last executing test programs: 2m24.376481827s ago: executing program 0 (id=367): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) shutdown(0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) syz_genetlink_get_family_id$nl802154(0x0, r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, 0x0, 0x40240c4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) close_range(r0, r0, 0x0) 2m24.319281888s ago: executing program 0 (id=368): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) (rerun: 64) bind$inet(r2, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x3f6b, 0x3180, 0x8000, 0x41024e}, 0x0, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) r6 = fsopen(&(0x7f0000000200)='msdos\x00', 0x0) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x501, 0x0) (async, rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1b10) (rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2032}, {r4, 0x100}, {r3, 0x8000}, {r6, 0x507}, {r6, 0x410}, {r7, 0x2}], 0x6, &(0x7f0000000940)={0x0, 0x3938700}, &(0x7f0000000300)={[0x9]}, 0x8) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000080)=']&-\x00', 0x0, r0) (async) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r5, &(0x7f00000002c0)=""/38, 0x26) (async) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="380100001000010000000000fefffffffc000000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x138}}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 2m24.315448018s ago: executing program 0 (id=370): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x94a81, &(0x7f0000000040)={[{}]}) 2m24.307374418s ago: executing program 0 (id=371): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800100, 0x88) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getdents64(r0, &(0x7f0000000240)=""/7, 0x7) (async) getdents64(r0, &(0x7f0000000240)=""/7, 0x7) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2080000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x2126002, 0x0) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async) pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) bind$bt_l2cap(r1, 0x0, 0x0) (async) bind$bt_l2cap(r1, 0x0, 0x0) recvfrom(r1, &(0x7f0000000100)=""/27, 0x1b, 0x10002, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x814) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) (async) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 2m24.229858449s ago: executing program 0 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x301, 0x70bd28, 0x25dfdc06, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 2m24.120431872s ago: executing program 0 (id=379): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.078944283s ago: executing program 32 (id=379): connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) 55.579329135s ago: executing program 3 (id=2416): openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x161441, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x8057, 0x2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket(0x3d, 0x4, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 55.503404797s ago: executing program 3 (id=2420): syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x1, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x68d1, 0x10, 0x25}, {0x6, 0x24, 0x1a, 0x8b, 0x653a4fb771d807a5}, [@obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0x1, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc2, 0xfb, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xf7, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x5, 0xf, 0x8}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x6, 0x0, 0x9b8, 0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}, {0x42, &(0x7f0000000200)=@string={0x42, 0x3, "ed50ebfabffb2e50de743d59085184bce6ac3987093b3d52582595eeab88b2d8cd2ff948f44487cc947801f94237d1d8df2623d2ff638e56ee65d15c41ba2545"}}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x620400, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x1, 0x20, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x68d1, 0x10, 0x25}, {0x6, 0x24, 0x1a, 0x8b, 0x653a4fb771d807a5}, [@obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0x1, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc2, 0xfb, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0xf7, 0x2}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x5, 0xf, 0x8}, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x6, 0x0, 0x9b8, 0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x445}}, {0x42, &(0x7f0000000200)=@string={0x42, 0x3, "ed50ebfabffb2e50de743d59085184bce6ac3987093b3d52582595eeab88b2d8cd2ff948f44487cc947801f94237d1d8df2623d2ff638e56ee65d15c41ba2545"}}]}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x620400, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) (async) 53.677226062s ago: executing program 1 (id=2477): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0xeeef0000, 0xb, 0x0, 0x1, 0x7, 0xf9, 0x5, 0x0, 0x0, 0x83, 0x42}, {0xeeee8000, 0x6000, 0xd, 0x8, 0x0, 0x0, 0x81, 0x0, 0x4, 0xe, 0x0, 0x5}, {0x8080000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1000, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84, 0xac}, {0xeeee8000, 0x5000, 0x9, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x2000}, {0xffff1000, 0xfffe}, 0x4, 0x0, 0x6000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x3]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 53.341968208s ago: executing program 4 (id=2479): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) 53.284498929s ago: executing program 4 (id=2480): creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) 53.179273121s ago: executing program 4 (id=2481): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) tkill(r0, 0x36) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xffffa000) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) lseek(r6, 0x49bf, 