last executing test programs: 1m53.800440133s ago: executing program 0 (id=453): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x70505) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x623, 0x70bd2b, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x20240, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) close(r4) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@remote, 0x40000000, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xffffffdffffffffd, 0x8, 0x8000000, 0x200}, {0x0, 0x1, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x144}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x185000, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) keyctl$setperm(0x5, r0, 0x70505) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r3, 0x623, 0x70bd2b, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) (async) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x20240, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async) close(r4) (async) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@remote, 0x40000000, 0x33}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xffffffdffffffffd, 0x8, 0x8000000, 0x200}, {0x0, 0x1, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x144}}, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x185000, 0x0) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) 1m53.800304882s ago: executing program 0 (id=454): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_setup(0x6, &(0x7f0000000680)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00') 1m53.794348762s ago: executing program 0 (id=455): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x45, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0x6}}}}}]}}]}}, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "2f42b370"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes m'], 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100000}) read$char_usb(r4, &(0x7f0000000000)=""/27, 0x1b) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) 1m52.312360785s ago: executing program 0 (id=462): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f00000003c0)='./bus\x00', 0x10) chdir(&(0x7f0000000140)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10002, {0x4000000000000000, 0xfffffff7, 0x0, '\x00', {0x2, 0x0, 0x8000000000010000, 0x906, r1, r2, 0xa000, '\x00', 0x1000, 0x27efc00800000, 0x3ff, 0x13, {0x7, 0x9}, {0x9, 0x7ff}, {0x200001, 0x4}, {0xffffbfffe, 0xa03}, 0xf, 0xfee9f37, 0xfffffffe, 0x5}}}}) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r5, 0x0, 0x7) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [{0x8, 0x3, r2}, {0x8, 0x6, r4}], {0x10, 0x5}}, 0x34, 0x0) 1m51.48111395s ago: executing program 0 (id=467): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x301140, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xffffffffffffffa0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004880}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdc) 1m51.364413687s ago: executing program 0 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200003, 0x801, 0x4, 0x200007}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x15b) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="d4"}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8020000100033060000000000000000ac14142500000000000000000000000000000000000000000000000000000000000000000000cf5c8600007728000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2b8}}, 0x0) (async) r4 = openat$incfs(r2, &(0x7f00000001c0)='.log\x00', 0x1ab400, 0x130) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/158, 0x9e) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) (async) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x808800, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'incremental-fs\x00'}}, {@privport}, {@msize={'msize', 0x3d, 0x9}}], [{@uid_lt={'uid<', r7}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x66, 0x39, 0x31, 0x31, 0x39, 0x62], 0x2d, [0x30, 0x33, 0x33, 0x4], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x63, 0x32, 0x65, 0x32], 0x2d, [0x33, 0x61, 0x31, 0xa9bd1c1b992ec7a3, 0x31, 0x39, 0x32, 0x39]}}}]}}) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) getrandom(&(0x7f0000000300)=""/41, 0x29, 0x2) 1m51.358962237s ago: executing program 32 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200003, 0x801, 0x4, 0x200007}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x15b) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="d4"}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b8020000100033060000000000000000ac14142500000000000000000000000000000000000000000000000000000000000000000000cf5c8600007728000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2b8}}, 0x0) (async) r4 = openat$incfs(r2, &(0x7f00000001c0)='.log\x00', 0x1ab400, 0x130) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/158, 0x9e) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) (async) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x808800, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}, {@cache_none}, {@cachetag={'cachetag', 0x3d, 'incremental-fs\x00'}}, {@privport}, {@msize={'msize', 0x3d, 0x9}}], [{@uid_lt={'uid<', r7}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$'}}, {@euid_lt={'euid<', 0xee01}}, {@permit_directio}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x63, 0x66, 0x39, 0x31, 0x31, 0x39, 0x62], 0x2d, [0x30, 0x33, 0x33, 0x4], 0x2d, [0x38, 0x65, 0x33, 0x33], 0x2d, [0x63, 0x32, 0x65, 0x32], 0x2d, [0x33, 0x61, 0x31, 0xa9bd1c1b992ec7a3, 0x31, 0x39, 0x32, 0x39]}}}]}}) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) getrandom(&(0x7f0000000300)=""/41, 0x29, 0x2) 59.057147375s ago: executing program 2 (id=827): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000a00)=[@increfs_done, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 59.004234685s ago: executing program 2 (id=828): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x17fe, &(0x7f0000000900)="78ff42566dc1e5dd76ff14d2fe6362f566ba0ef72ae4f17f419304b0d556168a5a035542f20d983851616c40c872bc4dbf3e43e5821e6bc4eac99dfaed441578ff2ca6d3b9de5bebf723232feb2e9fcd8b8e2b734e23328656cc4a416627e74666c573ac40a3486415b999217f9264d73ac0390e") (async, rerun: 64) setuid(0xee01) (rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet(r1, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendto$inet(r1, &(0x7f0000000000)='f', 0x1, 0x24044084, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010004000000fddb2502080000"], 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6400) mount$incfs(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x200c1, &(0x7f0000000800)={[{@readahead={'readahead', 0x3d, 0xf5}}, {@readahead}, {@rlog_pages={'rlog_pages', 0x3d, 0x3}}], [{@appraise}, {@euid_gt={'euid>', r2}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'TIPCv2\x00'}}, {@dont_appraise}]}) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x202480, 0x0) (async, rerun: 64) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000640)={{[0x8, 0x0, 0x5, 0xfff]}, 0x0, 0x3, 0x844, 0x0, &(0x7f0000000600)=[{{@_ha_fsid={[0x1, 0x5]}, {0x3, 0x0, 0x400, 0x8}}, 0x0, 0x0, '{]@\x00'}]}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000980)=@sr0, r2, &(0x7f00000009c0)={0x8d3c, 0x1}) (async) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="00040000", @ANYRES16=r4, @ANYBLOB="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"], 0x400}, 0x1, 0x0, 0x0, 0x8000000}, 0x2000c090) 59.004091105s ago: executing program 2 (id=829): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) 58.993769103s ago: executing program 2 (id=830): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d21f0760290eda2ff2d2e853490109022400010000000009040000010300e7dff4682b2d1d03bf96aee428fbcb00000921000000012205336672b17e9051b3d2000905810300"/92], 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "c58b18eb"}]}}, 0x0}, 0x0) 55.989223441s ago: executing program 2 (id=842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000002000000450000002500000019000400440000000d00000000000006040000000000f93132", 0x39}], 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)) (async) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x8, 0x9e, 0xf, 0x6, 0x5, 0x0, 0x4, 0x80, 0x3, 0x19, 0xff, 0x2, 0x5, 0x6, 0x4, 0x2}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0xc9, 0x0, &(0x7f0000000080)) 55.87622362s ago: executing program 2 (id=843): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x18, 0x65, "3101deb355f84be23528cf51582668685e3b29ef9bf7c01318a7afe6af8bbbb874a81c862d7a50cc7e5da8456f33b18e450e4c0441bf21ffffffa920b63aaeecd611ea77a04a6ae4692b14d32336e8a161d613494eb800"/101}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) connect$inet(r4, &(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x0, 0x8, 0xca, {0xca, 0x7, "c0d204ff0cb47b63a2f5bd29199ecf08b987c815ea436fd2e41fe436a88b8adfffa9ee00bc10cf5e0f8df6ada65d6f264ba2f20397d547b719be069dfb106bf6aa27d7fc12cd94ce082bfdc613a3a801d781f06599530422bbcada2cdebe722129c0216dff836ccfedde0c3195e60aa6a42ef40584e149b5493550075ed0c19bd32126af8de882e0d93afd7f68d8d573d00d4932375c6a543d210972e6818b23a0587ff9f8742af3037cbbe0a4f064d835666608f72ebf588af38f5a7d2a3acab04662732a7af0ca"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000740)=ANY=[@ANYBLOB="000f51000000050f64000620100afc85000000000fff003000ff000f000101f0000000003fff000000ff000a100302010097c957ad7b511105a70603080010100a018155000000f00002c00000000a10030001000706090007100208fb04001410040825070a99321d65"], &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2f, 0x60, 0x42, 0x5, "3a3ffa64", "013270ea"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x1, 0x6, 0xb6, 0x1, 0x7}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x20, 0x16, 0x74, "a95ec562cccbf2c6ec5e98e2fb8ec5f4addec5fcac196fa8103772db7008aa0dc9a66ef37367c8aa25ac9b807ba652bdd20a7939caacd3c7515e700c56707776b9d05cde7ba73b4eca6c159188343b65abb7e425f0c42594c7f693577e4703537d95b2c7ad50d6a40c773ee3505499e02861f76a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf00f]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "db2f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "fa07"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x6a}}) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000000d80)={0x401, 0xfffffffe}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x3000000, 0xfffffffc, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x800000000000, 0x0, 0x4dd, 0x6}, 0xb200}, [@tmpl={0x144, 0x5, [{{@in6=@private2, 0x4d5, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x800000, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x1, 0x3, 0x0, 0x4, 0x49}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@loopback, 0x8000, 0x1, 0x3, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0xffffffff, 0x0, 0x0, 0xfe}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x3506, 0x3, 0x2, 0x0, 0x0, 0xa, 0x10}]}]}, 0x1fc}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 40.069225567s ago: executing program 33 (id=843): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x20, 0x18, 0x65, "3101deb355f84be23528cf51582668685e3b29ef9bf7c01318a7afe6af8bbbb874a81c862d7a50cc7e5da8456f33b18e450e4c0441bf21ffffffa920b63aaeecd611ea77a04a6ae4692b14d32336e8a161d613494eb800"/101}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) connect$inet(r4, &(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x0, 0x8, 0xca, {0xca, 0x7, "c0d204ff0cb47b63a2f5bd29199ecf08b987c815ea436fd2e41fe436a88b8adfffa9ee00bc10cf5e0f8df6ada65d6f264ba2f20397d547b719be069dfb106bf6aa27d7fc12cd94ce082bfdc613a3a801d781f06599530422bbcada2cdebe722129c0216dff836ccfedde0c3195e60aa6a42ef40584e149b5493550075ed0c19bd32126af8de882e0d93afd7f68d8d573d00d4932375c6a543d210972e6818b23a0587ff9f8742af3037cbbe0a4f064d835666608f72ebf588af38f5a7d2a3acab04662732a7af0ca"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, &(0x7f0000000740)=ANY=[@ANYBLOB="000f51000000050f64000620100afc85000000000fff003000ff000f000101f0000000003fff000000ff000a100302010097c957ad7b511105a70603080010100a018155000000f00002c00000000a10030001000706090007100208fb04001410040825070a99321d65"], &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2f, 0x60, 0x42, 0x5, "3a3ffa64", "013270ea"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x1, 0x6, 0xb6, 0x1, 0x7}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000880)={0x20, 0x16, 0x74, "a95ec562cccbf2c6ec5e98e2fb8ec5f4addec5fcac196fa8103772db7008aa0dc9a66ef37367c8aa25ac9b807ba652bdd20a7939caacd3c7515e700c56707776b9d05cde7ba73b4eca6c159188343b65abb7e425f0c42594c7f693577e4703537d95b2c7ad50d6a40c773ee3505499e02861f76a"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x8, {0x1c00, 0x1, [0xf00f]}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "db2f"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "fa07"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x6a}}) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000000d80)={0x401, 0xfffffffe}) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x3000000, 0xfffffffc, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x800000000000, 0x0, 0x4dd, 0x6}, 0xb200}, [@tmpl={0x144, 0x5, [{{@in6=@private2, 0x4d5, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x800000, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x1, 0x3, 0x0, 0x4, 0x49}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@loopback, 0x8000, 0x1, 0x3, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0xffffffff, 0x0, 0x0, 0xfe}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x3506, 0x3, 0x2, 0x0, 0x0, 0xa, 0x10}]}]}, 0x1fc}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 40.060284676s ago: executing program 3 (id=906): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) (async) setresgid(0x0, 0x0, 0xee01) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 39.97637554s ago: executing program 3 (id=909): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0xc) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002340)=[{&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000002140)=""/89, 0x59}, {&(0x7f00000021c0)=""/54, 0x36}, {&(0x7f0000002200)=""/227, 0xe3}, {&(0x7f0000002300)=""/45, 0x2d}], 0x5, 0x91b, 0x2) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) fsopen(&(0x7f0000000040)='autofs\x00', 0x1) 39.976167229s ago: executing program 3 (id=910): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000002600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75305f69643d4061996348d100f203db07323be2eba0498efb784d3a43fdf1c873066e643ec4f717d432fa6b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002540)=0x0) capset(&(0x7f0000002580)={0x20080522, r1}, &(0x7f00000025c0)={0x3, 0x7698, 0x81, 0x8, 0x6, 0x3}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f00000000c0)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') close(r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000002440)="610cf619fcb9099ca2a6b9c8167289adfcda7987a6254d46a90736e9f058e38029cd5c42410ed338091e27939d7bc87034fc40f1eb06847e02317b229a3322b17c52fc81418ded61066dd5b47c6996483d096a6b7ee7dc4aeb8c0380e1fff716a5189843dabe62dd460cf3b966a26fa832c11c61e22cad58dab24c358b21490e2518954798d2779facbaf5b7cbc13814a44aa70c57a8d0d095af81ff5481e91f8abbd0414e5b941e8876d25619562241ecbecb1f28c8c51815d190ea67a56d4ddd56db798f996e103c6f24339cc5f2e9716c9a0004ad7bd5d82ae9f984c5db68d4a9bf2367c0a3219d7d", 0xea, 0xc004, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'ip6tnl0\x00'}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r5], 0x62) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000000)=0x1, 0x4) r8 = syz_clone(0x80, 0x0, 0xc6e2534281e1223a, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r9, &(0x7f0000002100), 0x0, &(0x7f0000002140)) ptrace$getregset(0x4204, r8, 0x202, &(0x7f0000000080)={&(0x7f0000000000)=""/111, 0x6f}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000002300)={r7, &(0x7f0000002200)='[/\x00', 0x585000, &(0x7f0000002240)={@align=0xfff, {0xfff9, 0x8, 0x7, 0x7ff}}, 0x4, &(0x7f0000002280)={@_ha_fsid}, &(0x7f00000022c0)=0x7fffffff}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x61) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x31, &(0x7f0000001600)=0xffffffff, 0x4) r11 = syz_open_dev$mouse(&(0x7f0000002340), 0xf4c, 0x404100) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000002380)={[0xc7e6, 0x300000000, 