_ratelimit: 178397 callbacks suppressed [ 202.349407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.349423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.349504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.355490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.367536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.379421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.391814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.403734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.415941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.427682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.817803][ T36] audit: type=1400 audit(203.805:27342): avc: denied { execmem } for pid=6540 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 205.617350][ T36] audit: type=1400 audit(205.245:27343): avc: denied { read } for pid=6543 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.359359][ C1] net_ratelimit: 169000 callbacks suppressed [ 207.359383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.359448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.365479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.377497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.389513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.401461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.413470][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.425659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.437307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.449285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.692931][ T36] audit: type=1400 audit(205.245:27344): avc: denied { open } for pid=6543 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 211.461714][ T36] audit: type=1400 audit(208.495:27345): avc: denied { read } for pid=6544 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.369349][ C1] net_ratelimit: 176807 callbacks suppressed [ 212.369374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.369455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.375460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.387577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.399468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.411450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.423406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.435330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.447323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.459528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.400164][ T36] audit: type=1400 audit(208.495:27346): avc: denied { open } for pid=6544 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.760214][ T36] audit: type=1400 audit(211.615:27347): avc: denied { execmem } for pid=6542 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 215.762602][ T36] audit: type=1400 audit(213.515:27348): avc: denied { mounton } for pid=6543 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 217.379385][ C0] net_ratelimit: 170166 callbacks suppressed [ 217.379407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.379438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.385588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.397464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.409395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.421396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.433338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.445425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.457505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.469200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.389338][ C0] net_ratelimit: 171495 callbacks suppressed [ 222.389363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.389378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.389431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.395501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.407440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.419456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.431385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.443377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.455477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.467713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.399358][ C0] net_ratelimit: 178019 callbacks suppressed [ 227.399382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.399419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.405647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.417477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.429460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.441275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.453280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.465244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.477223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.489239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.702963][ T36] audit: type=1400 audit(230.655:27349): avc: denied { mounton } for pid=6544 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 232.409381][ C1] net_ratelimit: 175289 callbacks suppressed [ 232.409406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.409492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.415639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.427635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.439496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.451513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.463466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.475626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.487628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.499969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.442733][ T36] audit: type=1400 audit(234.425:27350): avc: denied { execmem } for pid=6545 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 237.419364][ C0] net_ratelimit: 