last executing test programs: 1m40.783332692s ago: executing program 1 (id=888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0xfffffff4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x1}, @decrefs, @acquire_done, @increfs_done={0x40106308, 0x2}, @register_looper, @increfs={0x40046304, 0x2}, @dead_binder_done], 0x49, 0x0, 0x0}) 1m39.919250151s ago: executing program 1 (id=903): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000030301070000000000000000010000090c0002000000c126014a84f7"], 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x4004000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 1m39.916843281s ago: executing program 1 (id=904): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@index_off, 0x3a}, {@nfs_export_off}, {@xino_on}, {@nfs_export_off}], [], 0x2f}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 1m39.916524231s ago: executing program 1 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x200010000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x4000, 0x0, r5, r6, 0x1000003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, 0x0, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000140)=r8) r9 = dup2(r7, r3) write$FUSE_NOTIFY_DELETE(r9, 0x0, 0x2b) r10 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m39.775340842s ago: executing program 1 (id=906): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0xfa, 0x5}, {0x28, 0x0, 0x0, 0x7fff}, {0x6, 0xfc}]}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m39.535211222s ago: executing program 1 (id=908): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000"], 0xe4}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setns(r3, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.528823892s ago: executing program 32 (id=908): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000"], 0xe4}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setns(r3, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 30.524985483s ago: executing program 4 (id=1864): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, &(0x7f0000000280)={0x77359400}, 0x8) (async) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) (async) r2 = inotify_init() ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000140)={0x0, 0x10, 0x6}) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f00000002c0)={0x0, 0xb8, ""/184}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @local}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = socket(0x11, 0x3, 0x8) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000080)=0x1ff, 0x4) (async) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) (async) sendto$inet(r6, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) recvmmsg(r5, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/130, 0x82}, 0x4}], 0x1, 0x0, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f00000000c0)=""/40, 0x28) (async) r9 = openat$cgroup_int(r7, &(0x7f0000000180)='cpuset.cpu_exclusive\x00', 0x2, 0x0) read(r9, &(0x7f0000000580)=""/247, 0xf7) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10) 30.524554524s ago: executing program 4 (id=1865): mount$binderfs(0x0, &(0x7f0000000300)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="73050000000000000062616c5c0f8f000000000000b104193d7a7974e948845b9bc16fb405be6682aaaea0a6ff006354ba7eaed391188051fb8ecda5a3f5038181b2b8b2a1f87bcfffaf799bfa8cc5fa47af530a95ae1ae46dea148028a8751abb1fcb4be1fdb1c9c3fd561e11c17b281659de1a786caaf82c54c841b490d8631e95fb0695df8a"]) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4c000) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x401, &(0x7f0000000100)='./binderfs\x00') 30.515436544s ago: executing program 4 (id=1866): r0 = openat$binderfs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x804, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffbc, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f0000000000)={0x1, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 30.44567393s ago: executing program 4 (id=1868): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) mknod$loop(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r0) r1 = getpid() userfaultfd(0x801) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x2000005, 0x8, 0x1, 0x80000000, 0x40000, 0x4, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4, 0x407, 0x8, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xfbffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x231b6379, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x100000, 0x7fff, 0x40, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x20001ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0xc, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xffffffff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x404, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb1, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x0, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@userxattr}, {@metacopy_on}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe7) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x40000000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 30.425147651s ago: executing program 2 (id=1870): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 30.401983194s ago: executing program 2 (id=1871): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000940)={'bond_slave_1\x00', &(0x7f00000008c0)=@ethtool_coalesce={0xf, 0x6, 0x7, 0x7, 0x6, 0x8, 0x3, 0x0, 0xfffffff9, 0x1, 0x0, 0x4, 0x3, 0xc5d, 0x3, 0x6, 0x5, 0x3, 0x4, 0x2, 0x8, 0xffff, 0xffffc000}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r6, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=""/4096, 0x1000}, 0xfffffffb}, {{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000007b40)=""/129, 0x81}, {&(0x7f0000000dc0)=""/48, 0x30}], 0x2}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/127, 0x7f}, 0xfff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/99, 0x63}, 0xfffffeff}], 0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, r7}, 0x10) setreuid(0x0, 0xee01) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 29.832696979s ago: executing program 0 (id=1885): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async, rerun: 64) ioperm(0xd1df, 0x7, 0x9) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) (async, rerun: 32) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) dup(r4) (async, rerun: 64) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x8c1f, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x80000000000000}) (async, rerun: 64) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0xeeef0000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x10000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5, 0x3}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0x8000000, 0x2004, 0x11, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) preadv2(r7, &(0x7f0000000480)=[{&(0x7f0000000840)=""/189, 0xbd}], 0x1, 0xfffffffe, 0x4, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 29.81550642s ago: executing program 0 (id=1886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '[@-/\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2090}, 0xc001) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x8, 0x6, 0x3, {{0x5a, 0x4, 0x0, 0x8, 0x168, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x2c, 0x37, 0x0, 0x3, [0x80, 0x8, 0x10, 0x2, 0x9, 0x10000, 0x2, 0xdffc, 0x5, 0x5]}, @cipso={0x86, 0x7c, 0x0, [{0x0, 0x12, "4451c7fe1dedb2def7d3eb2794e1dba2"}, {0x6, 0x10, "7ebdf2a7eba8d347013628197bc2"}, {0x0, 0xc, "46f5632f196776a75c19"}, {0x7, 0x12, "44c85f184c9c78f98f531325fc129429"}, {0x23cda6894cfb7832, 0x4, "b843"}, {0x1, 0x11, "93c9843c5daacc18e5bc26e9522b6b"}, {0x7, 0x11, "610619a3402ec05157d57b47651bd5"}, {0x7, 0xd, "8d3412852c742e917c72f0"}, {0x1, 0x3, "ba"}]}, @ssrr={0x89, 0x17, 0x40, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp={0x44, 0x10, 0xb5, 0x0, 0x6, [0x5, 0x661, 0x7]}, @noop, @ssrr={0x89, 0x17, 0x51, [@local, @multicast2, @multicast2, @broadcast, @multicast2]}, @end, @cipso={0x86, 0x10, 0x2, [{0xbc3200570dcea3a0, 0x8, "d9fd7ab99f6a"}, {0x1, 0x2}]}, @timestamp={0x44, 0x14, 0xf8, 0x0, 0x2, [0xea, 0xfffffffa, 0x80, 0x9]}, @cipso={0x86, 0x48, 0x0, [{0x2, 0x12, "ecc675b8b2022d3c2251ea4e8ea2b18c"}, {0x0, 0xb, "72c14b4ec0666aa8fd"}, {0x0, 0x3, 'R'}, {0x1, 0xc, "77c61de03682f16d86aa"}, {0x7, 0x11, "af36ad54c1a57717fb331efd01188e"}, {0x6, 0x5, "4d9905"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x3, 0x4, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8, 0x8000, 0x6, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x8001, 0x4548, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x65, 0x0, 0xd8, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x4d, 0x3, 0xd, [{@broadcast, 0x499293b0}, {@multicast1, 0xf}, {@empty, 0x6}]}, @timestamp_prespec={0x44, 0x24, 0x70, 0x3, 0xf, [{@multicast2, 0x200}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010100, 0x3}]}, @timestamp={0x44, 0x10, 0xa, 0x0, 0x8, [0x101, 0x6, 0x8b6]}, @lsrr={0x83, 0x17, 0x7a, [@rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010100, @private=0xa010100, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xd1, 0x3, 0x5, [{@broadcast, 0x6}, {@multicast2, 0x101}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x80, 0x20, 0x404, 0xda, {{0x43, 0x4, 0x0, 0x7, 0x10c, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xcb, 0x3, 0x5, [{@multicast2, 0x200}, {@loopback, 0x96}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast2, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @lsrr={0x83, 0x7, 0x2b, [@multicast1]}, @timestamp_prespec={0x44, 0x54, 0x94, 0x3, 0x0, [{@remote}, {@remote, 0xd}, {@private=0xa010102, 0x3}, {@empty, 0x3}, {@broadcast, 0xa866}, {@empty, 0x3c45}, {@rand_addr=0x64010101, 0x3ff}, {@multicast2, 0x2}, {@local, 0x2}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x4, [{@broadcast, 0x5}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@rand_addr=0x64010102, 0x8}, {@local, 0x2a}, {@remote, 0x10001}, {@empty, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x3e, 0x1, 0x0, [{@empty, 0x6}, {@local, 0x583b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast}, {@remote, 0x8}, {@local, 0x7}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x2, 0x8, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x10, 0x4, 0x2}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x124, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}}, 0x1) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000a00)={r2, 0x3ff, 0x5, 0x3}) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000a40)=@ccm_128={{0x304}, "ff14c67c347808ba", "3306c9a86181304538f42b235ad9648d", "c9567eeb", "d5b90f156b057873"}, 0x28) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', r6, 0x8000, 0x80, 0xf, 0x3, {{0x40, 0x4, 0x1, 0x10, 0x100, 0x65, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0xb, 0x0, [{0x4, 0x5, "0706d7"}]}, @cipso={0x86, 0x86, 0x1, [{0x6, 0x12, "d46bee6388e6b20ed6f10b2c4e736d23"}, {0x2, 0x12, "192ab231d444cdd134d9a614817a93a9"}, {0x2, 0x12, "ec26808fa2e9cae61f581636101f7db9"}, {0x7, 0x11, "5d98ad6530b984eaa5951ffacc3536"}, {0x6, 0x9, "5af33ad8fec327"}, {0x6, 0x7, "ab4baf5e59"}, {0x5, 0xe, "36a7964cdd641f4f94434959"}, {0x2, 0x11, "cef318077dfa03b38ad9b7253d6eb8"}, {0x6, 0xa, "e7ccbc6c63850537"}]}, @timestamp_prespec={0x44, 0x1c, 0x87, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0xa6d7}, {@private=0xa010102, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0xb, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@empty, 0x5}]}, @generic={0x83, 0x3, "a5"}, @noop, @timestamp_addr={0x44, 0x1c, 0xd6, 0x1, 0x2, [{@loopback, 0xf953}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xfff}, {@loopback, 0x4}]}]}}}}}) getsockopt$bt_BT_SNDMTU(r10, 0x112, 0xc, &(0x7f0000000c00)=0xeae, &(0x7f0000000c40)=0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x80000, 0x0) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1d0, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb6, 0xa8, @random="072ab06fc36e64ae7c01e225c3a08cab7dcda5df8b18c07a7609a4063a56753a037c7eac0f1763256aba84181df3eb10788245f7b357bebbdf5f95b872a956470324e46ab6700d7960525eb9373d77d6444fe6636afc31b150ab3b34e07a673309e9270f157dba0622753860953ef5615ffc7bf2a4eca94be331777c2b4f456ff8d3d10a104c9127a05a9d43702f1e3fdd54fa3e4a57c7da57d69fd92662d3c45b049c8f50b16997239343a3b25892ce5298"}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x7e, 0xa9, @random="7249a91f576983fc360352056802840e5cc1459c9b4367ccd361196a181b04d7ec23a0a9b93101161665318de2c6a6a932eafaf4a33fdfa3a6e55baae89d9c24de238716267a44b20dc7445c169acb27596e7fc4844ba0e23ea39a329c4712be5c24205a077f0793dbd3cf88efbfbca048b2548dc2f4d32c4925"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x1d0}}, 0x20040000) (async) socket$packet(0x11, 0x2, 0x300) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001040)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r12, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x74, r13, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x44840) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000001240)=@attr_other={0x0, 0x101, 0x100, &(0x7f0000001200)=0x9}) (async) r17 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x1) 29.780205363s ago: executing program 0 (id=1887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x78, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 29.662466203s ago: executing program 0 (id=1888): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 29.627686095s ago: executing program 4 (id=1889): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0xa0800, 0x0) mknodat$loop(r2, &(0x7f0000000240)='./file0\x00', 0x2, 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f00000000c0)={0x30002008}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000280)={0x40000002}) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r6, &(0x7f0000000180)={r9, 0xffffffffffffffff, 0x3}) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close_range(r2, r6, 0x2) shutdown(r5, 0x1) recvfrom(r5, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r10, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffffffffff20, 0x0, 0x3}) recvmmsg(r5, &(0x7f0000008d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10001, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 29.545477302s ago: executing program 2 (id=1890): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407800904001f00000000010000000000000800170001000000", 0x24) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) dup3(r0, r0, 0x0) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407800904001f00000000010000000000000800170001000000", 0x24) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async) dup3(r0, r0, 0x0) (async) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (async) 29.431232641s ago: executing program 2 (id=1891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) ftruncate(r0, 0x5) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) accept4$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) (rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000480)={0x0, 0x3ff, @status={[0x6, 0x2, 0x7, 0x9, 0x0, 0x100000001]}, [0x9, 0x100000000, 0x9, 0x1, 0x3, 0x1, 0x3b, 0x3, 0x8, 0x80000000, 0xffffffffffffffff, 0x89, 0x8001, 0x1, 0x444, 0x69, 0x200, 0x1, 0x0, 0x3, 0x3460, 0x7, 0x9, 0x3, 0x2, 0xfff, 0x4, 0x2, 0x1, 0x9, 0x1, 0x80000000, 0xfff00000000, 0x0, 0x1, 0x5, 0x6, 0x5, 0x6, 0xa, 0x4, 0x5e4, 0x3, 0x6, 0x0, 0xfffffffffffff3ac, 0x9, 0x5, 0x10, 0x4, 0x3, 0x7, 0x2, 0x400, 0xff, 0x401, 0x3, 0xf58, 0x7, 0x0, 0xfffffffffffffffc, 0x2, 0x2, 0x400]}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000100)={0x8, 'veth0_to_bond\x00', {'virt_wifi0\x00'}, 0x7}) (async) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x719d8870) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 29.420209252s ago: executing program 2 (id=1892): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x301802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 29.372374486s ago: executing program 2 (id=1893): r0 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) io_setup(0x100, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600102, 0x0) mmap(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000004, 0x4010, r2, 0x5f7d4000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xa) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0x8, 0x3a, 0x0, 0x7f, 0x2, 0x6b, 0x2, 0x1, 0x6b, 0xb, 0x95, 0x0, 0x3, 0x1, 0x5, 0x4, 0xb2, 0x6, '\x00', 0x5, 0x4}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 28.832575479s ago: executing program 0 (id=1898): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r1], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe16a3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe16a3000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r3) (async) close(r3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x40401, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$PTP_PEROUT_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x6}) syz_open_dev$evdev(&(0x7f0000000000), 0xb5, 0x22000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x100, 0x2}, {0x9}]}, 0x18, 0x0) ftruncate(r5, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 28.554734191s ago: executing program 0 (id=1899): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async, rerun: 64) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64) write$tcp_mem(r5, &(0x7f00000010c0), 0x3fffff) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x204482, 0x0) read$hidraw(r6, &(0x7f0000001140)=""/4096, 0x1000) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (rerun: 64) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BLKRRPART(r1, 0x125f, 0x0) (rerun: 64) 26.617925877s ago: executing program 3 (id=1905): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0\x00\b}QmE\xdd\xa69!Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000180)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x9, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x0, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x40000000000008, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3dff8dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c08, 0xffffffffffffffff) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x30, 0x0, &(0x7f0000000080)=[@acquire_done, @acquire, @exit_looper, @request_death], 0xd5, 0x0, &(0x7f0000000200)="03d96f058184c213994ab8b75c23572cc27a1d74d7ea4a672300df07d942a7bfdc962e001de124062dcb9cac18bf52691b42b4336b259bdb2cc9ed223821772231d3096d399e113d38ac8d17ea02cc4f3e83ff063442c9e2788b31697e595a153d74dd23b8bb50fe083df641606c681cea2688dfc9b4ebab8ec34701e67576f4e3290497860da37237145bb1dfbc3107ea0f9ad3f8c50507b4d3754e487e69cf354ec8868d1dd8a6628bfd72e988ec98a0e42863d9238372f03ce9484971c2befc96d231bdff446f376cdf9a2b7c9823133fa1d896"}) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x2, 0x8000000000000000]}}) 25.073192261s ago: executing program 3 (id=1906): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 24.105992398s ago: executing program 3 (id=1907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="831f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 64) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000300)=[@rdmsr={0x32, 0x18, {0x8b1}}, @wrmsr={0x1e, 0x20, {0x329, 0x1}}, @cpuid={0x14, 0x18, {0x8, 0x1b}}, @cpuid={0x14, 0x18, {0x81, 0x6}}, @rdmsr={0x32, 0x18, {0x379}}, @rdmsr={0x32, 0x18, {0xaf3}}, @wr_crn={0x46, 0x20, {0xed0d9e89d22caf69, 0x8}}, @cpuid={0x14, 0x18, {0x7, 0x2}}, @code={0xa, 0x4b, {"0f01c966b88b000f00d066b83a000f00d866b80f000f00d80f070f1f000f20c035020000000f22c0363667660f38de5515f042ff43d6430f01c8"}}, @rdmsr={0x32, 0x18, {0x8a8}}, @code={0xa, 0x67, {"b906040000b877000000ba000000000f30c74424009f000000c74424024600c0feff1c2436410f01c4f309fb469f0f2280440f20c03502000000440f22c0c441fc50c00fae7bda66baf80cb870e28088ef66bafc0cec"}}, @rdmsr={0x32, 0x18, {0x1dc}}, @wr_crn={0x46, 0x20, {0x2, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x5d, {"66baf80cb854967386ef66bafc0cb807000000ef67440f01d8b9800000c00f3235000800000f3067dcf0f30fc736c4823996f2b94e020000b8fbbed395ba000000000f30420c31d0d90f15fa"}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @cpuid={0x14, 0x18, {0x101, 0x2}}, @code={0xa, 0x60, {"b8010000000f01d9ed0f352400b9210300000f32660f38823e48b889000000000000000f23c00f21f83500000f000f23f8450f090f01c448b805000000000000000f23c80f21f8350c00c0000f23f8"}}, @wr_crn={0x46, 0x20, {0x3, 0x7}}, @rdmsr={0x32, 0x18, {0x8b1}}, @code={0xa, 0x61, {"2666400f38054e3b66baa000ed66b867000f00d066ba4100b8d42a5c0eef2e0f32b972080000b800800000ba000000000f30b9800000c00f3235004000000f303e0fc7b53fc1d7cb8fe978c3193645c9"}}, @rdmsr={0x32, 0x18, {0x92d}}, @code={0xa, 0x5d, {"c744240075000000c7442402f43f0000ff1c2464360f01c566bad104b805000000efc4e3117d39e4f5c4c37d1dab0600000066c4623dbdee0f07c4e1a5fabdf5ffffff660f3881353988775c"}}, @cpuid={0x14, 0x18, {0xf286, 0x4}}, @wrmsr={0x1e, 0x20, {0x8e8, 0x6}}, @rdmsr={0x32, 0x18, {0xa7a}}, @code={0xa, 0x55, {"f2450f59b459d7000000440f20c0350b000000440f22c0f3420fc7b6008000000f0138400f01cb0fae490c0f011d00180000c4637962cd0ec4c139d845acc4425d8c5904"}}, @wr_crn={0x46, 0x20, {0x4, 0x37df}}], 0x4ca}) (rerun: 64) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000100)=0x8001) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x1, 0x21}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 23.023916515s ago: executing program 3 (id=1908): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000240)) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast2, 0x1, "5c30dc12ecc48f54eabc726744a552af1382c3e8454a7f45cd48fd96bb298259", 0xf9f, 0x4, 0x8, 0xfffffffb}, 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r2, 0x80284504, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x81007702, 0x2) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC], 0x31) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000000c0)=0x5, 0x4) 21.572529081s ago: executing program 3 (id=1909): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x1) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00000034c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee46000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x2000000, 0x0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 19.360734158s ago: executing program 4 (id=1910): setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) (async) getdents(r3, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) (async) setgid(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100), 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f0000000300)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x5, [0x4c64a998, 0x101, 0x34, 0x9, 0x578c, 0x1]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) (async) readlinkat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/252, 0xfc) (async) listen(r5, 0x7) 17.961767391s ago: executing program 3 (id=1911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000180)="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", 0x123) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r2, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x205) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) 13.148612266s ago: executing program 33 (id=1893): r0 = socket$inet6(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x2, @local}}}, 0x108) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) io_setup(0x100, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x600102, 0x0) mmap(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x2000004, 0x4010, r2, 0x5f7d4000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xa) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x1, 0x8, 0x3a, 0x0, 0x7f, 0x2, 0x6b, 0x2, 0x1, 0x6b, 0xb, 0x95, 0x0, 0x3, 0x1, 0x5, 0x4, 0xb2, 0x6, '\x00', 0x5, 0x4}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0xb, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7.428833045s ago: executing program 34 (id=1899): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) (async, rerun: 64) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64) write$tcp_mem(r5, &(0x7f00000010c0), 0x3fffff) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x204482, 0x0) read$hidraw(r6, &(0x7f0000001140)=""/4096, 0x1000) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (rerun: 64) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BLKRRPART(r1, 0x125f, 0x0) (rerun: 64) 3.338483703s ago: executing program 35 (id=1910): setresgid(0xffffffffffffffff, 0xee01, 0x0) (async) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r3, 0x1, 0x1) (async) getdents(r3, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) (async) setgid(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100), 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000180), &(0x7f0000000300)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x5, [0x4c64a998, 0x101, 0x34, 0x9, 0x578c, 0x1]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f00000029c0)={0x2020}, 0x2020) (async) readlinkat(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/252, 0xfc) (async) listen(r5, 0x7) 0s ago: executing program 36 (id=1911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000180)="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", 0x123) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r2, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x205) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): lue for 'stats' [ 137.008557][ T10] rust_binder: 4098: removing orphan mapping 0:24 [ 137.174470][ T4139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 137.174499][ T4139] rust_binder: Failure BR_FAILED_REPLY { source: EFAULT } during reply - delivering BR_FAILED_REPLY to sender. [ 137.184499][ T4139] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:992 [ 137.197056][ T378] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 137.204601][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 137.204622][ T36] audit: type=1400 audit(1755547498.204:446): avc: denied { create } for pid=4141 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 137.213685][ T10] rust_binder: 4138: removing orphan mapping 0:24 [ 137.322791][ T64] rust_binder: 4141: removing orphan mapping 0:24 [ 137.328109][ T378] usb 4-1: device descriptor read/64, error -71 [ 137.329637][ T64] rust_binder: 0: removing orphan mapping 24:1024 [ 137.344082][ T4146] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 137.347174][ T4148] rust_binder: Read failure Err(EAGAIN) in pid:168 [ 137.352370][ T4148] rust_binder: got new transaction with bad transaction stack [ 137.359548][ T4148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 137.406339][ T46] rust_binder: 4143: removing orphan mapping 0:112 [ 137.422923][ T46] rust_binder: 0: removing orphan mapping 112:1048 [ 137.431052][ T4156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.440291][ T4156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.455301][ T4156] rust_binder: Write failure EINVAL in pid:999 [ 137.457623][ T4156] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 137.467453][ T4157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 137.471739][ T4156] rust_binder: Write failure EINVAL in pid:999 [ 137.578114][ T378] usb 4-1: device descriptor read/64, error -71 [ 137.607623][ T36] audit: type=1400 audit(1755547498.604:447): avc: denied { map } for pid=4158 comm="syz.0.1062" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 137.624397][ T4159] syzkaller0: entered promiscuous mode [ 137.637979][ T4159] syzkaller0: entered allmulticast mode [ 137.838100][ T378] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 137.968096][ T378] usb 4-1: device descriptor read/64, error -71 [ 137.987491][ T4165] fuse: Unknown parameter '0x0000000000000004' [ 138.208074][ T378] usb 4-1: device descriptor read/64, error -71 [ 138.318195][ T378] usb usb4-port1: attempt power cycle [ 138.526396][ T64] rust_binder: 4160: removing orphan mapping 0:24 [ 138.658140][ T378] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 138.679436][ T378] usb 4-1: device descriptor read/8, error -71 [ 138.701888][ T64] usb 5-1: USB disconnect, device number 6 [ 138.739024][ T4103] can0 (unregistered): slcan off ptm0. [ 138.809125][ T378] usb 4-1: device descriptor read/8, error -71 [ 138.880900][ T4199] /dev/rnullb0: Can't open blockdev [ 138.944059][ T36] audit: type=1400 audit(1755547499.944:448): avc: denied { write } for pid=4212 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.048068][ T378] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 139.079136][ T378] usb 4-1: device descriptor read/8, error -71 [ 139.219419][ T378] usb 4-1: device descriptor read/8, error -71 [ 139.328159][ T378] usb usb4-port1: unable to enumerate USB device [ 139.348138][ T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.498118][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 139.505630][ T64] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 139.514023][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.524259][ T64] usb 5-1: config 0 has no interface number 0 [ 139.530598][ T64] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.542948][ T64] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.554134][ T64] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.565952][ T64] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.579059][ T64] usb 5-1: config 0 interface 52 has no altsetting 0 [ 139.585916][ T64] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 139.595651][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.604948][ T64] usb 5-1: config 0 descriptor?? [ 139.831019][ T46] rust_binder: 4221: removing orphan mapping 0:24 [ 139.874274][ T36] audit: type=1400 audit(1755547500.874:449): avc: denied { shutdown } for pid=4250 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.007776][ T36] audit: type=1400 audit(1755547501.004:450): avc: denied { accept } for pid=4256 comm="syz.2.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.010605][ T4257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.037095][ T4257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.172086][ T36] audit: type=1400 audit(1755547501.174:451): avc: denied { read } for pid=4237 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.845990][ T377] rust_binder: 0: removing orphan mapping 0:24 [ 140.858056][ T377] rust_binder: 0: removing orphan mapping 24:1024 [ 141.023351][ T36] audit: type=1400 audit(1755547502.024:452): avc: denied { getopt } for pid=4282 comm="syz.3.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.025632][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.044088][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.050423][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.056611][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.063012][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.069512][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.075947][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.082384][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.088745][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.094950][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.101389][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.107763][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.114456][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.120854][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.127140][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.133681][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.140075][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.146589][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.152937][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.159510][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.165813][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.172439][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.178929][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.185422][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.191678][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.197880][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.204190][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.210510][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.216740][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.223161][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.229463][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.232616][ T36] audit: type=1326 audit(1755547502.234:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4265 comm="syz.0.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9492b8ebe9 code=0x7fc00000 [ 141.235658][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.262430][ T4287] tipc: Can't bind to reserved service type 1 [ 141.265833][ T4283] rust_binder: Write failure EFAULT in pid:932 [ 141.324990][ T4288] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1091'. [ 141.709726][ T377] rust_binder: 4276: removing orphan mapping 0:24 [ 141.762520][ T36] audit: type=1107 audit(1755547502.764:454): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='€Ù„-¥òûNB1¸°¼“ìÝåÉ+,p×ràYFç῱UhG\/E+m)‡b2F÷Ò?