0x6, 0x80, 0x80, 0x1, 0x7, 0xb, 0x8, 0x9, 0x2, 0x9, 0x4, 0x6, 0x7, 0x6], 0x200000, 0x5}) 39.892225804s ago: executing program 3 (id=911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 39.829239912s ago: executing program 3 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) utimes(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0xc00) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 39.349229892s ago: executing program 3 (id=916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 39.346634742s ago: executing program 5 (id=905): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f0000000000)='nfs\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000940)=""/205, 0xcd}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f0000000a40)=""/237, 0xed}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x69}], 0x2, 0x180, 0x0) 39.328201898s ago: executing program 5 (id=917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (fail_nth: 3) 38.208717989s ago: executing program 5 (id=920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 38.066837783s ago: executing program 1 (id=923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x4c, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 38.066540063s ago: executing program 1 (id=924): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c050}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0) pidfd_send_signal(r0, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x94e63fd712d6037f, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x142, 0x7b, 0x7, 0x7}]}) socket$pppl2tp(0x18, 0x1, 0x1) 38.058151261s ago: executing program 1 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0xa, 0x11, 0x79, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xde, 0x7, 0x2, 0x85, 0x78, 0xa1, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r2 = dup(r1) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0x1e, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) 38.05392796s ago: executing program 5 (id=926): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 37.51464245s ago: executing program 5 (id=932): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200505740300000000000109022400010000a0080904000d01030000000921fefffd0122050009058103000007000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r9 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r8, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r9}]) sendfile(r5, r5, 0x0, 0xff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x21, 0x29, {0x29, 0x31, "1edf7617e45f167eff3679712d03ceaac09c4c759fd9e504fb9b1b63aa6596664d3e57fa7e5b5a"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022aee9f354d4625fb864cf1a581f242ca6f631a4f76a12e561acb4c4104e470b47adab76022836703d837a9cda00"/62], 0x0}, 0x0) 36.703090158s ago: executing program 4 (id=935): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001e000900020000007cc993e609166e49110001002f6465762f726e756c6c623000000000040002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = dup(r0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) dup(r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="08000500e0025ab2"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 36.702854028s ago: executing program 1 (id=936): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10a, 0x6}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0xffffffffffffc74c}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x22b1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ptrace$setsig(0x4203, r4, 0x1, &(0x7f00000001c0)={0x3b, 0x5, 0xf14}) 36.60784688s ago: executing program 1 (id=937): unshare(0x60000600) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x7fff, 0x3, 0x8}}) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xe4e}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000dc0)=""/4101, 0x1005}, {&(0x7f0000001e00)=""/199, 0xc7}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/184, 0xb8}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000000)=""/247, 0xf7}, {&(0x7f0000001f00)=""/129, 0x81}, {&(0x7f00000005c0)=""/34, 0x22}], 0x9}, 0x1}], 0x3, 0x2100, 0x0) 36.525329995s ago: executing program 4 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x10, 0x6, 0x0, 0x3, 0x0}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x3, r3}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') (rerun: 32) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0xffffffffffffffbd) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0xd, 0xb932, 0x4, 0x0, 0x7, 0x5, 0x4}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) (async, rerun: 32) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x25, 0x20, 0x3, 0x4000000000, 0x106e, 0x100, 0xfffffffffffffffc, 0x80000004000080, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0x1fffffffffffffd, 0x7ffe], 0x1, 0x3c4210}) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001058041750000000deff00f2012400010000000009040000011a00000009160900040122a000090581034000000000"], 0x0) 36.448265361s ago: executing program 4 (id=939): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4fc902, 0x0) (async) r0 = open(&(0x7f0000000180)='./file1\x00', 0x153002, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async) ioprio_set$pid(0x2, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)='P\\'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) 36.17625801s ago: executing program 4 (id=940): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 28.09771154s ago: executing program 1 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xea7, 0xa) mknodat$loop(r1, &(0x7f0000000340)='./file0\x00', 0xc000, 0x1) r2 = syz_usb_connect$hid(0x41792c7f02245a91, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d0800000000000000010902240001000000000904000005030002000921000033012205000905810300000c0007"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5, 0x0, @val=0x70}}}}}}}}, 0x9a) 27.502402159s ago: executing program 4 (id=942): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x9}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) r4 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x2) r5 = gettid() r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r6, r6) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181c03, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005a0001000300000009000003000000000c00", @ANYRES32=r8], 0x20}}, 0x0) accept4$unix(r9, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x800) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$EVIOCGKEY(r1, 0x80404529, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) timer_settime(r7, 0x1, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) 23.86729223s ago: executing program 34 (id=916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000740)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 19.565051616s ago: executing program 35 (id=932): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000200505740300000000000109022400010000a0080904000d01030000000921fefffd0122050009058103000007000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000200)=0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x44, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x0, 0x3, 0x101}, @TCA_IPT_TARG={0x0, 0x6, {0xba15, 'security\x00', 0xdb, 0x4, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r9 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r8, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r9}]) sendfile(r5, r5, 0x0, 0xff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0x21, 0x29, {0x29, 0x31, "1edf7617e45f167eff3679712d03ceaac09c4c759fd9e504fb9b1b63aa6596664d3e57fa7e5b5a"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022aee9f354d4625fb864cf1a581f242ca6f631a4f76a12e561acb4c4104e470b47adab76022836703d837a9cda00"/62], 0x0}, 0x0) 18.46272919s ago: executing program 4 (id=945): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x78}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc001) shutdown(r0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xe57) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x1000001d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe0000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000000)={0x30000005}) syz_usb_connect(0x3, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081051d01000309050904100000050f090582e64103060c0309050a03300607"], 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) 11.738227223s ago: executing program 36 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xea7, 0xa) mknodat$loop(r1, &(0x7f0000000340)='./file0\x00', 0xc000, 0x1) r2 = syz_usb_connect$hid(0x41792c7f02245a91, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d0800000000000000010902240001000000000904000005030002000921000033012205000905810300000c0007"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @multicast1}, {0x3a00, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xc5, 0x0, @val=0x70}}}}}}}}, 0x9a) 0s ago: executing program 37 (id=945): r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x78}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc001) shutdown(r0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xe57) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x1000001d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xe0000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000000)={0x30000005}) syz_usb_connect(0x3, 0x7f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081051d01000309050904100000050f090582e64103060c0309050a03300607"], 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): usb 4-1: USB disconnect, device number 54 [ 114.952334][ T1692] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.962196][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 114.967440][ T1692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.974323][ T1692] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 114.983612][ T1692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.992277][ T65] usb 3-1: config 0 has an invalid interface number: 131 but max is 0 [ 115.000449][ T65] usb 3-1: config 0 has no interface number 0 [ 115.006731][ T1692] usb 5-1: config 0 descriptor?? [ 115.011799][ T65] usb 3-1: config 0 interface 131 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 115.022735][ T65] usb 3-1: config 0 interface 131 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 115.034348][ T65] usb 3-1: config 0 interface 131 has no altsetting 0 [ 115.042665][ T65] usb 3-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice= 6.d2 [ 115.051751][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.059736][ T65] usb 3-1: Product: syz [ 115.063914][ T65] usb 3-1: Manufacturer: syz [ 115.068529][ T65] usb 3-1: SerialNumber: syz [ 115.073710][ T65] usb 3-1: config 0 descriptor?? [ 115.210787][ T2768] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 115.228597][ T2771] fuse: Unknown parameter '' [ 115.236856][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.237264][ T2762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.243578][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.251841][ T2762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.259766][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.272222][ T2762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.290313][ T2762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.380181][ T2781] serio: Serial port ptm1 [ 115.532373][ T2781] serio: Serial port ptm1 [ 115.642711][ T2792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.651216][ T2792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.238170][ T2796] rust_binder: Error while translating object. [ 116.238224][ T2796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 116.244721][ T2796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:367 [ 117.161493][ T334] usb 3-1: USB disconnect, device number 44 [ 117.281364][ T2138] Bluetooth: hci0: command 0x1003 tx timeout [ 117.282117][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.295364][ T1692] usbhid 5-1:0.0: can't add hid device: -71 [ 117.301513][ T1692] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.310050][ T1692] usb 5-1: USB disconnect, device number 28 [ 123.144898][ T2805] netlink: 'syz.1.810': attribute type 27 has an invalid length. [ 123.167470][ T2802] kvm: kvm [2798]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 123.185776][ T2805] vlan0: left allmulticast mode [ 123.187371][ T2802] kvm: kvm [2798]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 123.191030][ T2805] veth0_vlan: left allmulticast mode [ 123.206471][ T2802] kvm: kvm [2798]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 123.219125][ T2802] kvm: kvm [2798]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 123.234288][ T2802] kvm: kvm [2798]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 123.364405][ T2823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.819'. [ 123.531352][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 123.631340][ T334] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 123.651361][ T1692] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 123.681305][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 123.687466][ T9] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 123.695751][ T9] usb 2-1: config 0 has no interface number 0 [ 123.702005][ T9] usb 2-1: config 0 interface 131 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 123.713198][ T9] usb 2-1: config 0 interface 131 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 123.724205][ T9] usb 2-1: config 0 interface 131 has no altsetting 0 [ 123.732248][ T9] usb 2-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice= 6.d2 [ 123.741423][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.749428][ T9] usb 2-1: Product: syz [ 123.753744][ T9] usb 2-1: Manufacturer: syz [ 123.758361][ T9] usb 2-1: SerialNumber: syz [ 123.763990][ T9] usb 2-1: config 0 descriptor?? [ 123.791321][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 123.798238][ T334] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.811110][ T334] usb 5-1: config 1 interface 0 has no altsetting 0 [ 123.819006][ T334] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 123.821314][ T1692] usb 4-1: Using ep0 maxpacket: 16 [ 123.828135][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.834950][ T1692] usb 4-1: config index 0 descriptor too short (expected 46642, got 72) [ 123.841472][ T334] usb 5-1: Product: syz [ 123.850183][ T1692] usb 4-1: config 173 has too many interfaces: 131, using maximum allowed: 32 [ 123.854075][ T334] usb 5-1: Manufacturer: syz [ 123.863386][ T1692] usb 4-1: config 173 contains an unexpected descriptor of type 0x1, skipping [ 123.867217][ T334] usb 5-1: SerialNumber: syz [ 123.876365][ T1692] usb 4-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 123.891259][ T1692] usb 4-1: config 173 has 0 interfaces, different from the descriptor's value: 131 [ 123.902278][ T1692] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 123.914272][ T1692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.925031][ T1692] usb 4-1: Product: syz [ 123.929212][ T1692] usb 4-1: Manufacturer: syz [ 123.934038][ T1692] usb 4-1: SerialNumber: syz [ 124.089791][ T334] usbhid 5-1:1.0: can't add hid device: -71 [ 124.096220][ T334] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 124.106776][ T334] usb 5-1: USB disconnect, device number 29 [ 124.128673][ T2840] rust_binder: Error in use_page_slow: ESRCH [ 124.128697][ T2840] rust_binder: use_range failure ESRCH [ 124.134809][ T2840] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 124.140299][ T2840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.148706][ T2840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:611 [ 124.322882][ T2860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.340550][ T2860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.400892][ T2813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.409489][ T2813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.420350][ T2813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.428946][ T2813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.491806][ T369] usb 4-1: USB disconnect, device number 55 [ 124.531368][ T334] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 