0x3) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r5, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="416fa220e43bb64f70167ca1b67aa98070bd3e54aa7f5b3efd7c685da1f2f14f280c480bc5c6345d5046a239996bc70bf941c164cfc9a2198e2c6dd1b58209478ed3c5a2bb8ae7c7ba860687bb6784e4a15791e5e4447b7a6f43275325747fa024500de140ef4a7cf908e8faad07839cdff111918b33b560c39f921ed67c71ba26326b193ffd33057a2d1ed8599f2f9ab5d153825b891fb778ac3fc039b1e938313b1bec89d4c53f37c477396e9c6f023540c03f0f99a849fd2ca629b549745b59fdc3905f66856223d2485e5cc995", 0xcf}, {&(0x7f0000000480)="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", 0x1d2}], 0x2}}], 0x2, 0x800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) 53.158445842s ago: executing program 1 (id=2482): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="180000000000000029000016360000002b000000000000004000000000000000290000003b000000850400000000000005020000000100c2044e5d6dda0001000502080fc910fc0000000000000000000000000000010000140000000000000000"], 0x70}, 0x810) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket(0x2, 0x3, 0xff) unshare(0x22020600) r3 = socket(0x2, 0x1, 0x0) shutdown(r3, 0x2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = socket$unix(0x1, 0x5, 0x0) ftruncate(r4, 0x398a0bdb) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'vxcan1\x00', 0x1}) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 52.76107094s ago: executing program 2 (id=2483): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 52.70640687s ago: executing program 2 (id=2484): openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendto$inet(r1, &(0x7f0000000140)="84f8928f8abe492693ad2746e01f4f4dc465a23a", 0x14, 0xc000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 51.253673379s ago: executing program 1 (id=2485): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffa000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20e01, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x7) 49.403344634s ago: executing program 2 (id=2486): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x1, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3e) close(0x3) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) 46.750282416s ago: executing program 3 (id=2487): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0x4048000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x8011) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 45.141877107s ago: executing program 4 (id=2488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x9b0fe2d8d54b44, 0x0) io_cancel(0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000003c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY\t\x00\x00\x00\x00\x00\x00\x003\x1f\xc5!\xb2\x1bs\xfc\x00\x00\x00\x00\x00\x00\x0f\xff\xfc\t\x9c\xda\xf2\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8cfV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\x88\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12J\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda\xe8H\xc3\x9a\xfdNak\x99\x87\n\x1d\xb22m\xdd\xa9\xc1\x9a\xac\xd2\xda\xed\xab\xa2J\xf7e_\xe6\xd5\xcf\x8a\x13sF\xc3\x83\x0e=\x00\x00\x00\x00\x00\x00\xf1\xff\xff\xff\xff\xff\xff\xff\x00\x00\xb8Y\xd0\x13F4$6\xb0I\xc3\xfas\xdcnq\\\x19~\xcd\xc27D\v\xe6v\xe3\xd4\xb8\x15LW\xad\xb5S\t\x9d$D9Q_\xa7\xd0\xe8\xe7\xa4\xee\x19\x86/j\xb7A\xd7\xfb\x13\xbf\xcd\xb2m\x9f\x1e\xe4l\xa7x\x1d\xe3\xca/\x8d%\x90\t\x1d\x9bV\xeb{\xd8\x1d7\xa8v\xfch\xe65\xb4W\xa4PY\xac\xfbK`~N\xea\x87\x92\xd7\x11\xc4\xe9ME.\v\x97 t\x92}\xfd\xa1\xfaQX\x13\x9bMU,\x88\x8b\xcf\xb4\x92\xe4\xf5\x85/\xd9\x8b/\xcf\f\x1b\xf8\xf9\x12\xe0') socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x80001) r2 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) close_range(r0, 0xffffffffffffffff, 0x0) 44.361231892s ago: executing program 2 (id=2489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r1) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24080040}, 0x0) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x10000004) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 43.834794992s ago: executing program 1 (id=2490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r2, &(0x7f0000001600)=""/233, 0xe9) (async) syz_io_uring_complete(r1) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020}, 0x2020) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x323083, 0x148) getdents64(r9, &(0x7f00000000c0)=""/55, 0x37) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x91, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r10, 0x0, 0x0) 43.253407073s ago: executing program 4 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x6}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 41.752162483s ago: executing program 3 (id=2492): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0}, 0x48080) (async) sendmsg$sock(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0}, 0x48080) syz_open_dev$usbmon(&(0x7f0000001e80), 0x5, 0x20) (async) r1 = syz_open_dev$usbmon(&(0x7f0000001e80), 0x5, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xb3879) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xb3879) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000040)) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000c40)={"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"}) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000c40)={"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"}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/fib_trie\x00') pread64(r9, &(0x7f0000032140)=""/102344, 0x18fc8, 0x1c) (async) pread64(r9, &(0x7f0000032140)=""/102344, 0x18fc8, 0x1c) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SMI(r11, 0xaeb7) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 39.666380593s ago: executing program 4 (id=2493): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)}], 0x2}, 0x0) (async) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)}], 