¡Ö»uºZ§¥' [ 141.790973][ T4295] fuse: Bad value for 'user_id' [ 141.796185][ T4295] fuse: Bad value for 'user_id' [ 141.851317][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.861763][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.870299][ T4306] rust_binder: Error while translating object. [ 141.870338][ T4306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.876800][ T4306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 141.887368][ T4307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.130043][ T377] usb 5-1: USB disconnect, device number 7 [ 142.248073][ T64] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 142.348086][ T46] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 142.408123][ T64] usb 4-1: Using ep0 maxpacket: 16 [ 142.414979][ T64] usb 4-1: config 220 has an invalid interface number: 112 but max is 0 [ 142.423775][ T64] usb 4-1: config 220 has no interface number 0 [ 142.430456][ T64] usb 4-1: config 220 interface 112 has no altsetting 0 [ 142.439765][ T64] usb 4-1: New USB device found, idVendor=19d2, idProduct=a5a8, bcdDevice=28.62 [ 142.448967][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.457065][ T64] usb 4-1: Product: syz [ 142.461487][ T64] usb 4-1: Manufacturer: syz [ 142.466312][ T64] usb 4-1: SerialNumber: syz [ 142.509548][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.521287][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.531322][ T46] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 142.540460][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.550273][ T46] usb 1-1: config 0 descriptor?? [ 142.585408][ T4325] 9pnet_fd: Insufficient options for proto=fd [ 142.624893][ T4329] tipc: Started in network mode [ 142.630265][ T4329] tipc: Node identity dee25647421d, cluster identity 4711 [ 142.637589][ T4329] tipc: Enabled bearer , priority 0 [ 142.646567][ T4329] tipc: Resetting bearer [ 142.662345][ T4329] tipc: Disabling bearer [ 142.763880][ T377] rust_binder: 4312: removing orphan mapping 0:24 [ 142.843733][ T4341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.867963][ T4341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.945955][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.978330][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.996924][ T4320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.007640][ T4351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.027846][ T4351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.037230][ T46] hkems 0003:2006:0118.001C: unknown main item tag 0x0 [ 143.058048][ T46] hkems 0003:2006:0118.001C: item fetching failed at offset 1/7 [ 143.076462][ T46] hkems 0003:2006:0118.001C: parse failed [ 143.094970][ T46] hkems 0003:2006:0118.001C: probe with driver hkems failed with error -22 [ 143.272101][ T377] usb 1-1: USB disconnect, device number 38 [ 143.660655][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 144.478907][ T31] rust_binder: 4370: removing orphan mapping 0:24 [ 144.560063][ T36] audit: type=1400 audit(1755547505.564:455): avc: denied { setattr } for pid=4384 comm="syz.2.1120" name="file0" dev="incremental-fs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.629679][ T4387] overlay: Unknown parameter 'permit_directio' [ 144.636674][ T4388] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1121'. [ 144.646136][ T359] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 144.658220][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 144.682892][ T4387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.693492][ T4392] 8021q: VLANs not supported on ip6_vti0 [ 144.699805][ T4387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.718450][ T4388] fuse: Unknown parameter 'fdÍ0x0000000000000006' [ 144.829198][ T359] usb 5-1: config index 0 descriptor too short (expected 4988, got 36) [ 144.847864][ T359] usb 5-1: config 98 has an invalid descriptor of length 77, skipping remainder of the config [ 144.868083][ T359] usb 5-1: config 98 has 0 interfaces, different from the descriptor's value: 23 [ 144.887647][ T359] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 144.907036][ T359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.928624][ T359] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 144.951848][ T359] usb 5-1: no configuration chosen from 1 choice [ 144.994066][ T46] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 145.008036][ T64] usb 4-1: bad CDC descriptors [ 145.022956][ T64] usb 4-1: USB disconnect, device number 34 [ 145.030246][ T4404] rust_binder: Error while translating object. [ 145.030304][ T4404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 145.036886][ T4404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1083 [ 145.068539][ T4406] 9pnet_fd: Insufficient options for proto=fd [ 145.073619][ T4407] 9pnet_fd: Insufficient options for proto=fd [ 145.149167][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.162658][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.180543][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.203905][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.222313][ T36] audit: type=1400 audit(1755547506.224:456): avc: denied { mount } for pid=4409 comm="syz.3.1127" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 145.223447][ T4410] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 145.254094][ T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.264174][ T46] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.272519][ T46] usb 1-1: Manufacturer: syz [ 145.278345][ T46] usb 1-1: config 0 descriptor?? [ 145.303714][ T36] audit: type=1400 audit(1755547506.304:457): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 145.485846][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.495586][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.723945][ T4397] syzkaller0: entered allmulticast mode [ 145.734118][ T4397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.743266][ T4397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.856614][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 145.863039][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.872653][ T46] usb 1-1: USB disconnect, device number 39 [ 146.070073][ T4428] ip6gretap0: mtu less than device minimum [ 146.097620][ T64] rust_binder: 4411: removing orphan mapping 0:24 [ 146.225924][ T4435] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 146.225947][ T4435] rust_binder: Error while translating object. [ 146.237049][ T4435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.243470][ T4435] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 146.253171][ T4435] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1098 [ 146.270558][ T64] rust_binder: 4434: removing orphan mapping 0:24 [ 146.289389][ T4438] random: crng reseeded on system resumption [ 146.358074][ T46] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 146.387460][ T4445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.412536][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.428284][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.480933][ T4455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216 [ 146.509952][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.527665][ T46] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.537051][ T46] usb 4-1: config 1 has no interface number 1 [ 146.544344][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.559903][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.569448][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.578342][ T46] usb 4-1: Product: syz [ 146.582852][ T46] usb 4-1: Manufacturer: syz [ 146.587519][ T46] usb 4-1: SerialNumber: syz [ 146.810751][ T46] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 146.819139][ T46] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 146.828072][ T46] usb 4-1: failed to enable PITCH for EP 0x82 [ 146.837400][ T46] usb 4-1: USB disconnect, device number 35 [ 146.992570][ T4471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.001215][ T4471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.009919][ T4470] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1145'. [ 147.392476][ T378] usb 5-1: USB disconnect, device number 8 [ 147.411267][ T46] rust_binder: 4457: removing orphan mapping 0:24 [ 147.466750][ T4499] veth1_vlan: mtu greater than device maximum [ 147.524446][ T4502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:960 [ 147.561157][ T4506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4506 comm=syz.4.1154 [ 147.584025][ T4506] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.593308][ T4506] fuse: Unknown parameter 'Nª_iÆ´æ·á¹áù-Ø®z‰uLÆVÒpˆ©qYRG‘}aP5c' [ 147.629275][ T4510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.629309][ T4510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.737546][ T36] audit: type=1400 audit(1755547508.734:458): avc: denied { setattr } for pid=4519 comm="syz.4.1158" path="socket:[31091]" dev="sockfs" ino=31091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 147.834466][ T36] audit: type=1400 audit(1755547508.834:459): avc: granted { setsecparam } for pid=4524 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 147.986364][ T4532] /dev/rnullb0: Can't open blockdev [ 148.023827][ T36] audit: type=1400 audit(1755547509.024:460): avc: denied { write } for pid=4534 comm="syz.2.1162" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.248833][ T4545] tmpfs: Bad value for 'nr_blocks' [ 148.277689][ T4548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.364677][ T4564] 9pnet_fd: Insufficient options for proto=fd [ 148.409876][ T4568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:977 [ 148.710994][ T46] rust_binder: 4527: removing orphan mapping 0:24 [ 148.738813][ T4587] can0: slcan on ptm0. [ 148.771533][ T4587] can0 (unregistered): slcan off ptm0. [ 148.936638][ T4616] /dev/rnullb0: Can't open blockdev [ 149.219726][ T36] audit: type=1400 audit(1755547510.224:461): avc: denied { connect } for pid=4621 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.268071][ T378] rust_binder: 0: removing orphan mapping 0:4224 [ 149.298038][ T36] audit: type=1400 audit(1755547510.294:462): avc: denied { mount } for pid=4640 comm="syz.3.1186" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 149.368186][ T4649] vlan0: entered promiscuous mode [ 149.373487][ T4649] vlan0: entered allmulticast mode [ 149.379496][ T4649] veth0_vlan: entered allmulticast mode [ 149.386428][ T4648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 149.573173][ T4672] binder: Unknown parameter 'defcontextœé—V±pêvôxã9‚s [ 149.573173][ T4672] * ' [ 149.827923][ T4699] bpf: Bad value for 'mode' [ 149.847699][ T36] audit: type=1400 audit(1755547510.844:463): avc: denied { map } for pid=4700 comm="syz.0.1204" path="/proc/260/task/261/mounts" dev="proc" ino=32121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 149.910041][ T36] audit: type=1400 audit(1755547510.914:464): avc: denied { rename } for pid=4704 comm="syz.4.1206" name="#2f" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.932210][ T4687] overlayfs: failed to clone upperpath [ 150.096420][ T4709] rust_binder: Write failure EFAULT in pid:214 [ 150.118127][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 150.124753][ T378] rust_binder: 4641: removing orphan mapping 0:24 [ 150.133959][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1209'. [ 150.191706][ T4721] rust_binder: Error while translating object. [ 150.191755][ T4721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.198708][ T4721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 150.485730][ T4755] 9pnet_fd: Insufficient options for proto=fd [ 150.552318][ T4760] fuse: Bad value for 'group_id' [ 150.557474][ T4760] fuse: Bad value for 'group_id' [ 150.563600][ T4760] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1227'. [ 150.573729][ T4760] 9pnet_fd: Insufficient options for proto=fd [ 150.574031][ T4761] netlink: 'syz.2.1226': attribute type 16 has an invalid length. [ 150.588291][ T4761] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1226'. [ 151.233072][ T4775] 9pnet_fd: Insufficient options for proto=fd [ 151.240354][ T4768] rust_binder: Write failure EFAULT in pid:225 [ 151.241789][ T378] rust_binder: 4739: removing orphan mapping 0:24 [ 151.276881][ T4778] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1234'. [ 151.276879][ T36] audit: type=1400 audit(1755547512.274:465): avc: denied { nlmsg_read } for pid=4776 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.327428][ T4778] rust_binder: 4780 RLIMIT_NICE not set [ 151.753498][ T36] audit: type=1400 audit(1755547512.754:466): avc: denied { relabelfrom } for pid=4799 comm="syz.4.1241" name="NETLINK" dev="sockfs" ino=32503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 151.753530][ T4800] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 151.794600][ T36] audit: type=1400 audit(1755547512.794:467): avc: denied { relabelto } for pid=4799 comm="syz.4.1241" name="NETLINK" dev="sockfs" ino=32503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 151.796953][ T4800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4800 comm=syz.4.1241 [ 151.991974][ T36] audit: type=1400 audit(1755547512.994:468): avc: denied { ioctl } for pid=4834 comm="syz.3.1255" path="socket:[32611]" dev="sockfs" ino=32611 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.044068][ T36] audit: type=1400 audit(1755547513.024:469): avc: denied { getopt } for pid=4841 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.267855][ T4856] netlink: 'syz.0.1261': attribute type 12 has an invalid length. [ 152.276980][ T4857] input: syz1 as /devices/virtual/input/input30 [ 152.483496][ T4867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.489940][ T46] rust_binder: 4865: removing orphan mapping 0:8 [ 152.687255][ T359] rust_binder: 4804: removing orphan mapping 0:24 [ 152.724061][ T36] audit: type=1400 audit(1755547513.724:470): avc: denied { remount } for pid=4895 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 152.828102][ T64] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 153.138169][ T378] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.290159][ T378] usb 5-1: config 203 has an invalid interface number: 185 but max is 0 [ 153.299196][ T378] usb 5-1: config 203 has an invalid descriptor of length 0, skipping remainder of the config [ 153.309864][ T378] usb 5-1: config 203 has no interface number 0 [ 153.316328][ T378] usb 5-1: config 203 interface 185 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 153.330538][ T378] usb 5-1: config 203 interface 185 has no altsetting 0 [ 153.339417][ T378] usb 5-1: New USB device found, idVendor=12d1, idProduct=b65d, bcdDevice=d6.67 [ 153.348837][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.358220][ T378] usb 5-1: Product: ҿ롿峨í›àª¯á–ì¤ê‘¯æƒ à­¤ì‘³å´î¦¼ë•ã—´æº¦ç•‹ä¨ºê¦îŠ“ã‚쬸娣㎚府਎׌æ˜í‡£ïƒã»Œê…‹ê˜®ï´Šá½—ׅி㛂㖼 [ 153.374385][ T378] usb 5-1: Manufacturer: â°‰ [ 153.379262][ T378] usb 5-1: SerialNumber: à°Š [ 153.385141][ T378] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 153.394704][ T378] usb 5-1: no configuration chosen from 1 choice [ 153.486437][ T4924] overlayfs: failed to clone lowerpath [ 153.588354][ T36] audit: type=1326 audit(1755547514.584:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.0.1284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9492b8ebe9 code=0x0 [ 153.694004][ T4925] rust_binder: 4931 RLIMIT_NICE not set [ 153.694155][ T4925] rust_binder: got new transaction with bad transaction stack [ 153.700009][ T4925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 154.259163][ T64] rust_binder: 4918: removing orphan mapping 0:24 [ 154.284952][ T4935] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 154.294287][ T4935] rust_binder: Write failure EINVAL in pid:317 [ 154.312446][ T4937] fuseblk: Bad value for 'fd' [ 154.325970][ T4938] fuseblk: Bad value for 'fd' [ 154.456942][ T4942] netlink: 'syz.0.1290': attribute type 28 has an invalid length. [ 154.468777][ T4943] overlayfs: failed to resolve './file1': -2 [ 155.827365][ T46] rust_binder: 4947: removing orphan mapping 0:24 [ 155.851685][ T4952] can: request_module (can-proto-0) failed. [ 155.916681][ T378] usb 5-1: USB disconnect, device number 9 [ 156.953510][ T36] audit: type=1400 audit(1755547517.954:472): avc: denied { setattr } for pid=4977 comm="syz.2.1302" name="NETLINK" dev="sockfs" ino=33461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.992596][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 157.218905][ T4998] overlayfs: missing 'lowerdir' [ 157.255369][ T5001] netlink: 5180 