124.691291][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 124.696923][ T334] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 124.706038][ T334] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 124.713692][ T334] usb 3-1: can't read configurations, error -61 [ 124.841319][ T334] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 124.991297][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 124.996969][ T334] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 125.006470][ T334] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.014499][ T334] usb 3-1: can't read configurations, error -61 [ 125.020879][ T334] usb usb3-port1: attempt power cycle [ 125.251309][ T1692] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 125.361326][ T334] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 125.381659][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 125.387256][ T334] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 125.391300][ T65] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 125.396309][ T334] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.403767][ T1692] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.410294][ T334] usb 3-1: can't read configurations, error -61 [ 125.421897][ T1692] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.439167][ T1692] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 125.450919][ T1692] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 125.460011][ T1692] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 125.468027][ T1692] usb 4-1: Manufacturer: syz [ 125.473554][ T2864] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 125.551356][ T334] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 125.552392][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.570004][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.571695][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 125.579793][ T65] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 125.585673][ T334] usb 3-1: too many configurations: 210, using maximum allowed: 8 [ 125.593990][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.603910][ T334] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 125.611156][ T65] usb 5-1: config 0 descriptor?? [ 125.617789][ T334] usb 3-1: can't read configurations, error -61 [ 125.628844][ T334] usb usb3-port1: unable to enumerate USB device [ 125.841852][ T1692] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 125.849880][ T1692] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input17 [ 125.861652][ T1692] usb 4-1: USB disconnect, device number 56 [ 125.861675][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 126.027332][ T2866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.035924][ T2866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.045199][ T65] nti 0003:0757:0A00.0010: invalid report_size -1552376498 [ 126.052614][ T65] nti 0003:0757:0A00.0010: item 0 4 1 7 parsing failed [ 126.059610][ T65] nti 0003:0757:0A00.0010: probe with driver nti failed with error -22 [ 126.196077][ T2871] rust_binder: Error in use_page_slow: ESRCH [ 126.196096][ T2871] rust_binder: use_range failure ESRCH [ 126.202148][ T2871] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 126.207725][ T2871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.215575][ T2871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:501 [ 126.251533][ T334] usb 5-1: USB disconnect, device number 30 [ 126.281408][ T1692] usb 2-1: USB disconnect, device number 45 [ 126.471324][ T65] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 126.621328][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 126.627501][ T65] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 126.635701][ T65] usb 4-1: config 0 has no interface number 0 [ 126.642092][ T65] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 126.653513][ T65] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 126.662585][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.670567][ T65] usb 4-1: Product: syz [ 126.674746][ T65] usb 4-1: Manufacturer: syz [ 126.679360][ T65] usb 4-1: SerialNumber: syz [ 126.684564][ T65] usb 4-1: config 0 descriptor?? [ 126.689810][ T2873] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 126.783069][ T2877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2877 comm=syz.4.837 [ 126.786658][ T2879] rust_binder: Write failure EFAULT in pid:376 [ 126.818631][ T36] audit: type=1400 audit(2016777482.744:434): avc: denied { read write } for pid=1782 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.848999][ T36] audit: type=1400 audit(2016777482.744:435): avc: denied { open } for pid=1782 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.873858][ T36] audit: type=1400 audit(2016777482.744:436): avc: denied { ioctl } for pid=1782 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.899554][ T36] audit: type=1400 audit(2016777482.754:437): avc: denied { read } for pid=2880 comm="syz.4.839" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.901916][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.922542][ T36] audit: type=1400 audit(2016777482.754:438): avc: denied { open } for pid=2880 comm="syz.4.839" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.936760][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.953879][ T36] audit: type=1400 audit(2016777482.754:439): avc: denied { ioctl } for pid=2880 comm="syz.4.839" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 126.967866][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.995164][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.006956][ T36] audit: type=1400 audit(2016777482.764:440): avc: denied { read write } for pid=2880 comm="syz.4.839" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.008484][ T2873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.030930][ T36] audit: type=1400 audit(2016777482.764:441): avc: denied { open } for pid=2880 comm="syz.4.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.039621][ T2873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.062368][ T36] audit: type=1400 audit(2016777482.764:442): avc: denied { ioctl } for pid=2880 comm="syz.4.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.074735][ T2873] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 127.094697][ T36] audit: type=1400 audit(2016777482.824:443): avc: denied { create } for pid=2885 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.131335][ T1692] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 127.282449][ T1692] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.293501][ T1692] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.307112][ T1692] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.314052][ T1692] usb 5-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 127.324106][ T1692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.333848][ T1692] usb 5-1: config 0 descriptor?? [ 127.490140][ T2898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.498773][ T2898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.691303][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 127.721294][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 127.742672][ T1692] sony 0003:054C:1000.0011: hidraw0: USB HID vff.fa Device [HID 054c:1000] on usb-dummy_hcd.4-1/input0 [ 127.753818][ T1692] sony 0003:054C:1000.0011: failed to claim input [ 127.841331][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 127.847656][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.858720][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.868590][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.877702][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.886508][ T9] usb 3-1: config 0 descriptor?? [ 127.892362][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.892478][ T9] hub 3-1:0.0: USB hub found [ 127.906842][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.918739][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.928615][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.940379][ T334] usb 5-1: USB disconnect, device number 31 [ 127.944029][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.956735][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.964848][ T31] usb 2-1: Manufacturer: syz [ 127.970175][ T31] usb 2-1: config 0 descriptor?? [ 128.093036][ T9] hub 3-1:0.0: 1 port detected [ 128.178460][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 128.184538][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.193694][ T31] usb 2-1: USB disconnect, device number 46 [ 128.358449][ T65] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 128.368702][ T65] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 128.391416][ T65] asix 4-1:0.188: probe with driver asix failed with error -71 [ 128.400153][ T65] usb 4-1: USB disconnect, device number 57 [ 128.461777][ T2903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.461811][ T2903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 128.697529][ T9] hub 3-1:0.0: activate --> -90 [ 128.721667][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 128.753049][ T2910] netlink: 252 bytes leftover after parsing attributes in process `syz.1.849'. [ 128.762085][ T2910] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.871326][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 128.877733][ T31] usb 5-1: config 0 has an invalid interface number: 131 but max is 0 [ 128.886621][ T31] usb 5-1: config 0 has no interface number 0 [ 128.893142][ T31] usb 5-1: config 0 interface 131 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 128.904412][ T31] usb 5-1: config 0 interface 131 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 128.915660][ T31] usb 5-1: config 0 interface 131 has no altsetting 0 [ 128.923951][ T31] usb 5-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice= 6.d2 [ 128.933511][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.941546][ T31] usb 5-1: Product: syz [ 128.945924][ T31] usb 5-1: Manufacturer: syz [ 128.950683][ T31] usb 5-1: SerialNumber: syz [ 128.956194][ T31] usb 5-1: config 0 descriptor?? [ 129.141324][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 129.292313][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.302232][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 129.313321][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 129.322647][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.331833][ T10] usb 4-1: config 0 descriptor?? [ 129.430064][ T2928] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 129.540254][ T10] usb 4-1: string descriptor 0 read error: -32 [ 129.721300][ T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 129.749019][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 129.755144][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 129.871299][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 129.877894][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.886477][ T31] usb 2-1: config 1 has an invalid descriptor of length 232, skipping remainder of the config [ 129.896780][ T31] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 129.907158][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.916248][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.924374][ T31] usb 2-1: Product: syz [ 129.928542][ T31] usb 2-1: Manufacturer: syz [ 129.933193][ T31] usb 2-1: SerialNumber: syz [ 130.143879][ T31] usb 2-1: USB disconnect, device number 47 [ 130.152266][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 130.159534][ T9] usb 3-1-port1: config error [ 130.164814][ T9] usb 3-1-port1: cannot disable (err = -32) [ 130.171725][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 130.991909][ T31] usb 5-1: USB disconnect, device number 32 [ 131.490606][ T2939] netlink: 232 bytes leftover after parsing attributes in process `syz.4.861'. [ 131.505614][ T2939] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 131.573880][ T2949] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 131.861355][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 131.912717][ T334] usb 4-1: USB disconnect, device number 58 [ 132.011348][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 132.017603][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.026072][ T31] usb 5-1: config 0 has no interface number 0 [ 132.032364][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.043438][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.053305][ T31] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 132.062397][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.071415][ T31] usb 5-1: config 0 descriptor?? [ 132.351350][ T334] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 132.487370][ T31] usbhid 5-1:0.1: can't add hid device: -71 [ 132.493448][ T31] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 132.502940][ T31] usb 5-1: USB disconnect, device number 33 [ 132.511288][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 132.517525][ T334] usb 2-1: config 0 has an invalid interface number: 131 but max is 0 [ 132.525783][ T334] usb 2-1: config 0 has no interface number 0 [ 132.531929][ T334] usb 2-1: config 0 interface 131 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 132.542834][ T334] usb 2-1: config 0 interface 131 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 132.553844][ T334] usb 2-1: config 0 interface 131 has no altsetting 0 [ 132.562095][ T334] usb 2-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice= 6.d2 [ 132.571129][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.579142][ T334] usb 2-1: Product: syz [ 132.583333][ T334] usb 2-1: Manufacturer: syz [ 132.587918][ T334] usb 2-1: SerialNumber: syz [ 132.593169][ T334] usb 2-1: config 0 descriptor?? [ 132.800650][ T10] usb 2-1: USB disconnect, device number 48 [ 133.011393][ T334] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 133.161282][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 133.168990][ T334] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.178115][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.186145][ T334] usb 4-1: Product: syz [ 133.190284][ T334] usb 4-1: Manufacturer: syz [ 133.194882][ T334] usb 4-1: SerialNumber: syz [ 133.201658][ T334] r8152-cfgselector 4-1: Unknown version 0x0000 [ 133.207925][ T334] r8152-cfgselector 4-1: config 0 descriptor?? [ 133.271288][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 133.418699][ T2961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.421279][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 133.427288][ T2961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.434076][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.447635][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 133.447651][ T36] audit: type=1400 audit(2016777489.364:488): avc: denied { mount } for pid=2960 comm="syz.3.871" name="/" dev="ramfs" ino=20618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 133.476292][ T36] audit: type=1400 audit(2016777489.404:489): avc: denied { execmem } for pid=2960 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 133.495824][ T10] usb 5-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 133.506156][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.515109][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.529650][ T10] usb 5-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=40.12 [ 133.537310][ T36] audit: type=1400 audit(2016777489.464:490): avc: denied { write } for pid=2960 comm="syz.3.871" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.539297][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.569849][ T10] usb 5-1: Product: syz [ 133.574095][ T10] usb 5-1: Manufacturer: syz [ 133.578685][ T10] usb 5-1: SerialNumber: syz [ 133.584041][ T10] usb 5-1: config 0 descriptor?? [ 133.796197][ T10] usb 5-1: USB disconnect, device number 34 [ 134.331145][ T2977] netlink: 'syz.3.876': attribute type 1 has an invalid length. [ 134.423713][ T36] audit: type=1400 audit(2016777490.354:491): avc: denied { name_bind } for pid=2983 comm="syz.3.880" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 134.445365][ T36] audit: type=1400 audit(2016777490.354:492): avc: denied { node_bind } for pid=2983 comm="syz.3.880" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 134.530245][ T36] audit: type=1400 audit(2016777490.454:493): avc: denied { create } for pid=2985 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.531347][ T2986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.550504][ T36] audit: type=1400 audit(2016777490.454:494): avc: denied { getopt } for pid=2985 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.558680][ T2986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.588493][ T2986] netlink: 104 bytes leftover after parsing attributes in process `syz.3.881'. [ 134.611349][ T65] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 134.741338][ T65] usb 5-1: device descriptor read/64, error -71 [ 134.973585][ T36] audit: type=1400 audit(2016777490.904:495): avc: denied { setopt } for pid=2992 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.992838][ T65] usb 5-1: device descriptor read/64, error -71 [ 135.009506][ T36] audit: type=1400 audit(2016777490.934:496): avc: denied { mount } for pid=2997 comm="syz.1.888" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 135.010279][ T2998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.031807][ T36] audit: type=1400 audit(2016777490.934:497): avc: denied { mounton } for pid=2997 comm="syz.1.888" path="/163/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.059100][ T2998] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.075023][ T2998] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 135.083179][ T2998] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 135.091459][ T2998] overlayfs: d_ino too big (163, ino=9223372036854776709, xinobits=3) [ 135.099868][ T2998] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 135.109303][ T2998] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 135.112005][ T3000] FAULT_INJECTION: forcing a failure. [ 135.112005][ T3000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.118341][ T2998] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 135.131220][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: syz.3.889 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 135.131255][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.131267][ T3000] Call Trace: [ 135.131275][ T3000] [ 135.131284][ T3000] __dump_stack+0x21/0x30 [ 135.131312][ T3000] dump_stack_lvl+0x140/0x1c0 [ 135.131332][ T3000] ? __cfi_dump_stack_lvl+0x10/0x10 [ 135.131355][ T3000] ? __cfi__raw_spin_trylock+0x10/0x10 [ 135.131383][ T3000] dump_stack+0x19/0x20 [ 135.131402][ T3000] should_fail_ex+0x3d7/0x530 [ 135.131421][ T3000] should_fail+0xf/0x20 [ 135.131437][ T3000] should_fail_usercopy+0x1e/0x30 [ 135.131456][ T3000] _copy_from_user+0x20/0xa0 [ 135.131478][ T3000] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xa0e/0x58b0 [ 135.131503][ T3000] ? __cfi_mt_free_rcu+0x10/0x10 [ 135.131528][ T3000] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 135.131552][ T3000] ? is_bpf_text_address+0x17b/0x1a0 [ 135.131574][ T3000] ? kernel_text_address+0xa9/0xe0 [ 135.131594][ T3000] ? __kernel_text_address+0x11/0x40 [ 135.131614][ T3000] ? unwind_get_return_address+0x51/0x90 [ 135.131637][ T3000] ? is_bpf_text_address+0x17b/0x1a0 [ 135.131658][ T3000] ? kernel_text_address+0xa9/0xe0 [ 135.131687][ T3000] ? __kernel_text_address+0x11/0x40 [ 135.131706][ T3000] ? unwind_get_return_address+0x51/0x90 [ 135.131725][ T3000] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 135.131742][ T3000] ? arch_stack_walk+0x10a/0x170 [ 135.131771][ T3000] ? is_bpf_text_address+0x17b/0x1a0 [ 135.131792][ T3000] ? kernel_text_address+0xa9/0xe0 [ 135.131812][ T3000] ? __kernel_text_address+0x11/0x40 [ 135.131832][ T3000] ? unwind_get_return_address+0x51/0x90 [ 135.131849][ T3000] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 135.131867][ T3000] ? arch_stack_walk+0x10a/0x170 [ 135.131893][ T3000] ? stack_depot_save_flags+0x38/0x800 [ 135.131912][ T3000] ? stack_trace_save+0xaa/0x100 [ 135.131929][ T3000] ? kasan_save_track+0x4f/0x80 [ 135.131952][ T3000] ? kasan_save_track+0x3e/0x80 [ 135.131973][ T3000] ? kasan_save_alloc_info+0x40/0x50 [ 135.131992][ T3000] ? __kasan_slab_alloc+0x73/0x90 [ 135.132015][ T3000] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 135.132037][ T3000] ? security_inode_alloc+0x51/0x230 [ 135.132059][ T3000] ? inode_init_always_gfp+0x756/0x9e0 [ 135.132082][ T3000] ? alloc_inode+0xc5/0x270 [ 135.132104][ T3000] ? new_inode+0x25/0x1e0 [ 135.132127][ T3000] ? proc_pid_make_inode+0x25/0x140 [ 135.132150][ T3000] ? proc_pident_instantiate+0x6d/0x2c0 [ 135.132173][ T3000] ? proc_pident_lookup+0x1c7/0x270 [ 135.132195][ T3000] ? proc_tid_base_lookup+0x2f/0x40 [ 135.132214][ T3000] ? path_openat+0x1312/0x34f0 [ 135.132238][ T3000] ? do_filp_open+0x1f5/0x440 [ 135.132261][ T3000] ? do_sys_openat2+0x134/0x1d0 [ 135.132278][ T3000] ? __x64_sys_openat+0x13a/0x170 [ 135.132295][ T3000] ? x64_sys_call+0xe69/0x2ee0 [ 135.132318][ T3000] ? do_syscall_64+0x57/0xf0 [ 135.132334][ T3000] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.132362][ T3000] ? avc_has_perm_noaudit+0x26c/0x360 [ 135.132383][ T3000] ? __asan_memcpy+0x5a/0x80 [ 135.132404][ T3000] ? avc_has_perm_noaudit+0x28a/0x360 [ 135.132426][ T3000] ? avc_has_perm+0x155/0x240 [ 135.132446][ T3000] ? __cfi_avc_has_perm+0x10/0x10 [ 135.132466][ T3000] ? kasan_save_alloc_info+0x40/0x50 [ 135.132487][ T3000] ? selinux_file_open+0x46c/0x630 [ 135.132506][ T3000] ? __cfi_selinux_file_open+0x10/0x10 [ 135.132527][ T3000] ? avc_has_extended_perms+0x80b/0xe70 [ 135.132548][ T3000] ? __asan_memcpy+0x5a/0x80 [ 135.132569][ T3000] ? avc_has_extended_perms+0x969/0xe70 [ 135.132591][ T3000] ? __asan_set_shadow_00+0x12/0x20 [ 135.132609][ T3000] ? do_vfs_ioctl+0x182d/0x2010 [ 135.132630][ T3000] ? arch_stack_walk+0x10a/0x170 [ 135.132653][ T3000] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 135.132686][ T3000] ? _parse_integer+0x2e/0x40 [ 135.132714][ T3000] ? ioctl_has_perm+0x39a/0x500 [ 135.132733][ T3000] ? has_cap_mac_admin+0xd0/0xd0 [ 135.132751][ T3000] ? proc_fail_nth_write+0x184/0x220 [ 135.132769][ T3000] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 135.132787][ T3000] ? selinux_file_ioctl+0x732/0x1480 [ 135.132805][ T3000] ? vfs_write+0x9a4/0xf90 [ 135.132825][ T3000] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 135.132844][ T3000] ? __cfi_vfs_write+0x10/0x10 [ 135.132864][ T3000] ? __kasan_check_write+0x18/0x20 [ 135.132883][ T3000] ? mutex_unlock+0x90/0x240 [ 135.132903][ T3000] ? __cfi_mutex_unlock+0x10/0x10 [ 135.132923][ T3000] ? __fget_files+0x2c5/0x340 [ 135.132947][ T3000] ? __fget_files+0x2c5/0x340 [ 135.132970][ T3000] ? bpf_lsm_file_ioctl+0xd/0x20 [ 135.132986][ T3000] ? security_file_ioctl+0x3e/0x110 [ 135.133004][ T3000] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 135.133026][ T3000] __se_sys_ioctl+0x135/0x1b0 [ 135.133049][ T3000] __x64_sys_ioctl+0x7f/0xa0 [ 135.133072][ T3000] x64_sys_call+0x1878/0x2ee0 [ 135.133095][ T3000] do_syscall_64+0x57/0xf0 [ 135.133111][ T3000] ? clear_bhb_loop+0x50/0xa0 [ 135.133128][ T3000] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 135.133153][ T3000] RIP: 0033:0x7f0dfd19c799 [ 135.133170][ T3000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.133185][ T3000] RSP: 002b:00007f0dfe0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.133206][ T3000] RAX: ffffffffffffffda RBX: 00007f0dfd415fa0 RCX: 00007f0dfd19c799 [ 135.133220][ T3000] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 135.133233][ T3000] RBP: 00007f0dfe0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 135.133245][ T3000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.133257][ T3000] R13: 00007f0dfd416038 R14: 00007f0dfd415fa0 R15: 00007ffff08e8e98 [ 135.133272][ T3000] [ 135.145134][ T3003] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 135.153760][ T2998] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 135.771292][ T65] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 135.778311][ T1043] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 135.787858][ T1043] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 135.796732][ T1043] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 135.805272][ T1043] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 135.813634][ T1043] overlayfs: d_ino too big (instances, ino=4611686018427387992, xinobits=3) [ 135.824291][ T1043] overlayfs: inode number too big (/163, ino=9223372036854776709, xinobits=3) [ 135.833326][ T1043] overlayfs: inode number too big (/163, ino=9223372036854776709, xinobits=3) [ 135.842832][ T1043] overlayfs: inode number too big (163/file0, ino=9223372036854776714, xinobits=3) [ 135.852304][ T1043] overlayfs: inode number too big (163/file0, ino=9223372036854776714, xinobits=3) [ 135.861823][ T1043] overlayfs: inode number too big (163/binderfs, ino=9223372036854776713, xinobits=3) [ 135.871748][ T1043] overlayfs: inode number too big (163/cgroup.net, ino=9223372036854776712, xinobits=3) [ 135.881779][ T1043] overlayfs: inode number too big (163/cgroup.cpu, ino=9223372036854776711, xinobits=3) [ 135.891754][ T1043] overlayfs: inode number too big (163/cgroup, ino=9223372036854776710, xinobits=3) [ 135.901313][ T65] usb 5-1: device descriptor read/64, error -71 [ 136.141344][ T65] usb 5-1: device descriptor read/64, error -71 [ 136.251416][ T65] usb usb5-port1: attempt power cycle [ 136.386718][ T3018] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 136.400834][ T3020] binfmt_misc: register: failed to install interpreter file ./file0 [ 136.422165][ T3020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.431589][ T3020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.601326][ T65] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 136.622376][ T65] usb 5-1: device descriptor read/8, error -71 [ 136.752298][ T65] usb 5-1: device descriptor read/8, error -71 [ 136.991318][ T65] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 137.012797][ T65] usb 5-1: device descriptor read/8, error -71 [ 137.115479][ T3033] FAULT_INJECTION: forcing a failure. [ 137.115479][ T3033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.128697][ T3033] CPU: 0 UID: 0 PID: 3033 Comm: syz.3.901 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 137.128731][ T3033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.128744][ T3033] Call Trace: [ 137.128750][ T3033] [ 137.128757][ T3033] __dump_stack+0x21/0x30 [ 137.128785][ T3033] dump_stack_lvl+0x140/0x1c0 [ 137.128808][ T3033] ? __cfi_dump_stack_lvl+0x10/0x10 [ 137.128831][ T3033] dump_stack+0x19/0x20 [ 137.128852][ T3033] should_fail_ex+0x3d7/0x530 [ 137.128873][ T3033] should_fail+0xf/0x20 [ 137.128891][ T3033] should_fail_usercopy+0x1e/0x30 [ 137.128912][ T3033] _copy_from_user+0x20/0xa0 [ 137.128936][ T3033] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x8a6/0xa490 [ 137.128982][ T3033] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 137.129061][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.129085][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.129108][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.129129][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.129155][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.129177][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.129199][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.129220][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.129241][ T3033] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 137.129260][ T3033] ? arch_stack_walk+0x10a/0x170 [ 137.129289][ T3033] ? stack_depot_save_flags+0x38/0x800 [ 137.129312][ T3033] ? kasan_save_track+0x4f/0x80 [ 137.129337][ T3033] ? kasan_save_track+0x3e/0x80 [ 137.129358][ T3033] ? kasan_save_alloc_info+0x40/0x50 [ 137.129378][ T3033] ? __kasan_kmalloc+0x96/0xb0 [ 137.129402][ T3033] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 137.129426][ T3033] ? krealloc_noprof+0x8d/0x130 [ 137.129450][ T3033] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 137.129485][ T3033] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x874/0x17f0 [ 137.129520][ T3033] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x19e/0x9b0 [ 137.129549][ T3033] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x167c/0x58b0 [ 137.129572][ T3033] ? __se_sys_ioctl+0x135/0x1b0 [ 137.129604][ T3033] ? __x64_sys_ioctl+0x7f/0xa0 [ 137.129629][ T3033] ? x64_sys_call+0x1878/0x2ee0 [ 137.129654][ T3033] ? do_syscall_64+0x57/0xf0 [ 137.129672][ T3033] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.129702][ T3033] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 137.129747][ T3033] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 137.129791][ T3033] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x4d4/0xe50 [ 137.129821][ T3033] ? __kasan_check_write+0x18/0x20 [ 137.129841][ T3033] ? _raw_spin_lock+0x92/0x120 [ 137.129859][ T3033] ? __cfi__raw_spin_lock+0x10/0x10 [ 137.129877][ T3033] ? _raw_spin_unlock+0x45/0x60 [ 137.129894][ T3033] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x6ad/0xa80 [ 137.129923][ T3033] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 137.129952][ T3033] ? krealloc_noprof+0xfa/0x130 [ 137.129976][ T3033] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 137.130013][ T3033] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 137.130051][ T3033] ? __kasan_check_write+0x18/0x20 [ 137.130073][ T3033] ? _raw_spin_lock+0x92/0x120 [ 137.130090][ T3033] ? __cfi__raw_spin_lock+0x10/0x10 [ 137.130108][ T3033] ? __kasan_check_write+0x18/0x20 [ 137.130130][ T3033] ? _raw_spin_lock+0x92/0x120 [ 137.130147][ T3033] ? __cfi__raw_spin_lock+0x10/0x10 [ 137.130164][ T3033] ? __asan_set_shadow_00+0x12/0x20 [ 137.130182][ T3033] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0xfee/0x17f0 [ 137.130217][ T3033] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xdaf/0x1be0 [ 137.130249][ T3033] ? _raw_spin_unlock+0x45/0x60 [ 137.130265][ T3033] ? __asan_set_shadow_00+0x12/0x20 [ 137.130284][ T3033] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9ab/0x1be0 [ 137.130317][ T3033] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 137.130358][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.130381][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.130402][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.130423][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.130443][ T3033] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 137.130462][ T3033] ? arch_stack_walk+0x10a/0x170 [ 137.130489][ T3033] ? stack_trace_save+0xaa/0x100 [ 137.130507][ T3033] ? stack_depot_save_flags+0x38/0x800 [ 137.130527][ T3033] ? kasan_save_stack+0x4d/0x60 [ 137.130547][ T3033] ? kasan_save_stack+0x3e/0x60 [ 137.130566][ T3033] ? __kasan_record_aux_stack+0xb2/0xd0 [ 137.130591][ T3033] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 137.130612][ T3033] ? __call_rcu_common+0xd7/0x720 [ 137.130639][ T3033] ? call_rcu+0x14/0x20 [ 137.130664][ T3033] ? __cfi__raw_spin_trylock+0x10/0x10 [ 137.130691][ T3033] ? __kasan_check_write+0x18/0x20 [ 137.130711][ T3033] ? _raw_spin_lock+0x92/0x120 [ 137.130729][ T3033] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xf08/0x58b0 [ 137.130752][ T3033] ? __asan_memcpy+0x5a/0x80 [ 137.130774][ T3033] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xf5e/0x58b0 [ 137.130799][ T3033] ? __cfi_mt_free_rcu+0x10/0x10 [ 137.130826][ T3033] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 137.130852][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.130875][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.130897][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.130918][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.130943][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.130966][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.130988][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.131008][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.131029][ T3033] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 137.131048][ T3033] ? arch_stack_walk+0x10a/0x170 [ 137.131078][ T3033] ? is_bpf_text_address+0x17b/0x1a0 [ 137.131100][ T3033] ? kernel_text_address+0xa9/0xe0 [ 137.131122][ T3033] ? __kernel_text_address+0x11/0x40 [ 137.131143][ T3033] ? unwind_get_return_address+0x51/0x90 [ 137.131163][ T3033] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 