0x2}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000500)="15736d645e64f7fd0db61d30cfa4798281d8760ec5e515f92b1cbb4d30a28dbf431d0ed8d8f63fe81fee1d7c31364d48acf6757393add83324a0816f70e145c0989ee77c6edfb7a1c1f763248c1598e8c51efb3213b533561c098fdab90973654a5bfdddbd0aa48536528b59ce49cdbfcf71af8a10615ca486c07768b506bafd6a2837723a43ff7045b30f6e4b3cb59fbd435a0b", &(0x7f00000005c0)="41192a96f82761ee9f0c5aa2f095064c808a1afba2513bea6bfb6eaef13de14726f28819239c263eff1f1e3f038ebba842e0a602b642c2ef0c557c376fd8d76bbf1e3191f7d5b333b6dcb966985308267298102981ce64c7da3b7840d876c15ea17c6c531fd4d5d71c8916e2237e19ab3911fc0a0dd782e87d"}}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000500)="15736d645e64f7fd0db61d30cfa4798281d8760ec5e515f92b1cbb4d30a28dbf431d0ed8d8f63fe81fee1d7c31364d48acf6757393add83324a0816f70e145c0989ee77c6edfb7a1c1f763248c1598e8c51efb3213b533561c098fdab90973654a5bfdddbd0aa48536528b59ce49cdbfcf71af8a10615ca486c07768b506bafd6a2837723a43ff7045b30f6e4b3cb59fbd435a0b", &(0x7f00000005c0)="41192a96f82761ee9f0c5aa2f095064c808a1afba2513bea6bfb6eaef13de14726f28819239c263eff1f1e3f038ebba842e0a602b642c2ef0c557c376fd8d76bbf1e3191f7d5b333b6dcb966985308267298102981ce64c7da3b7840d876c15ea17c6c531fd4d5d71c8916e2237e19ab3911fc0a0dd782e87d"}}, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x24827e, 0x40) timer_create(0x2, 0x0, &(0x7f0000000180)) (async) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x1, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000140)={{}, {r5, r6+60000000}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000140)={{}, {r5, r6+60000000}}, 0x0) timer_gettime(r4, &(0x7f0000000440)) timer_gettime(r4, &(0x7f00000004c0)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0x10, 0x80000, 0x5) (async) r7 = socket$inet6(0x10, 0x80000, 0x5) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) (async) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000040), 0x8) fallocate(r3, 0x0, 0x0, 0x1000f4) socket$netlink(0x10, 0x3, 0xe) (async) r9 = socket$netlink(0x10, 0x3, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x5b, 0x8, 0x3, 0x20, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x200, 0x3}}) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000426bd7000fcdbdf250300000008000400ac1e000114000c00fc01000000000000000000000000000108000100", @ANYRES32=r12, @ANYBLOB="f58fff7ad8749167baa9c9dc11f459c7c8c2c2030db8acde9e8f966654d83439ba9af319a4a59f73fdf6e5f228742a5ffa169da91437363bf768f9dbca56ee874502afb5d43ce86f996befdf6974781f861c62ba3926ed1442477fc4283824d0dd9f8b812e7b7e20e53d9c77a4112a89a10c769215013714fb9f5b3302c2cd901ef5f2a4c9bf3a19ed7fce47195c9cb812bf77124db477351b963b79b1abc1fa6db70047fe965f0b5a00000000000000087e42cfb26b51ad4d9902705f985ffbb62d09005f45e6f62e7313bc28ba69b241a8109580b5de3e73c917ba3cfcca08467c1337501cbb7d534b6c7aaf4846c36af4f37a9892912fc7f7971eab94fe417bf075f671dc864965559320e6657993e3804a8a0c18fe5097c7d939157354b692"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000311ffc)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 38.751975021s ago: executing program 2 (id=2494): syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x2, 0x400000) read$hiddev(r3, &(0x7f0000000180)=""/34, 0x22) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000001400)={0x528, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_PEER_MEASUREMENTS={0x4e0, 0x111, 0x0, 0x1, {0x4dc, 0x5, 0x0, 0x1, [{0x4d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x24, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x85e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6dcd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x158, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x76}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5d6ef615}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5ab}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x528}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) write(r0, &(0x7f0000000400)="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", 0x1f000) 37.632186473s ago: executing program 1 (id=2495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sync_file_range(r1, 0x100000000, 0x12, 0x3766689785d1053e) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 34.381446395s ago: executing program 3 (id=2496): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) alarm(0x100000001) alarm(0x80000001) socket$nl_xfrm(0x10, 0x3, 0x6) 30.54990305s ago: executing program 3 (id=2497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/27, 0x1b, 0x10002, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x460943, 0xc1, 0x2}, 0x18) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x814) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00'}) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 29.027408059s ago: executing program 2 (id=2498): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) brk(0x5d555ede6000) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0xffffff2d) (async, rerun: 64) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) (rerun: 64) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@remote, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x67, 0x0, r3}, {0xb, 0xd, 0x1000, 0x0, 0x81, 0x4, 0x0, 0xd}, {0x1, 0x80000000000000, 0xfffffffffffffff9, 0x2}, 0x7, 0x6e6bbc, 0x0, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x33}, 0x2, @in6=@private1, 0x3506, 0x3, 0x0, 0x8, 0x5, 0x9, 0x3}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002e24676f00000000000000000000000114000400fe8000000000000000000000000000bb0c0002"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) (async) brk(0x493f) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001e0021002dbd700000000000070000001400020000007b"], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e26, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYRES32=r5], 0x110}}], 0x1, 