167528 callbacks suppressed [ 237.419396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.419397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.419461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.425526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.437407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.449424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.461309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.473372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.485259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.497481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.991823][ T36] audit: type=1400 audit(239.975:27351): avc: denied { execmem } for pid=6546 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 241.711885][ T36] audit: type=1400 audit(241.695:27352): avc: denied { read } for pid=6549 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.331117][ T36] audit: type=1400 audit(241.695:27353): avc: denied { read open } for pid=6549 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 242.429336][ C1] net_ratelimit: 169832 callbacks suppressed [ 242.429360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.429392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.435485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.447402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.459361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.471336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.483319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.495203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.507281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.519475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.439358][ C1] net_ratelimit: 177919 callbacks suppressed [ 247.439399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.439453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.445535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.457589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.469604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.481575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.493556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.505735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.517465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.529477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.958638][ T36] audit: type=1400 audit(248.945:27354): avc: denied { mounton } for pid=6549 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 252.449330][ C1] net_ratelimit: 174694 callbacks suppressed [ 252.449357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.449384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.455448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.467455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.479420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.491340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.503489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.515607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.527319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.539361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.459367][ C1] net_ratelimit: 177146 callbacks suppressed [ 257.459389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.459430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.465595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.477613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.489589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.501501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.513471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.525671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.537370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.549410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.621922][ T36] audit: type=1400 audit(261.605:27355): avc: denied { read } for pid=6550 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.469336][ C1] net_ratelimit: 170269 callbacks suppressed [ 262.469361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.469433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.475502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.487459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.499353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.511222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.523205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.535194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.547177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.559319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.197554][ T36] audit: type=1400 audit(261.605:27356): avc: denied { open } for pid=6550 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 266.114654][ T13] bridge_slave_1: left allmulticast mode [ 266.129996][ T13] bridge_slave_1: left promiscuous mode [ 266.322985][ T36] audit: type=1400 audit(266.305:27357): avc: denied { execmem } for pid=6551 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 266.639754][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.479333][ C1] net_ratelimit: 179701 callbacks suppressed [ 267.479356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.479452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.485495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.497625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.509527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.521438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.533409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.545418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.557310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.569347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.359878][ T13] bridge_slave_0: left allmulticast mode [ 269.027864][ T13] bridge_slave_0: left promiscuous mode [ 