last executing test programs: 1m6.871087616s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x5) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) 1m6.809024921s ago: executing program 1 (id=213): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, 0x0) stat(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) setrlimit(0x8, 0x0) socket(0x18, 0x3, 0x3a) fcntl$getown(0xffffffffffffffff, 0x3) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001, 0x3}) socket(0x18, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x743, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000100)=0x5, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 1m6.789247263s ago: executing program 1 (id=214): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="736177000000000000000000000000000000000000000000000000000000000003"], 0x58) r3 = socket(0x1, 0x2, 0x1) bind$unix(r3, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) accept4$unix(r3, 0x0, &(0x7f0000000180), 0x80800) (async) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x2, 0x4) 1m6.685433711s ago: executing program 1 (id=215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x80000000, 0x0, 0x8, 0x3, 0x1b, "945e1d8033b67cf5582c5ceee8705cd4de9c30"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff34, 0x1000000, 0x0}) 1m6.628965366s ago: executing program 1 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xfffffffa}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}]}]}, 0x13c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m6.594632239s ago: executing program 1 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) lsm_set_self_attr(0x65, 0x0, 0x0, 0x20) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x62) 1m3.25672516s ago: executing program 2 (id=241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = syz_io_uring_complete(0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x100, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@increfs, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, &(0x7f0000000280)}) 1m3.171106237s ago: executing program 2 (id=242): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000100)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m3.052381657s ago: executing program 2 (id=243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x54, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1m3.051960807s ago: executing program 2 (id=244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x47, {[@main=@item_4={0x3, 0x0, 0xa, "15648dfd"}, @global=@item_012={0x1, 0x1, 0x2, "ac"}]}}, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x28}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x2, 0x26}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 1m1.398183411s ago: executing program 2 (id=246): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2cc00, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001a80)=r2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001ac0)) flock(r0, 0xc) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) clock_gettime(0x0, &(0x7f0000005000)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004e40)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f0000005140)=""/139, 0x8b}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000080)=""/16, 0x10}], 0x6, &(0x7f0000000cc0)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000000800)=@ax25={{0x3, @default}, [@rose, @bcast, @remote, @null, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000100)}, {&(0x7f0000000880)=""/163, 0xa3}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000940)=""/12, 0xc}], 0x4, &(0x7f00000009c0)=""/244, 0xf4}, 0xb484}, {{&(0x7f0000000ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000001cc0)=""/145, 0x91}, {&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/195, 0xc3}, {&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x6, &(0x7f0000002fc0)=""/75, 0x4b}, 0x203}, {{&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000003240)=[{&(0x7f00000030c0)=""/221, 0xdd}, {&(0x7f00000031c0)=""/33, 0x21}, {&(0x7f0000000c80)=""/33, 0x21}], 0x3, &(0x7f0000003280)=""/255, 0xff}, 0x4}, {{&(0x7f0000003380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000004880)=[{&(0x7f0000003400)=""/140, 0x8c}, {&(0x7f00000034c0)=""/174, 0xae}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/140, 0x8c}, {&(0x7f00000005c0)=""/61, 0x3d}, {&(0x7f0000004680)=""/202, 0xca}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000004780)=""/2, 0x2}, {&(0x7f00000047c0)=""/150, 0x96}], 0x9, &(0x7f0000004940)=""/171, 0xab}, 0x1}, {{&(0x7f0000004a00)=@in, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004a80)=""/159, 0x9f}, {&(0x7f0000004b40)=""/8, 0x8}, {&(0x7f0000004b80)=""/102, 0x66}], 0x3}, 0x4}, {{&(0x7f0000004c40)=@vsock, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/180, 0xb4}], 0x1, &(0x7f0000004dc0)=""/104, 0x68}, 0xaa}], 0x7, 0x100, &(0x7f0000005040)={r4, r5+10000000}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x2404c010) syz_usb_control_io(r6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x4, &(0x7f0000000040)={@rand_addr=0x7acf, @local}, 0xc) setsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(r2, 0x8, &(0x7f0000000140)={0xfffffffffffffffb, 0x1}, 0x0) 1m0.91403532s ago: executing program 0 (id=252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) preadv2(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f0000000080)=""/40, 0x28}], 0x9, 0x5, 0xfff, 0x0) (async) preadv2(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000600)=""/157, 0x9d}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f0000000080)=""/40, 0x28}], 0x9, 0x5, 0xfff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000040)}, 0x40}, @increfs={0x40046304, 0x3}, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x12}, @fda={0x66646185, 0x1, 0x0, 0x15}, @fda={0x66646185, 0x0, 0x2, 0x33}}, &(0x7f0000000200)}}, @clear_death={0x400c630f, 0x3}, @register_looper], 0x0, 0x0, 0x0}) 1m0.884879132s ago: executing program 3 (id=253): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x15, "0d07193755f8b08c1b14b816f0d99ef9a722d2d8b7"}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x280280, 0x20) close_range(r1, 0xffffffffffffffff, 0x2) r2 = getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, r2) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/rt6_stats\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x9, 0x9, 0x8, 0x3, 0x6, 0x4, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x9, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x9, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0xeeef0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000003e080000bb297b0103"]) lseek(r3, 0x10001, 0x3) 1m0.882713093s ago: executing program 0 (id=254): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(0x0, 0x3) (async) socket$netlink(0x10, 0x3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e050602bf"], 0xffdd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x9, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m0.588551387s ago: executing program 0 (id=255): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x274, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x423}]}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "57d76c425d9d89931ee873600e7b9b3a317d3be96c3c60af3923d3e647367333749b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5ef4fc8abde53335338ee0e843f3d4d76c84053e3b31e1d20e78"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9e0c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4090}, 0x4cc0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x8a, 0x3ff, {{0x36, 0x4, 0x2, 0x0, 0xd8, 0x66, 0x0, 0x61, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@cipso={0x86, 0x24, 0x2, [{0x6, 0xc, "04e5e3a2dcb6a410a825"}, {0x6, 0x7, "822926b0a0"}, {0x5, 0xb, "746ecadf208b6feeee"}]}, @ssrr={0x89, 0xb, 0xdc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x8, [{@broadcast, 0x7a8b}]}, @noop, @timestamp={0x44, 0x20, 0xfe, 0x0, 0xc, [0x101, 0xf9, 0x10000, 0x17, 0xf, 0x6, 0xccfc]}, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0xe, [{@rand_addr=0x64010102, 0x1}]}, @timestamp={0x44, 0x2c, 0xa0, 0x0, 0x6, [0xffff, 0x80000000, 0x5, 0x8, 0x8, 0xfff, 0x1, 0x1, 0xf, 0x0]}, @timestamp_addr={0x44, 0x2c, 0xfb, 0x1, 0x8, [{@multicast2, 0x2}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x60}, {@loopback, 0x50}, {@multicast2, 0x2}]}, @noop, @noop]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'veth0_virt_wifi\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000740)={@dev, 0x0}, &(0x7f0000000780)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000009c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xa380841}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x12c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48880}, 0xc804) preadv(r0, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/137, 0x89}, {&(0x7f0000000ac0)=""/172, 0xac}, {&(0x7f0000000b80)=""/197, 0xc5}, {&(0x7f0000000c80)=""/222, 0xde}], 0x4, 0x439, 0xa) (async, rerun: 64) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async, rerun: 64) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000dc0), &(0x7f0000000e00), 0x2, 0x1) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000e40), 0x2) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80)={0x0}, &(0x7f0000000ec0)=0xc) r10 = syz_open_procfs(r9, &(0x7f0000000f00)='fd/3\x00') r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000f40)={0x2, 'gre0\x00', {0xa}, 0x8}) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) write$bt_hci(r10, &(0x7f0000000f80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {'JX!'}}}, 0x7) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000fc0)=0x8, 0x8) (async, rerun: 32) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x404c010) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001100)={@private2, 0x0}, &(0x7f0000001140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x10001, 0x54, 0x7, 0x500, 0x2, 0x80250380, r12}) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r13, &(0x7f0000001500)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1e8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x271fc0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#^\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1de}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth1\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%]--,()+(&\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(!.}\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x24000945) 1m0.588066337s ago: executing program 3 (id=256): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x198) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) r2 = gettid() tkill(r2, 0x15) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000002240)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1a31406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mknod$loop(&(0x7f0000000540)='./file0/file0\x00', 0x4, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) lstat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200), 0x4000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xf9}}, {@allow_other}], [{@dont_hash}, {@uid_lt={'uid<', r9}}]}}) sendfile(r3, r0, 0x0, 0x80000000) 1m0.587196407s ago: executing program 0 (id=257): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x39, &(0x7f0000000140)={&(0x7f0000000480)={0x18, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x0, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x0, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @broadcast}]}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r8, 0x0, 0x14, 0x0, &(0x7f0000000e80)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x2000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom1\x00', 0x63f0af0910d2cbbd, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) getpeername$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f0000000040)=0x4f67b87ab749bd4b) 1m0.565077488s ago: executing program 3 (id=258): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000140001002cbd7000fef5df25280111000100ab840a74455152650300e0ac82755cb58c818627a4733538660f5b36b7d5d7b4fc402fa44dd21cdcec7d95f5d4cfb25912c0457a75ee187a68895135837e6ae1ce4ea22b3ecba236ac2ee565fe0d808b911fb895ecf6864035ce1a05da3ab3b1e17ac8effdd924f3c6e2ac404d843efc4c8dfd19ecfe2063b3c4db396a7964704a4b1ef7214b5e2af0cf1f6107a1786ade2ced90a57c1c8a25"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000000c0)=[{r1, 0x1440}, {r2, 0x400}, {r2, 0x2012}], 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="00bf7c17", @ANYRES16=r2, @ANYRES16=r2], 0x148}, 0x1, 0x0, 0x0, 0x84}, 0x20000080) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x20}], 0x0, 0x1000000, 0x0}) 1m0.492748535s ago: executing program 3 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x7cab6ced6414709, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x48, 0x0, &(0x7f0000000380)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x62, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9"}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000600)) (async, rerun: 64) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 1m0.409012811s ago: executing program 0 (id=260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1}, 0x8}], 0x2, 0x40000000, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d010203010902"], 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) (async) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1}, 0x8}], 0x2, 0x40000000, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d010203010902"], 0x0) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 59.264309904s ago: executing program 3 (id=261): r0 = socket(0x1e, 0x6, 0x6df22a11) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x5}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x8001) (async) sendmmsg(r0, &(0x7f0000000080), 0x0, 0x8001) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "eb6369d555088c7c", "5ca2133903e38ca7d253f7f40aaabd46", "f5fcc3f5", "2deeb76ecd423b0b"}, 0x28) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x7, 0xfffffffa, 0x10001, 0x7]}, &(0x7f0000000180)=0x54) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) (async) ioctl$TCSBRKP(r1, 0x5425, 0x6) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x41fd9d6e, 0xffff7676, 0x7ff, 0x7, 0x5, "5064350e98846c374df42ec8f9d484db28e68d", 0x40, 0x495a}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xfd) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xfd) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000280)="86f437cce37dc6d9b9d9f179cd8f882a17ad9e86d29432608703dbcf0cb7a76b135dd91bbc75200840a6ea21d823820eb47075989d2bfda1f75ef2dd0212adb15982903321c783a5827eaa8a53d19b01030bb151d034c44e9ada567b3fc47cff30cf01e0a3478b91fcd8bc33d74932c91a9b32638d6bac12c476fa3139da3cf990886f96ef0e8e4ab5406d699df9532101d65e9201a54b3e03247c3a3d") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000380)='net/netfilter\x00') socket$inet6(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000003c0)={'wg0\x00', {0x2, 