0x931766f6319eed40) (async) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) 27.767107113s ago: executing program 1 (id=2499): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sfeatures}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x73b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r5 = geteuid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000008001,mmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c63616368653d7265616461686561642c6e6f657874656e642c63616368653d6c6f6f73652c64656275673d3078303030303030303030300072769937632c7569643c", @ANYRESDEC=r3, @ANYBLOB=',audit,obj_role=wlan0\x00,pcr=00000000000000000007,fowner=', @ANYRESDEC=r4, @ANYBLOB=',mask=MAY_EXEC,fowner=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 22.975988086s ago: executing program 33 (id=2493): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)}], 0x2}, 0x0) (async) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)}], 0x2}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000500)="15736d645e64f7fd0db61d30cfa4798281d8760ec5e515f92b1cbb4d30a28dbf431d0ed8d8f63fe81fee1d7c31364d48acf6757393add83324a0816f70e145c0989ee77c6edfb7a1c1f763248c1598e8c51efb3213b533561c098fdab90973654a5bfdddbd0aa48536528b59ce49cdbfcf71af8a10615ca486c07768b506bafd6a2837723a43ff7045b30f6e4b3cb59fbd435a0b", &(0x7f00000005c0)="41192a96f82761ee9f0c5aa2f095064c808a1afba2513bea6bfb6eaef13de14726f28819239c263eff1f1e3f038ebba842e0a602b642c2ef0c557c376fd8d76bbf1e3191f7d5b333b6dcb966985308267298102981ce64c7da3b7840d876c15ea17c6c531fd4d5d71c8916e2237e19ab3911fc0a0dd782e87d"}}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000500)="15736d645e64f7fd0db61d30cfa4798281d8760ec5e515f92b1cbb4d30a28dbf431d0ed8d8f63fe81fee1d7c31364d48acf6757393add83324a0816f70e145c0989ee77c6edfb7a1c1f763248c1598e8c51efb3213b533561c098fdab90973654a5bfdddbd0aa48536528b59ce49cdbfcf71af8a10615ca486c07768b506bafd6a2837723a43ff7045b30f6e4b3cb59fbd435a0b", &(0x7f00000005c0)="41192a96f82761ee9f0c5aa2f095064c808a1afba2513bea6bfb6eaef13de14726f28819239c263eff1f1e3f038ebba842e0a602b642c2ef0c557c376fd8d76bbf1e3191f7d5b333b6dcb966985308267298102981ce64c7da3b7840d876c15ea17c6c531fd4d5d71c8916e2237e19ab3911fc0a0dd782e87d"}}, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0xf0, 0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x24827e, 0x40) timer_create(0x2, 0x0, &(0x7f0000000180)) (async) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x1, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000140)={{}, {r5, r6+60000000}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000140)={{}, {r5, r6+60000000}}, 0x0) timer_gettime(r4, &(0x7f0000000440)) timer_gettime(r4, &(0x7f00000004c0)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0x10, 0x80000, 0x5) (async) r7 = socket$inet6(0x10, 0x80000, 0x5) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) (async) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000040), 0x8) fallocate(r3, 0x0, 0x0, 0x1000f4) socket$netlink(0x10, 0x3, 0xe) (async) r9 = socket$netlink(0x10, 0x3, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r9) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x5b, 0x8, 0x3, 0x20, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7, 0x200, 0x3}}) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000426bd7000fcdbdf250300000008000400ac1e000114000c00fc01000000000000000000000000000108000100", @ANYRES32=r12, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8010) r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000311ffc)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 13.747386965s ago: executing program 34 (id=2497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000100)=""/27, 0x1b, 0x10002, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x460943, 0xc1, 0x2}, 0x18) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x814) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00'}) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.097157969s ago: executing program 35 (id=2499): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sfeatures}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x73b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r5 = geteuid() r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000008001,mmap,dfltuid=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c63616368653d7265616461686561642c6e6f657874656e642c63616368653d6c6f6f73652c64656275673d3078303030303030303030300072769937632c7569643c", @ANYRESDEC=r3, @ANYBLOB=',audit,obj_role=wlan0\x00,pcr=00000000000000000007,fowner=', @ANYRESDEC=r4, @ANYBLOB=',mask=MAY_EXEC,fowner=', @ANYRESDEC=r5, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 36 (id=2498): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) brk(0x5d555ede6000) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0xffffff2d) (async, rerun: 64) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) (rerun: 64) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@remote, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x67, 0x0, r3}, {0xb, 0xd, 0x1000, 0x0, 0x81, 0x4, 0x0, 0xd}, {0x1, 0x80000000000000, 0xfffffffffffffff9, 0x2}, 0x7, 0x6e6bbc, 0x0, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d2, 0x33}, 0x2, @in6=@private1, 0x3506, 0x3, 0x0, 0x8, 0x5, 0x9, 0x3}}, 0xe8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002e24676f00000000000000000000000114000400fe8000000000000000000000000000bb0c0002"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) (async) brk(0x493f) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001e0021002dbd700000000000070000001400020000007b"], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e26, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYRES32=r5], 0x110}}], 0x1, 0x931766f6319eed40) (async) sendfile(r5, 0xffffffffffffffff, 0x0, 0x80000000) kernel console output (not intermixed with test programs): 82] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 81.247138][ T3382] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1055'. [ 81.472852][ T3401] netlink: 'syz.2.1061': attribute type 4 has an invalid length. [ 81.621771][ T36] audit: type=1400 audit(81.576:431): avc: denied { ioctl } for pid=3409 comm="syz.2.1064" path="socket:[18192]" dev="sockfs" ino=18192 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.648102][ T3410] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1014 sclass=netlink_xfrm_socket pid=3410 comm=syz.2.1064 [ 81.663809][ T36] audit: type=1400 audit(81.606:432): avc: denied { setopt } for pid=3409 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.069687][ T36] audit: type=1326 audit(82.026:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c458ebe9 code=0x7ffc0000 [ 82.105805][ T36] audit: type=1326 audit(82.026:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c458ebe9 code=0x7ffc0000 [ 82.148962][ T36] audit: type=1326 audit(82.066:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6c458ebe9 code=0x7ffc0000 [ 82.185217][ T36] audit: type=1326 audit(82.066:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c458ebe9 code=0x7ffc0000 [ 82.220392][ T36] audit: type=1326 audit(82.066:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c458ebe9 code=0x7ffc0000 [ 82.228971][ T3458] tipc: Enabling of bearer rejected, failed to enable media [ 82.243580][ T36] audit: type=1400 audit(82.106:438): avc: denied { read write } for pid=3451 comm="syz.4.1078" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.276544][ T36] audit: type=1400 audit(82.106:439): avc: denied { open } for pid=3451 comm="syz.4.1078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.300328][ T36] audit: type=1400 audit(82.106:440): avc: denied { ioctl } for pid=3451 comm="syz.4.1078" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.325241][ T10] tipc: Node number set to 2515542891 [ 82.383754][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 82.533739][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 82.540386][ T46] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.551821][ T46] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.576455][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.583443][ T46] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 82.584659][ T3486] 9pnet_fd: Insufficient options for proto=fd [ 82.592920][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.612249][ T46] usb 5-1: config 0 descriptor?? [ 82.629311][ T36] audit: type=1400 audit(82.586:441): avc: denied { map } for pid=3487 comm="syz.2.1092" path="socket:[18260]" dev="sockfs" ino=18260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.663057][ T36] audit: type=1400 audit(82.586:442): avc: denied { read } for pid=3487 comm="syz.2.1092" path="socket:[18260]" dev="sockfs" ino=18260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.974994][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 83.577452][ T3583] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 83.577452][ T3584] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 83.697025][ T3599] 9pnet_fd: Insufficient options for proto=fd [ 83.751866][ T3609] tipc: Started in network mode [ 83.757158][ T3609] tipc: Node identity , cluster identity 4711 [ 83.763588][ T3609] tipc: Failed to obtain node identity [ 83.769474][ T3609] tipc: Enabling of bearer rejected, failed to enable media [ 83.821461][ T3623] netlink: 'syz.4.1136': attribute type 4 has an invalid length. [ 83.942737][ T3645] tipc: Enabling of bearer rejected, failed to enable media [ 83.971932][ T3651] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 83.981780][ T3650] netlink: 'syz.1.1147': attribute type 4 has an invalid length. [ 84.165225][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 85.570618][ T3767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.579489][ T3767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.589938][ T3769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.598705][ T3769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.709939][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.717567][ T3782] rust_binder: Error while translating object. [ 85.717604][ T3782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.724233][ T3782] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 85.733808][ T3782] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:434 [ 86.131534][ T3787] fuseblk: Bad value for 'fd' [ 86.687521][ T3818] tipc: Enabling of bearer rejected, failed to enable media [ 86.711383][ T3820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'. [ 87.130810][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 87.130829][ T36] audit: type=1400 audit(87.086:454): avc: denied { create } for pid=3856 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 87.157719][ T36] audit: type=1400 audit(87.086:455): avc: denied { write } for pid=3856 comm="syz.3.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 87.370676][ T3870] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1223'. [ 87.510048][ T3878] tipc: Enabling of bearer rejected, failed to enable media [ 87.584052][ T3888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 87.651347][ T3897] netlink: 'syz.2.1231': attribute type 46 has an invalid length. [ 87.763750][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 87.763775][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.777886][ T10] rust_binder: 3781: removing orphan mapping 0:24 [ 87.794033][ T417] hid-generic 007F:6E8D:0005.000D: item fetching failed at offset 1/5 [ 87.794499][ T3899] rust_binder: Error while translating object. [ 87.802718][ T36] audit: type=1400 audit(87.756:456): avc: denied { read } for pid=3898 comm="syz.4.1232" path="socket:[20101]" dev="sockfs" ino=20101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.802885][ T417] hid-generic 007F:6E8D:0005.000D: probe with driver hid-generic failed with error -22 [ 87.811067][ T3899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.842012][ T3899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:437 [ 87.856353][ T36] audit: type=1400 audit(87.816:457): avc: denied { read } for pid=3898 comm="syz.4.1232" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.889684][ T36] audit: type=1400 audit(87.816:458): avc: denied { open } for pid=3898 comm="syz.4.1232" path="/150/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.928129][ T3903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.937085][ T3903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.993549][ T36] audit: type=1400 audit(87.946:459): avc: denied { setattr } for pid=3910 comm="syz.4.1236" name="secretmem" dev="secretmem" ino=20907 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.046393][ T3915] fuseblk: Unknown parameter 'R†' [ 88.084253][ T46] usbhid 5-1:0.0: can't add hid device: -32 [ 88.091668][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 88.532965][ T36] audit: type=1400 audit(88.486:460): avc: denied { checkpoint_restore } for pid=3938 comm="syz.2.1247" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.535759][ T3940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 88.563846][ T3939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3939 comm=syz.2.1247 [ 88.622760][ T3954] erspan0: mtu less than device minimum [ 88.978116][ T3974] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1258'. [ 88.987267][ T3974] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 88.998841][ T3974] 0ªî{X¹¦: entered allmulticast mode [ 89.005040][ T3974] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 89.021811][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1259'. [ 89.065510][ T3976] binder: Bad value for 'defcontext' [ 89.099191][ T3985] rust_binder: 466: no such ref 2 [ 89.245914][ T4003] fuse: Bad value for 'user_id' [ 89.250967][ T4003] fuse: Bad value for 'user_id' [ 89.620786][ T4035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'. [ 89.859893][ T4044] fuse: Bad value for 'fd' [ 89.884613][ T4052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1286'. [ 89.953076][ T4057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.961948][ T4057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.992765][ T4061] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1290'. [ 90.003087][ T4061] 9pnet_fd: Insufficient options for proto=fd [ 90.021074][ T4063] overlayfs: conflicting options: userxattr,metacopy=on [ 90.154314][ T4080] netlink: 'syz.2.1298': attribute type 4 has an invalid length. [ 90.166702][ T4080] netlink: 'syz.2.1298': attribute type 4 has an invalid length. [ 90.236155][ T4089] fuse: Unknown parameter '0x0000000000000000' [ 90.424586][ T4099] overlayfs: failed to clone upperpath [ 90.443253][ T4101] overlayfs: failed to clone upperpath [ 90.546350][ T4121] overlayfs: failed to clone lowerpath [ 90.546604][ T4122] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 90.559660][ T4122] rust_binder: Write failure EINVAL in pid:478 [ 90.584763][ T4127] 9pnet_fd: Insufficient options for proto=fd [ 90.598274][ T36] audit: type=1326 audit(2000000001.330:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0 [ 90.640651][ T4134] netlink: 'syz.4.1316': attribute type 10 has an invalid length. [ 90.693385][ T36] audit: type=1326 audit(2000000001.430:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.1.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0 [ 90.798890][ T36] audit: type=1400 audit(2000000001.540:463): avc: denied { mount } for pid=4157 comm="syz.4.1323" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 90.891801][ T4169] mmap: syz.4.1327 (4169): VmData 29208576 exceed data ulimit 8388676. Update limits or use boot option ignore_rlimit_data. [ 90.937581][ T4179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.946091][ T4180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.946292][ T4179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.963858][ T4180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.973191][ T4179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.024874][ T4180] rust_binder: Error in use_page_slow: ESRCH [ 91.024903][ T4180] rust_binder: use_range failure ESRCH [ 91.031039][ T4180] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 91.036741][ T4180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.045189][ T4180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:504 [ 91.406713][ T4189] overlayfs: failed to clone upperpath [ 91.424689][ T4189] overlayfs: failed to clone upperpath [ 92.062778][ T4202] netlink: 'syz.2.1337': attribute type 64 has an invalid length. [ 92.071122][ T4202] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1337'. [ 92.157724][ T4214] netlink: 'syz.2.1339': attribute type 15 has an invalid length. [ 92.165965][ T4214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1339'. [ 92.973732][ T4244] tipc: Enabling of bearer rejected, failed to enable media [ 93.496828][ T36] audit: type=1400 audit(2000000004.240:464): avc: denied { accept } for pid=4256 comm="syz.2.1355" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.957598][ T4262] 9pnet_fd: Insufficient options for proto=fd [ 94.282582][ T4341] 2N3—è¸!ñ»]\E: renamed from vcan0 (while UP) [ 94.685903][ T4380] rust_binder: Error while translating object. [ 94.685959][ T4380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 94.696727][ T4380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:533 [ 94.753822][ T36] audit: type=1326 audit(2000000005.490:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.4.