269.131706][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.489364][ C1] net_ratelimit: 186289 callbacks suppressed [ 272.489388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.489463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.495500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.507534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.519426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.531312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.543365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.555321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.567229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.579273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.902512][ T37] INFO: task kworker/0:2:306 blocked for more than 122 seconds. [ 272.920442][ T37] Not tainted 6.12.30-syzkaller-g648383294760 #0 [ 273.011444][ T36] audit: type=1400 audit(272.995:27358): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[670]" dev="pipefs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.260099][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.268835][ T37] task:kworker/0:2 state:D stack:0 pid:306 tgid:306 ppid:2 flags:0x00004000 [ 273.642638][ T37] Workqueue: events fqdir_free_fn [ 273.647785][ T37] Call Trace: [ 273.651106][ T37] [ 273.654197][ T37] __schedule+0x145b/0x1f10 [ 273.658747][ T37] ? __sched_text_start+0x10/0x10 [ 273.663848][ T37] ? wake_up_process+0x14/0x20 [ 273.668650][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 273.673983][ T37] schedule+0xc6/0x240 [ 273.678087][ T37] schedule_timeout+0xb2/0x3a0 [ 273.682910][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 273.688328][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 273.693949][ T37] ? generic_exec_single+0x201/0x500 [ 273.699277][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 273.705197][ T37] wait_for_common+0x359/0x630 [ 273.710066][ T37] ? wait_for_completion+0x40/0x40 [ 273.715233][ T37] ? _raw_spin_unlock+0x45/0x60 [ 273.720135][ T37] ? __switch_to_asm+0x3d/0x70 [ 273.724932][ T37] wait_for_completion+0x1c/0x40 [ 273.729931][ T37] rcu_barrier+0x415/0x530 [ 273.734391][ T37] fqdir_free_fn+0x36/0x150 [ 273.738934][ T37] process_scheduled_works+0x7d2/0x1020 [ 273.744550][ T37] worker_thread+0xc58/0x1250 [ 273.749282][ T37] ? try_to_wake_up+0xdd2/0x1aa0 [ 273.754291][ T37] kthread+0x2ca/0x370 [ 273.758409][ T37] ? __cfi_worker_thread+0x10/0x10 [ 273.763587][ T37] ? __cfi_kthread+0x10/0x10 [ 273.768219][ T37] ret_from_fork+0x64/0xa0 [ 273.772691][ T37] ? __cfi_kthread+0x10/0x10 [ 273.777319][ T37] ret_from_fork_asm+0x1a/0x30 [ 273.782142][ T37] [ 277.499337][ C1] net_ratelimit: 188604 callbacks suppressed [ 277.499358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.499423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.505454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.517463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.529329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.541306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.553418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.565326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.577220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.589166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.789479][ T37] NMI backtrace for cpu 0 [ 277.789500][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 277.789539][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.789553][ T37] Call Trace: [ 277.789561][ T37] [ 277.789571][ T37] __dump_stack+0x21/0x30 [ 277.789605][ T37] dump_stack_lvl+0x10c/0x190 [ 277.789632][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 277.789662][ T37] dump_stack+0x19/0x20 [ 277.789687][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 277.789722][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 277.789746][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 277.789779][ T37] ? sched_show_task+0x379/0x560 [ 277.789805][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 277.789827][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.789852][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 277.789878][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 277.789915][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 277.789941][ T37] watchdog+0xd8f/0xed0 [ 277.789968][ T37] ? __cfi_watchdog+0x10/0x10 [ 277.789993][ T37] ? __kasan_check_read+0x15/0x20 [ 277.790021][ T37] ? __kthread_parkme+0x138/0x180 [ 277.790051][ T37] ? schedule+0xc6/0x240 [ 277.790074][ T37] kthread+0x2ca/0x370 [ 277.790107][ T37] ? __cfi_watchdog+0x10/0x10 [ 277.790132][ T37] ? __cfi_kthread+0x10/0x10 [ 277.790173][ T37] ret_from_fork+0x64/0xa0 [ 277.790201][ T37] ? __cfi_kthread+0x10/0x10 [ 277.790234][ T37] ret_from_fork_asm+0x1a/0x30 [ 277.790266][ T37] [ 277.790275][ T37] Sending NMI from CPU 0 to CPUs 1: [ 277.991649][ C1] NMI backtrace for cpu 1 [ 277.991665][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted 6.12.30-syzkaller-g648383294760 #0 93f95243d2c671158253b6b51cea62df3148036e [ 277.991688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.991699][ C1] RIP: 0010:unwind_next_frame+0x43/0x750 [ 277.991723][ C1] Code: ba 00 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 41 0f b6 04 16 84 c0 0f 85 f6 05 00 00 83 3b 00 0f 84 5d 05 00 00 4c 89 75 90 <4c> 8d 73 58 4d 89 f5 49 c1 ed 03 41 80 7c 15 00 00 74 12 4c 89 f7 [ 277.991737][ C1] RSP: 0018:ffffc900001f6be8 EFLAGS: 00000202 [ 277.991753][ C1] RAX: 0000000000000000 RBX: ffffc900001f6c68 RCX: 00000000001f6c00 [ 277.991765][ C1] RDX: dffffc0000000000 RSI: ffffffff810988ca RDI: ffffc900001f6c68 [ 277.991777][ C1] RBP: ffffc900001f6c58 R08: ffffc900001f6d30 R09: ffffc900001f6d28 [ 277.991790][ C1] R10: 0000000000000017 R11: ffffffff817401a0 R12: ffff888103679300 [ 277.991802][ C1] R13: 0000000000000000 R14: 1ffff9200003ed8d R15: ffffc900001f6c68 [ 277.991814][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 