137.131182][ T3033] ? arch_stack_walk+0x10a/0x170 [ 137.131210][ T3033] ? stack_depot_save_flags+0x38/0x800 [ 137.131234][ T3033] ? stack_trace_save+0xaa/0x100 [ 137.131250][ T3033] ? kasan_save_track+0x4f/0x80 [ 137.131270][ T3033] ? kasan_save_track+0x3e/0x80 [ 137.131293][ T3033] ? kasan_save_alloc_info+0x40/0x50 [ 137.131313][ T3033] ? __kasan_slab_alloc+0x73/0x90 [ 137.131337][ T3033] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 137.131360][ T3033] ? security_inode_alloc+0x51/0x230 [ 137.131383][ T3033] ? inode_init_always_gfp+0x756/0x9e0 [ 137.131408][ T3033] ? alloc_inode+0xc5/0x270 [ 137.131432][ T3033] ? new_inode+0x25/0x1e0 [ 137.131455][ T3033] ? proc_pid_make_inode+0x25/0x140 [ 137.131480][ T3033] ? proc_pident_instantiate+0x6d/0x2c0 [ 137.131505][ T3033] ? proc_pident_lookup+0x1c7/0x270 [ 137.131530][ T3033] ? proc_tid_base_lookup+0x2f/0x40 [ 137.131550][ T3033] ? path_openat+0x1312/0x34f0 [ 137.131584][ T3033] ? do_filp_open+0x1f5/0x440 [ 137.131610][ T3033] ? do_sys_openat2+0x134/0x1d0 [ 137.131629][ T3033] ? __x64_sys_openat+0x13a/0x170 [ 137.131647][ T3033] ? x64_sys_call+0xe69/0x2ee0 [ 137.131672][ T3033] ? do_syscall_64+0x57/0xf0 [ 137.131689][ T3033] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.131719][ T3033] ? avc_has_perm_noaudit+0x26c/0x360 [ 137.131742][ T3033] ? __asan_memcpy+0x5a/0x80 [ 137.131764][ T3033] ? avc_has_perm_noaudit+0x28a/0x360 [ 137.131788][ T3033] ? avc_has_perm+0x155/0x240 [ 137.131809][ T3033] ? __cfi_avc_has_perm+0x10/0x10 [ 137.131830][ T3033] ? kasan_save_alloc_info+0x40/0x50 [ 137.131852][ T3033] ? selinux_file_open+0x46c/0x630 [ 137.131873][ T3033] ? __cfi_selinux_file_open+0x10/0x10 [ 137.131896][ T3033] ? avc_has_extended_perms+0x80b/0xe70 [ 137.131919][ T3033] ? __asan_memcpy+0x5a/0x80 [ 137.131941][ T3033] ? avc_has_extended_perms+0x969/0xe70 [ 137.131966][ T3033] ? __asan_set_shadow_00+0x12/0x20 [ 137.131985][ T3033] ? do_vfs_ioctl+0x182d/0x2010 [ 137.132010][ T3033] ? arch_stack_walk+0x10a/0x170 [ 137.132035][ T3033] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 137.132062][ T3033] ? _parse_integer+0x2e/0x40 [ 137.132091][ T3033] ? ioctl_has_perm+0x39a/0x500 [ 137.132111][ T3033] ? has_cap_mac_admin+0xd0/0xd0 [ 137.132131][ T3033] ? proc_fail_nth_write+0x184/0x220 [ 137.132149][ T3033] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 137.132169][ T3033] ? selinux_file_ioctl+0x732/0x1480 [ 137.132189][ T3033] ? vfs_write+0x9a4/0xf90 [ 137.132210][ T3033] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 137.132230][ T3033] ? __cfi_vfs_write+0x10/0x10 [ 137.132252][ T3033] ? __kasan_check_write+0x18/0x20 [ 137.132273][ T3033] ? mutex_unlock+0x90/0x240 [ 137.132295][ T3033] ? __cfi_mutex_unlock+0x10/0x10 [ 137.132316][ T3033] ? __fget_files+0x2c5/0x340 [ 137.132342][ T3033] ? __fget_files+0x2c5/0x340 [ 137.132368][ T3033] ? bpf_lsm_file_ioctl+0xd/0x20 [ 137.132386][ T3033] ? security_file_ioctl+0x3e/0x110 [ 137.132405][ T3033] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 137.132429][ T3033] __se_sys_ioctl+0x135/0x1b0 [ 137.132454][ T3033] __x64_sys_ioctl+0x7f/0xa0 [ 137.132480][ T3033] x64_sys_call+0x1878/0x2ee0 [ 137.132504][ T3033] do_syscall_64+0x57/0xf0 [ 137.132521][ T3033] ? clear_bhb_loop+0x50/0xa0 [ 137.132539][ T3033] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 137.132566][ T3033] RIP: 0033:0x7f0dfd19c799 [ 137.132591][ T3033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.132608][ T3033] RSP: 002b:00007f0dfe0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.132631][ T3033] RAX: ffffffffffffffda RBX: 00007f0dfd415fa0 RCX: 00007f0dfd19c799 [ 137.132646][ T3033] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 137.132660][ T3033] RBP: 00007f0dfe0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 137.132673][ T3033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.132685][ T3033] R13: 00007f0dfd416038 R14: 00007f0dfd415fa0 R15: 00007ffff08e8e98 [ 137.132703][ T3033] [ 137.192398][ T65] usb 5-1: device descriptor read/8, error -71 [ 137.203087][ T3033] rust_binder: Write failure EFAULT in pid:555 [ 137.321384][ T65] usb usb5-port1: unable to enumerate USB device [ 138.218454][ T3039] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 138.227338][ T3039] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.083476][ T1782] ovl_remap_lower_ino: 24559 callbacks suppressed [ 140.083499][ T1782] overlayfs: d_ino too big (., ino=4611686018427414653, xinobits=3) [ 140.098186][ T1782] overlayfs: d_ino too big (.., ino=4611686018427408201, xinobits=3) [ 140.106504][ T1782] overlayfs: d_ino too big (enable, ino=4611686018447068727, xinobits=3) [ 140.115122][ T1782] overlayfs: d_ino too big (filter, ino=4611686018447068727, xinobits=3) [ 140.131792][ T1782] overlayfs: d_ino too big (trigger, ino=4611686018447068727, xinobits=3) [ 140.140320][ T1782] overlayfs: d_ino too big (format, ino=4611686018447068727, xinobits=3) [ 140.170432][ T1782] overlayfs: d_ino too big (id, ino=4611686018447068727, xinobits=3) [ 140.178755][ T1782] overlayfs: d_ino too big (hist, ino=4611686018447068727, xinobits=3) [ 140.187159][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 140.187176][ T36] audit: type=1400 audit(2016777496.104:504): avc: denied { unmount } for pid=1043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.212205][ T1782] overlayfs: d_ino too big (inject, ino=4611686018447068727, xinobits=3) [ 140.224270][ T1782] overlayfs: d_ino too big (., ino=4611686018427414654, xinobits=3) [ 140.781398][ T1782] ovl_map_dev_ino: 25932 callbacks suppressed [ 140.781414][ T1782] overlayfs: inode number too big (watchdog_start/trigger, ino=4611686018447068727, xinobits=3) [ 140.798311][ T1782] overlayfs: inode number too big (watchdog_start/format, ino=4611686018447068727, xinobits=3) [ 140.808877][ T1782] overlayfs: inode number too big (watchdog_start/id, ino=4611686018447068727, xinobits=3) [ 140.819159][ T1782] overlayfs: inode number too big (watchdog_start/hist, ino=4611686018447068727, xinobits=3) [ 140.829643][ T1782] overlayfs: inode number too big (watchdog_start/inject, ino=4611686018447068727, xinobits=3) [ 140.840358][ T1782] overlayfs: inode number too big (watchdog/watchdog_ping, ino=4611686018427419588, xinobits=3) [ 140.850875][ T1782] overlayfs: inode number too big (watchdog/watchdog_ping, ino=4611686018427419588, xinobits=3) [ 140.861575][ T1782] overlayfs: inode number too big (watchdog_ping/enable, ino=4611686018447068727, xinobits=3) [ 140.872028][ T1782] overlayfs: inode number too big (watchdog_ping/filter, ino=4611686018447068727, xinobits=3) [ 140.882563][ T1782] overlayfs: inode number too big (watchdog_ping/trigger, ino=4611686018447068727, xinobits=3) [ 143.246649][ T36] audit: type=1400 audit(2016777499.174:505): avc: denied { read write } for pid=3046 comm="syz.3.906" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.291356][ T36] audit: type=1400 audit(2016777499.174:506): avc: denied { open } for pid=3046 comm="syz.3.906" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.330219][ T3060] fuse: Unknown parameter 'grou0_id' [ 143.341271][ T36] audit: type=1400 audit(2016777499.174:507): avc: denied { mount } for pid=3046 comm="syz.3.906" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.364161][ T36] audit: type=1400 audit(2016777499.204:508): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.400690][ T36] audit: type=1400 audit(2016777499.274:509): avc: denied { ioctl } for pid=3056 comm="syz.3.910" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 143.427648][ T36] audit: type=1400 audit(2016777499.274:510): avc: denied { write } for pid=3056 comm="syz.3.910" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.457256][ T3053] rust_binder: 444: no such ref 0 [ 143.462379][ T3053] rust_binder: Write failure EINVAL in pid:444 [ 143.480472][ T36] audit: type=1400 audit(2016777499.294:511): avc: denied { mounton } for pid=3062 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 143.488100][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.515462][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.522564][ T3062] bridge_slave_0: entered allmulticast mode [ 143.528891][ T3062] bridge_slave_0: entered promiscuous mode [ 143.561374][ T36] audit: type=1400 audit(2016777499.324:512): avc: denied { name_bind } for pid=3056 comm="syz.3.910" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 143.562494][ T3070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.591563][ T36] audit: type=1400 audit(2016777499.354:513): avc: denied { create } for pid=3052 comm="syz.1.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.609669][ T3070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.611255][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.631518][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.638886][ T3062] bridge_slave_1: entered allmulticast mode [ 143.647121][ T3062] bridge_slave_1: entered promiscuous mode [ 143.754742][ T3062] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.761843][ T3062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.769143][ T3062] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.776221][ T3062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.817672][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.825152][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.835730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.842825][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.862484][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.869535][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.909705][ T3062] veth0_vlan: entered promiscuous mode [ 143.925586][ T3062] veth1_macvtap: entered promiscuous mode [ 143.979065][ T3087] FAULT_INJECTION: forcing a failure. [ 143.979065][ T3087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.997447][ T3087] CPU: 0 UID: 0 PID: 3087 Comm: syz.5.917 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 143.997482][ T3087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.997493][ T3087] Call Trace: [ 143.997500][ T3087] [ 143.997507][ T3087] __dump_stack+0x21/0x30 [ 143.997535][ T3087] dump_stack_lvl+0x140/0x1c0 [ 143.997555][ T3087] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.997579][ T3087] dump_stack+0x19/0x20 [ 143.997599][ T3087] should_fail_ex+0x3d7/0x530 [ 143.997617][ T3087] should_fail+0xf/0x20 [ 143.997635][ T3087] should_fail_usercopy+0x1e/0x30 [ 143.997656][ T3087] _copy_from_user+0x20/0xa0 [ 143.997678][ T3087] _RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x14ee/0xa490 [ 143.997725][ T3087] ? __cfi__RNvMs2_NtCskDQVOo9v79Q_16rust_binder_main6threadNtB5_6Thread5write+0x10/0x10 [ 143.997805][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.997829][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.997851][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.997871][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.997895][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.997917][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.997937][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.997955][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.997974][ T3087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 143.997992][ T3087] ? arch_stack_walk+0x10a/0x170 [ 143.998017][ T3087] ? stack_depot_save_flags+0x38/0x800 [ 143.998037][ T3087] ? kasan_save_track+0x4f/0x80 [ 143.998059][ T3087] ? kasan_save_track+0x3e/0x80 [ 143.998080][ T3087] ? kasan_save_alloc_info+0x40/0x50 [ 143.998099][ T3087] ? __kasan_kmalloc+0x96/0xb0 [ 143.998120][ T3087] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 143.998142][ T3087] ? krealloc_noprof+0x8d/0x130 [ 143.998165][ T3087] ? _RNvYNtNtNtCs1ewLyjEZ7Le_6kernel5alloc9allocator7KmallocNtB6_9Allocator5allocCskDQVOo9v79Q_16rust_binder_main+0xb4/0x200 [ 143.998204][ T3087] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0x874/0x17f0 [ 143.998238][ T3087] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process14set_as_manager+0x19e/0x9b0 [ 143.998275][ T3087] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x167c/0x58b0 [ 143.998295][ T3087] ? __se_sys_ioctl+0x135/0x1b0 [ 143.998317][ T3087] ? __x64_sys_ioctl+0x7f/0xa0 [ 143.998339][ T3087] ? x64_sys_call+0x1878/0x2ee0 [ 143.998365][ T3087] ? do_syscall_64+0x57/0xf0 [ 143.998383][ T3087] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 143.998412][ T3087] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 143.998457][ T3087] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 143.998500][ T3087] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x4d4/0xe50 [ 143.998528][ T3087] ? __kasan_check_write+0x18/0x20 [ 143.998549][ T3087] ? _raw_spin_lock+0x92/0x120 [ 143.998565][ T3087] ? __cfi__raw_spin_lock+0x10/0x10 [ 143.998584][ T3087] ? _raw_spin_unlock+0x45/0x60 [ 143.998600][ T3087] ? _RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x6ad/0xa80 [ 143.998629][ T3087] ? __cfi__RNvMs0_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 143.998658][ T3087] ? krealloc_noprof+0xfa/0x130 [ 143.998682][ T3087] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 143.998721][ T3087] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCskDQVOo9v79Q_16rust_binder_main7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 143.998758][ T3087] ? __kasan_check_write+0x18/0x20 [ 143.998779][ T3087] ? _raw_spin_lock+0x92/0x120 [ 143.998795][ T3087] ? __cfi__raw_spin_lock+0x10/0x10 [ 143.998812][ T3087] ? __kasan_check_write+0x18/0x20 [ 143.998833][ T3087] ? _raw_spin_lock+0x92/0x120 [ 143.998850][ T3087] ? __cfi__raw_spin_lock+0x10/0x10 [ 143.998866][ T3087] ? __asan_set_shadow_00+0x12/0x20 [ 143.998886][ T3087] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process8get_node+0xfee/0x17f0 [ 143.998920][ T3087] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0xdaf/0x1be0 [ 143.998948][ T3087] ? _raw_spin_unlock+0x45/0x60 [ 143.998964][ T3087] ? __asan_set_shadow_00+0x12/0x20 [ 143.998980][ T3087] ? _RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x9ab/0x1be0 [ 143.999012][ T3087] ? __cfi__RNvMs4_NtCskDQVOo9v79Q_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 143.999051][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.999073][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.999095][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.999116][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.999133][ T3087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 143.999149][ T3087] ? arch_stack_walk+0x10a/0x170 [ 143.999172][ T3087] ? stack_trace_save+0xaa/0x100 [ 143.999187][ T3087] ? stack_depot_save_flags+0x38/0x800 [ 143.999206][ T3087] ? kasan_save_stack+0x4d/0x60 [ 143.999225][ T3087] ? kasan_save_stack+0x3e/0x60 [ 143.999244][ T3087] ? __kasan_record_aux_stack+0xb2/0xd0 [ 143.999269][ T3087] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 143.999288][ T3087] ? __call_rcu_common+0xd7/0x720 [ 143.999312][ T3087] ? call_rcu+0x14/0x20 [ 143.999336][ T3087] ? __cfi__raw_spin_trylock+0x10/0x10 [ 143.999361][ T3087] ? __kasan_check_write+0x18/0x20 [ 143.999381][ T3087] ? _raw_spin_lock+0x92/0x120 [ 143.999395][ T3087] ? _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xf08/0x58b0 [ 143.999416][ T3087] ? __asan_memcpy+0x5a/0x80 [ 143.999436][ T3087] _RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0xf5e/0x58b0 [ 143.999461][ T3087] ? __cfi_mt_free_rcu+0x10/0x10 [ 143.999485][ T3087] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 143.999508][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.999530][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.999551][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.999570][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.999594][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.999617][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.999638][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.999659][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.999680][ T3087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 143.999699][ T3087] ? arch_stack_walk+0x10a/0x170 [ 143.999730][ T3087] ? is_bpf_text_address+0x17b/0x1a0 [ 143.999754][ T3087] ? kernel_text_address+0xa9/0xe0 [ 143.999775][ T3087] ? __kernel_text_address+0x11/0x40 [ 143.999796][ T3087] ? unwind_get_return_address+0x51/0x90 [ 143.999817][ T3087] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 143.999836][ T3087] ? arch_stack_walk+0x10a/0x170 [ 143.999864][ T3087] ? stack_depot_save_flags+0x38/0x800 [ 143.999885][ T3087] ? stack_trace_save+0xaa/0x100 [ 143.999904][ T3087] ? kasan_save_track+0x4f/0x80 [ 143.999928][ T3087] ? kasan_save_track+0x3e/0x80 [ 143.999952][ T3087] ? kasan_save_alloc_info+0x40/0x50 [ 143.999972][ T3087] ? __kasan_slab_alloc+0x73/0x90 [ 143.999998][ T3087] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 144.000019][ T3087] ? security_inode_alloc+0x51/0x230 [ 144.000043][ T3087] ? inode_init_always_gfp+0x756/0x9e0 [ 144.000068][ T3087] ? alloc_inode+0xc5/0x270 [ 144.000093][ T3087] ? new_inode+0x25/0x1e0 [ 144.000118][ T3087] ? proc_pid_make_inode+0x25/0x140 [ 144.000143][ T3087] ? proc_pident_instantiate+0x6d/0x2c0 [ 144.000169][ T3087] ? proc_pident_lookup+0x1c7/0x270 [ 144.000195][ T3087] ? proc_tid_base_lookup+0x2f/0x40 [ 144.000215][ T3087] ? path_openat+0x1312/0x34f0 [ 144.000242][ T3087] ? do_filp_open+0x1f5/0x440 [ 144.000275][ T3087] ? do_sys_openat2+0x134/0x1d0 [ 144.000293][ T3087] ? __x64_sys_openat+0x13a/0x170 [ 144.000312][ T3087] ? x64_sys_call+0xe69/0x2ee0 [ 144.000336][ T3087] ? do_syscall_64+0x57/0xf0 [ 144.000353][ T3087] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.000383][ T3087] ? avc_has_perm_noaudit+0x26c/0x360 [ 144.000406][ T3087] ? __asan_memcpy+0x5a/0x80 [ 144.000428][ T3087] ? avc_has_perm_noaudit+0x28a/0x360 [ 144.000452][ T3087] ? avc_has_perm+0x155/0x240 [ 144.000473][ T3087] ? __cfi_avc_has_perm+0x10/0x10 [ 144.000495][ T3087] ? kasan_save_alloc_info+0x40/0x50 [ 144.000517][ T3087] ? selinux_file_open+0x46c/0x630 [ 144.000538][ T3087] ? __cfi_selinux_file_open+0x10/0x10 [ 144.000561][ T3087] ? avc_has_extended_perms+0x80b/0xe70 [ 144.000584][ T3087] ? __asan_memcpy+0x5a/0x80 [ 144.000606][ T3087] ? avc_has_extended_perms+0x969/0xe70 [ 144.000631][ T3087] ? __asan_set_shadow_00+0x12/0x20 [ 144.000651][ T3087] ? do_vfs_ioctl+0x182d/0x2010 [ 144.000677][ T3087] ? arch_stack_walk+0x10a/0x170 [ 144.000703][ T3087] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 144.000732][ T3087] ? _parse_integer+0x2e/0x40 [ 144.000763][ T3087] ? ioctl_has_perm+0x39a/0x500 [ 144.000783][ T3087] ? has_cap_mac_admin+0xd0/0xd0 [ 144.000803][ T3087] ? proc_fail_nth_write+0x184/0x220 [ 144.000822][ T3087] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 144.000842][ T3087] ? selinux_file_ioctl+0x732/0x1480 [ 144.000861][ T3087] ? vfs_write+0x9a4/0xf90 [ 144.000883][ T3087] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 144.000903][ T3087] ? __cfi_vfs_write+0x10/0x10 [ 144.000926][ T3087] ? __kasan_check_write+0x18/0x20 [ 144.000949][ T3087] ? mutex_unlock+0x90/0x240 [ 144.000971][ T3087] ? __cfi_mutex_unlock+0x10/0x10 [ 144.000992][ T3087] ? __fget_files+0x2c5/0x340 [ 144.001019][ T3087] ? __fget_files+0x2c5/0x340 [ 144.001045][ T3087] ? bpf_lsm_file_ioctl+0xd/0x20 [ 144.001063][ T3087] ? security_file_ioctl+0x3e/0x110 [ 144.001082][ T3087] ? __cfi__RNvCskDQVOo9v79Q_16rust_binder_main17rust_binder_ioctl+0x10/0x10 [ 144.001104][ T3087] __se_sys_ioctl+0x135/0x1b0 [ 144.001130][ T3087] __x64_sys_ioctl+0x7f/0xa0 [ 144.001156][ T3087] x64_sys_call+0x1878/0x2ee0 [ 144.001181][ T3087] do_syscall_64+0x57/0xf0 [ 144.001199][ T3087] ? clear_bhb_loop+0x50/0xa0 [ 144.001217][ T3087] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.001246][ T3087] RIP: 0033:0x7fd8bff9c799 [ 144.001268][ T3087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.001285][ T3087] RSP: 002b:00007fd8c0e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.001306][ T3087] RAX: ffffffffffffffda RBX: 00007fd8c0215fa0 RCX: 00007fd8bff9c799 [ 144.001322][ T3087] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 144.001335][ T3087] RBP: 00007fd8c0e21090 R08: 0000000000000000 R09: 0000000000000000 [ 144.001348][ T3087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.001361][ T3087] R13: 00007fd8c0216038 R14: 00007fd8c0215fa0 R15: 00007ffe0d9580d8 [ 144.001379][ T3087] [ 144.206692][ T3090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 144.218261][ T3087] rust_binder: Write failure EFAULT in pid:4 [ 145.091863][ T294] ovl_remap_lower_ino: 15187 callbacks suppressed [ 145.091887][ T294] overlayfs: d_ino too big (., ino=4611686018427413510, xinobits=3) [ 145.112717][ T294] overlayfs: d_ino too big (.., ino=4611686018427408185, xinobits=3) [ 145.121122][ T294] overlayfs: d_ino too big (enable, ino=4611686018447068727, xinobits=3) [ 145.130440][ T294] overlayfs: d_ino too big (filter, ino=4611686018447068727, xinobits=3) [ 145.140251][ T294] overlayfs: d_ino too big (trigger, ino=4611686018447068727, xinobits=3) [ 145.149122][ T294] overlayfs: d_ino too big (format, ino=4611686018447068727, xinobits=3) [ 145.158336][ T294] overlayfs: d_ino too big (id, ino=4611686018447068727, xinobits=3) [ 145.172975][ T294] overlayfs: d_ino too big (id, ino=4611686018447068727, xinobits=3) [ 145.192161][ T294] overlayfs: d_ino too big (hist, ino=4611686018447068727, xinobits=3) [ 145.200652][ T294] overlayfs: d_ino too big (inject, ino=4611686018447068727, xinobits=3) [ 145.202630][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 145.202645][ T36] audit: type=1400 audit(2016777501.134:526): avc: denied { create } for pid=3106 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.305736][ T36] audit: type=1400 audit(2016777501.234:527): avc: denied { ioctl } for pid=3115 comm="syz.4.927" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 145.338075][ T36] audit: type=1400 audit(2016777501.234:528): avc: denied { create } for pid=3115 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.379555][ T36] audit: type=1400 audit(2016777501.234:529): avc: denied { ioctl } for pid=3115 comm="syz.4.927" path="socket:[37169]" dev="sockfs" ino=37169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.409028][ T36] audit: type=1400 audit(2016777501.264:530): avc: denied { connect } for pid=3115 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.428566][ T36] audit: type=1400 audit(2016777501.274:531): avc: denied { write } for pid=3115 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.447840][ T36] audit: type=1400 audit(2016777501.334:532): avc: denied { accept } for pid=3124 comm="syz.4.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.493032][ T336] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 145.652401][ T336] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 145.660715][ T336] usb 2-1: config 0 has no interface number 0 [ 145.667155][ T336] usb 2-1: config 0 interface 222 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 145.678372][ T336] usb 2-1: config 0 interface 222 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 145.689653][ T336] usb 2-1: config 0 interface 222 has no altsetting 0 [ 145.698158][ T336] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 145.707498][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.715696][ T336] usb 2-1: Product: syz [ 145.719982][ T336] usb 2-1: Manufacturer: syz [ 145.724840][ T336] usb 2-1: SerialNumber: syz [ 145.730295][ T336] usb 2-1: config 0 descriptor?? [ 145.735757][ T3111] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 145.743259][ T3111] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 145.751156][ T336] ums-alauda 2-1:0.222: USB Mass Storage device detected [ 145.762140][ T336] scsi host1: usb-storage 2-1:0.222 [ 145.792606][ T294] ovl_map_dev_ino: 11953 callbacks suppressed [ 145.792623][ T294] overlayfs: inode number too big (jbd2_submit_inode_data/hist, ino=4611686018447068727, xinobits=3) [ 145.810181][ T294] overlayfs: inode number too big (jbd2_submit_inode_data/inject, ino=4611686018447068727, xinobits=3) [ 145.821694][ T294] overlayfs: inode number too big (jbd2/jbd2_handle_start, ino=4611686018427415584, xinobits=3) [ 145.832295][ T294] overlayfs: inode number too big (jbd2/jbd2_handle_start, ino=4611686018427415584, xinobits=3) [ 145.843194][ T294] overlayfs: inode number too big (jbd2_handle_start/enable, ino=4611686018447068727, xinobits=3) [ 145.854009][ T294] overlayfs: inode number too big (jbd2_handle_start/filter, ino=4611686018447068727, xinobits=3) [ 145.864914][ T294] overlayfs: inode number too big (jbd2_handle_start/trigger, ino=4611686018447068727, xinobits=3) [ 145.875809][ T294] overlayfs: inode number too big (jbd2_handle_start/format, ino=4611686018447068727, xinobits=3) [ 145.886786][ T294] overlayfs: inode number too big (jbd2_handle_start/id, ino=4611686018447068727, xinobits=3) [ 145.897234][ T294] overlayfs: inode number too big (jbd2_handle_start/hist, ino=4611686018447068727, xinobits=3) [ 145.953215][ T36] audit: type=1400 audit(2016777501.884:533): avc: denied { getopt } for pid=3109 comm="syz.1.925" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.953370][ T3111] syzkaller1: entered promiscuous mode [ 145.979101][ T3111] syzkaller1: entered allmulticast mode [ 145.990484][ T31] usb 2-1: USB disconnect, device number 49 [ 146.058721][ T334] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 146.222446][ T334] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.232474][ T334] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.239099][ T334] usb 6-1: New USB device found, idVendor=0505, idProduct=0374, bcdDevice= 0.00 [ 146.248454][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.258597][ T334] usb 6-1: config 0 descriptor?? [ 146.607861][ T3140] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 146.669258][ T3132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.677930][ T3132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.721573][ T36] audit: type=1400 audit(2016777502.654:534): avc: denied { create } for pid=3142 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.741838][ T3143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.750355][ T3143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.761828][ T3145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.932'. [ 146.784254][ T36] audit: type=1400 audit(2016777502.714:535): avc: denied { write } for pid=3146 comm="syz.4.938" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 146.820206][ T3153] incfs: mount failed -22 [ 146.825199][ T3153] incfs: Error accessing: . [ 146.829877][ T3153] incfs: mount failed -2 [ 146.834553][ T3153] incfs: Error accessing: . [ 146.839236][ T3153] incfs: mount failed -2 [ 146.843931][ T3153] incfs: Error accessing: . [ 146.848620][ T3153] incfs: mount failed -2 [ 146.853520][ T3153] incfs: Error accessing: . [ 146.858404][ T3153] incfs: mount failed -2 [ 146.863379][ T3153] incfs: Error accessing: . [ 146.868065][ T3153] incfs: mount failed -2 [ 146.872690][ T3153] incfs: Error accessing: . [ 146.877401][ T3153] incfs: mount failed -2 [ 146.882221][ T3153] incfs: Error accessing: . [ 146.887038][ T3153] incfs: mount failed -2 [ 146.891703][ T3153] incfs: Error accessing: . [ 146.896396][ T3153] incfs: mount failed -2 [ 146.900890][ T3153] incfs: Error accessing: . [ 146.906371][ T3153] incfs: mount failed -2 [ 146.911016][ T3153] incfs: Error accessing: . [ 146.915946][ T3153] incfs: mount failed -2 [ 146.920424][ T3153] incfs: Error accessing: . [ 146.925347][ T3153] incfs: mount failed -2 [ 146.929825][ T3153] incfs: Error accessing: . [ 146.934900][ T3153] incfs: mount failed -2 [ 146.939393][ T3153] incfs: Error accessing: . [ 146.944278][ T3153] incfs: mount failed -2 [ 146.948717][ T3153] incfs: Error accessing: . [ 146.953623][ T3153] incfs: mount failed -2 [ 146.958120][ T3153] incfs: Error accessing: . [ 146.963095][ T3153] incfs: mount failed -2 [ 146.967582][ T3153] incfs: Error accessing: . [ 146.972469][ T3153] incfs: mount failed -2 [ 146.976923][ T3153] incfs: Error accessing: . [ 146.982292][ T3153] incfs: mount failed -2 [ 146.986809][ T3153] incfs: Error accessing: . [ 146.991478][ T336] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 146.999707][ T3153] incfs: mount failed -2 [ 147.004336][ T3153] incfs: Error accessing: . [ 147.009035][ T3153] incfs: mount failed -2 [ 147.013841][ T3153] incfs: Error accessing: . [ 147.018533][ T3153] incfs: mount failed -2 [ 147.023178][ T3153] incfs: Error accessing: . [ 147.027937][ T3153] incfs: mount failed -2 [ 147.032592][ T3153] incfs: Error accessing: . [ 147.037277][ T3153] incfs: mount failed -2 [ 147.042118][ T3153] incfs: Error accessing: . [ 147.046812][ T3153] incfs: mount failed -2 [ 147.051459][ T3153] incfs: Error accessing: . [ 147.056215][ T3153] incfs: mount failed -2 [ 147.060681][ T3153] incfs: Error accessing: . [ 147.066378][ T3153] incfs: mount failed -2 [ 147.070888][ T3153] incfs: Error accessing: . [ 147.075799][ T3153] incfs: mount failed -2 [ 147.080328][ T3153] incfs: Error accessing: . [ 147.085195][ T3153] incfs: mount failed -2 [ 147.089637][ T3153] incfs: Error accessing: . [ 147.094551][ T3153] incfs: mount failed -2 [ 147.099002][ T3153] incfs: Error accessing: . [ 147.103874][ T3153] incfs: mount failed -2 [ 147.108398][ T3153] incfs: Error accessing: . [ 147.113272][ T3153] incfs: mount failed -2 [ 147.142295][ T336] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 147.150438][ T336] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 147.160535][ T336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.168827][ T336] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 147.178128][ T336] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 147.186484][ T336] usb 2-1: Product: syz [ 147.190870][ T336] usb 2-1: Manufacturer: syz [ 147.195653][ T336] usb 2-1: SerialNumber: syz [ 147.204386][ T336] usb 2-1: config 0 descriptor?? [ 147.211791][ T336] hub 2-1:0.0: bad descriptor, ignoring hub [ 147.217792][ T336] hub 2-1:0.0: probe with driver hub failed with error -5 [ 147.225900][ T336] usb 2-1: selecting invalid altsetting 0 [ 147.441915][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 147.442925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.454141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 147.466145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.478116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 147.490253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.502123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 147.514000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.525942][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 147.537962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.451250][ C0] net_ratelimit: 165741 callbacks suppressed [ 152.451273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.451289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 152.451351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 152.457371][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.469396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 152.481343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.493359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 152.505259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.517284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 152.529253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.844790][ T10] usb 2-1: USB disconnect, device number 50 [ 155.058217][ T294] ovl_map_dev_ino: 7239 callbacks suppressed [ 155.058239][ T294] overlayfs: inode number too big (cfg80211/cfg80211_update_owe_info_event, ino=4611686018427420817, xinobits=3) [ 156.292848][ T294] overlayfs: inode number too big (cfg80211/cfg80211_update_owe_info_event, ino=4611686018427420817, xinobits=3) [ 157.443250][ T294] ovl_remap_lower_ino: 10664 callbacks suppressed [ 157.443272][ T294] overlayfs: d_ino too big (., ino=4611686018427420817, xinobits=3) [ 157.461290][ C0] net_ratelimit: 160536 callbacks suppressed [ 157.461315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.461372][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 157.467387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.479450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 157.491435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.503366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 157.515428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.527296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 157.539270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.551222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 157.627648][ T294] overlayfs: d_ino too big (.., ino=4611686018427408270, xinobits=3) [ 157.918532][ T294] overlayfs: d_ino too big (enable, ino=4611686018447068727, xinobits=3) [ 157.929931][ T334] usbhid 6-1:0.0: can't add hid device: -32 [ 158.252967][ T334] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 158.591400][ T294] overlayfs: d_ino too big (filter, ino=4611686018447068727, xinobits=3) [ 158.599867][ T294] overlayfs: d_ino too big (trigger, ino=4611686018447068727, xinobits=3) [ 159.051002][ T294] overlayfs: d_ino too big (format, ino=4611686018447068727, xinobits=3) [ 159.367207][ T294] overlayfs: d_ino too big (id, ino=4611686018447068727, xinobits=3) [ 160.439901][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 160.439921][ T36] audit: type=1400 audit(2016777516.364:542): avc: denied { accept } for pid=3161 comm="syz.4.