bytes leftover after parsing attributes in process `syz.2.1309'. [ 157.582569][ T36] audit: type=1400 audit(1755547518.584:473): avc: denied { mount } for pid=5008 comm="syz.3.1312" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 157.598246][ T378] rust_binder: 4973: removing orphan mapping 0:24 [ 157.868046][ T378] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.959333][ T2506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.960577][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 157.973272][ T5022] overlayfs: failed to clone upperpath [ 157.997801][ T36] audit: type=1400 audit(1755547518.994:474): avc: denied { map } for pid=5024 comm="syz.0.1318" path="socket:[33511]" dev="sockfs" ino=33511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.048957][ T378] usb 5-1: Using ep0 maxpacket: 32 [ 158.055326][ T378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.066201][ T378] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.075799][ T378] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.086062][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.105887][ T378] usb 5-1: config 0 descriptor?? [ 158.269643][ T5057] cgroup: subsys name conflicts with all [ 158.316916][ T5014] rust_binder: Write failure EFAULT in pid:267 [ 158.317330][ T64] usb 5-1: USB disconnect, device number 10 [ 158.343437][ T5066] overlay: ./file0 is not a directory [ 158.349723][ T5066] overlay: ./file0 is not a directory [ 158.528118][ T378] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 158.658094][ T378] usb 1-1: device descriptor read/64, error -71 [ 158.897542][ T5071] rust_binder: Error in use_page_slow: ESRCH [ 158.897567][ T5071] rust_binder: use_range failure ESRCH [ 158.904238][ T5071] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 158.908218][ T378] usb 1-1: device descriptor read/64, error -71 [ 158.910382][ T5071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.925404][ T5071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:269 [ 159.168116][ T378] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 159.308104][ T378] usb 1-1: device descriptor read/64, error -71 [ 159.321756][ T5095] 9pnet_fd: Insufficient options for proto=fd [ 159.334945][ T36] audit: type=1400 audit(1755547520.334:475): avc: denied { ioctl } for pid=5096 comm="syz.3.1345" path="socket:[33656]" dev="sockfs" ino=33656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.548140][ T378] usb 1-1: device descriptor read/64, error -71 [ 159.658264][ T378] usb usb1-port1: attempt power cycle [ 159.855769][ T5118] overlayfs: failed to clone upperpath [ 160.001894][ T378] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 160.030810][ T378] usb 1-1: device descriptor read/8, error -71 [ 160.160190][ T378] usb 1-1: device descriptor read/8, error -71 [ 160.229114][ T5141] 9pnet_fd: Insufficient options for proto=fd [ 160.291521][ T5143] rust_binder: Write failure EFAULT in pid:280 [ 160.408141][ T378] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 160.439400][ T378] usb 1-1: device descriptor read/8, error -71 [ 160.569352][ T378] usb 1-1: device descriptor read/8, error -71 [ 160.678340][ T378] usb usb1-port1: unable to enumerate USB device [ 161.139291][ T359] rust_binder: 5147: removing orphan mapping 0:24 [ 161.244102][ T378] rust_binder: 5051: removing orphan mapping 0:24 [ 161.598106][ T378] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 161.748076][ T378] usb 5-1: Using ep0 maxpacket: 32 [ 161.755282][ T378] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 161.769207][ T378] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.778509][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.787127][ T378] usb 5-1: Product: syz [ 161.791766][ T378] usb 5-1: Manufacturer: ä°Š [ 161.796481][ T378] usb 5-1: SerialNumber: syz [ 162.007367][ T378] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 162.016050][ T378] usb 5-1: found format II with max.bitrate = 1, frame size=5 [ 162.023705][ T378] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 162.033142][ T378] usb 5-1: USB disconnect, device number 11 [ 162.044451][ T1533] udevd[1533]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.196139][ T5171] rust_binder: Write failure EINVAL in pid:355 [ 162.196577][ T5171] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 162.211037][ T5171] rust_binder: Write failure EINVAL in pid:355 [ 162.224451][ T5173] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 162.238313][ T5173] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 162.247877][ T5175] rust_binder: Write failure EINVAL in pid:357 [ 162.258547][ T5179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.265093][ T5178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.324120][ T5179] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 162.331112][ T5179] rust_binder: Read failure Err(EFAULT) in pid:362 [ 163.275345][ T5208] /dev/rnullb0: Can't open blockdev [ 163.312728][ T5208] can: request_module (can-proto-5) failed. [ 163.380506][ T36] audit: type=1400 audit(1755547524.384:476): avc: denied { bind } for pid=5214 comm="syz.4.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.406813][ T5217] syzkaller0: entered promiscuous mode [ 163.412912][ T5217] syzkaller0: entered allmulticast mode [ 163.419965][ T44] syzkaller0: tun_net_xmit 48 [ 163.425599][ T5217] syzkaller0: create flow: hash 3671734992 index 1 [ 163.434769][ T5215] syzkaller0: delete flow: hash 3671734992 index 1 [ 163.467829][ T5220] /dev/rnullb0: Can't open blockdev [ 163.748203][ T378] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.899488][ T378] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 163.908920][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.918121][ T378] usb 5-1: config 0 descriptor?? [ 164.265939][ T5229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=5229 comm=syz.0.1388 [ 164.333590][ T378] wacom 0003:056A:0300.001D: ignoring exceeding usage max [ 164.343478][ T378] wacom 0003:056A:0300.001D: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 164.354392][ T378] wacom 0003:056A:0300.001D: hidraw0: USB HID vff.fe Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 164.368686][ T378] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.001D/input/input33 [ 164.999756][ T5256] 9pnet_fd: p9_fd_create_unix (5256): problem connecting socket: ./file0: -111 [ 165.035240][ T5263] incfs: ino conflict with backing FS 1 [ 165.042344][ T36] audit: type=1326 audit(1755547526.044:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.3.1399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f478ed8ebe9 code=0x0 [ 165.073831][ T359] usb 5-1: USB disconnect, device number 12 [ 165.959408][ T36] audit: type=1400 audit(1755547526.964:478): avc: denied { ioctl } for pid=5289 comm="syz.0.1409" path="socket:[34536]" dev="sockfs" ino=34536 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.058524][ T5292] tipc: Started in network mode [ 166.065668][ T5292] tipc: Node identity b24933c7ef6f, cluster identity 4711 [ 166.073457][ T5292] tipc: Enabled bearer , priority 0 [ 166.088214][ T5291] tipc: Resetting bearer [ 166.120655][ T5291] tipc: Disabling bearer [ 166.120751][ T5302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4216, limit: 5264, size: 18446744073709551583) [ 166.126864][ T5302] rust_binder: Error while translating object. [ 166.152535][ T5302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.160671][ T5302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 166.250020][ T36] audit: type=1400 audit(1755547527.244:479): avc: denied { create } for pid=5315 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.407585][ T5332] 9pnet_fd: Insufficient options for proto=fd [ 166.451438][ T5335] overlayfs: failed to clone upperpath [ 166.458117][ T5334] overlayfs: failed to clone upperpath [ 166.548076][ T377] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 166.698043][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 166.708771][ T377] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 166.717137][ T377] usb 1-1: config 0 has no interface number 0 [ 166.725273][ T377] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 166.734945][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.743358][ T377] usb 1-1: Product: syz [ 166.747590][ T377] usb 1-1: Manufacturer: syz [ 166.758228][ T377] usb 1-1: SerialNumber: syz [ 166.767933][ T377] usb 1-1: config 0 descriptor?? [ 166.774324][ T377] smsc95xx v2.0.0 [ 166.833890][ T5360] 9pnet_fd: Insufficient options for proto=fd [ 167.095887][ T5364] rust_binder: Write failure EINVAL in pid:325 [ 167.112608][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 167.182449][ T377] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 167.193942][ T377] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 167.205170][ T5368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1169731583 (18715705328 ns) > initial count (14827118032 ns). Using initial count to start timer. [ 167.240718][ T5377] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 167.718079][ T359] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 167.772187][ T5408] overlayfs: failed to clone upperpath [ 167.825293][ T36] audit: type=1400 audit(1755547528.824:480): avc: denied { create } for pid=5413 comm="syz.2.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.868086][ T359] usb 5-1: Using ep0 maxpacket: 32 [ 167.875746][ T359] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 167.885204][ T359] usb 5-1: config 0 has no interface number 0 [ 167.893012][ T359] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 167.905599][ T359] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 167.919048][ T359] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 167.930051][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.951367][ T359] usb 5-1: Product: syz [ 167.956684][ T359] usb 5-1: Manufacturer: syz [ 167.962780][ T359] usb 5-1: SerialNumber: syz [ 167.971469][ T359] usb 5-1: config 0 descriptor?? [ 167.977281][ T5390] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.985068][ T5390] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.996817][ T359] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 0e:81:66:d0:c9:63 [ 168.027707][ T377] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 168.053338][ T377] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 168.103673][ T5434] fuse: Bad value for 'fd' [ 168.215065][ T359] usb 5-1: USB disconnect, device number 13 [ 168.232725][ T359] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 168.577897][ T5499] bridge0: port 3(veth0_to_bridge) entered blocking state [ 168.585399][ T5499] bridge0: port 3(veth0_to_bridge) entered disabled state [ 168.593102][ T5499] veth0_to_bridge: entered allmulticast mode [ 168.600059][ T5499] veth0_to_bridge: entered promiscuous mode [ 168.606347][ T5499] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.619078][ T5499] bridge0: port 3(veth0_to_bridge) entered blocking state [ 168.626466][ T5499] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 168.662324][ T5503] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 168.742090][ T36] audit: type=1400 audit(1755547529.744:481): avc: denied { write } for pid=5509 comm="syz.4.1481" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 168.805912][ T5516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 168.805962][ T5516] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 168.815882][ T5516] rust_binder: Read failure Err(EFAULT) in pid:339 [ 168.965010][ T5531] incfs: Error accessing: ./file0. [ 168.979714][ T5531] incfs: mount failed -20 [ 168.985237][ T5531] incfs: Error accessing: ./file0. [ 168.991111][ T5531] incfs: mount failed -20 [ 169.313675][ T377] usb 1-1: USB disconnect, device number 46 [ 169.330878][ T5546] tmpfs: Cannot retroactively limit inodes [ 169.365507][ T36] audit: type=1400 audit(1755547530.364:482): avc: denied { setopt } for pid=5552 comm="syz.0.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.393230][ T5558] /dev/rnullb0: Can't open blockdev [ 169.414589][ T36] audit: type=1400 audit(1755547530.414:483): avc: denied { create } for pid=5562 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.573007][ T36] audit: type=1400 audit(1755547530.574:484): avc: denied { append } for pid=5569 comm="syz.0.1497" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 169.575212][ T5570] /dev/rnullb0: Can't open blockdev [ 169.746401][ T5593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 169.760025][ T5596] rust_binder: 358: no such ref 2 [ 169.778741][ T5596] rust_binder: Read failure Err(EAGAIN) in pid:358 [ 169.858108][ T377] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 170.019943][ T377] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 170.028908][ T377] usb 1-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 170.039776][ T377] usb 1-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.053928][ T377] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.062535][ T377] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.072036][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.080654][ T377] usb 1-1: Product: Ë憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓êŠÝœã„¿â†¦è£ŒèŽ¡ê‰³îµ°å’†çº¥ã‰¸å¾žà®´è®§ê±¿â¨”亓뉭얄슀葋ä¤ë¹—馿㞘톷注栴享◗◧報ꓨèŽè—·â¢žë¥ï¯•ì¢¢ë–¸æž±å˜¯ë–¦æ‘µï¹§ê²¥éˆáœ‡ä¤¬îªŠîŒ¹æ¼³ [ 170.103274][ T377] usb 1-1: SerialNumber: syz [ 170.317408][ T377] cdc_ether 1-1:1.0: skipping garbage [ 170.322961][ T377] cdc_ether 1-1:1.0: skipping garbage [ 170.328799][ T377] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 170.339235][ T377] usb 1-1: USB disconnect, device number 47 [ 170.857348][ T5620] overlay: filesystem on ./bus not supported as upperdir [ 170.879722][ T5622] can0: slcan on ptm0. [ 171.118073][ T377] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 171.248068][ T377] usb 1-1: device descriptor read/64, error -71 [ 171.488059][ T377] usb 1-1: device descriptor read/64, error -71 [ 171.505440][ T5643] rust_binder: Error while translating object. [ 171.505468][ T5643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 171.512142][ T5643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:373 [ 171.641244][ T359] rust_binder: 5645: removing orphan mapping 0:24 [ 171.738093][ T377] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 171.878049][ T377] usb 1-1: device descriptor read/64, error -71 [ 172.128048][ T377] usb 1-1: device descriptor read/64, error -71 [ 172.248144][ T377] usb usb1-port1: attempt power cycle [ 172.266009][ T36] audit: type=1400 audit(1755547533.264:485): avc: denied { map } for pid=5697 comm="syz.3.1539" path="socket:[36175]" dev="sockfs" ino=36175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.303447][ T36] audit: type=1400 audit(1755547533.264:486): avc: denied { read } for pid=5697 comm="syz.3.1539" path="socket:[36175]" dev="sockfs" ino=36175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.330783][ T5700] 9pnet_fd: Insufficient options for proto=fd [ 172.598068][ T377] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 172.619357][ T377] usb 1-1: device descriptor read/8, error -71 [ 172.749205][ T377] usb 1-1: device descriptor read/8, error -71 [ 172.930749][ T36] audit: type=1400 audit(1755547533.934:487): avc: denied { remove_name } for pid=5723 comm="syz.4.1549" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.956612][ T36] audit: type=1400 audit(1755547533.934:488): avc: denied { unlink } for pid=5723 comm="syz.4.1549" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.988107][ T377] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 173.009077][ T377] usb 1-1: device descriptor read/8, error -71 [ 173.139688][ T377] usb 1-1: device descriptor read/8, error -71 [ 173.148040][ T5760] /dev/rnullb0: Can't lookup blockdev [ 173.258196][ T377] usb usb1-port1: unable to enumerate USB device [ 173.275228][ T5776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.275722][ T5776] rust_binder: Error while translating object. [ 173.282675][ T5776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 173.289930][ T5776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:412 [ 173.862679][ T5797] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.923221][ T5622] can0 (unregistered): slcan off ptm0. [ 173.952636][ T5808] rust_binder: Failed copying remainder into alloc: EFAULT [ 173.952669][ T5808] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 173.962793][ T5808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 173.971298][ T5808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:438 [ 