0x4e23, @multicast2}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000003c0)={'wg0\x00', {0x2, 0x4e23, @multicast2}}) sendmmsg$inet6(r0, &(0x7f0000004100)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x7fffffff, @mcast1, 0x2}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000440)="f1c108e4ddf5e76f2fd1f9cc5d168496400121cbf38499b9ff3ab47dbfaa56565c1cd8aa10758f40621323b4868d71784978343f3830465597688d01eba51247c60e526a37aeb76fe2", 0x49}, {&(0x7f00000004c0)="e2806cd275be07d3a80097fc97bb6d64d9", 0x11}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="775e07652929d57f8b36002174a90f06ce6e45e814a68915a5d4a5039096118d574d94a32c635db9d490713455fb41683c46141d70551a914069278d76f7dcf39eab6a58c5cd6dab34d3a7888c", 0x4d}], 0x4, &(0x7f00000015c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3, 0xa, 0x2, 0x4, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x33, 0xe, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1c}}, @pad1, @generic={0x7, 0x6, "c8c6affe0bdb"}, @calipso={0x7, 0x58, {0x2, 0x14, 0x7, 0x800, [0x8, 0xffffffff, 0x8, 0x2, 0x9, 0x400, 0x8, 0x46ab, 0x0, 0x800]}}]}}}, @dstopts_2292={{0x170, 0x29, 0x4, {0x2b, 0x2a, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd}, @generic={0xff, 0xf1, "d73ae940c6669dc2edb984fe53701197a2917498881f2e3c99534e1c80dbe36cc562bf978bba8259ac8dbec06230337e3b5837388afc4a0fddebcab8db2ebdb6e30c7ab7ef9de61cce4e163fdd129f32f84d449d6cf15884ef4715dc16b78c984dbe3dcf366c2774f975d2223632810ba12131a57fbd381df2b7e50bef973ca27dfb982ef2676bd436ec0babeca96e872ff107bade31228eb0832d5e121f2ed5ac18fc467d26d742852d3665d12e932d1a4fe1bebcf4ea168c91ae77ebb907c6cea632a4181a746c99fbf77163881d334c3e1d97ec2c78e2f2f17721559214b6097cbce78831a8aeb60424d28acb020197"}, @generic={0x4, 0x53, "9fc79eda481dc2d1dd762c649bfa391bc449a0e9b0bfd408d29e849cd80b27bb06c50d08f972d463caa92aeb78d346b3b632529ef36727b83f207604cbe80c4c978f41f7adafa89186a182610d0988810ffe5f"}, @ra={0x5, 0x2, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1bd04651}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3b, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xf3}]}}}], 0x2e0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000018c0)="6a2e93eac7ad909b86ecc9fe29d02c76fae7ff122af10bc57b434b3f5bb7762148e4eb83d57bcb24455ca25c8934ba20ef1cbf7dc98ca70f7c07bd4401f7234318f40d2f310a9011d533d8a140ffd4d71d865974ea76d2938704984fe56d7e3d1dd89c1c0ad8ef97d71a3013d647977e6b44d6949646f42c0bf70e6032bf76472795687a4a391cd03e9ed9bfecd1cbc746e6570e07fb8c42aab9d2b6b1e96f2109fc28b6845b95963ab3e94d", 0xac}, {&(0x7f0000001980)="1ddc9f7bcfae907dd983", 0xa}, {&(0x7f00000019c0)="6c2d731f1c2eb7d07297406165c35d139c0712d48fc111f809334d767dada15700a180a88b9c4ba5827a6703aa051566dad4d466e50be787dec7307546d1311e62020b7e3b3402c629615f3c44401eec01eab8356b01b94e6d215a1e5a464ffa31a80b85ae3271fb5d39cef68f331f79fc129a829cffd38969f24a193b8539b4fcbb2d08648d89b0d54d7bef25581e74d19945e181e82a7956a60306e3f76a0a224ca1f608c20516ac0868897892f4308b87ea79d64bcb0487de0edca38306da815d778885252307b625f778596a0a2e8f086c8e446e128e518cbf4906a47007521aeb1aa905a34cf81d881ef121a48bbd78b81653ae14422af1f5918dac16716b3e87483a738ca84790836e51a57bfcb02336efdc03b7e878204e4486384d28169d9efa20c183c4395dd3151557f5bf1ad27ff6d5f03745de9d3fb1a393b6d43ae3a673eb81e4f2ae9acef6834ecba3f2c5ccb5a926acd50ddd18928fe3338514ba2ad9ab70cca25ab9b8ea5f51f4ffa2c32eac070f407b83de49cd5603fa0176280e65a2bd40d8cd25b41df7e8d6a31ee982c8820c88ae77bf439e8c37769c68a546af1015d3f227e74189f2adf694da4fc29bdd08d53008b8cde3cdc4d14fe801a9325dc1cfa0805203543845df8f0f3c7d67a544a2ec935e35738016af0b26b34c8583529d4499e19d947ddf45b00627f109a103798ec2cab10f228a718af83cb5d5eff0ca1e1a1a88ccabbebfedb902bcf28c110823ee3cbd8e665f06adbc276b5e85447d012295f18de25ff73af9e165e5e178cf8bc0c59f7ecee70ea6a889f489f3fda6bca1743479648ce0c10f45008213665193822c74521bedea38d066e5e8e460f71e6d4d3f7e55ecf6d08d268eb99bbd69d6d6a830369701a8f5a1226cb94952b4c3f5ebe2f3d36b69d5d64b8ff47189441fa0fd9afaef290639a62a67befd85d3b210d7fb88deaa24788720dab1b0ca63401381059cd042a7273ce6d471ce4f033269d7af5c16ec3dcd6182844532314b3892ca6c3ed971fadb4b3c44e2f42ef5783a0f4d5bcb9e8b81a56b95ce6daeccf4eb9ce8818ce8e968fca81ef9cca71a26962a5429a117bafd12e3b68c21baf452fd29f62c50b298414a308b4218af19be48e5b416f8708d96b629b6afcc97d3cf8de1def73153674a54e5fc0eea84c4c8a848e4919f7373cc1e61a048370740d1ad9606c2257bfe4cff978d3bf69f0f9824059ac5f797ea9b5b0756c1ec9b49703fbb91c5b6a3140d6d2c20ae7b1e82a233a9bd458e8dc1c3c8201941a981989361359c85868a40a4b87dbe7a76567bf3b96ef41d49bacdf9fe72e011e4a95be08f29698a6b12303832b2fa86227d6cbdf9cc6b65edc54149eb6a92dc810eca8711b3a5056011eeb4f670e72602720a185d47e86327af1519c5ce05c6ee7ddc6c377eadd992423af326eb1aa5e340a0f3dc2c26da2e827cc4b8bf43fb01a1d722de630d21ee7266a2ffbb16144df05a75a5007d2f712f41a87dc7983086bb9cac1d7e58352da87cb34902ae39016adc6cb12b765cd777036e7145ef9d12641286925957071b11fd6b09d4368f3902265aeb3663b281e568b74ebc8a1a4cfec2fdd5e1940125fe44a7c3c666db06699d6b0530487425aedd0eefd31102274aaa4268d3288c2d9c346a4dbdaa0c3f503d390895ae0112674b4feab800d1e1c7e9fe1f2ec0100b34f29e5fe45bc472dcc7c82dcea7bf7762e2bd5ec16b95448b5443652902026796bae26b5824dc2e35d2c072f3a67871cae6c4ff856459b04691aa16f841d78d2de8bb432d8c024cc130ed4333068c83b6bac214019dcb704681b474e2c9f71cd5aab8aa8d30114b05d441fa8dc0240e2c40c825830048459929ed40113e57a06c0b8de4c1aa8d5e7c34d7bb6ad924d3b929221fdfd01be7cd5fc70999ac0244c0df00168f3fbb442c8aa8b1e783f81ed60e0f4fbf6058492e542384e262b3641927b2e8d9fea2ca65bd0be38af88d72b394fbd079763272da392b4de4287ac78cf832f4ebe2fc86eb12538a4c65c7ffa06952cbed05e2147f21ebd00e58d47c10b34be678f3f670f05f0d04baf3b8a7f5d04ea5b5a64760bb4c0683bf945d628c6f50e97f70e6b4c62d88ec236f9090285983038499ce5dc6c933f50f792d02b16f9f41beffdaaf2b3a4b180a158b925a26e72e233e71aba7a2bf16adbe729fb3efed740f87c048dc037a81e048b6bc5e1f95233d69b220158ce5f49f932035fde036380daa03ba4fb1873428756606b685d15be988990a3be96c5569446c670ead4f0e3985b45c88c13bf43074db84c08498bf5a8b405d1b4f690cbf09726b85790dcb65d3ae48a4a3fa240211d4e3a6c1a47a8009855e6612da893cbf2535ee66defe7eb3789d4f46ea56c341fff2cbfb6a77e388f4609972a5ade25380d9fd0c7327027d3ee43ada0d2234c0d9b9e4c70207709240f533ed35ef98bb18b6ec9d94140c90acb1fd275237cc33ba0c409b5e24fa8297315e08965b15af9c2dc493a640ad91d91f9b00d1c9a3108b944e015958418fe0a1982a5979d91a20c085f886cc89e8b04d736fd08ebd6d35d482714dafe0a4cb4b9d1f69a484e3af4d77418bed481997e8f2d5ffd89b1804eb1cc2dfbb9d665a494cf9c87f76000293ef71c8fee8ebd55b3b282d9f5cf6c82322d0c250ab04f5fadd3c361dbd2891b12f792e25f06bd646315d49f7cce3189eac4d9e91cbad19477292e30b6359b240ef33a666240d6801933dce45636192df5f1186bece9a9a46fc16508403c585bfd1cb11f9b69fcc20eb42248d30db7157e70d5b32885ac66c395e5eef84e725f3e096b0db05135da5b23ed1bfe7262ecb4be76d0d8b3e0387eb2875365f47fb4604728f4906f7088344b193e2c1dcaf3d97165e94458fa5584087d0e021788d9c4899e8d14c3800d101a62e146d91c11691d39e3b72d1486c9a7af38f231bcfc143d35acd1fc6589279250c8d131573d8a7fa44108717775eb126cb0f52c81ab65abb039ebb771586849812d39502935dbad79fec3c59977cfdfb3fdb5dce957c121045d1d86b4dd2fe58bd166574e4efd1c49d6b8ea28cecd31651e98aed19157ee386ab3bce6869f9f9c60c81c96068c6c08e8fefbd18a3ebff93378ad0c8a08cae1fbf4383f62207380a81f8df4a46446a8b6b85f7fce870544ee396a346f7d0f5d8c10637a36b0f3383600159cbcbb5851030e58b72c3b88dc80d7f0c5b1d322ae5ecc003dc52cdd57f38775e39c6426eea73d2fb57a2f5ea5e753641b6ad4a0b3e61118474e0324da904a0fa3171644aa159648c2d34be3695c6d08548aeb425e7aacc1f834694edb1bfc3dd27105da2f7554fb7f8b79a0f81213cb043376b4e3af2a16036125e83ef6f20de5d69b7b313452d9c18aeb1de11ebedb5c2185540a329d4eca70aebcd8afc4893a317ed60bf2575a4b7eaf268fc42f915c15c305cb2e585268a7fc2d3efec018fd836d75e9f23119618b563c2793c0c845d50d98fbe777bc41853cb189ef02e52f3ea714effcac4387dd45f3d55c8a9899079c0738f7bd75b3d2d45b94c1ac7ae41f3446e86a46f1f7e15fdf33fe6bab399bafe5bec353e4d8d050186d22b6e11ebba2eb8e8b4865b49d8681e5a83fefd1e0b915368a0129f1c43e41a778f50a8989ebaa63dc7bbd8f0ae3f913d2eecc6ee12081426a76dc132df7290f67cecfe519395223272e9cfa66e6f09231007bf242c83edecfe4c583a3c692ef242feeceeda4ecae2808247b977992f6310e7ad7aa5039f845f7e2e6d1a54dff27f7dafcc53ebf47c15fb1d594284de5dad181855e7eb482edfecce363010fef50f576ced6956756c3afcfc843ca58de242b51c4532f1dbfc5a9a271d9c4d75950e3fa0e11727797bfbd01240164e0bf4fcbfc3cf06fab71fd736110a7b2d1d54bb3c8e79623e5dde1e1e6347114497a2d607e1c4bfd7ca1ac272d788780fc3ffc1b01a1c607a8debdbf256f1780595be5cfb37b278694d782c377d7d5110739f5262494462751dbfed980e888c9833fd0e32979f6993936744fe5e4300e1c2f23e87b791a39818450b32df84ea6d3a9d7589481b84be7b0ef376c5217444ef429b6e4085669a6d60bef9a4fa3027c8a32984b59a38e58c2bf304f728ecc54334040b191edef0a5f8e8ecab622c51eaa6c305c55e8079d39e48357f64ed2f359e218b4028b289e29d7d96e486d140922032c09aa459b791670e9b330ee3bf94fc03201285fde505212af6b3d5ce7a5f6183c402b83758caa350e8781c2ce4d8073c8f62dbbd67badc957bedfcfce4295f4dd0feeaaabef1436444a9e209e43484a466e0179c1e76ee2c588b8ceb3a88000b450d6af5ef390466a00baabd91a485ecafef2124c668183c64b552dc8e663b49dcf3c304d605989748d53ccd46e44dc5bd748ae4d71a37d6637d7441f321a9acf221728fff844e8359c0e586703f650c877503493da72f954ebf9e8a929f7240998d4c17ba020e735d15e7df4a9f57f3d11c5354de2354e6ccf4a5677e027120caf92c27f3164c65a91e8bd5bc476692c15659f3a2ac458817dbeed3f65345a6e0af6cac9f75e0e9d6d021efff33d41f1eae75f2239911ea5655aaa81322a4e4b19ab8889c6a659f5963cd2aad6ddede339056a32bd4e09e6d41baa00b41862054e449c7059599c864b21e0cfbd939b6babe67401f2b2b4060c9e58797c77639c0ab1209771bd188537528d961d09640ac2725926f6b34d578e122f9c885a044b07ef61cdbe6404e4d6f307ff9e32277d756550162b423b7fa90e78165e9ba55a6813461aff2ddaaaeecf58305f2e359c70e81ed1dea6040da4b38eb1b2f9c61433aed6c97b5d36712cc11affd32f2d58addefc2347aefa681e5a27f1248ad8a8a7185e7e8466752450ff587297041f8d85b9cc43f38227f452e09f80f5abdf0dbdddb176eb19fbb4d395032c238eeb4e7661606190034da8ed10149b8a35c59d4b8e65b7f4f8d15e17e416feb4726affdd079a82d9553514bbc8f1f145330e3a39111cf76ca1d151dd22ee9d6aa6211607c97d2a9a2132fadea845e9e1c0bf9505e171ed18739c7736eada41c94ca964b45a8f80e9945c83c2944a339c2535a42645e7d5c12bc1c4d950e06d2d0c130a78c3b5dd6b87cbb3c4a6b15a95930f375c10014f3a5186860dd9acbb5e98d2036be1d52d89d1e35363bd8300c06fe2866310471262150004c8408ca8fa11b4b51655eb4d5aff1381c65a9a016387bcfc84de2c5c7cd11387cbeb3e864600d6afe15555d021f1dcbcfb951e8a8d31d33194aeb9b488dbb7c3f2bb5793875664465df2718bf9e46ee7becc3e3d235798841337dd009277391f076b04be810962d76280dc57ed3365a0a86e5c0725c68f1a929f76dbf7afbfc70d6914c667be6f23afc84b47bbc5235f10ca5253c1c5142c1cc2837488a8ce900cfda8391733b2aa7c5503bb8e3728f1c1e16c0c7c0787c3104ce456274399f2c0a53f11017a086eb980789523db12a5d0836194759f01515f05340f26f81e06e5b5767eee20febb1dc02203f1fe57932456532932c224dcc48c7956da92672ab5e153a00a246aa508bc374dc5bf7c9e16e7ed05030e6ccca47813a9b15fe3fa74de5a38338b053251e4f447aeb840cc9633f19d11eb6b4ec33770450dfcaccb8c53d56da8c2ce4429b370885a8ce96c77816d1a8d4d7aa7e534bbece930559ba8d9cc015c40a036631f6b24af9cdf47792f6c394959a219ffc0ff50ce625", 0x1000}, {&(0x7f00000029c0)="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", 0xff}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="dd2dbedaa9d202fe716cb74b29671ec38ef88ce90c88a7159591982af20294411c0d47", 0x23}], 0x6, &(0x7f0000003b80)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffe}}, @dstopts_2292={{0x180, 0x29, 0x4, {0x1d, 0x2c, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @generic={0x9, 0xe4, "61a238a38b1be449282efd6e422ab403f20ed4bd080b7173e06a14b2eaf359def51f2d564bad9f0476d413b27de601bf9af77e69351c2b2922a8d58972858f4c2ecfb2cf7ae4a4c1e0a8a8be87a7c6ce03dd2c85eeeb1aa670a143f4e25602115f2a5d08574d76784508a2704574cf90275dc3fa98b87aeabc14c005df2b29a343b3b9d96bb36e2be6bee4eeada67d846d70bdf09a006e8f57f60c5ddacf611d19848ae6b4c56addbbe5891219154ee4a7d313f852cd60768ff667839741e82684294bff878a76c6c1048bb299af18064f6a92d4e94303a1f01c12f36b98f09d3c875eb4"}, @pad1, @jumbo={0xc2, 0x4, 0xae}, @jumbo={0xc2, 0x4, 0xffffff81}, @calipso={0x7, 0x58, {0x1, 0x14, 0x2, 0x79, [0x2f, 0x2, 0x7, 0x8000000000000000, 0x5, 0x184c, 0x0, 0x2, 0x8, 0x4]}}]}}}], 0x1d8}}, {{&(0x7f0000003d80)={0xa, 0x4e24, 0x9, @remote, 0xfffffffd}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000003dc0)="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", 0xfb}, {&(0x7f0000003ec0)="fc7b8c3d4e917e92932f0be0f6ba357de9469d3c7e0a", 0x16}, {&(0x7f0000003f00)="a00350c543f4ec862612e0d6f6be7734589f0b1a1d03781d63eccc5b8f17cc7ea0b843189dd4878597ba80777dcf0b1931d76de56488f245e08830b9f5a1c91ddb9075d4e26353141f7f1914d789e810e801859528162c126c38c2a5cc84fe6974cc97a0c92280b4085163114f1b810daebc09203013b05f6529b75e1f84666d1008f7f72506954ffecfcb22fcd2e1f3da17556de86dde24fdf62376a40896306b1c3983d5588c", 0xa7}], 0x3}}, {{&(0x7f0000004000)={0xa, 0x4e22, 0x3f9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000004040), 0x0, &(0x7f0000004080)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x22}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x58}}], 0x4, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000004200)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x1}) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000004240)='batadv_slave_1\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000004280), 0x202, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004280), 0x202, 0x0) r6 = syz_open_pts(r5, 0x1043) read(r6, &(0x7f00000042c0)=""/237, 0xed) (async) read(r6, &(0x7f00000042c0)=""/237, 0xed) mount(&(0x7f00000043c0)=@sg0, &(0x7f0000004400)='./file0\x00', &(0x7f0000004440)='omfs\x00', 0x9, 0x0) (async) mount(&(0x7f00000043c0)=@sg0, &(0x7f0000004400)='./file0\x00', &(0x7f0000004440)='omfs\x00', 0x9, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000000000000001) (async) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000000000000001) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000d93000/0x18000)=nil, &(0x7f00000044c0)=[@text32={0x20, &(0x7f0000004480)="0f019b371f0000f3abc4e2a8f5ca8fc978db7a9ac4e16c56f866bad104edf30f1efc6e670fc7b300000f20d835080000000f22d8", 0x34}], 0x1, 0x1, &(0x7f0000004500), 0x0) r7 = openat$cgroup_subtree(r4, &(0x7f0000004540), 0x2, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000004580)) 58.203986881s ago: executing program 0 (id=262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="e5d0dfcc6054e905fd25b42c5cf96da6564ba7e82056e2ecc84ebdc834fdaeec5c7493816aed115e0ea7ba93ba480a4bbc45dabd1ee98c2bc45e48ae84ae18ab5c7e759caab284302f3bbb2370123fc217887a4a5f66c09e66bf261c96b431950d621167717ccd237d02bb35", 0x6c}, {&(0x7f0000000180)="d9bd780422508af47a222e2c1ccdd48f03ba02b74bbcca3fa3de7b02a7a7cd62890a48967bfa2c0e038453b77369c853ac9fdb9f0375fdf1a828bd53bc49446889cbb0ab63756596638a88daf24f0c5a6dba34e584c104909d0c18ab7acc117791cad024bb8d800f625a2277725ea50294ed65f03e9b3632f433d35a40fc3090905bef9a32e853c521277c576931ea7d9981564f637ace21279002652f2d7694e1173f0cc386c4a191ea6afcb1", 