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.484642][ T334] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 162.471367][ C1] net_ratelimit: 86181 callbacks suppressed [ 162.471388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 162.471456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.477444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 162.489440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.501432][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 162.513702][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.525349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 162.537337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.549296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 162.561473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.721263][ C1] sched: DL replenish lagged too much [ 167.481287][ C0] net_ratelimit: 80505 callbacks suppressed [ 167.481310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.481318][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 167.481415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 167.487455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.499277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 167.511372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.523270][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 167.535109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.547065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 167.559428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.491354][ C1] net_ratelimit: 81739 callbacks suppressed [ 172.491376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 172.491414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.497405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 172.509394][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.521362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 172.533457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.545212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 172.557388][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.569149][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 172.581207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.501281][ C1] net_ratelimit: 78284 callbacks suppressed [ 177.501311][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 177.501336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.507515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 177.519572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.531690][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 177.543909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.555627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 177.567937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.579675][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 177.591736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.511307][ C1] net_ratelimit: 79790 callbacks suppressed [ 182.511330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 182.511359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.517360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 182.529471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.541244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 182.553207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.565181][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 182.577369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.589062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 182.601266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.521313][ C1] net_ratelimit: 80775 callbacks suppressed [ 187.521369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 187.521527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.527414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 187.539510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.551284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 187.563237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.575224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 187.587283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.599059][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 187.611139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.531315][ C1] net_ratelimit: 78836 callbacks suppressed [ 192.531337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 192.531419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.537357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 192.549475][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.561257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 192.573186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.585147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 192.597266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.609035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 192.621133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.541265][ C0] net_ratelimit: 81675 callbacks suppressed [ 197.541288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.541303][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 197.541402][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 197.547422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.559257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 197.571344][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.583293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 197.595376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.607802][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 197.619896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.551315][ C0] net_ratelimit: 80396 callbacks suppressed [ 202.551338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.551409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 202.557531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.569664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 202.581621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.593604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 202.605698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.617434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 202.629545][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.641319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 207.561266][ C1] net_ratelimit: 77813 callbacks suppressed [ 207.561288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 207.561288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.561388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.567328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 207.579421][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.591289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 207.603264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.615116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 207.627077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.639040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.571275][ C1] net_ratelimit: 79420 callbacks suppressed [ 212.571298][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.571375][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.577347][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.589450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.601205][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.613174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.625154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.637211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.648988][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 212.661076][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.581293][ C1] net_ratelimit: 78802 callbacks suppressed [ 217.581315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 217.581381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.587369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 217.599536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.611350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 217.623408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.635242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 217.647180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.659225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 217.671359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.591305][ C1] net_ratelimit: 78056 callbacks suppressed [ 222.591327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 222.591352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.597368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 222.609441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.621421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 222.633496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.645253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 222.657359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.669132][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 222.681081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.601279][ C1] net_ratelimit: 81564 callbacks suppressed [ 227.601302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 227.601307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.601399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.607333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 227.619479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.631335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 227.643306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.655166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 227.667430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.679388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 232.611290][ C0] net_ratelimit: 80534 callbacks suppressed [ 232.611317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.611333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 232.617457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.629356][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 232.641322][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.653397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 232.665486][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.677264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 232.689342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.701125][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.621304][ C1] net_ratelimit: 79431 callbacks suppressed [ 237.621326][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.621350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.627358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.639681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.651516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.663451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.675661][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.687857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.699705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 237.712054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.631287][ C1] net_ratelimit: 79469 callbacks suppressed [ 242.631316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 242.631359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.637375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 242.649451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.661285][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 242.673328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.685106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 242.697169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.709144][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 242.721317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.641271][ C1] net_ratelimit: 78631 callbacks suppressed [ 247.641295][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 247.641377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.647420][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 247.659401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.671373][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 247.683459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.695228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 247.707303][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.719157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 247.731227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.651297][ C1] net_ratelimit: 81111 callbacks suppressed [ 252.651328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 252.651373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.657352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 252.669466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.681467][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 252.693590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.705315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 252.717522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.729291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 252.741286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.661301][ C1] net_ratelimit: 78426 callbacks suppressed [ 257.661324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 257.661345][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.667424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 257.679411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.691396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 257.703537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.715369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 257.727457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.739319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 257.751305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.671285][ C1] net_ratelimit: 81717 callbacks suppressed [ 262.671308][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 262.671342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.677866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 262.690036][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.701744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 262.713765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.725693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 262.737912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.749925][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 262.762098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.681270][ C1] net_ratelimit: 78416 callbacks suppressed [ 267.681294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 267.681366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.687360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 267.699500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.711244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 267.723229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.735165][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 267.747381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.759087][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 267.771248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.691304][ C1] net_ratelimit: 81043 