174.066292][ T359] rust_binder: 5827: removing orphan mapping 0:24 [ 174.169372][ T5852] rust_binder: Write failure EFAULT in pid:418 [ 174.193742][ T5856] overlayfs: failed to resolve './file1': -2 [ 174.524724][ T5915] /dev/loop0: Can't lookup blockdev [ 174.538078][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 174.688049][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 174.694588][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.705174][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 174.714442][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.723736][ T46] usb 5-1: config 0 descriptor?? [ 174.932310][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 174.939422][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.950549][ T46] usb 5-1: USB disconnect, device number 14 [ 175.264521][ T36] audit: type=1400 audit(1755547536.264:489): avc: denied { ioctl } for pid=5924 comm="syz.0.1599" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.264804][ T5925] /dev/rnullb0: Can't open blockdev [ 175.311385][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 175.322282][ T36] audit: type=1400 audit(1755547536.324:490): avc: denied { create } for pid=5926 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 175.354933][ T5930] rust_binder: Write failure EFAULT in pid:478 [ 175.374220][ T5934] 9pnet: Could not find request transport: f` [ 175.479637][ T5944] netlink: 'syz.0.1606': attribute type 15 has an invalid length. [ 175.487968][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1606'. [ 175.547407][ T5956] 9pnet_fd: Insufficient options for proto=fd [ 175.752576][ T5970] rust_binder: Error in use_page_slow: ESRCH [ 175.752592][ T5970] rust_binder: use_range failure ESRCH [ 175.758752][ T5970] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 175.764367][ T5970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.768057][ T377] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 175.772989][ T5970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:490 [ 175.929771][ T377] usb 5-1: unable to get BOS descriptor or descriptor too short [ 175.947565][ T377] usb 5-1: config 1 has an invalid descriptor of length 26, skipping remainder of the config [ 175.958293][ T377] usb 5-1: config 1 interface 0 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 175.970055][ T377] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x83 has invalid maxpacket 31297, setting to 8 [ 175.981417][ T377] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.994653][ T377] usb 5-1: config 1 interface 0 has no altsetting 0 [ 176.006764][ T377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.016084][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.024241][ T377] usb 5-1: SerialNumber: Њ [ 176.029896][ T5950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.245045][ T377] usb 5-1: USB disconnect, device number 15 [ 176.818439][ T5989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1619'. [ 177.456376][ T6017] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 177.464306][ T6017] netlink: 'syz.4.1629': attribute type 2 has an invalid length. [ 177.670510][ T6020] netlink: 'syz.2.1630': attribute type 3 has an invalid length. [ 177.710748][ T6024] fuse: Unknown parameter 'rontmode' [ 178.062954][ T6057] 9pnet_fd: Insufficient options for proto=fd [ 178.063413][ T6058] 9pnet_fd: Insufficient options for proto=fd [ 178.416146][ T36] audit: type=1400 audit(1755547539.414:491): avc: denied { accept } for pid=6060 comm="syz.3.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.642783][ T6072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6072 comm=syz.2.1649 [ 178.671533][ T6076] incfs: Error accessing: ./file0. [ 178.677218][ T6076] incfs: mount failed -20 [ 178.843326][ T6082] fuseblk: Unknown parameter 'rootmo€' [ 179.164052][ T6100] rust_binder: 6099 RLIMIT_NICE not set [ 179.708217][ T6129] 9pnet_fd: Insufficient options for proto=fd [ 179.951836][ T36] audit: type=1400 audit(1755547540.954:492): avc: denied { map } for pid=6136 comm="syz.2.1674" path="socket:[38250]" dev="sockfs" ino=38250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.976174][ T36] audit: type=1400 audit(1755547540.954:493): avc: denied { read } for pid=6136 comm="syz.2.1674" path="socket:[38250]" dev="sockfs" ino=38250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.042798][ T36] audit: type=1400 audit(1755547541.044:494): avc: denied { read write } for pid=6147 comm="syz.4.1678" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.070502][ T36] audit: type=1400 audit(1755547541.044:495): avc: denied { open } for pid=6147 comm="syz.4.1678" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.095131][ T36] audit: type=1400 audit(1755547541.044:496): avc: denied { ioctl } for pid=6147 comm="syz.4.1678" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.278132][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 180.428047][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 180.434600][ T10] usb 5-1: config 129 has an invalid interface number: 63 but max is 0 [ 180.444061][ T10] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 180.453383][ T10] usb 5-1: config 129 has an invalid descriptor of length 130, skipping remainder of the config [ 180.464159][ T10] usb 5-1: config 129 has no interface number 0 [ 180.470483][ T10] usb 5-1: config 129 interface 63 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 180.484069][ T10] usb 5-1: config 129 interface 63 has no altsetting 0 [ 180.493151][ T10] usb 5-1: New USB device found, idVendor=0586, idProduct=3410, bcdDevice=11.26 [ 180.502610][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.511097][ T10] usb 5-1: Product: à Š [ 180.515289][ T10] usb 5-1: Manufacturer: 䱳ㇿ꜂ã ç“½ï•¸æ³·ê ¾ï•’ሪ₂鵛 [ 180.523097][ T10] usb 5-1: SerialNumber: ᕾ֊㡒㽺ë­î¡žë¹¥ì®î—”♘ꂪᠳ歷ᛖ糡䉉圂볚峖绮鎗䋟鷼慌蓮먽轊耔䀕罳å†àª®é é«£ãž½á„†ìš»ç…¿êŠáˆ¼á¨‰àº™á›í€¨ç†· [ 181.146715][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.155521][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.166715][ T10] usb 5-1: USB disconnect, device number 16 [ 181.456261][ T36] audit: type=1400 audit(1755547542.454:497): avc: denied { write } for pid=6178 comm="syz.0.1689" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 181.458727][ T6179] usb usb9: usbfs: process 6179 (syz.0.1689) did not claim interface 8 before use [ 181.615301][ T6201] 9pnet_fd: Insufficient options for proto=fd [ 181.948092][ T31] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 182.099645][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 182.108068][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 182.116878][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.126133][ T31] usb 5-1: config 1 has no interface number 1 [ 182.132378][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.149219][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.158985][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.167327][ T31] usb 5-1: Product: syz [ 182.171824][ T31] usb 5-1: Manufacturer: syz [ 182.176516][ T31] usb 5-1: SerialNumber: syz [ 182.321888][ T378] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 182.334324][ T378] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.351067][ T6237] 9pnet_fd: Insufficient options for proto=fd [ 182.377030][ T36] audit: type=1326 audit(1755547543.374:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.1712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f044db8ebe9 code=0x0 [ 182.568075][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 182.719274][ T10] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 182.730805][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.737644][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 182.747444][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.756602][ T10] usb 1-1: config 0 descriptor?? [ 182.993150][ T6265] overlayfs: failed to clone upperpath [ 183.075992][ T6267] overlayfs: failed to clone upperpath [ 183.099640][ T6269] /dev/rnullb0: Can't lookup blockdev [ 183.166344][ T10] wacom 0003:056A:030E.001F: unknown main item tag 0x0 [ 183.174360][ T10] wacom 0003:056A:030E.001F: unknown main item tag 0x0 [ 183.181773][ T10] wacom 0003:056A:030E.001F: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 183.192246][ T10] wacom 0003:056A:030E.001F: hidraw1: USB HID v0.01 Device [HID 056a:030e] on usb-dummy_hcd.0-1/input0 [ 183.206252][ T10] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:030E.001F/input/input36 [ 183.366950][ T6240] 9pnet_fd: Insufficient options for proto=fd [ 183.374196][ T359] usb 1-1: USB disconnect, device number 52 [ 183.717654][ T6281] /dev/rnullb0: Can't lookup blockdev [ 183.786511][ T6288] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1727'. [ 183.796690][ T36] audit: type=1400 audit(1755547544.794:499): avc: denied { listen } for pid=6287 comm="syz.3.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 183.818849][ T6288] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1727'. [ 183.911169][ T6300] overlayfs: failed to clone upperpath [ 184.007298][ T6300] syz.3.1731 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 184.091172][ T36] audit: type=1400 audit(1755547545.094:500): avc: denied { shutdown } for pid=6309 comm="syz.2.1734" laddr=fe80::b lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.423736][ T36] audit: type=1400 audit(1755547545.424:501): avc: denied { bind } for pid=6340 comm="syz.2.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.518379][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.529459][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.709014][ T6361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6361 comm=syz.3.1751 [ 184.750795][ T378] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 184.824105][ T31] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 184.879618][ T31] usb 5-1: 2:1 : sample bitwidth 60 in over sample bytes 5 [ 184.887003][ T31] usb 5-1: 2:1 : unsupported sample bitwidth 60 in 5 bytes [ 184.887582][ T6377] 9pnet_fd: Insufficient options for proto=fd [ 184.918065][ T378] usb 1-1: Using ep0 maxpacket: 16 [ 184.925739][ T378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 184.954066][ T31] usb 5-1: USB disconnect, device number 17 [ 184.956579][ T378] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 184.999592][ T378] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 185.030785][ T6389] overlayfs: missing 'lowerdir' [ 185.051078][ T378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.080856][ T378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.113913][ T378] usb 1-1: Product: И [ 185.138592][ T378] usb 1-1: Manufacturer: ဠ[ 185.157729][ T378] usb 1-1: SerialNumber: 狾犗腋ášì¶¼æ…€ë‚çƒî¿‹ä“륩剙扩웡〨ëºî¨µé¯ˆâ˜µä¸‡ê¥ªç¿Žé½ƒí„»é—ˆç‰œäŒºî¸ç­˜à´³î²µå±¶ç™¯å¼™ï„„Å왘觢䀘ì혠㻆닫䧸隟㯈἟ᬞڟﺯ⢵é¦æ’‘Æ…ìµîˆì¨Ÿì¢²çŽˆìª·ä±¤îŒì¯•æ“Žé¸á¨®ä„ˆîŽ…㈉뗵魊꿅ﻘ犲䳥í°ï€”腬⵬ᵤå…⃰太䡸ãœà î¤‰í‚¯æ’¹êŸ‡î¨„䞨終⻵æ¥è´’î†å ´é°ŠÑœï¢«ã‰•è‘²ê¸³è¸‹æ•„魰ᡦï²ï§³æ…⮚姂 [ 185.333985][ T36] audit: type=1400 audit(1755547546.334:502): avc: denied { map } for pid=6409 comm="syz.3.1769" path="socket:[38847]" dev="sockfs" ino=38847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.512475][ T36] audit: type=1400 audit(1755547546.514:503): avc: denied { append } for pid=6341 comm="syz.0.1744" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 185.564074][ T378] cdc_ncm 1-1:1.0: bind() failure [ 185.580753][ T378] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 185.608792][ T378] cdc_ncm 1-1:1.1: bind() failure [ 185.629353][ T378] usb 1-1: USB disconnect, device number 53 [ 185.712049][ T6432] overlayfs: overlapping lowerdir path [ 185.750131][ T6434] /dev/rnullb0: Can't open blockdev [ 185.878857][ T6436] syzkaller0: entered promiscuous mode [ 185.884652][ T6436] syzkaller0: entered allmulticast mode [ 185.895096][ T36] audit: type=1400 audit(1755547546.894:504): avc: denied { setcurrent } for pid=6435 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 185.923680][ T36] audit: type=1401 audit(1755547546.914:505): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 186.101588][ T6443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.102553][ T6442] tipc: Cannot configure node identity twice [ 186.116866][ T6442] tipc: Cannot configure node identity twice [ 186.126561][ T6442] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 186.134465][ T6443] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 186.143266][ T6442] rust_binder: 559: no such ref 2 [ 186.148921][ T6443] rust_binder: 559: no such ref 2 [ 186.448030][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 186.648068][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 186.681137][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 186.722829][ T10] usb 1-1: config 0 has no interface number 0 [ 186.751230][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 186.809178][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.838391][ T6469] overlayfs: failed to resolve './file1': -2 [ 186.851986][ T10] usb 1-1: Product: syz [ 186.857132][ T10] usb 1-1: Manufacturer: syz [ 186.871552][ T10] usb 1-1: SerialNumber: syz [ 186.897186][ T10] usb 1-1: config 0 descriptor?? [ 186.915661][ T10] smsc95xx v2.0.0 [ 187.618387][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 187.629471][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 187.693259][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 187.732821][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 187.770927][ T10] usb 1-1: USB disconnect, device number 54 [ 188.119943][ T6518] /dev/rnullb0: Can't open blockdev [ 188.334642][ T6522] can0: slcan on ptm0. [ 188.368401][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.393034][ T6522] can0 (unregistered): slcan off ptm0. [ 188.549720][ T10] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 188.560497][ T10] usb 5-1: config 0 has no interface number 0 [ 188.572480][ T10] usb 5-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 188.594103][ T10] usb 5-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 188.625462][ T10] usb 5-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 188.640306][ T6553] 9pnet_fd: Insufficient options for proto=fd [ 188.649787][ T36] audit: type=1400 audit(1755547549.644:506): avc: denied { read } for pid=6552 comm="syz.0.1812" dev="sockfs" ino=40614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.688107][ T10] usb 5-1: config 0 interface 9 has no altsetting 0 [ 188.703388][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 188.715476][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.734712][ T10] usb 5-1: Product: syz [ 188.747329][ T10] usb 5-1: Manufacturer: syz [ 188.766346][ T10] usb 5-1: SerialNumber: syz [ 188.778427][ T328] bridge_slave_1: left allmulticast mode [ 188.784585][ T328] bridge_slave_1: left promiscuous mode [ 188.792444][ T10] usb 5-1: config 0 descriptor?? [ 188.803798][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.827877][ T328] bridge_slave_0: left allmulticast mode [ 188.836241][ T328] bridge_slave_0: left promiscuous mode [ 188.850107][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.059289][ T328] tipc: Disabling bearer [ 189.067255][ T328] tipc: Left network mode [ 189.071959][ T329] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 189.102371][ T328] veth1_macvtap: left promiscuous mode [ 189.108354][ T328] veth0_vlan: left promiscuous mode [ 189.249392][ T329] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 189.262812][ T329] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 189.295799][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.347105][ T329] usb 1-1: config 1 has no interface number 0 [ 189.365288][ T329] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 189.386192][ T329] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 189.418795][ T329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.428300][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.446278][ T329] usb 1-1: Product: syz [ 189.457494][ T329] usb 1-1: Manufacturer: syz [ 189.464181][ T329] usb 1-1: SerialNumber: syz [ 189.486091][ T329] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 189.508062][ T329] cdc_ncm 1-1:1.1: bind() failure [ 189.541058][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'. [ 189.689771][ T329] usb 1-1: USB disconnect, device number 55 [ 189.776485][ T36] audit: type=1400 audit(1755547550.774:507): avc: denied { write } for pid=6599 comm="syz.3.1824" path="socket:[40732]" dev="sockfs" ino=40732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.372722][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 190.788957][ T6652] overlayfs: failed to clone upperpath [ 190.836208][ T6639] netlink: 'syz.3.1836': attribute type 4 has an invalid length. [ 190.844225][ T6639] netlink: 'syz.3.1836': attribute type 5 has an invalid length. [ 190.854105][ T6639] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1836'. [ 190.965401][ T6660] /dev/rnullb0: Can't lookup blockdev [ 191.068349][ T10] ftdi_sio 5-1:0.9: FTDI USB Serial Device converter detected [ 191.086426][ T10] usb 5-1: Detected SIO [ 191.091069][ T10] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 191.099603][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 191.111336][ T10] usb 5-1: USB disconnect, device number 18 [ 191.129459][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 191.146650][ T10] ftdi_sio 5-1:0.9: device disconnected [ 191.248433][ T64] rust_binder: 6665: removing orphan mapping 0:4224 [ 191.279028][ T6670] loop7: detected capacity change from 0 to 7 [ 191.374219][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 191.384369][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 191.551666][ T6679] overlayfs: failed to clone lowerpath [ 191.562697][ T6679] overlayfs: failed to clone upperpath [ 191.587758][ T6681] 9pnet_fd: Insufficient options for proto=fd [ 191.598084][ T10] rust_binder: 6648: removing orphan mapping 0:24 [ 191.803847][ T6708] /dev/loop0: Can't lookup blockdev [ 191.880744][ T36] audit: type=1326 audit(1755547552.884:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6713 comm="syz.0.