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6c458ebe9 code=0x0 [ 94.841418][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.105288][ T4411] tipc: Enabling of bearer rejected, failed to enable media [ 95.207784][ T4421] veth0_to_team: entered allmulticast mode [ 95.362416][ T36] audit: type=1400 audit(2000000006.100:466): avc: denied { remount } for pid=4442 comm="syz.2.1418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.559555][ T4452] fuse: blksize only supported for fuseblk [ 96.029960][ T4475] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1429'. [ 96.076078][ T4479] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 96.113801][ T4489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1433'. [ 96.346143][ T4496] tmpfs: Unknown parameter 'h›Ÿ*šnever' [ 96.346143][ T4495] tmpfs: Unknown parameter 'h›Ÿ*šnever' [ 96.439090][ T4500] overlay: filesystem on ./bus is read-only [ 96.710328][ T4539] tipc: Enabling of bearer rejected, failed to enable media [ 96.760944][ T4551] 9pnet_fd: Insufficient options for proto=fd [ 96.881248][ T4569] netlink: 'syz.1.1457': attribute type 4 has an invalid length. [ 96.883802][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.889663][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 96.896989][ T4569] netlink: 'syz.1.1457': attribute type 4 has an invalid length. [ 96.934734][ T36] audit: type=1400 audit(2000000007.680:467): avc: denied { write } for pid=4574 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.011232][ T36] audit: type=1400 audit(2000000007.750:468): avc: denied { append } for pid=4588 comm="syz.4.1463" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.051342][ T36] audit: type=1400 audit(2000000007.790:469): avc: denied { execute } for pid=4592 comm="syz.4.1465" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.096854][ T4601] futex_wake_op: syz.4.1468 tries to shift op by -1; fix this program [ 97.107383][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.343878][ T36] audit: type=1326 audit(2000000009.086:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x7ffc0000 [ 98.367618][ T36] audit: type=1326 audit(2000000009.096:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x7ffc0000 [ 98.394510][ T4638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1480'. [ 98.398992][ T36] audit: type=1326 audit(2000000009.096:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f473198d550 code=0x7ffc0000 [ 98.428147][ T36] audit: type=1326 audit(2000000009.096:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4633 comm="syz.1.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f473198d550 code=0x7ffc0000 [ 98.564312][ T4671] overlayfs: failed to clone upperpath [ 98.580431][ T4677] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1494'. [ 98.599718][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 98.599736][ T36] audit: type=1400 audit(2000000009.346:536): avc: denied { relabelfrom } for pid=4679 comm="syz.2.1495" name="NETLINK" dev="sockfs" ino=22219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.022920][ T36] audit: type=1400 audit(2000000009.766:537): avc: denied { create } for pid=4684 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.123764][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 99.130057][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.387829][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1511'. [ 99.404941][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.498437][ T4737] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1513'. [ 99.530095][ T4747] overlayfs: failed to clone upperpath [ 99.632201][ T4764] fuseblk: Bad value for 'rootmode' [ 99.678659][ T36] audit: type=1400 audit(2000000010.426:538): avc: denied { getopt } for pid=4774 comm="syz.3.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.760401][ T36] audit: type=1400 audit(2000000010.506:539): avc: denied { nlmsg_write } for pid=4788 comm="syz.3.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 99.783335][ T36] audit: type=1107 audit(2000000010.536:540): pid=4788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 99.793258][ T4792] EXT4-fs: dax option not supported [ 99.927596][ T4797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64980 sclass=netlink_route_socket pid=4797 comm=syz.2.1532 [ 100.034375][ T4813] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1537'. [ 100.078184][ T36] audit: type=1400 audit(2000000010.826:541): avc: denied { create } for pid=4815 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.112242][ T4881] overlayfs: failed to clone upperpath [ 101.118437][ T36] audit: type=1400 audit(2000000011.866:542): avc: denied { setattr } for pid=4882 comm="syz.3.1563" name="PACKET" dev="sockfs" ino=23489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.241835][ T36] audit: type=1400 audit(2000000011.986:543): avc: denied { read } for pid=4894 comm="syz.1.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.279430][ T4897] fuse: Unknown parameter 'groUp_id' [ 101.443731][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 101.450170][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.474413][ T4924] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1575'. [ 101.542211][ T4930] tipc: Enabling of bearer rejected, failed to enable media [ 101.614220][ T36] audit: type=1400 audit(2000000012.366:544): avc: denied { accept } for pid=4941 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 101.649063][ T4946] can: request_module (can-proto-0) failed. [ 101.653807][ T4947] can: request_module (can-proto-0) failed. [ 101.730404][ T36] audit: type=1400 audit(2000000012.476:545): avc: denied { shutdown } for pid=4952 comm="syz.1.