callbacks suppressed [ 272.691327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 272.691415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.697394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 272.709388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.721352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 272.733413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.745286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 272.757347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.769182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 272.781157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.701271][ C0] net_ratelimit: 75642 callbacks suppressed [ 277.701295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.701358][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 277.707316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.719324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 277.731399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.743145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 277.755218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.767182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 277.779158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.791118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.711265][ C0] net_ratelimit: 86276 callbacks suppressed [ 282.711290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.711304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.711391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.717428][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.729244][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.741295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.753288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.765481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.777322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 282.789237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.721275][ C0] net_ratelimit: 83687 callbacks suppressed [ 287.721298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.721310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 287.721408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 287.727355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.739346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 287.751451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.763316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 287.775186][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.787154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 287.799053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.731314][ C0] net_ratelimit: 85356 callbacks suppressed [ 292.731336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.731388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 292.737537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.749284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 292.761280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.773207][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 292.785436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.797155][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 292.809157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.821013][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.741273][ C1] net_ratelimit: 86275 callbacks suppressed [ 297.741296][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.741330][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.747350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.759342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.771356][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.783409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.795196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.807161][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.819136][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 297.831188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.751293][ C1] net_ratelimit: 85664 callbacks suppressed [ 302.751317][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 302.751422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.757367][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 302.769400][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.781282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 302.793257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.805233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 302.817393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.829597][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 302.841604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.761325][ C1] net_ratelimit: 80621 callbacks suppressed [ 307.761347][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 307.761384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.767421][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 307.779548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.791387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 307.803379][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.815297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 307.827389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 307.839456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 307.851517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.771274][ C1] net_ratelimit: 82541 callbacks suppressed [ 312.771297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 312.771548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.777365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 312.789545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.801554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 312.813527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.825461][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 312.837386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 312.849446][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 312.861501][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.214483][ T37] INFO: task syz.1.941:3158 blocked for more than 129 seconds. [ 315.225416][ T37] Not tainted syzkaller #0 [ 315.230381][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.044829][ T37] task:syz.1.941 state:D stack:0 pid:3158 tgid:3158 ppid:1043 flags:0x00004004 [ 316.229647][ T37] Call Trace: [ 316.265367][ T37] [ 316.268340][ T37] __schedule+0x134f/0x1ea0 [ 316.305588][ T37] ? __sched_text_start+0x10/0x10 [ 316.310669][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 316.910156][ T37] ? _raw_spin_unlock+0x45/0x60 [ 316.915099][ T37] ? rcu_barrier_entrain+0x36c/0x4f0 [ 316.920426][ T37] schedule+0xc5/0x240 [ 316.924564][ T37] schedule_timeout+0xc7/0x3b0 [ 316.929347][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 316.934767][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 316.940331][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 316.945521][ T37] ? generic_exec_single+0x206/0x500 [ 316.950834][ T37] wait_for_common+0x369/0x650 [ 316.955658][ T37] ? wait_for_completion+0x40/0x40 [ 316.960789][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 316.966339][ T37] wait_for_completion+0x1c/0x40 [ 316.971363][ T37] rcu_barrier+0x415/0x540 [ 316.975798][ T37] netdev_run_todo+0x118/0xce0 [ 316.980580][ T37] ? kvfree+0x39/0x50 [ 316.984605][ T37] ? netdev_state_change+0xaa/0x240 [ 316.989819][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 316.995230][ T37] rtnl_unlock+0x12/0x20 [ 316.999485][ T37] tun_chr_close+0xc5/0x150 [ 317.004035][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 317.009159][ T37] __fput+0x1fb/0xa00 [ 317.013175][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 317.018728][ T37] ____fput+0x20/0x30 [ 317.022731][ T37] task_work_run+0x1e5/0x260 [ 317.027329][ T37] ? __cfi_task_work_run+0x10/0x10 [ 317.032501][ T37] ? __kasan_check_write+0x18/0x20 [ 317.037631][ T37] resume_user_mode_work+0x35/0x50 [ 317.042775][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 317.048257][ T37] do_syscall_64+0x63/0xf0 [ 317.052719][ T37] ? clear_bhb_loop+0x50/0xa0 [ 317.057410][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 317.063381][ T37] RIP: 0033:0x7f09b399c799 [ 317.067824][ T37] RSP: 002b:00007ffc61e42a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 317.076276][ T37] RAX: 0000000000000000 RBX: 00007f09b3c17da0 RCX: 00007f09b399c799 [ 317.084280][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 317.092299][ T37] RBP: 00007f09b3c17da0 R08: 00007f09b3c16038 R09: 0000000000000000 [ 317.100291][ T37] R10: 00000000003fed08 R11: 0000000000000246 R12: 0000000000027a09 [ 317.108300][ T37] R13: 00007f09b3c1609c R14: 0000000000026e66 R15: 00007f09b3c16090 [ 317.116319][ T37] [ 317.119447][ T37] NMI backtrace for cpu 0 [ 317.119463][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 317.119491][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.119503][ T37] Call Trace: [ 317.119510][ T37] [ 317.119518][ T37] __dump_stack+0x21/0x30 [ 317.119546][ T37] dump_stack_lvl+0x140/0x1c0 [ 317.119570][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 317.119596][ T37] dump_stack+0x19/0x20 [ 317.119618][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 317.119646][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 317.119669][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 317.119697][ T37] ? sched_show_task+0x371/0x530 [ 317.119720][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 317.119742][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.119766][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 317.119790][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 317.119820][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 317.119843][ T37] watchdog+0xdad/0xf00 [ 317.119870][ T37] ? __kasan_check_write+0x18/0x20 [ 317.119895][ T37] ? __cfi_watchdog+0x10/0x10 [ 317.119922][ T37] ? __kasan_check_read+0x15/0x20 [ 317.119943][ T37] ? __kthread_parkme+0x137/0x180 [ 317.119971][ T37] ? schedule+0xc5/0x240 [ 317.119991][ T37] kthread+0x2c9/0x370 [ 317.120009][ T37] ? __cfi_watchdog+0x10/0x10 [ 317.120036][ T37] ? __cfi_kthread+0x10/0x10 [ 317.120055][ T37] ret_from_fork+0x64/0xa0 [ 317.120078][ T37] ? __cfi_kthread+0x10/0x10 [ 317.120093][ T37] ret_from_fork_asm+0x1a/0x30 [ 317.120121][ T37] [ 317.120128][ T37] Sending NMI from CPU 0 to CPUs 1: [ 317.367868][ C1] NMI backtrace for cpu 1 [ 317.367890][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 f91b3f30cb7330a7f558b7a5adc554d01bdf7d6e [ 317.367911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.367922][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2b/0x70 [ 317.367951][ C1] Code: 0f 1e fa 55 48 89 e5 48 8b 45 08 65 48 8b 0d 0c 4f 7d 7e 65 8b 15 0d 4f 7d 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 <83> b9 ec 0b 00 00 00 74 2c 8b 91 c8 0b 00 00 83 fa 02 75 21 48 8b [ 317.367965][ C1] RSP: 0018:ffffc900002305d8 EFLAGS: 00000246 [ 317.367980][ C1] RAX: ffffffff8474da07 RBX: ffff8881a2cbd000 RCX: ffff888103679300 [ 317.367993][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.368003][ C1] RBP: ffffc900002305d8 R08: 0000000000000000 R09: 0000000000000000 [ 317.368013][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000e [ 317.368023][ C1] R13: ffff8881a2cbcb40 R14: 0000000000000000 R15: ffff8881a2cbcbbe [ 317.368034][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 317.368047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.368057][ C1] CR2: 00007f8ce6212060 CR3: 0000000126314000 CR4: 00000000003526b0 [ 317.368072][ C1] Call Trace: [ 317.368077][ C1] [ 317.368085][ C1] __skb_clone+0x147/0x7a0 [ 317.368114][ C1] ? skb_clone+0x229/0x460 [ 317.368136][ C1] skb_clone+0x260/0x460 [ 317.368156][ C1] br_flood+0x4ed/0x730 [ 317.368179][ C1] br_handle_frame_finish+0x12f9/0x1760 [ 317.368195][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 317.368213][ C1] br_handle_frame+0x5a6/0xba0 [ 317.368228][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 317.368242][ C1] __netif_receive_skb_core+0xfae/0x3ab0 [ 317.368262][ C1] ? ip6_mc_input+0x516/0x6c0 [ 317.368281][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 317.368302][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 317.368320][ C1] ? qdisc_run_end+0x120/0x120 [ 317.368339][ C1] ? ip6_rcv_finish+0x360/0x3e0 [ 317.368357][ C1] ? ipv6_rcv+0xf1/0x240 [ 317.368374][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 317.368392][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 317.368409][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 317.368424][ C1] process_backlog+0x3e5/0xad0 [ 317.368446][ C1] __napi_poll+0xd0/0x610 [ 317.368465][ C1] net_rx_action+0x5ea/0xd80 [ 317.368486][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 317.368505][ C1] ? sched_clock+0x44/0x60 [ 317.368523][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 317.368543][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 317.368561][ C1] handle_softirqs+0x1aa/0x630 [ 317.368584][ C1] __do_softirq+0xf/0x16 [ 317.368599][ C1] do_softirq+0xb8/0x110 [ 317.368619][ C1] [ 317.368624][ C1] [ 317.368629][ C1] ? __cfi_do_softirq+0x10/0x10 [ 317.368649][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 317.368667][ C1] ? __d_free+0x27/0x30 [ 317.368688][ C1] ? __cfi___d_free+0x10/0x10 [ 317.368706][ C1] __local_bh_enable_ip+0x74/0x80 [ 317.368726][ C1] rcu_do_batch+0x5d9/0xd40 [ 317.368747][ C1] ? rcu_core+0xd30/0xd30 [ 317.368765][ C1] ? __kasan_check_write+0x18/0x20 [ 317.368783][ C1] ? _raw_spin_lock+0x92/0x120 [ 317.368797][ C1] ? __kasan_check_read+0x15/0x20 [ 317.368813][ C1] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 317.368834][ C1] rcu_nocb_cb_kthread+0x524/0xb30 [ 317.368857][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 317.368877][ C1] ? __kasan_check_write+0x18/0x20 [ 317.368894][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 317.368908][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 317.368923][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 317.368937][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 317.368959][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 317.368981][ C1] ? __kasan_check_read+0x15/0x20 [ 317.368998][ C1] ? __kthread_parkme+0x137/0x180 [ 317.369019][ C1] ? schedule+0xc5/0x240 [ 317.369034][ C1] kthread+0x2c9/0x370 [ 317.369047][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 317.369068][ C1] ? __cfi_kthread+0x10/0x10 [ 317.369082][ C1] ret_from_fork+0x64/0xa0 [ 317.369105][ C1] ? __cfi_kthread+0x10/0x10 [ 317.369119][ C1] ret_from_fork_asm+0x1a/0x30 [ 317.369141][ C1] [ 317.781413][ C0] net_ratelimit: 76255 callbacks suppressed [ 317.781432][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 317.781721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 317.789450][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.800380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 317.812401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.824297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 317.836311][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 317.848351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 317.860422][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.872241][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 319.394301][ T36] audit: type=1400 audit(2016777675.234:543): avc: denied { write } for pid=269 comm="syz-executor" path="pipe:[1582]" dev="pipefs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.791289][ C0] net_ratelimit: 82686 callbacks suppressed [ 322.791313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.791381][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 322.797608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.809272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 322.821350][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.833096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 322.845168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.857010][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0) [ 322.868967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 322.880928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c6:0f:df:ee:ee:7c, vlan:0)