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9492b8ebe9 code=0x0 [ 192.082726][ T6735] rust_binder: Write failure EFAULT in pid:601 [ 192.191687][ T6748] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 192.198198][ T6748] rust_binder: Error in use_page_slow: EFAULT [ 192.220226][ T6746] overlayfs: conflicting options: userxattr,metacopy=on [ 192.222438][ T6748] rust_binder: use_range failure EFAULT [ 192.234534][ T6750] overlayfs: failed to clone upperpath [ 192.247080][ T6748] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 192.247108][ T6748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.256759][ T6748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:610 [ 192.283022][ T6746] 9pnet_fd: Insufficient options for proto=fd [ 192.310669][ T36] audit: type=1400 audit(1755547553.314:509): avc: denied { append } for pid=6757 comm="syz.0.1874" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.359290][ T36] audit: type=1400 audit(1755547553.344:510): avc: denied { map } for pid=6757 comm="syz.0.1874" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.653970][ T6784] /dev/rnullb0: Can't lookup blockdev [ 192.804634][ T6799] rust_binder: Got transaction with invalid offset. [ 192.804728][ T6799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.819838][ T6799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:637 [ 193.346595][ T6829] overlayfs: failed to clone upperpath [ 193.380715][ T6828] overlayfs: failed to clone upperpath [ 193.709177][ T378] rust_binder: 6800: removing orphan mapping 0:24 [ 194.118891][ T36] audit: type=1326 audit(1755547562.118:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6845 comm="syz.3.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f478ed8ebe9 code=0x0 [ 194.985244][ T6849] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1902'. [ 195.027229][ T6853] raw_sendmsg: syz.3.1904 forgot to set AF_INET. Fix it! [ 196.614351][ T6857] overlayfs: failed to clone upperpath [ 197.310895][ T30] sched: DL replenish lagged too much [ 215.878799][ T611] usb 3-1: USB disconnect, device number 8 [ 243.179403][ T329] rust_binder: 0: removing orphan mapping 0:24 [ 271.031567][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.058568][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.065818][ T6884] bridge_slave_0: entered allmulticast mode [ 271.209500][ T6884] bridge_slave_0: entered promiscuous mode [ 271.309126][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.341694][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.359999][ T6884] bridge_slave_1: entered allmulticast mode [ 271.389588][ T6884] bridge_slave_1: entered promiscuous mode [ 271.630896][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.641461][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.679644][ T6885] bridge_slave_0: entered allmulticast mode [ 271.700526][ T6885] bridge_slave_0: entered promiscuous mode [ 272.669373][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.676737][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.699633][ T6885] bridge_slave_1: entered allmulticast mode [ 272.729222][ T6885] bridge_slave_1: entered promiscuous mode [ 273.864983][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.899281][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.906971][ T6888] bridge_slave_0: entered allmulticast mode [ 273.959183][ T6888] bridge_slave_0: entered promiscuous mode [ 274.633027][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.712490][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.750395][ T6888] bridge_slave_1: entered allmulticast mode [ 274.799608][ T6888] bridge_slave_1: entered promiscuous mode [ 275.720663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.733551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.746088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.758551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.771083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.783565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.796027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.808186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.820972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.833121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.727999][ C0] net_ratelimit: 26548 callbacks suppressed [ 280.728024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.748147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.760792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.773378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.786017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.798713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.811246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.823534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.836326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.849253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.738029][ C0] net_ratelimit: 26167 callbacks suppressed [ 285.738055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.757067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.769580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.782062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.794481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.806714][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.819583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.831996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.844516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.856874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.748073][ C0] net_ratelimit: 26735 callbacks suppressed [ 290.748098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.766986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.779287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.791951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.807964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.820266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.832543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.845082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.857640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.869996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.758043][ C0] net_ratelimit: 22967 callbacks suppressed [ 295.758069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.776553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.788950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.801295][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.813919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.826749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.838916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.851423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.864120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.876625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.768162][ C0] net_ratelimit: 26851 callbacks suppressed [ 300.768186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.786331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.798868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.811299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.823596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.835985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.848157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.860498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.873030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.885480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.778007][ C0] net_ratelimit: 27678 callbacks suppressed [ 305.778032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.796640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.808955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.821447][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.833580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.845886][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.858192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.870400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.882825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.895226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.788043][ C0] net_ratelimit: 21454 callbacks suppressed [ 310.788066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.806413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.818695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.831196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.843400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.855884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.868533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.881225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.894089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.906272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.798070][ C0] net_ratelimit: 19758 callbacks suppressed [ 315.798096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.816406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.828890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.841406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.853698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.866025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.878245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.897585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.909845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.922282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.808079][ C0] net_ratelimit: 14676 callbacks suppressed [ 320.808104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.826919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.839522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.852384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.864690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.877271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.890084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.902627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.915218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.927802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.818064][ C0] net_ratelimit: 13617 callbacks suppressed [ 325.818087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.836523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.849045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.861739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.874182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.887041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.900041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.912696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.925129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.937621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.828041][ C0] net_ratelimit: 13919 callbacks suppressed [ 330.828066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.846408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.859323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.871895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.884620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.897141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.909791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.922305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.934604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.948007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.759890][ T328] bridge_slave_1: left allmulticast mode [ 334.900227][ T328] bridge_slave_1: left promiscuous mode [ 334.929128][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.998172][ T328] bridge_slave_0: left allmulticast mode [ 335.040569][ T328] bridge_slave_0: left promiscuous mode [ 335.059835][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.169920][ T328] bridge_slave_1: left allmulticast mode [ 335.198213][ T328] bridge_slave_1: left promiscuous mode [ 335.419172][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.838153][ C0] net_ratelimit: 13686 callbacks suppressed [ 335.838179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.856563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.869368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.881727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.894463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.907186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.919616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.931979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.944500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.958171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.999467][ T328] bridge_slave_0: left allmulticast mode [ 336.261365][ T328] bridge_slave_0: left promiscuous mode [ 336.278613][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.400670][ T328] bridge_slave_1: left allmulticast mode [ 336.428256][ T328] bridge_slave_1: left promiscuous mode [ 336.478469][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.549321][ T328] bridge_slave_0: left allmulticast mode [ 336.560327][ T328] bridge_slave_0: left promiscuous mode [ 336.619951][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.678251][ T328] bridge_slave_1: left allmulticast mode [ 336.698351][ T328] bridge_slave_1: left promiscuous mode [ 336.729443][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.778572][ T328] bridge_slave_0: left allmulticast mode [ 336.799342][ T328] bridge_slave_0: left promiscuous mode [ 336.830150][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.890341][ T328] bridge_slave_1: left allmulticast mode [ 336.908450][ T328] bridge_slave_1: left promiscuous mode [ 336.939053][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.518250][ T328] bridge_slave_0: left allmulticast mode [ 337.541298][ T328] bridge_slave_0: left promiscuous mode [ 337.569375][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.848075][ C0] net_ratelimit: 14237 callbacks suppressed [ 340.848099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.866805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.879499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.891994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.904419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.916742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.929328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.941861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.954178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.966908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.858182][ C0] net_ratelimit: 13576 callbacks suppressed [ 345.858207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.877571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.890268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.902882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.915216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.927646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.940006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.952379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.964849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.977660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.868139][ C0] net_ratelimit: 13378 callbacks suppressed [ 350.868165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.886820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.899160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.911516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.923907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.936608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.949519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.962232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.974788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.987232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.877948][ C0] net_ratelimit: 14342 callbacks suppressed [ 355.877971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.896513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.908826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.921751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.934184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.946762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.959341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.971774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.984204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.997604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.888076][ C0] net_ratelimit: 13276 callbacks suppressed [ 360.888102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.906843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.919313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.931680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.943995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.956673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.969209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.981903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.994221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.006875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.897945][ C0] net_ratelimit: 14577 callbacks suppressed [ 365.897969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.916449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.928878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.941405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.953809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.966461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.979665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.993235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.006028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.018583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.907952][ C0] net_ratelimit: 14344 callbacks suppressed [ 370.907985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.927028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.939730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.952167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.965401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.977859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.990347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.003211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.015530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.027980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.918006][ C0] net_ratelimit: 14485 callbacks suppressed [ 375.918039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.936787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.949106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.961780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.974208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.986939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.999456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.011790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.024438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.037296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.928177][ C0] net_ratelimit: 14327 callbacks suppressed [ 380.928202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.946838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.960076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.973717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.986667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.999257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.011674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.024134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.036950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.049621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.938043][ C0] net_ratelimit: 13973 callbacks suppressed [ 385.938068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.956505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.969059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.981789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.994163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.006996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.019479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.031935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.044357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.064495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.948165][ C0] net_ratelimit: 13783 callbacks suppressed [ 390.948190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.967209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.979540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.992011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.004577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.017126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.029668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.042352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.055142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.067587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.958080][ C0] net_ratelimit: 14252 callbacks suppressed [ 395.958106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.976944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.989798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.002610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.015871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.028400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.041060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.053876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.066304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.078875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.968065][ C0] net_ratelimit: 13350 callbacks suppressed [ 400.968090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.987619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.000229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.012841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.025270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.038064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.051044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.063451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.076062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.089055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.978236][ C0] net_ratelimit: 14076 callbacks suppressed [ 405.978260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.997600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.010043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.022469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.035053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.047608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.060069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.072889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.085520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.097983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.988074][ C0] net_ratelimit: 14963 callbacks suppressed [ 410.988100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.006857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.019233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.031903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.045096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.057818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.070311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.082931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.095306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.108010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.998004][ C0] net_ratelimit: 11886 callbacks suppressed [ 415.998028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.016761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.029530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.042220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.054994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.067498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.079986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.092420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.104921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.117483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.008209][ C0] net_ratelimit: 14900 callbacks suppressed [ 421.008234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.026877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.039252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.051565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.064167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.076877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.089333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.101807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.114577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.127232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.018187][ C0] net_ratelimit: 14358 callbacks suppressed [ 426.018212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.036808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.049157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.061858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.074377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.088102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.100453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.112874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.126044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.139020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.028151][ C0] net_ratelimit: 14160 callbacks suppressed [ 431.028177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.046782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.059450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.071849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.084415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.097685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.110236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.122654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.135213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.147786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.037924][ C0] net_ratelimit: 14965 callbacks suppressed [ 436.037950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.056613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.069492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.082038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.094376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.107137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.119518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.131897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.144297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 436.156727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.048369][ C0] net_ratelimit: 14231 callbacks suppressed [ 441.048393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.066961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.080276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.093032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.105779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.128000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.140823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.153785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.167036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.179650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.057974][ C0] net_ratelimit: 14183 callbacks suppressed [ 446.058008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.077270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.090122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.102698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.115225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.128029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.141120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.154672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.167606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 446.180273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.067941][ C0] net_ratelimit: 14264 callbacks suppressed [ 451.067966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.086835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.100172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.113294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.126369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.138777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.152910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.165476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.180391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.193074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.078035][ C0] net_ratelimit: 13851 callbacks suppressed [ 456.078060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.096600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.109009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.121599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.134184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.146899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.159606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.172024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.184525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.197056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.851104][ T37] INFO: task syz-executor:6911 blocked for more than 122 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.158908][ T37] Not tainted 6.12.38-syzkaller-g138082a93991 #0 [ 457.166018][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.218675][ T36] audit: type=1400 audit(1755547825.118:512): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1868]" dev="pipefs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 457.320733][ T37] task:syz-executor state:D stack:0 pid:6911 tgid:6911 ppid:1 flags:0x00004004 [ 457.390968][ T37] Call Trace: [ 457.394504][ T37] [ 457.397467][ T37] __schedule+0x1322/0x1df0 [ 457.649985][ T37] ? __sched_text_start+0x10/0x10 [ 457.655113][ T37] ? mutex_spin_on_owner+0x1e8/0x470 [ 457.699763][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 457.705060][ T37] ? __kasan_check_write+0x18/0x20 [ 457.816973][ T37] ? trace_contention_begin+0xc0/0xc0 [ 457.917132][ T6928] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 457.998444][ T37] ? __kasan_check_write+0x18/0x20 [ 458.003868][ T37] schedule+0xc6/0x240 [ 458.045622][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz-executor Not tainted 6.12.38-syzkaller-g138082a93991 #0 b2f296d1542f966b973d0de4c7d8786db195f895 [ 458.045662][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.045678][ T6928] Call Trace: [ 458.045686][ T6928] [ 458.045696][ T6928] __dump_stack+0x21/0x30 [ 458.045734][ T6928] dump_stack_lvl+0x10c/0x190 [ 458.045765][ T6928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 458.045796][ T6928] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 458.045826][ T6928] dump_stack+0x19/0x20 [ 458.045856][ T6928] warn_alloc+0x1bc/0x2a0 [ 458.045885][ T6928] ? kasan_save_free_info+0x4a/0x60 [ 458.045916][ T6928] ? __cfi_warn_alloc+0x10/0x10 [ 458.045954][ T6928] ? __get_vm_area_node+0x1dc/0x3a0 [ 458.045984][ T6928] ? kcov_ioctl+0x5d/0x5c0 [ 458.046014][ T6928] __vmalloc_node_range_noprof+0x68e/0x1420 [ 458.046050][ T6928] ? locks_remove_posix+0x38b/0x580 [ 458.046075][ T6928] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 458.046106][ T6928] ? expand_files+0xd6/0x700 [ 458.046147][ T6928] vmalloc_user_noprof+0x77/0x90 [ 458.046177][ T6928] ? kcov_ioctl+0x5d/0x5c0 [ 458.046206][ T6928] kcov_ioctl+0x5d/0x5c0 [ 458.046234][ T6928] ? bpf_lsm_file_ioctl+0xd/0x20 [ 458.046266][ T6928] ? security_file_ioctl+0x34/0xd0 [ 458.046291][ T6928] ? __cfi_kcov_ioctl+0x10/0x10 [ 458.046321][ T6928] __se_sys_ioctl+0x135/0x1b0 [ 458.046346][ T6928] __x64_sys_ioctl+0x7f/0xa0 [ 458.046371][ T6928] x64_sys_call+0x1878/0x2ee0 [ 458.046405][ T6928] do_syscall_64+0x58/0xf0 [ 458.046432][ T6928] ? clear_bhb_loop+0x50/0xa0 [ 458.046455][ T6928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 458.046489][ T6928] RIP: 0033:0x7f1bfdd8e7eb [ 458.046528][ T6928] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 458.046549][ T6928] RSP: 002b:00007ffee8714840 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.046575][ T6928] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f1bfdd8e7eb [ 458.046592][ T6928] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 458.046619][ T6928] RBP: 00007f1bfdfb64e8 R08: 00000000000000da R09: 0000000000000000 [ 458.046636][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.046654][ T6928] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 458.046671][ T6928] [ 458.046680][ T6928] Mem-Info: [ 458.378646][ T37] schedule_preempt_disabled+0x14/0x30 [ 458.384280][ T37] __mutex_lock+0x81e/0x1b50 [ 458.389048][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 458.396038][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 458.401655][ T37] ? cred_has_capability+0x281/0x380 [ 458.407172][ T37] ? selinux_perf_event_alloc+0x110/0x110 [ 458.413502][ T37] ? unwind_get_return_address+0x51/0x90 [ 458.419751][ T37] __mutex_lock_slowpath+0xe/0x20 [ 458.424927][ T37] mutex_lock+0x102/0x1c0 [ 458.429503][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 458.434410][ T37] ? ns_capable+0x91/0xf0 [ 458.438841][ T37] ? netlink_net_capable+0x129/0x160 [ 458.444179][ T37] rtnetlink_rcv_msg+0x75f/0xa00 [ 458.449675][ T37] ? avc_has_perm_noaudit+0x268/0x360 [ 458.455235][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 458.460798][ T37] ? avc_has_perm_noaudit+0x286/0x360 [ 458.466414][ T37] ? avc_has_perm+0x144/0x220 [ 458.471708][ T37] netlink_rcv_skb+0x22b/0x4a0 [ 458.476717][ T37] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 458.482345][ T37] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 458.487887][ T37] ? netlink_autobind+0x1c0/0x1c0 [ 458.493140][ T37] ? is_vmalloc_addr+0x11/0x40 [ 458.497973][ T37] rtnetlink_rcv+0x20/0x30 [ 458.502458][ T37] netlink_unicast+0x8c9/0xa60 [ 458.507820][ T37] netlink_sendmsg+0x7f0/0xaf0 [ 458.513357][ T37] ? __cfi_netlink_sendmsg+0x10/0x10 [ 458.519050][ T37] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 458.524495][ T37] ? security_socket_sendmsg+0x33/0xd0 [ 458.530409][ T37] __sys_sendto+0x66d/0x6f0 [ 458.535063][ T37] ? __cfi___sys_sendto+0x10/0x10 [ 458.540252][ T37] ? __fput+0x6ea/0xa00 [ 458.544638][ T37] __x64_sys_sendto+0xe9/0x100 [ 458.549482][ T37] x64_sys_call+0x2c2c/0x2ee0 [ 458.554342][ T37] do_syscall_64+0x58/0xf0 [ 458.558855][ T37] ? clear_bhb_loop+0x50/0xa0 [ 458.563774][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 458.570047][ T37] RIP: 0033:0x7fd2fc990a23 [ 458.574687][ T37] RSP: 002b:00007ffdf5eaf008 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 458.583620][ T37] RAX: ffffffffffffffda RBX: 00007fd2fd6e4620 RCX: 00007fd2fc990a23 [ 458.591840][ T37] RDX: 0000000000000028 RSI: 00007fd2fd6e4670 RDI: 0000000000000003 [ 458.599966][ T37] RBP: 0000000000000001 R08: 00007ffdf5eaf024 R09: 000000000000000c [ 458.608125][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 458.616413][ T37] R13: 0000000000000000 R14: 00007fd2fd6e4670 R15: 0000000000000000 [ 458.624461][ T37] [ 458.627707][ T37] NMI backtrace for cpu 0 [ 458.627728][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g138082a93991 #0 b2f296d1542f966b973d0de4c7d8786db195f895 [ 458.627761][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.627777][ T37] Call Trace: [ 458.627785][ T37] [ 458.627795][ T37] __dump_stack+0x21/0x30 [ 458.627831][ T37] dump_stack_lvl+0x10c/0x190 [ 458.627866][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 458.627897][ T37] dump_stack+0x19/0x20 [ 458.627925][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 458.627954][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 458.627984][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 458.628011][ T37] ? sched_show_task+0x379/0x560 [ 458.628041][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 458.628068][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 458.628100][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 458.628141][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 458.628169][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 458.628198][ T37] watchdog+0xd8f/0xed0 [ 458.628231][ T37] ? __cfi_watchdog+0x10/0x10 [ 458.628261][ T37] ? __kasan_check_read+0x15/0x20 [ 458.628294][ T37] ? __kthread_parkme+0x138/0x180 [ 458.628315][ T37] ? schedule+0xc6/0x240 [ 458.628346][ T37] kthread+0x2ca/0x370 [ 458.628369][ T37] ? __cfi_watchdog+0x10/0x10 [ 458.628399][ T37] ? __cfi_kthread+0x10/0x10 [ 458.628422][ T37] ret_from_fork+0x67/0xa0 [ 458.628453][ T37] ? __cfi_kthread+0x10/0x10 [ 458.628477][ T37] ret_from_fork_asm+0x1a/0x30 [ 458.628513][ T37] [ 458.709626][ T6928] active_anon:5733 inactive_anon:5 isolated_anon:0 [ 458.709626][ T6928] active_file:11743 inactive_file:12548 isolated_file:0 [ 458.709626][ T6928] unevictable:0 dirty:0 writeback:0 [ 458.709626][ T6928] slab_reclaimable:4244 slab_unreclaimable:285337 [ 458.709626][ T6928] mapped:66530 shmem:163 pagetables:642 [ 458.709626][ T6928] sec_pagetables:0 bounce:0 [ 458.709626][ T6928] kernel_misc_reclaimable:0 [ 458.709626][ T6928] free:1210156 free_pcp:4034 free_cma:0 [ 458.712176][ T37] Sending NMI from CPU 0 to CPUs 1: [ 458.716295][ T6928] Node 0 active_anon:22932kB inactive_anon:20kB active_file:46972kB inactive_file:50192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:266120kB dirty:0kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5160kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 458.726959][ C1] NMI backtrace for cpu 1 [ 458.726985][ C1] CPU: 1 UID: 0 PID: 6928 Comm: syz-executor Not tainted 6.12.38-syzkaller-g138082a93991 #0 b2f296d1542f966b973d0de4c7d8786db195f895 [ 458.727130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.727145][ C1] RIP: 0010:memset_orig+0x6a/0xb0 [ 458.727173][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 <66> 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a [ 458.727189][ C1] RSP: 0018:ffffc900002304e0 EFLAGS: 00000202 [ 458.727207][ C1] RAX: 0000000000000000 RBX: 0000000000082820 RCX: 0000000000000002 [ 458.727219][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888136c9e980 [ 458.727231][ C1] RBP: ffffc900002304f8 R08: ffff888136c9e680 R09: 0000000000000000 [ 458.727243][ C1] R10: ffff888136c9e980 R11: ffffffff81743d30 R12: 0000000000000001 [ 458.727255][ C1] R13: 0000000000082820 R14: ffff888136c9e980 R15: ffff888106641a00 [ 458.727268][ C1] FS: 000055556914c500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 458.727283][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.727295][ C1] CR2: 000055ee1f242b98 CR3: 000000015c048000 CR4: 00000000003526b0 [ 458.727310][ C1] Call Trace: [ 458.727318][ C1] [ 458.727325][ C1] ? kasan_save_alloc_info+0x36/0x50 [ 458.727352][ C1] __kasan_slab_alloc+0x73/0x90 [ 458.727369][ C1] kmem_cache_alloc_node_noprof+0x139/0x3b0 [ 458.727395][ C1] ? kmalloc_reserve+0xcf/0x500 [ 458.727415][ C1] kmalloc_reserve+0xcf/0x500 [ 458.727434][ C1] __alloc_skb+0x144/0x370 [ 458.727452][ C1] ? br_fdb_find_rcu+0x50/0x50 [ 458.727471][ C1] fdb_notify+0x78/0x150 [ 458.727489][ C1] br_fdb_update+0x4b7/0x680 [ 458.727508][ C1] ? __cfi_br_fdb_update+0x10/0x10 [ 458.727527][ C1] ? br_pass_frame_up+0x126/0x1c0 [ 458.727549][ C1] br_handle_frame_finish+0x39c/0x1720 [ 458.727571][ C1] ? __vmalloc_node_range_noprof+0x68e/0x1420 [ 458.727594][ C1] ? vmalloc_user_noprof+0x77/0x90 [ 458.727617][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 458.727642][ C1] br_handle_frame+0x5a6/0xba0 [ 458.727664][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 458.727686][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 458.727706][ C1] ? ip6_mc_input+0x4f3/0x670 [ 458.727724][ C1] ? ip6_mc_input+0x4f3/0x670 [ 458.727740][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 458.727757][ C1] ? qdisc_run_end+0x120/0x120 [ 458.727775][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 458.727791][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 458.727808][ C1] ? ipv6_rcv+0xed/0x220 [ 458.727823][ C1] ? __kasan_check_write+0x18/0x20 [ 458.727846][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 458.727873][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 458.727895][ C1] ? update_rq_clock+0x31b/0x7c0 [ 458.727952][ C1] ? __cfi_resched_curr+0x10/0x10 [ 458.727981][ C1] process_backlog+0x3e5/0xae0 [ 458.728008][ C1] __napi_poll+0xd0/0x610 [ 458.728029][ C1] net_rx_action+0x584/0xce0 [ 458.728052][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 458.728079][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 458.728108][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 458.728137][ C1] handle_softirqs+0x1ab/0x630 [ 458.728169][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 458.728197][ C1] __irq_exit_rcu+0x48/0xc0 [ 458.728228][ C1] irq_exit_rcu+0xd/0x30 [ 458.728258][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 458.728292][ C1] [ 458.728300][ C1] [ 458.728308][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 458.728343][ C1] RIP: 0010:vprintk_emit+0x530/0x640 [ 458.728370][ C1] Code: 81 e6 00 02 00 00 31 ff e8 8d 22 1e 00 48 81 e3 00 02 00 00 75 07 e8 9f 1d 1e 00 eb 06 e8 98 1d 1e 00 fb c6 05 60 4a 31 07 00 42 fd ff ff e8 86 1d 1e 00 e9 a5 fe ff ff 41 ff ce bf 58 89 41 [ 458.728388][ C1] RSP: 0018:ffffc9000debf480 EFLAGS: 00000293 [ 458.728408][ C1] RAX: ffffffff8167c098 RBX: 0000000000000200 RCX: ffff88811a142600 [ 458.728425][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 458.728439][ C1] RBP: ffffc9000debf548 R08: 0000000000000003 R09: 0000000000000004 [ 458.728453][ C1] R10: dffffc0000000000 R11: fffff52001bd7e80 R12: 1ffff92001bd7e94 [ 458.728470][ C1] R13: 0000000000000151 R14: 0000000000000000 R15: dffffc0000000000 [ 458.728488][ C1] ? vprintk_emit+0x528/0x640 [ 458.728512][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 458.728535][ C1] ? vprintk_emit+0x56d/0x640 [ 458.728559][ C1] ? vprintk_emit+0x3dd/0x640 [ 458.728582][ C1] vprintk_default+0x2a/0x40 [ 458.728605][ C1] vprintk+0x93/0xa0 [ 458.728633][ C1] _printk+0xd0/0x120 [ 458.728655][ C1] ? __cfi__printk+0x10/0x10 [ 458.728675][ C1] ? _printk+0xd0/0x120 [ 458.728697][ C1] __show_mem+0x11c5/0x28c0 [ 458.728725][ C1] ? __cfi___show_mem+0x10/0x10 [ 458.728746][ C1] ? _printk+0xd0/0x120 [ 458.728767][ C1] ? __cfi__printk+0x10/0x10 [ 458.728787][ C1] ? kernel_text_address+0xa9/0xe0 [ 458.728815][ C1] ? show_trace_log_lvl+0x334/0x410 [ 458.728848][ C1] ? __cfi_gfp_zone+0x10/0x10 [ 458.728871][ C1] warn_alloc_show_mem+0x157/0x290 [ 458.728899][ C1] ? warn_alloc+0x2a0/0x2a0 [ 458.728971][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 458.729000][ C1] warn_alloc+0x1c8/0x2a0 [ 458.729027][ C1] ? kasan_save_free_info+0x4a/0x60 [ 458.729056][ C1] ? __cfi_warn_alloc+0x10/0x10 [ 458.729083][ C1] ? __get_vm_area_node+0x1dc/0x3a0 [ 458.729111][ C1] ? kcov_ioctl+0x5d/0x5c0 [ 458.729138][ C1] __vmalloc_node_range_noprof+0x68e/0x1420 [ 458.729171][ C1] ? locks_remove_posix+0x38b/0x580 [ 458.729194][ C1] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 458.729224][ C1] ? expand_files+0xd6/0x700 [ 458.729251][ C1] vmalloc_user_noprof+0x77/0x90 [ 458.729280][ C1] ? kcov_ioctl+0x5d/0x5c0 [ 458.729306][ C1] kcov_ioctl+0x5d/0x5c0 [ 458.729333][ C1] ? bpf_lsm_file_ioctl+0xd/0x20 [ 458.729363][ C1] ? security_file_ioctl+0x34/0xd0 [ 458.729387][ C1] ? __cfi_kcov_ioctl+0x10/0x10 [ 458.729414][ C1] __se_sys_ioctl+0x135/0x1b0 [ 458.729438][ C1] __x64_sys_ioctl+0x7f/0xa0 [ 458.729462][ C1] x64_sys_call+0x1878/0x2ee0 [ 458.729493][ C1] do_syscall_64+0x58/0xf0 [ 458.729519][ C1] ? clear_bhb_loop+0x50/0xa0 [ 458.729539][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 458.729571][ C1] RIP: 0033:0x7f1bfdd8e7eb [ 458.729590][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 458.729609][ C1] RSP: 002b:00007ffee8714840 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.729631][ C1] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f1bfdd8e7eb [ 458.729648][ C1] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 458.729663][ C1] RBP: 00007f1bfdfb64e8 R08: 00000000000000da R09: 0000000000000000 [ 458.729678][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.729691][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 458.729708][ C1] [ 460.441894][ T6928] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965968kB mlocked:0kB bounce:0kB free_pcp:13820kB local_pcp:7256kB free_cma:0kB [ 461.087997][ C0] net_ratelimit: 12401 callbacks suppressed [ 461.088023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.106670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.120270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.133108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.145781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.158861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.171595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.184347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.197080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.209453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 461.402283][ T6928] lowmem_reserve[]: 0 3921 3921 [ 461.407333][ T6928] Normal free:1835752kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22920kB inactive_anon:20kB active_file:46972kB inactive_file:50192kB unevictable:0kB writepending:0kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2652kB local_pcp:72kB free_cma:0kB [ 463.178441][ T6928] lowmem_reserve[]: 0 0 0 [ 463.182882][ T6928] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 464.221948][ T6928] Normal: 695*4kB (UME) 533*8kB (UME) 952*16kB (UME) 813*32kB (UME) 1581*64kB (UME) 1559*128kB (UME) 134*256kB (UME) 35*512kB (UME) 22*1024kB (UME) 18*2048kB (UME) 324*4096kB (M) = 1787748kB [ 464.387225][ T6928] 24478 total pagecache pages [ 464.412572][ T6928] 24 pages in swap cache [ 464.416883][ T6928] Free swap = 124368kB [ 464.442124][ T6928] Total swap = 124996kB [ 464.446433][ T6928] 2097051 pages RAM [ 464.472762][ T6928] 0 pages HighMem/MovableOnly [ 464.477692][ T6928] 351529 pages reserved [ 464.513531][ T6928] 0 pages cma reserved [ 464.534262][ T6928] Memory allocations: [ 464.552847][ T6928] 0 B 0 init/main.c:1370 func:do_initcalls [ 464.588012][ T6928] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 464.596505][ T6928] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 464.661996][ T6928] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 464.698471][ T6928] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 464.706446][ T6928] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 464.763031][ T6928] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 464.793752][ T6928] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 464.828022][ T6928] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 464.836581][ T6928] 0 B 0 init/initramfs.c:101 func:find_link [ 466.097909][ C0] net_ratelimit: 12846 callbacks suppressed [ 466.097934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.116872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.129378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.142094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.155420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.168522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.181386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.193905][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.206599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.219276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)