277.991827][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.991839][ C1] CR2: 00007fabf55f84c0 CR3: 0000000103eea000 CR4: 00000000003526b0 [ 277.991853][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.991863][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.991883][ C1] Call Trace: [ 277.991888][ C1] [ 277.991895][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 277.991918][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 277.991938][ C1] ? __kernel_text_address+0x11/0x40 [ 277.991955][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 277.991977][ C1] arch_stack_walk+0x139/0x170 [ 277.991999][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 277.992020][ C1] stack_trace_save+0x9d/0xe0 [ 277.992038][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 277.992057][ C1] ? arch_stack_walk+0x139/0x170 [ 277.992079][ C1] kasan_save_track+0x3e/0x80 [ 277.992101][ C1] ? kasan_save_track+0x3e/0x80 [ 277.992122][ C1] ? kasan_save_free_info+0x4a/0x60 [ 277.992140][ C1] ? __kasan_slab_free+0x5f/0x80 [ 277.992161][ C1] ? kmem_cache_free+0x1c1/0x4c0 [ 277.992181][ C1] ? skb_release_data+0x72f/0x9a0 [ 277.992196][ C1] ? __kfree_skb+0x62/0x210 [ 277.992210][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 277.992224][ C1] ? tipc_disc_rcv+0x3db/0x900 [ 277.992245][ C1] ? tipc_rcv+0x131c/0x1490 [ 277.992266][ C1] ? tipc_l2_rcv_msg+0x18f/0x210 [ 277.992290][ C1] ? netif_receive_skb+0x22a/0x7b0 [ 277.992305][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 277.992322][ C1] ? br_handle_frame_finish+0x12d9/0x1720 [ 277.992338][ C1] ? br_handle_frame+0x5a6/0xba0 [ 277.992354][ C1] ? __netif_receive_skb_core+0xf4b/0x3940 [ 277.992379][ C1] ? process_backlog+0x3e5/0xae0 [ 277.992393][ C1] ? __napi_poll+0xd0/0x610 [ 277.992415][ C1] ? net_rx_action+0x584/0xce0 [ 277.992429][ C1] ? handle_softirqs+0x1ae/0x630 [ 277.992450][ C1] ? run_ksoftirqd+0x20/0x30 [ 277.992473][ C1] ? smpboot_thread_fn+0x493/0x8c0 [ 277.992492][ C1] ? kthread+0x2ca/0x370 [ 277.992515][ C1] ? ret_from_fork+0x64/0xa0 [ 277.992534][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 277.992559][ C1] kasan_save_free_info+0x4a/0x60 [ 277.992576][ C1] __kasan_slab_free+0x5f/0x80 [ 277.992598][ C1] kmem_cache_free+0x1c1/0x4c0 [ 277.992617][ C1] ? skb_release_data+0x72f/0x9a0 [ 277.992632][ C1] ? __kasan_check_write+0x18/0x20 [ 277.992651][ C1] skb_release_data+0x72f/0x9a0 [ 277.992667][ C1] __kfree_skb+0x62/0x210 [ 277.992681][ C1] ? tipc_disc_rcv+0x3db/0x900 [ 277.992702][ C1] sk_skb_reason_drop+0xd8/0x310 [ 277.992717][ C1] tipc_disc_rcv+0x3db/0x900 [ 277.992740][ C1] ? __cfi_tipc_disc_rcv+0x10/0x10 [ 277.992763][ C1] ? tipc_msg_validate+0x35d/0x5a0 [ 277.992785][ C1] ? tipc_ehdr_validate+0x1a0/0x340 [ 277.992808][ C1] tipc_rcv+0x131c/0x1490 [ 277.992831][ C1] ? __cfi_tipc_rcv+0x10/0x10 [ 277.992852][ C1] ? __copy_skb_header+0x453/0x5e0 [ 277.992867][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 277.992887][ C1] ? __copy_skb_header+0x453/0x5e0 [ 277.992904][ C1] tipc_l2_rcv_msg+0x18f/0x210 [ 277.992927][ C1] ? __cfi_tipc_l2_rcv_msg+0x10/0x10 [ 277.992952][ C1] netif_receive_skb+0x22a/0x7b0 [ 277.992966][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 277.992981][ C1] ? br_flood+0x67e/0x730 [ 277.992996][ C1] br_pass_frame_up+0x126/0x1c0 [ 277.993013][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 277.993032][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 277.993051][ C1] br_handle_frame+0x5a6/0xba0 [ 277.993068][ C1] ? __kfree_skb+0x18f/0x210 [ 277.993082][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 277.993098][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 277.993124][ C1] ? ip6_mc_input+0x4f3/0x670 [ 277.993147][ C1] ? ip6_mc_input+0x4f3/0x670 [ 277.993168][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 277.993189][ C1] ? qdisc_run_end+0x120/0x120 [ 277.993212][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 277.993232][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 277.993253][ C1] ? ipv6_rcv+0xed/0x220 [ 277.993274][ C1] ? __kasan_check_write+0x18/0x20 [ 277.993292][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 277.993317][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 277.993341][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 277.993360][ C1] ? sched_clock_noinstr+0xd/0x30 [ 277.993379][ C1] process_backlog+0x3e5/0xae0 [ 277.993396][ C1] __napi_poll+0xd0/0x610 [ 277.993419][ C1] net_rx_action+0x584/0xce0 [ 277.993435][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 277.993450][ C1] ? sched_clock_cpu+0x75/0x400 [ 277.993469][ C1] ? try_to_wake_up+0xdd2/0x1aa0 [ 277.993494][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 277.993513][ C1] handle_softirqs+0x1ae/0x630 [ 277.993535][ C1] run_ksoftirqd+0x20/0x30 [ 277.993557][ C1] smpboot_thread_fn+0x493/0x8c0 [ 277.993578][ C1] kthread+0x2ca/0x370 [ 277.993600][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 277.993620][ C1] ? __cfi_kthread+0x10/0x10 [ 277.993643][ C1] ret_from_fork+0x64/0xa0 [ 277.993661][ C1] ? __cfi_kthread+0x10/0x10 [ 277.993684][ C1] ret_from_fork_asm+0x1a/0x30 [ 277.993707][ C1] [ 280.297283][ T36] audit: type=1400 audit(280.285:27359): avc: denied { execmem } for pid=6552 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 282.509317][ C0] net_ratelimit: 174234 callbacks suppressed [ 282.509341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.509353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.509407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.515493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.527366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.539385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.551266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.563274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.575250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.587150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)