0xad}, {&(0x7f0000000080)="e5b2cbd8df139521094701a254f0c42267fa53fe3b33b1d40452", 0x1a}, {&(0x7f00000002c0)}], 0x5, 0x6, 0x8, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 57.373616058s ago: executing program 2 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x800000, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 55.394575579s ago: executing program 3 (id=264): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unlinkat(r1, &(0x7f0000000080)='./cgroup\x00', 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000040)={{0x77359400}, {r3, r4/1000+10000}}, &(0x7f00000000c0)) 50.82314289s ago: executing program 32 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) lsm_set_self_attr(0x65, 0x0, 0x0, 0x20) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x62) 28.660048471s ago: executing program 33 (id=262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000040)}, {&(0x7f0000000100)="e5d0dfcc6054e905fd25b42c5cf96da6564ba7e82056e2ecc84ebdc834fdaeec5c7493816aed115e0ea7ba93ba480a4bbc45dabd1ee98c2bc45e48ae84ae18ab5c7e759caab284302f3bbb2370123fc217887a4a5f66c09e66bf261c96b431950d621167717ccd237d02bb35", 0x6c}, {&(0x7f0000000180)="d9bd780422508af47a222e2c1ccdd48f03ba02b74bbcca3fa3de7b02a7a7cd62890a48967bfa2c0e038453b77369c853ac9fdb9f0375fdf1a828bd53bc49446889cbb0ab63756596638a88daf24f0c5a6dba34e584c104909d0c18ab7acc117791cad024bb8d800f625a2277725ea50294ed65f03e9b3632f433d35a40fc3090905bef9a32e853c521277c576931ea7d9981564f637ace21279002652f2d7694e1173f0cc386c4a191ea6afcb1", 0xad}, {&(0x7f0000000080)="e5b2cbd8df139521094701a254f0c42267fa53fe3b33b1d40452", 0x1a}, {&(0x7f00000002c0)}], 0x5, 0x6, 0x8, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 15.693322365s ago: executing program 34 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x800000, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 35 (id=264): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unlinkat(r1, &(0x7f0000000080)='./cgroup\x00', 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000040)={{0x77359400}, {r3, r4/1000+10000}}, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 24.984167][ T36] audit: type=1400 audit(1754350132.840:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.985336][ T282] cgroup: Unknown subsys name 'net' [ 25.007363][ T36] audit: type=1400 audit(1754350132.840:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.036786][ T36] audit: type=1400 audit(1754350132.870:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.037088][ T282] cgroup: Unknown subsys name 'devices' [ 25.243008][ T282] cgroup: Unknown subsys name 'hugetlb' [ 25.248966][ T282] cgroup: Unknown subsys name 'rlimit' [ 25.423582][ T36] audit: type=1400 audit(1754350133.280:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.449617][ T36] audit: type=1400 audit(1754350133.280:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.473908][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.475938][ T36] audit: type=1400 audit(1754350133.280:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.509386][ T36] audit: type=1400 audit(1754350133.340:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.516305][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.537280][ T36] audit: type=1400 audit(1754350133.340:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.572728][ T36] audit: type=1400 audit(1754350133.370:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.599462][ T36] audit: type=1400 audit(1754350133.370:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.341751][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.349245][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.358375][ T289] bridge_slave_0: entered allmulticast mode [ 26.365263][ T289] bridge_slave_0: entered promiscuous mode [ 26.382198][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.389456][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.396595][ T289] bridge_slave_1: entered allmulticast mode [ 26.403010][ T289] bridge_slave_1: entered promiscuous mode [ 26.498133][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.505379][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.512973][ T293] bridge_slave_0: entered allmulticast mode [ 26.519857][ T293] bridge_slave_0: entered promiscuous mode [ 26.527868][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.535534][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.543045][ T293] bridge_slave_1: entered allmulticast mode [ 26.549468][ T293] bridge_slave_1: entered promiscuous mode [ 26.640828][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.649407][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.657335][ T295] bridge_slave_0: entered allmulticast mode [ 26.664284][ T295] bridge_slave_0: entered promiscuous mode [ 26.674777][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.682215][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.689288][ T294] bridge_slave_0: entered allmulticast mode [ 26.696183][ T294] bridge_slave_0: entered promiscuous mode [ 26.707198][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.714691][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.722250][ T295] bridge_slave_1: entered allmulticast mode [ 26.728542][ T295] bridge_slave_1: entered promiscuous mode [ 26.739564][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.746652][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.754158][ T294] bridge_slave_1: entered allmulticast mode [ 26.761252][ T294] bridge_slave_1: entered promiscuous mode [ 26.799636][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.807300][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.816181][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.825095][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.916312][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.923818][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.941255][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.948334][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.956684][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.965044][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.046817][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.055684][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.068452][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.076133][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.086846][ T289] veth0_vlan: entered promiscuous mode [ 27.116923][ T289] veth1_macvtap: entered promiscuous mode [ 27.138093][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.145702][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.166344][ T293] veth0_vlan: entered promiscuous mode [ 27.184776][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.192322][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.201236][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.209527][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.219636][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.227009][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.252939][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.263936][ T293] veth1_macvtap: entered promiscuous mode [ 27.290214][ T295] veth0_vlan: entered promiscuous mode [ 27.326593][ T294] veth0_vlan: entered promiscuous mode [ 27.349878][ T295] veth1_macvtap: entered promiscuous mode [ 27.359706][ T294] veth1_macvtap: entered promiscuous mode [ 27.398654][ T336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.436028][ T341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.469239][ T341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.670998][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.720847][ T64] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.842156][ T9] usb 3-1: config 0 has no interfaces? [ 27.849494][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 27.859301][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.867802][ T9] usb 3-1: Product: syz [ 27.872262][ T9] usb 3-1: Manufacturer: syz [ 27.877188][ T9] usb 3-1: SerialNumber: syz [ 27.881862][ T64] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 27.881926][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.895107][ T9] usb 3-1: config 0 descriptor?? [ 27.905264][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.921285][ T64] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 27.936147][ T64] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 27.945745][ T64] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 27.954496][ T64] usb 1-1: Manufacturer: syz [ 27.960156][ T64] usb 1-1: config 0 descriptor?? [ 28.114612][ T31] usb 3-1: USB disconnect, device number 2 [ 28.164660][ T351] ======================================================= [ 28.164660][ T351] WARNING: The mand mount option has been deprecated and [ 28.164660][ T351] and is ignored by this kernel. Remove the mand [ 28.164660][ T351] option from the mount to silence this warning. [ 28.164660][ T351] ======================================================= [ 28.202373][ T351] binder: Unknown parameter 'contextÀ' [ 28.242458][ T359] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.404907][ T64] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 28.412510][ T64] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 28.422442][ T64] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 28.662132][ T31] usb 1-1: USB disconnect, device number 2 [ 28.770731][ T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.910744][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.150733][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.180938][ T387] Zero length message leads to an empty skb [ 29.204413][ T389] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 29.213203][ T391] usb usb1: usbfs: process 391 (syz.1.20) did not claim interface 0 before use [ 29.260966][ T31] rust_binder: get_current_thread was called from the wrong process. [ 29.393825][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.431395][ T400] netlink: 80 bytes leftover after parsing attributes in process `syz.1.22'. [ 29.441874][ T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.441902][ T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 29.540727][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.801611][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.920867][ T64] usb usb4-port1: attempt power cycle [ 30.040721][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.170798][ T9] usb 1-1: device descriptor read/64, error -71 [ 30.211255][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.270759][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.292003][ T64] usb 4-1: device descriptor read/8, error -71 [ 30.362148][ T31] usb 2-1: config 0 has no interfaces? [ 30.367994][ T31] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 30.378504][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.387922][ T31] usb 2-1: config 0 descriptor?? [ 30.410762][ T9] usb 1-1: device descriptor read/64, error -71 [ 30.422105][ T64] usb 4-1: device descriptor read/8, error -71 [ 30.594732][ T31] usb 2-1: USB disconnect, device number 2 [ 30.650825][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.660816][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.682134][ T64] usb 4-1: device descriptor read/8, error -71 [ 30.790786][ T9] usb 1-1: device descriptor read/64, error -71 [ 30.803441][ T36] kauditd_printk_skb: 103 callbacks suppressed [ 30.803460][ T36] audit: type=1400 audit(1754350138.660:177): avc: denied { connect } for pid=429 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.831702][ T36] audit: type=1400 audit(1754350138.660:178): avc: denied { ioctl } for pid=429 comm="syz.1.24" path="socket:[4371]" dev="sockfs" ino=4371 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.832443][ T64] usb 4-1: device descriptor read/8, error -71 [ 30.867458][ T36] audit: type=1400 audit(1754350138.720:179): avc: denied { getopt } for pid=429 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.971007][ T64] usb usb4-port1: unable to enumerate USB device [ 31.030795][ T9] usb 1-1: device descriptor read/64, error -71 [ 31.140913][ T9] usb usb1-port1: attempt power cycle [ 31.228006][ T36] audit: type=1400 audit(1754350139.080:180): avc: denied { read } for pid=435 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.480778][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.490738][ T432] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.502159][ T439] FAT-fs (rnullb0): bogus number of reserved sectors [ 31.510245][ T439] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 31.518785][ T36] audit: type=1400 audit(1754350139.370:181): avc: denied { read write } for pid=437 comm="syz.1.26" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.543054][ T9] usb 1-1: device descriptor read/8, error -71 [ 31.561845][ T36] audit: type=1400 audit(1754350139.370:182): avc: denied { open } for pid=437 comm="syz.1.26" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.582904][ T438] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 31.596973][ T442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 31.597693][ T442] rust_binder: Read failure Err(EFAULT) in pid:18 [ 31.650673][ T432] usb 3-1: device descriptor read/64, error -71 [ 31.656497][ T36] audit: type=1400 audit(1754350139.510:183): avc: denied { setopt } for pid=447 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.722364][ T9] usb 1-1: device descriptor read/8, error -71 [ 31.890978][ T432] usb 3-1: device descriptor read/64, error -71 [ 31.930761][ T349] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.960702][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.980707][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 31.981778][ T9] usb 1-1: device descriptor read/8, error -71 [ 32.092077][ T349] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.103766][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.115545][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.121787][ T9] usb 1-1: device descriptor read/8, error -71 [ 32.126569][ T349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.133611][ T432] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.149816][ T349] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.166200][ T31] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 32.175565][ T31] usb 4-1: config 0 has no interface number 0 [ 32.182695][ T349] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.191441][ T31] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 32.203201][ T349] usb 2-1: Manufacturer: syz [ 32.208290][ T31] usb 4-1: config 0 interface 214 has no altsetting 0 [ 32.215947][ T349] usb 2-1: config 0 descriptor?? [ 32.222831][ T31] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 32.232367][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.240471][ T31] usb 4-1: Product: syz [ 32.244695][ T31] usb 4-1: Manufacturer: syz [ 32.249340][ T31] usb 4-1: SerialNumber: syz [ 32.255472][ T31] usb 4-1: config 0 descriptor?? [ 32.260837][ T9] usb usb1-port1: unable to enumerate USB device [ 32.261405][ T446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.280801][ T432] usb 3-1: device descriptor read/64, error -71 [ 32.478529][ T446] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 32.520855][ T432] usb 3-1: device descriptor read/64, error -71 [ 32.625145][ T36] audit: type=1400 audit(1754350140.480:184): avc: denied { mounton } for pid=452 comm="syz.1.30" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.628080][ T453] overlay: ./file0 is not a directory [ 32.656659][ T432] usb usb3-port1: attempt power cycle [ 32.824417][ T36] audit: type=1400 audit(1754350140.680:185): avc: denied { map } for pid=458 comm="syz.0.31" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.849337][ T36] audit: type=1400 audit(1754350140.680:186): avc: denied { create } for pid=458 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.000725][ T432] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.022045][ T432] usb 3-1: device descriptor read/8, error -71 [ 33.151910][ T432] usb 3-1: device descriptor read/8, error -71 [ 33.390824][ T432] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.412187][ T432] usb 3-1: device descriptor read/8, error -71 [ 33.542223][ T432] usb 3-1: device descriptor read/8, error -71 [ 33.601326][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 33.613914][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 33.650894][ T432] usb usb3-port1: unable to enumerate USB device [ 33.932823][ T446] rust_binder: 21: no such ref 0 [ 33.942148][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 33.954874][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 33.967087][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 33.979557][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 33.985590][ T477] rust_binder: Error in use_page_slow: ESRCH [ 33.992634][ T477] rust_binder: use_range failure ESRCH [ 33.993632][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 33.999555][ T477] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 34.006109][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 34.018573][ T477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.028463][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 34.039740][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:31 [ 34.051324][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 34.084518][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 34.096388][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 34.109509][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 34.123237][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 34.136505][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 34.149095][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 34.161532][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 34.168680][ T481] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 34.173578][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 34.196593][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 34.209109][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 34.221261][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 34.233341][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 34.244902][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 34.258402][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 34.272104][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 34.288008][ T31] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 34.304908][ T484] rust_binder: Error while translating object. [ 34.304908][ T483] rust_binder: Error while translating object. [ 34.304955][ T484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.316559][ T31] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 0e:86:b6:1a:00:00 [ 34.321077][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 34.336120][ T31] usb 4-1: USB disconnect, device number 6 [ 34.350510][ T483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.372623][ T31] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 34.409928][ T483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 34.504289][ T504] kvm: kvm [503]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x6 [ 34.729262][ T349] usbhid 2-1:0.0: can't add hid device: -71 [ 34.757944][ T349] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.776112][ T349] usb 2-1: USB disconnect, device number 3 [ 34.782444][ T432] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.846026][ T541] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 34.935166][ T545] rust_binder: 544 RLIMIT_NICE not set [ 34.940074][ T9] rust_binder: 543: removing orphan mapping 0:24 [ 34.954840][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.969783][ T432] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.982010][ T432] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.996548][ T432] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.006791][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.016714][ T432] usb 3-1: config 0 descriptor?? [ 35.209986][ T567] input: syz1 as /devices/virtual/input/input4 [ 35.218933][ T567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.226657][ T567] IPv6: NLM_F_CREATE should be set when creating new route [ 35.233971][ T567] IPv6: NLM_F_CREATE should be set when creating new route [ 35.257634][ T432] usbhid 3-1:0.0: can't add hid device: -71 [ 35.261064][ T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 35.276561][ T432] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.321837][ T432] usb 3-1: USB disconnect, device number 7 [ 35.374822][ T349] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.482592][ T582] tipc: Started in network mode [ 35.493490][ T582] tipc: Node identity 76ad30d3e67e, cluster identity 4711 [ 35.509483][ T582] tipc: Enabled bearer , priority 0 [ 35.520674][ T349] usb 1-1: device descriptor read/64, error -71 [ 35.533096][ T582] tipc: Resetting bearer [ 35.548901][ T582] tipc: Disabling bearer [ 35.766292][ T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 35.770740][ T349] usb 1-1: device descriptor read/64, error -71 [ 35.800717][ T432] rust_binder: 0: removing orphan mapping 0:1048 [ 35.891799][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 35.891823][ T36] audit: type=1400 audit(1754350143.750:233): avc: denied { mount } for pid=602 comm="syz.1.67" name="/" dev="configfs" ino=2425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 36.004797][ T36] audit: type=1400 audit(1754350143.860:234): avc: denied { ioctl } for pid=609 comm="syz.3.69" path="socket:[6205]" dev="sockfs" ino=6205 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.037096][ T611] tipc: Enabled bearer , priority 0 [ 36.045423][ T610] tipc: Resetting bearer [ 36.060688][ T432] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.068584][ T349] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.091899][ T610] tipc: Disabling bearer [ 36.158666][ T36] audit: type=1400 audit(1754350144.010:235): avc: denied { create } for pid=615 comm="syz.3.71" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.181139][ T36] audit: type=1400 audit(1754350144.010:236): avc: denied { append } for pid=615 comm="syz.3.71" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.207549][ T36] audit: type=1400 audit(1754350144.010:237): avc: denied { open } for pid=615 comm="syz.3.71" path="/22/file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.220711][ T432] usb 3-1: Using ep0 maxpacket: 8 [ 36.231716][ T349] usb 1-1: device descriptor read/64, error -71 [ 36.241810][ T432] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.242945][ T36] audit: type=1400 audit(1754350144.020:238): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.255207][ T432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.291015][ T432] usb 3-1: config 0 descriptor?? [ 36.367436][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.371246][ T36] audit: type=1400 audit(1754350144.220:239): avc: denied { read append } for pid=622 comm="syz.3.73" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.403337][ T36] audit: type=1400 audit(1754350144.230:240): avc: denied { open } for pid=622 comm="syz.3.73" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.550770][ T349] usb 1-1: device descriptor read/64, error -71 [ 36.660797][ T349] usb usb1-port1: attempt power cycle [ 36.699338][ T432] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 36.710784][ T432] asix 3-1:0.0: probe with driver asix failed with error -61 [ 36.721746][ T432] usb 3-1: USB disconnect, device number 8 [ 36.747979][ T636] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.760394][ T36] audit: type=1400 audit(1754350144.610:241): avc: denied { name_bind } for pid=635 comm="syz.2.75" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.896813][ T645] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.952706][ T36] audit: type=1400 audit(1754350144.810:242): avc: denied { create } for pid=646 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.000765][ T349] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.022011][ T349] usb 1-1: device descriptor read/8, error -71 [ 37.110699][ T64] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.151937][ T349] usb 1-1: device descriptor read/8, error -71 [ 37.262052][ T64] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 37.274039][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.285877][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.296038][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 37.310660][ T64] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.320117][ T64] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.328574][ T64] usb 2-1: Manufacturer: syz [ 37.334503][ T64] usb 2-1: config 0 descriptor?? [ 37.390752][ T349] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.412053][ T349] usb 1-1: device descriptor read/8, error -71 [ 37.542216][ T349] usb 1-1: device descriptor read/8, error -71 [ 37.650894][ T349] usb usb1-port1: unable to enumerate USB device [ 37.746535][ T643] process 'syz.1.77' launched './file1' with NULL argv: empty string added [ 37.761711][ T64] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 37.770866][ T64] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 37.780472][ T64] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 37.885175][ T659] overlayfs: missing 'workdir' [ 37.962080][ T349] usb 2-1: USB disconnect, device number 4 [ 38.089467][ T670] rust_binder: 68: no such ref 1 [ 38.094894][ T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 38.221776][ T678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.285265][ T679] rust_binder: Error while translating object. [ 38.292166][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.299153][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 38.340724][ T64] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.370730][ T625] Bluetooth: hci0: command 0x1003 tx timeout [ 38.370746][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.500482][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.500742][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 38.507855][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.514401][ T64] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.522545][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.532016][ T64] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.539297][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.549407][ T64] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.557580][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 38.562966][ T64] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 38.578115][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.586906][ T64] usb 3-1: config 0 descriptor?? [ 38.810734][ T432] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.960686][ T432] usb 2-1: Using ep0 maxpacket: 32 [ 38.967551][ T432] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.979768][ T432] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.991665][ T432] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.002099][ T432] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 39.004091][ T64] a4tech 0003:09DA:000A.0003: unbalanced collection at end of report description [ 39.012662][ T432] usb 2-1: Product: syz [ 39.022157][ T64] a4tech 0003:09DA:000A.0003: parse failed [ 39.025541][ T432] usb 2-1: Manufacturer: syz [ 39.031925][ T432] hub 2-1:4.0: USB hub found [ 39.036504][ T64] a4tech 0003:09DA:000A.0003: probe with driver a4tech failed with error -22 [ 39.078890][ T692] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 39.236971][ T432] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 39.266831][ T703] 9pnet: p9_errstr2errno: server reported unknown error [ 39.350892][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 39.512771][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 39.527520][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.542972][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.556414][ T64] usb 2-1: USB disconnect, device number 5 [ 39.564673][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.587591][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.598307][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.614848][ T31] usb 1-1: config 0 descriptor?? [ 39.826674][ T31] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 39.844183][ T31] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 39.866296][ T31] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 39.888653][ T31] usb 1-1: USB disconnect, device number 11 [ 39.905352][ T714] fido_id[714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 40.001079][ T716] rust_binder: Write failure EFAULT in pid:80 [ 40.003082][ T716] rust_binder: Write failure EFAULT in pid:80 [ 40.790850][ T733] /dev/rnullb0: Can't open blockdev [ 40.909449][ T738] binder: Unknown parameter '0x0000000000000000' [ 40.937332][ T742] binder: Bad value for 'stats' [ 40.973593][ T745] rust_binder: 740 RLIMIT_NICE not set [ 41.013644][ T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 41.013710][ T746] rust_binder: 744 RLIMIT_NICE not set [ 41.034516][ T432] rust_binder: 743: removing orphan mapping 0:4120 [ 41.058055][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 41.058075][ T36] audit: type=1400 audit(1754350148.910:273): avc: denied { getopt } for pid=748 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.087660][ T36] audit: type=1400 audit(1754350148.910:274): avc: denied { read } for pid=748 comm="syz.1.111" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 41.113020][ T750] rust_binder: 92: no such ref 0 [ 41.113497][ T36] audit: type=1400 audit(1754350148.910:275): avc: denied { open } for pid=748 comm="syz.1.111" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 41.119475][ T750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 41.186354][ T432] usb 3-1: USB disconnect, device number 9 [ 41.224015][ T750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.111'. [ 41.515587][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.522477][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.653768][ T36] audit: type=1400 audit(1754350149.510:276): avc: denied { read write } for pid=763 comm="syz.0.116" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.678489][ T36] audit: type=1400 audit(1754350149.510:277): avc: denied { open } for pid=763 comm="syz.0.116" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.760673][ T432] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.778052][ T775] rust_binder: Write failure EFAULT in pid:93 [ 41.789406][ T36] audit: type=1400 audit(1754350149.640:278): avc: denied { ioctl } for pid=776 comm="syz.3.120" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.825762][ T36] audit: type=1400 audit(1754350149.680:279): avc: denied { read write } for pid=776 comm="syz.3.120" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.827355][ T777] capability: warning: `syz.3.120' uses deprecated v2 capabilities in a way that may be insecure [ 41.852486][ T36] audit: type=1400 audit(1754350149.680:280): avc: denied { open } for pid=776 comm="syz.3.120" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 41.910897][ T432] usb 3-1: device descriptor read/64, error -71 [ 42.140785][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 42.150777][ T432] usb 3-1: device descriptor read/64, error -71 [ 42.217077][ T36] audit: type=1400 audit(1754350150.070:281): avc: denied { setopt } for pid=780 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.284610][ T786] loop7: detected capacity change from 0 to 16384 [ 42.290864][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 42.299508][ T9] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 225, changing to 11 [ 42.327405][ T9] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.340820][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 42.349068][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.40 [ 42.359159][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.367582][ T9] usb 1-1: Product: syz [ 42.396882][ T9] usb 1-1: Manufacturer: syz [ 42.401855][ T432] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.423106][ T9] usb 1-1: SerialNumber: syz [ 42.462787][ T789] binder: Bad value for 'max' [ 42.466856][ T787] loop7: detected capacity change from 16384 to 0 [ 42.475492][ C0] I/O error, dev loop7, sector 15416 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 0 [ 42.550828][ T432] usb 3-1: device descriptor read/64, error -71 [ 42.589321][ T801] netlink: 'syz.1.126': attribute type 29 has an invalid length. [ 42.598331][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 42.612156][ T801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.665415][ T805] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 42.679644][ T805] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 42.707529][ T807] input: syz1 as /devices/virtual/input/input5 [ 42.760680][ T36] audit: type=1400 audit(1754350150.610:282): avc: denied { setopt } for pid=806 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.800774][ T432] usb 3-1: device descriptor read/64, error -71 [ 42.897757][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 42.904261][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 42.920884][ T432] usb usb3-port1: attempt power cycle [ 42.927974][ T9] usb 1-1: USB disconnect, device number 12 [ 43.270743][ T432] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.301718][ T432] usb 3-1: device descriptor read/8, error -71 [ 43.431901][ T432] usb 3-1: device descriptor read/8, error -71 [ 43.544164][ T829] netlink: 'syz.1.136': attribute type 4 has an invalid length. [ 43.552656][ T829] netlink: 17 bytes leftover after parsing attributes in process `syz.1.136'. [ 43.570923][ T625] Bluetooth: hci0: command 0x1003 tx timeout [ 43.577319][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.680733][ T432] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 43.680733][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.711930][ T432] usb 3-1: device descriptor read/8, error -71 [ 43.720766][ T349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 43.840750][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 43.841917][ T432] usb 3-1: device descriptor read/8, error -71 [ 43.847251][ T31] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 43.861056][ T31] usb 4-1: config 0 has no interface number 0 [ 43.867635][ T31] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 43.879833][ T31] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 43.893619][ T31] usb 4-1: config 0 interface 255 has no altsetting 0 [ 43.901617][ T349] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.911816][ T349] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.918552][ T349] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.927888][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.936404][ T31] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 43.945627][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.954314][ T31] usb 4-1: Product: syz [ 43.958847][ T349] usb 1-1: config 0 descriptor?? [ 43.964465][ T31] usb 4-1: Manufacturer: syz [ 43.969189][ T31] usb 4-1: SerialNumber: syz [ 43.970905][ T432] usb usb3-port1: unable to enumerate USB device [ 43.982061][ T31] usb 4-1: config 0 descriptor?? [ 44.189950][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 44.201089][ T31] hub 4-1:0.255: bad descriptor, ignoring hub [ 44.207255][ T31] hub 4-1:0.255: probe with driver hub failed with error -5 [ 44.243647][ T31] usb 4-1: USB disconnect, device number 7 [ 44.256239][ T833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.137'. [ 44.394684][ T349] usbhid 1-1:0.0: can't add hid device: -32 [ 44.402739][ T349] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 44.412596][ T349] usb 1-1: USB disconnect, device number 13 [ 45.142830][ T349] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 45.246004][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.246041][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.260778][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.260827][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.267770][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.267803][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.310697][ T349] usb 2-1: Invalid ep0 maxpacket: 64 [ 45.310705][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.316483][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.340682][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.347452][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.354326][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.361445][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.368076][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.375182][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.382112][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.388768][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.396364][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.403491][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.410917][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.417848][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.424466][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.431153][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.437910][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.444875][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.450682][ T349] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 45.452002][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.466881][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.473953][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.480514][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.487362][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.494148][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.502828][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.510230][ T853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.554371][ T858] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.616508][ T860] netlink: 4084 bytes leftover after parsing attributes in process `syz.0.146'. [ 45.620730][ T349] usb 2-1: Invalid ep0 maxpacket: 64 [ 45.647976][ T349] usb usb2-port1: attempt power cycle [ 45.672289][ T867] rust_binder: Write failure EFAULT in pid:127 [ 45.674299][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 45.690892][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.722989][ T871] SELinux: failed to load policy [ 45.970564][ T902] usb usb9: usbfs: process 902 (syz.0.160) did not claim interface 0 before use [ 45.998440][ T902] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 4096) [ 45.998473][ T902] rust_binder: Error while translating object. [ 46.000776][ T349] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 46.017651][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.030590][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 46.061081][ T349] usb 2-1: Invalid ep0 maxpacket: 64 [ 46.170847][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.178553][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 46.178571][ T36] audit: type=1400 audit(1754350154.030:298): avc: denied { mounton } for pid=904 comm="syz.0.161" path="/49/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 46.210678][ T349] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 46.231069][ T349] usb 2-1: Invalid ep0 maxpacket: 64 [ 46.236637][ T349] usb usb2-port1: unable to enumerate USB device [ 46.706232][ T910] syzkaller0: entered promiscuous mode [ 46.712254][ T910] syzkaller0: entered allmulticast mode [ 47.058250][ T924] binder: Bad value for 'max' [ 47.086769][ T930] rust_binder: Error while translating object. [ 47.086774][ T36] audit: type=1400 audit(1754350154.940:299): avc: denied { transfer } for pid=929 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 47.113483][ T930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.113509][ T930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 47.730732][ T908] Bluetooth: hci0: command 0x1003 tx timeout [ 47.730730][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.004867][ T941] rust_binder: Error while translating object. [ 48.004909][ T941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.012391][ T941] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 48.022924][ T941] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:133 [ 48.045882][ T455] rust_binder: 940: removing orphan mapping 0:1048 [ 48.087362][ T948] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 48.210699][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 48.210730][ T625] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.324134][ T966] rust_binder: Error while translating object. [ 48.324194][ T966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 48.337929][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:142 [ 48.447860][ T985] binder: Unknown parameter 'contextÀ' [ 48.448606][ T979] overlayfs: conflicting lowerdir path [ 48.479951][ T36] audit: type=1400 audit(1754350156.330:300): avc: denied { write } for pid=978 comm="syz.3.182" name="file0" dev="incremental-fs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.505267][ T979] support for cryptoloop has been removed. Use dm-crypt instead. [ 48.516146][ T979] binder: Unknown parameter 'ÿÿÿÿÿ' [ 48.546381][ T988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.564477][ T988] 9pnet_fd: Insufficient options for proto=fd [ 48.690697][ T455] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 48.852107][ T455] usb 1-1: not running at top speed; connect to a high speed hub [ 48.871638][ T455] usb 1-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 48.890721][ T455] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.909098][ T455] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.918971][ T455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.939694][ T455] usb 1-1: Product: ⟴馇妈핼塒䯗췥筳왜쑡仒⪵믱䇛ç梢޷忀鄩畻젶䥭뼂ã‰ê”½à·˜æ•–닭鯴苘꺫֕뤳뙵㨘ê†é®…᫷烉ݨ瑨å¨É¿æ¹°â—Šë‡—é²æƒƒé˜¾ä±´éƒ‘詛﷽鮬䲾鲟齚撿ብÂä—ᱫ㽢碼铡ꦭ正㔒ﳿ蔦⓿㼹臟注뢥蚇뻖㩤圵ᷘ㺚年î·î¡‚㩫밚₧嬔镑逯⬅藞햙ޑè«ë¢â¼±æººë¨¿á’³æ–⬪㽠[ 48.972734][ T455] usb 1-1: Manufacturer: а [ 48.977587][ T455] usb 1-1: SerialNumber: ꉦè“䴌벭줨홷왱뉌筜ê‹ë¸—腧鳚㕸剶ㄡ봡풦ٵ牵쥔员䬶︟뭊⽸벡㎌ݥî…ᅈç¼ï‘ªæ–俄圾óꄚîŸê‘§ïŠ‘鯃ê¤å—æ´• [ 49.038060][ T36] audit: type=1400 audit(1754350156.890:301): avc: denied { write } for pid=1003 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.117796][ T1007] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 376, limit: 4256, size: 4096) [ 49.117855][ T1007] rust_binder: Error while translating object. [ 49.131082][ T1007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.137590][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 49.206570][ T455] usb 1-1: 0:2 : does not exist [ 49.226104][ T455] usb 1-1: USB disconnect, device number 14 [ 49.234960][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.374532][ T1014] rust_binder: Write failure EFAULT in pid:151 [ 49.419502][ T1016] SELinux: policydb version -845211227 does not match my version range 15-33 [ 49.419797][ T36] audit: type=1400 audit(1754350157.270:302): avc: denied { load_policy } for pid=1015 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.426618][ T1016] SELinux: failed to load policy [ 49.464848][ T36] audit: type=1400 audit(1754350157.320:303): avc: denied { setopt } for pid=1015 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.655381][ T36] audit: type=1400 audit(1754350157.510:304): avc: denied { map } for pid=1017 comm="syz.3.194" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 49.700687][ T455] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 49.723561][ T1023] binder: Binderfs stats mode cannot be changed during a remount [ 49.871498][ T455] usb 2-1: not running at top speed; connect to a high speed hub [ 49.891107][ T455] usb 2-1: config 12 has an invalid interface number: 74 but max is 0 [ 49.899800][ T455] usb 2-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 49.928742][ T455] usb 2-1: config 12 has an invalid interface number: 49 but max is 0 [ 49.950687][ T455] usb 2-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 49.965776][ T455] usb 2-1: config 12 has 2 interfaces, different from the descriptor's value: 1 [ 49.980221][ T455] usb 2-1: config 12 has no interface number 0 [ 49.997255][ T455] usb 2-1: config 12 has no interface number 1 [ 50.005524][ T455] usb 2-1: config 12 interface 74 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 50.018683][ T455] usb 2-1: config 12 interface 74 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 50.034763][ T455] usb 2-1: too many endpoints for config 12 interface 49 altsetting 133: 167, using maximum allowed: 30 [ 50.048944][ T455] usb 2-1: config 12 interface 49 altsetting 133 endpoint 0x7 has invalid maxpacket 439, setting to 64 [ 50.061159][ T455] usb 2-1: config 12 interface 49 altsetting 133 has a duplicate endpoint with address 0xB, skipping [ 50.072489][ T455] usb 2-1: config 12 interface 49 altsetting 133 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 50.084931][ T455] usb 2-1: config 12 interface 49 altsetting 133 has a duplicate endpoint with address 0x4, skipping [ 50.086511][ T36] audit: type=1400 audit(1754350157.940:305): avc: denied { bind } for pid=1032 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.097864][ T455] usb 2-1: config 12 interface 49 altsetting 133 endpoint 0x3 has invalid maxpacket 1535, setting to 64 [ 50.132711][ T455] usb 2-1: config 12 interface 49 altsetting 133 has a duplicate endpoint with address 0xB, skipping [ 50.144625][ T455] usb 2-1: config 12 interface 49 altsetting 133 has 8 endpoint descriptors, different from the interface descriptor's value: 167 [ 50.160287][ T455] usb 2-1: config 12 interface 74 has no altsetting 0 [ 50.170671][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.174032][ T455] usb 2-1: config 12 interface 49 has no altsetting 0 [ 50.198240][ T455] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0140, bcdDevice=e5.5d [ 50.208077][ T455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.216591][ T455] usb 2-1: Product: Ь [ 50.223436][ T455] usb 2-1: Manufacturer: äŠ [ 50.229117][ T455] usb 2-1: SerialNumber: Ｚᗵ⤇準臯ڷ쵴簓ä—䌗➷蓸ãŸáœ·ì¬‹å‚¿å‡¶è‚‡æ©¦è†®î¥°ïŽ›æ«žá›ƒä˜¥íƒžäµ¯ä è¨†è±†ìž±ä‹¿á¾¦ê¬ïµ’霙çžæ§Ÿâ è¸˜ [ 50.230343][ T1037] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 50.247520][ T1016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.260795][ T1037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 50.263294][ T1037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:183 [ 50.300683][ T10] usb 3-1: device descriptor read/64, error -71 [ 50.466519][ T36] audit: type=1400 audit(1754350158.320:306): avc: denied { getopt } for pid=1015 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.469609][ T455] ftdi_sio 2-1:12.74: FTDI USB Serial Device converter detected [ 50.501447][ T1043] fuse: Bad value for 'fd' [ 50.506611][ T455] ftdi_sio ttyUSB0: unknown device type: 0xe55d [ 50.516843][ T455] ftdi_sio 2-1:12.49: FTDI USB Serial Device converter detected [ 50.530579][ T455] ftdi_sio ttyUSB1: unknown device type: 0xe55d [ 50.536972][ T36] audit: type=1400 audit(1754350158.390:307): avc: denied { mount } for pid=1045 comm="syz.3.202" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.541897][ T455] usb 2-1: USB disconnect, device number 10 [ 50.566630][ T10] usb 3-1: device descriptor read/64, error -71 [ 50.575609][ T455] ftdi_sio 2-1:12.74: device disconnected [ 50.591151][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.598820][ T455] ftdi_sio 2-1:12.49: device disconnected [ 50.810682][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.940851][ T10] usb 3-1: device descriptor read/64, error -71 [ 51.164784][ T1059] rust_binder: inc_ref_done called when no active inc_refs [ 51.164811][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 51.190731][ T10] usb 3-1: device descriptor read/64, error -71 [ 51.271209][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 51.271230][ T36] audit: type=1326 audit(1754350159.130:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.0.208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb92d78eb69 code=0x0 [ 51.310783][ T10] usb usb3-port1: attempt power cycle [ 51.660859][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.682260][ T10] usb 3-1: device descriptor read/8, error -71 [ 51.811975][ T10] usb 3-1: device descriptor read/8, error -71 [ 51.986273][ T36] audit: type=1400 audit(1754350159.840:312): avc: denied { listen } for pid=1067 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.028836][ T36] audit: type=1400 audit(1754350159.880:313): avc: denied { module_load } for pid=1073 comm="syz.1.211" path="/sys/power/disk" dev="sysfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 52.054222][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 52.082242][ T10] usb 3-1: device descriptor read/8, error -71 [ 52.212544][ T10] usb 3-1: device descriptor read/8, error -71 [ 52.301103][ T36] audit: type=1400 audit(1754350160.160:314): avc: denied { ioctl } for pid=1082 comm="syz.1.214" path="socket:[9463]" dev="sockfs" ino=9463 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.311342][ T1083] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 52.327038][ T10] usb usb3-port1: unable to enumerate USB device [ 52.344204][ T36] audit: type=1400 audit(1754350160.200:315): avc: denied { accept } for pid=1082 comm="syz.1.214" path=0000234E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 52.399909][ T1087] rust_binder: Write failure EFAULT in pid:185 [ 52.467806][ T10] rust_binder: 1088: removing orphan mapping 0:24 [ 52.481581][ T36] audit: type=1400 audit(1754350160.340:316): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.610689][ T625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 52.634329][ T1092] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 52.642188][ T1092] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 97) [ 52.642215][ T1092] rust_binder: Error while translating object. [ 52.653589][ T1092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.660011][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 52.955453][ T1097] binder: Unknown parameter 'contextÀ' [ 52.990716][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 53.051349][ T1099] netlink: 168 bytes leftover after parsing attributes in process `syz.2.221'. [ 53.163262][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 53.180712][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.190383][ T10] usb 4-1: Product: syz [ 53.210698][ T10] usb 4-1: Manufacturer: syz [ 53.215434][ T10] usb 4-1: SerialNumber: syz [ 53.234843][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 53.242373][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 53.721737][ T10] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 53.963234][ T36] audit: type=1400 audit(1754350161.820:317): avc: denied { accept } for pid=1109 comm="syz.2.225" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.353848][ T1118] rust_binder: 1116 RLIMIT_NICE not set [ 54.359588][ T64] rust_binder: 1114: removing orphan mapping 0:4240 [ 54.424656][ T1122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.229'. [ 54.435138][ T1122] netlink: 43 bytes leftover after parsing attributes in process `syz.3.229'. [ 54.444862][ T1122] netlink: 'syz.3.229': attribute type 6 has an invalid length. [ 54.459312][ T1122] netlink: 'syz.3.229': attribute type 5 has an invalid length. [ 54.468146][ T1122] netlink: 43 bytes leftover after parsing attributes in process `syz.3.229'. [ 54.541275][ T36] audit: type=1400 audit(1754350162.400:318): avc: denied { mounton } for pid=1130 comm="syz.3.231" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=10559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 54.893347][ T1145] rust_binder: 143: no such ref 2 [ 54.899557][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143 [ 54.910675][ T349] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 55.060730][ T349] usb 4-1: device descriptor read/64, error -71 [ 55.250721][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 55.291119][ T1158] rust_binder: Error in use_page_slow: ESRCH [ 55.291155][ T1158] rust_binder: use_range failure ESRCH [ 55.297920][ T1158] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 55.304245][ T1158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.310674][ T349] usb 4-1: device descriptor read/64, error -71 [ 55.315842][ T1158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:154 [ 55.363847][ T36] audit: type=1400 audit(1754350163.210:319): avc: denied { connect } for pid=1160 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.416195][ T9] usb 1-1: no configurations [ 55.418420][ T36] audit: type=1400 audit(1754350163.230:320): avc: denied { append } for pid=1165 comm="syz.2.240" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.429319][ T9] usb 1-1: can't read configurations, error -22 [ 55.590700][ T349] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.590712][ T9] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 55.741106][ T9] usb 1-1: no configurations [ 55.746493][ T9] usb 1-1: can't read configurations, error -22 [ 55.753588][ T9] usb usb1-port1: attempt power cycle [ 55.760686][ T349] usb 4-1: device descriptor read/64, error -71 [ 55.878958][ T1169] rust_binder: 1168 RLIMIT_NICE not set [ 55.879226][ T1168] rust_binder: Write failure EINVAL in pid:164 [ 55.891212][ T455] rust_binder: 1167: removing orphan mapping 0:40 [ 55.971507][ T1171] rust_binder: Write failure EFAULT in pid:167 [ 55.990705][ T1173] raw_sendmsg: syz.2.243 forgot to set AF_INET. Fix it! [ 56.005064][ T349] usb 4-1: device descriptor read/64, error -71 [ 56.090774][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 56.111743][ T9] usb 1-1: no configurations [ 56.116895][ T9] usb 1-1: can't read configurations, error -22 [ 56.120863][ T349] usb usb4-port1: attempt power cycle [ 56.260681][ T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 56.280709][ T455] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 56.281449][ T9] usb 1-1: no configurations [ 56.294334][ T9] usb 1-1: can't read configurations, error -22 [ 56.301306][ T9] usb usb1-port1: unable to enumerate USB device [ 56.440673][ T455] usb 3-1: Using ep0 maxpacket: 8 [ 56.447340][ T455] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.458448][ T455] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.468365][ T455] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.475401][ T349] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.483129][ T455] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 56.492698][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.505499][ T455] usb 3-1: config 0 descriptor?? [ 56.521838][ T349] usb 4-1: device descriptor read/8, error -71 [ 56.651843][ T349] usb 4-1: device descriptor read/8, error -71 [ 56.890738][ T349] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 56.911898][ T349] usb 4-1: device descriptor read/8, error -71 [ 56.922588][ T455] a4tech 0003:09DA:000A.0005: unbalanced collection at end of report description [ 56.932672][ T455] a4tech 0003:09DA:000A.0005: parse failed [ 56.938747][ T455] a4tech 0003:09DA:000A.0005: probe with driver a4tech failed with error -22 [ 57.041846][ T349] usb 4-1: device descriptor read/8, error -71 [ 57.121569][ T1175] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 4096) [ 57.121610][ T1175] rust_binder: Error while translating object. [ 57.140732][ T1175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.151044][ T349] usb usb4-port1: unable to enumerate USB device [ 57.168895][ T1175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 57.170879][ T455] usb 3-1: USB disconnect, device number 18 [ 57.697336][ T1177] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 57.742179][ T1182] binder: Unknown parameter ' ' [ 57.747672][ T1181] binder: Unknown parameter ' ' [ 57.833384][ T1185] random: crng reseeded on system resumption [ 57.862919][ T36] audit: type=1400 audit(1754350165.720:321): avc: denied { ioctl } for pid=1184 comm="syz.3.248" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.010667][ T455] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 58.207950][ T455] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.212112][ T1204] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 58.220311][ T1204] rust_binder: Error while translating object. [ 58.230337][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.231909][ T455] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.238218][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 58.258957][ T1205] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.260641][ T455] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.268470][ T1205] bridge0: port 3(veth0_to_bridge) entered disabled state [ 58.291017][ T455] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 58.294454][ T1205] veth0_to_bridge: entered allmulticast mode [ 58.313171][ T1205] veth0_to_bridge: entered promiscuous mode [ 58.319302][ T1205] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 58.320657][ T455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.331946][ T1205] bridge0: port 3(veth0_to_bridge) entered blocking state [ 58.346876][ T1205] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 58.355715][ T1183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.566332][ T1217] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 58.574159][ T1217] rust_binder: Write failure EINVAL in pid:236 [ 58.596889][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.604619][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 58.691120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.713198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.725674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.737972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.750294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.762716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.775405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.788421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.801255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.813645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 58.930678][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 59.101829][ T9] usb 1-1: config 0 has no interfaces? [ 59.110111][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 59.131783][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.150681][ T9] usb 1-1: Product: syz [ 59.157272][ T9] usb 1-1: Manufacturer: syz [ 59.169743][ T9] usb 1-1: SerialNumber: syz [ 59.181707][ T9] usb 1-1: config 0 descriptor?? [ 59.269299][ T455] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 59.292743][ T455] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 60.474041][ T64] usb 1-1: USB disconnect, device number 19 [ 60.795490][ T455] usb 3-1: USB disconnect, device number 19 [ 60.804006][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 62.791171][ T36] audit: type=1400 audit(1754350170.530:322): avc: denied { write } for pid=1228 comm="syz.3.261" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 63.564443][ T1235] mmap: syz.2.263 (1235) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.700654][ C1] net_ratelimit: 170340 callbacks suppressed [ 63.700691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 63.700731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.707148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 63.719908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.733664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 63.747151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.762512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 63.779287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.795270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 63.810072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.090629][ C1] sched: DL replenish lagged too much [ 68.710615][ C1] net_ratelimit: 182804 callbacks suppressed [ 68.710640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 68.710666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.716812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 68.729399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.742269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 68.755195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.767666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 68.780582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.793300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 68.805739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.720639][ C1] net_ratelimit: 185420 callbacks suppressed [ 73.720663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 73.720697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.726765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 73.739129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.752166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 73.765827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.779044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 73.791932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.804639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 73.817249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.730632][ C1] net_ratelimit: 188641 callbacks suppressed [ 78.730660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 78.730701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.737354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 78.750496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.764553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 78.779819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.793389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 78.806795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.820320][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 78.833041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.740649][ C0] net_ratelimit: 186704 callbacks suppressed [ 83.740676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.740705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 83.751103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.765079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 83.782721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.799793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 83.814132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.826632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 83.839534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.852726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.750625][ C1] net_ratelimit: 176643 callbacks suppressed [ 88.750651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.750813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.756735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.769466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.782622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.795436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.807124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.819608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.831657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 88.844013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.760630][ C0] net_ratelimit: 145707 callbacks suppressed [ 93.760656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.760671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 93.760728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 93.766890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.779949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 93.792840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.806227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 93.818845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.831740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 93.844260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.770644][ C1] net_ratelimit: 154113 callbacks suppressed [ 98.770673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 98.770746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.777082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 98.790104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.802336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 98.815720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.827868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 98.839860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.852204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 98.864386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.780634][ C1] net_ratelimit: 152956 callbacks suppressed [ 103.780659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 103.780707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.787295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 103.799517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.811773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 103.824150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.836435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 103.848945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.861301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 103.873616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.790601][ C0] net_ratelimit: 151780 callbacks suppressed [ 108.790630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.790645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 108.790701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 108.796725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.808930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 108.821497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.834499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 108.846510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.859134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 108.871731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.800614][ C1] net_ratelimit: 152325 callbacks suppressed [ 113.800644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 113.800691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.807347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 113.819661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.831776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 113.844359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.857487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 113.869593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.881883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 113.894001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.810644][ C0] net_ratelimit: 151594 callbacks suppressed [ 118.810673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.810683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 118.810741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 118.817072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.829706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 118.842347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.854479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 118.867606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.880053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 118.892260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.820620][ C1] net_ratelimit: 141512 callbacks suppressed [ 123.820649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 123.820666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.820719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.827113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 123.839587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.851735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 123.863913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.876383][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 123.888739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.900781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 128.830605][ C0] net_ratelimit: 149806 callbacks suppressed [ 128.830637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.830661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 128.837004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.849421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 128.862422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.874843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 128.887946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.900298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 128.912613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.925094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 132.095211][ T36] audit: type=1400 audit(1754350239.940:323): avc: denied { mounton } for pid=1244 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 133.840628][ C1] net_ratelimit: 146252 callbacks suppressed [ 133.840657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 133.840692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.846754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 133.859038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.871505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 133.883732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.896018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 133.908150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.920406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 133.932736][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.850602][ C1] net_ratelimit: 150252 callbacks suppressed [ 138.850628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 138.850639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.850858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.856723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 138.868787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.880766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 138.892881][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.904861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 138.916741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.928815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.860592][ C1] net_ratelimit: 152872 callbacks suppressed [ 143.860622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.860723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.866724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.879052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.891601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.903961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.916027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.928102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.940296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 143.952321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.870600][ C0] net_ratelimit: 150346 callbacks suppressed [ 148.870631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.870657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 148.876912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.889017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 148.901035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.913027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 148.925636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.937848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 148.949823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.962511][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 153.880644][ C1] net_ratelimit: 147177 callbacks suppressed [ 153.880674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 153.880688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.880744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.886801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 153.899002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.911213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 153.923655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.935437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 153.947662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.959848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.890595][ C1] net_ratelimit: 141447 callbacks suppressed [ 158.890626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.890679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.896800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.908991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.920919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.933164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.945480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.957749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.969683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 158.981733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.900623][ C1] net_ratelimit: 143179 callbacks suppressed [ 163.900653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 163.900656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.900718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.906852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 163.918967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.930866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 163.943165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.955099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 163.966982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.979237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 168.910620][ C1] net_ratelimit: 152079 callbacks suppressed [ 168.910650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 168.910651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.910711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.917036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 168.929178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.941170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 168.953476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.965396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 168.977545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.989620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 173.920585][ C1] net_ratelimit: 148550 callbacks suppressed [ 173.920613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 173.920650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.926701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 173.938840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.950763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 173.962709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.974706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 173.986866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.999059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 174.011124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.930609][ C1] net_ratelimit: 146114 callbacks suppressed [ 178.930640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 178.930671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.936746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 178.948836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.960780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 178.972987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.984736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 178.996735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.008816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 179.020825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.940602][ C1] net_ratelimit: 145443 callbacks suppressed [ 183.940635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 183.940690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.946737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 183.958912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.970850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 183.982862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.994747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 184.006762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.018715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 184.030901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.950614][ C1] net_ratelimit: 147590 callbacks suppressed [ 188.950643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 188.950683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.956737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 188.968756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.980683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 188.992783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.004649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 189.016747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.028714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 189.040860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.603746][ T37] INFO: task syz.2.263:1236 blocked for more than 124 seconds. [ 192.792537][ T37] Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 [ 192.799488][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 192.892539][ T37] task:syz.2.263 state:D stack:0 pid:1236 tgid:1234 ppid:295 flags:0x00004004 [ 192.907386][ T37] Call Trace: [ 192.910769][ T37] [ 192.913726][ T37] __schedule+0x1322/0x1df0 [ 192.918304][ T37] ? __sched_text_start+0x10/0x10 [ 192.923569][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 192.928377][ T37] ? __kasan_check_write+0x18/0x20 [ 192.933554][ T37] ? llist_add_batch+0x109/0x1e0 [ 192.938526][ T37] schedule+0xc6/0x240 [ 192.942668][ T37] schedule_timeout+0xb2/0x3a0 [ 192.947574][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 192.953038][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 192.958631][ T37] ? generic_exec_single+0x201/0x500 [ 192.964005][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 192.969779][ T37] wait_for_common+0x359/0x630 [ 192.974814][ T37] ? wait_for_completion+0x40/0x40 [ 192.979981][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x641/0x6a0 [ 192.986884][ T37] ? xa_find+0x145/0x170 [ 192.991420][ T37] wait_for_completion+0x1c/0x40 [ 192.996563][ T37] rcu_barrier+0x415/0x530 [ 193.001132][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 193.006541][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 193.011386][ T37] kvm_arch_destroy_vm+0x383/0x410 [ 193.016550][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 193.022542][ T37] ? __kasan_check_write+0x18/0x20 [ 193.027723][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 193.033624][ T37] kvm_put_kvm+0xb04/0x12b0 [ 193.038166][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 193.043349][ T37] ? percpu_counter_add_batch+0xfc/0x1b0 [ 193.049030][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 193.054467][ T37] kvm_vm_release+0x47/0x70 [ 193.059002][ T37] __fput+0x1fb/0xa00 [ 193.063207][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 193.068870][ T37] ____fput+0x20/0x30 [ 193.072905][ T37] task_work_run+0x1e0/0x250 [ 193.077521][ T37] ? __cfi_task_work_run+0x10/0x10 [ 193.082676][ T37] ? __kasan_check_write+0x18/0x20 [ 193.087923][ T37] resume_user_mode_work+0x36/0x50 [ 193.093260][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 193.098922][ T37] do_syscall_64+0x64/0xf0 [ 193.103492][ T37] ? clear_bhb_loop+0x50/0xa0 [ 193.108311][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 193.114340][ T37] RIP: 0033:0x7fc09e58eb69 [ 193.118789][ T37] RSP: 002b:00007fc09f3d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 193.127526][ T37] RAX: 0000000000000000 RBX: 00007fc09e7b6080 RCX: 00007fc09e58eb69 [ 193.135788][ T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 193.144074][ T37] RBP: 00007fc09e611df1 R08: 0000000000000000 R09: 0000000000000000 [ 193.152103][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.160198][ T37] R13: 0000000000000000 R14: 00007fc09e7b6080 R15: 00007ffdcb9cee48 [ 193.168249][ T37] [ 193.280637][ T37] NMI backtrace for cpu 1 [ 193.280666][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 193.280698][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.280711][ T37] Call Trace: [ 193.280719][ T37] [ 193.280727][ T37] __dump_stack+0x21/0x30 [ 193.280759][ T37] dump_stack_lvl+0x10c/0x190 [ 193.280782][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.280808][ T37] dump_stack+0x19/0x20 [ 193.280830][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 193.280859][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 193.280883][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 193.280926][ T37] ? sched_show_task+0x379/0x560 [ 193.280950][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 193.280970][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 193.280993][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 193.281015][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 193.281044][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 193.281067][ T37] watchdog+0xd8f/0xed0 [ 193.281093][ T37] ? __cfi_watchdog+0x10/0x10 [ 193.281115][ T37] ? __kasan_check_read+0x15/0x20 [ 193.281141][ T37] ? __kthread_parkme+0x138/0x180 [ 193.281169][ T37] ? schedule+0xc6/0x240 [ 193.281185][ T37] kthread+0x2ca/0x370 [ 193.281199][ T37] ? __cfi_watchdog+0x10/0x10 [ 193.281217][ T37] ? __cfi_kthread+0x10/0x10 [ 193.281231][ T37] ret_from_fork+0x67/0xa0 [ 193.281251][ T37] ? __cfi_kthread+0x10/0x10 [ 193.281264][ T37] ret_from_fork_asm+0x1a/0x30 [ 193.281288][ T37] [ 193.281296][ T37] Sending NMI from CPU 1 to CPUs 0: [ 193.475274][ C0] NMI backtrace for cpu 0 [ 193.475293][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 193.475317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.475327][ C0] RIP: 0010:update_stack_state+0x2bd/0x4b0 [ 193.475354][ C0] Code: 3b 6d ac 75 25 48 8b 45 a0 48 39 45 b0 73 1b 31 db 89 d8 48 81 c4 98 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <4c> 8b 6d 80 4d 85 ed 4c 89 75 b8 74 71 49 bc 00 00 00 00 00 fc ff [ 193.475367][ C0] RSP: 0018:ffffc900000070f8 EFLAGS: 00000206 [ 193.475384][ C0] RAX: ffffc90000007380 RBX: ffffc90000007248 RCX: ffffc90000007501 [ 193.475397][ C0] RDX: ffffc900000075a8 RSI: 1ffff92000000e4a RDI: ffffc900000072a0 [ 193.475409][ C0] RBP: ffffc900000071b8 R08: ffffc90000007310 R09: ffffc90000007308 [ 193.475421][ C0] R10: 0000000000000000 R11: ffffffff81742a80 R12: ffffc90000007248 [ 193.475432][ C0] R13: 0000000000000002 R14: ffffc90000007288 R15: 1ffff92000000e51 [ 193.475444][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 193.475458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.475470][ C0] CR2: 00007f4c821811b8 CR3: 0000000126626000 CR4: 00000000003526b0 [ 193.475488][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 193.475498][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 193.475508][ C0] Call Trace: [ 193.475514][ C0] [ 193.475524][ C0] unwind_next_frame+0x3c2/0x750 [ 193.475542][ C0] ? __kernel_text_address+0x11/0x40 [ 193.475560][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 193.475580][ C0] arch_stack_walk+0x139/0x170 [ 193.475601][ C0] ? kasan_save_track+0x3e/0x80 [ 193.475623][ C0] stack_trace_save+0x9d/0xe0 [ 193.475640][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 193.475659][ C0] kasan_save_track+0x3e/0x80 [ 193.475678][ C0] ? kasan_save_track+0x3e/0x80 [ 193.475702][ C0] kasan_save_alloc_info+0x40/0x50 [ 193.475719][ C0] __kasan_slab_alloc+0x73/0x90 [ 193.475740][ C0] kmem_cache_alloc_noprof+0x131/0x3a0 [ 193.475759][ C0] ? skb_clone+0x229/0x460 [ 193.475774][ C0] skb_clone+0x229/0x460 [ 193.475787][ C0] br_flood+0x4ed/0x730 [ 193.475810][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 193.475826][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 193.475843][ C0] br_handle_frame+0x5a6/0xba0 [ 193.475858][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 193.475872][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 193.475893][ C0] ? ip6_mc_input+0x4f3/0x670 [ 193.475912][ C0] ? ip6_mc_input+0x4f3/0x670 [ 193.475930][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 193.475947][ C0] ? qdisc_run_end+0x120/0x120 [ 193.475966][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 193.475983][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 193.476000][ C0] ? ipv6_rcv+0xed/0x220 [ 193.476017][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 193.476034][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 193.476050][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 193.476073][ C0] process_backlog+0x3e5/0xae0 [ 193.476095][ C0] __napi_poll+0xd3/0x610 [ 193.476114][ C0] net_rx_action+0x584/0xce0 [ 193.476135][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 193.476154][ C0] ? sched_clock+0x44/0x60 [ 193.476171][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 193.476190][ C0] ? try_to_wake_up+0xdfb/0x1b00 [ 193.476213][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 193.476231][ C0] handle_softirqs+0x1ab/0x630 [ 193.476251][ C0] __do_softirq+0xf/0x16 [ 193.476265][ C0] do_softirq+0xa6/0x100 [ 193.476283][ C0] [ 193.476288][ C0] [ 193.476293][ C0] ? __cfi_do_softirq+0x10/0x10 [ 193.476311][ C0] ? kmem_cache_free+0x1c1/0x510 [ 193.476329][ C0] ? __d_free+0x27/0x30 [ 193.476350][ C0] ? __cfi___d_free+0x10/0x10 [ 193.476370][ C0] __local_bh_enable_ip+0x74/0x80 [ 193.476389][ C0] rcu_do_batch+0x5c6/0xd20 [ 193.476408][ C0] ? rcu_core+0xd20/0xd20 [ 193.476425][ C0] ? __kasan_check_write+0x18/0x20 [ 193.476442][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 193.476463][ C0] ? __kasan_check_read+0x15/0x20 [ 193.476481][ C0] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 193.476498][ C0] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 193.476517][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 193.476535][ C0] ? __kasan_check_write+0x18/0x20 [ 193.476552][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 193.476572][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 193.476592][ C0] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 193.476611][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 193.476632][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 193.476652][ C0] ? __kasan_check_read+0x15/0x20 [ 193.476669][ C0] ? __kthread_parkme+0x138/0x180 [ 193.476689][ C0] ? schedule+0xc6/0x240 [ 193.476702][ C0] kthread+0x2ca/0x370 [ 193.476715][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 193.476733][ C0] ? __cfi_kthread+0x10/0x10 [ 193.476746][ C0] ret_from_fork+0x67/0xa0 [ 193.476763][ C0] ? __cfi_kthread+0x10/0x10 [ 193.476776][ C0] ret_from_fork_asm+0x1a/0x30 [ 193.476797][ C0] [ 193.960563][ C1] net_ratelimit: 131435 callbacks suppressed [ 193.960586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 193.963326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.967689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 193.972308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.977106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 193.980267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.986218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 193.998571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.010577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 194.022517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.123908][ T36] audit: type=1400 audit(1754350301.710:324): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2709]" dev="pipefs" ino=2709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 197.724294][ T1247] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 198.970593][ C1] net_ratelimit: 147199 callbacks suppressed [ 198.970624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 198.970650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.979705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 198.985795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.997805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 199.009783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.021778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 199.033795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.045950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:94:8e:79:ff:8d, vlan:0) [ 199.058085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)