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.770356][ T4954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.793895][ T4954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.842134][ T4936] fuse: Bad value for 'fd' [ 101.870542][ T4972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1594'. [ 103.911843][ T5041] netlink: 'syz.2.1621': attribute type 4 has an invalid length. [ 103.932676][ T5043] bridge0: port 3(ip6gretap0) entered blocking state [ 103.939703][ T5043] bridge0: port 3(ip6gretap0) entered disabled state [ 103.946574][ T5043] ip6gretap0: entered allmulticast mode [ 103.952802][ T5043] ip6gretap0: entered promiscuous mode [ 103.959036][ T5043] bridge0: port 3(ip6gretap0) entered blocking state [ 103.965938][ T5043] bridge0: port 3(ip6gretap0) entered forwarding state [ 104.436779][ T5070] No source specified [ 104.441114][ T5070] No source specified [ 104.445591][ T5070] No source specified [ 104.449966][ T5070] No source specified [ 104.454279][ T5070] No source specified [ 104.458525][ T5070] No source specified [ 104.462755][ T5070] No source specified [ 104.466960][ T5070] No source specified [ 104.471397][ T5070] No source specified [ 104.475704][ T5070] No source specified [ 104.479967][ T5070] No source specified [ 104.484293][ T5070] No source specified [ 104.488404][ T5070] No source specified [ 104.492498][ T5070] No source specified [ 105.022360][ T5080] 9pnet: p9_errstr2errno: server reported unknown error [ 105.135294][ T5097] fuse: Bad value for 'user_id' [ 105.140856][ T5097] fuse: Bad value for 'user_id' [ 105.525319][ T5122] pim6reg1: entered promiscuous mode [ 105.551647][ T5122] pim6reg1: entered allmulticast mode [ 105.817341][ T5135] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1650'. [ 105.928861][ T5140] binder: Unknown parameter '/selinux/commit_pending_bools' [ 106.280857][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.292517][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.301817][ T5150] KVM: debugfs: duplicate directory 5150-5 [ 106.476074][ T5173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=5173 comm=syz.3.1664 [ 106.510860][ T5175] netlink: 'syz.3.1665': attribute type 15 has an invalid length. [ 106.520694][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1665'. [ 106.607286][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 106.728722][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 106.728740][ T36] audit: type=1326 audit(2000000017.476:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5206 comm="syz.3.1674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdec058ebe9 code=0x0 [ 106.862477][ T5210] >: renamed from veth0_vlan (while UP) [ 106.916281][ T36] audit: type=1400 audit(2000000017.666:548): avc: denied { shutdown } for pid=5217 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.959122][ T5231] can: request_module (can-proto-0) failed. [ 106.963885][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.040144][ T5250] veth1: entered allmulticast mode [ 107.079187][ T5249] veth1: left allmulticast mode [ 107.154098][ T36] audit: type=1400 audit(2000000017.906:549): avc: denied { map } for pid=5271 comm="syz.1.1699" path="socket:[25195]" dev="sockfs" ino=25195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.186579][ T5277] 9pnet_fd: Insufficient options for proto=fd [ 107.246857][ T5291] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1707'. [ 107.256079][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1707'. [ 107.397664][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 107.407014][ T5328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 107.420769][ T5328] veth1: entered allmulticast mode [ 107.426229][ T5327] veth1: left allmulticast mode [ 107.603155][ T36] audit: type=1400 audit(2000000018.346:550): avc: denied { audit_read } for pid=5330 comm="syz.3.1713" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.893536][ T5337] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.1715'. [ 108.118843][ T5367] tipc: Enabling of bearer rejected, failed to enable media [ 108.204323][ T5379] 9pnet_fd: Insufficient options for proto=fd [ 108.289152][ T5391] 9pnet_fd: Insufficient options for proto=fd [ 108.891127][ T5433] overlayfs: failed to clone upperpath [ 108.891127][ T5434] overlayfs: failed to clone upperpath [ 108.915545][ T36] audit: type=1400 audit(2000000019.666:551): avc: denied { create } for pid=5435 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 108.963728][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.055862][ T36] audit: type=1400 audit(2000000019.806:552): avc: denied { shutdown } for pid=5449 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.099941][ T36] audit: type=1326 audit(2000000019.846:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.2.1732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9d98ebe9 code=0x7fc00000 [ 109.139449][ T5456] tipc: Started in network mode [ 109.144899][ T5456] tipc: Node identity 2e2ec07c0eb, cluster identity 4711 [ 109.152575][ T5456] tipc: Enabled bearer , priority 10 [ 109.474142][ T5492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5492 comm=syz.2.1769 [ 109.487231][ T5492] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 109.506642][ T5492] netlink: 'syz.2.1769': attribute type 4 has an invalid length. [ 109.570230][ T5498] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1772'. [ 109.574096][ T5494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 109.592743][ T5498] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 109.600224][ T5498] rust_binder: Write failure EINVAL in pid:650 [ 109.633012][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.021823][ T5533] netlink: 'syz.1.1784': attribute type 4 has an invalid length. [ 110.232526][ T5556] tipc: Enabling of bearer rejected, failed to enable media [ 110.263736][ T417] tipc: Node number set to 547274876 [ 110.726689][ T5589] netlink: 'syz.2.1804': attribute type 16 has an invalid length. [ 110.887281][ T5604] __nla_validate_parse: 4 callbacks suppressed [ 110.887304][ T5604] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1810'. [ 110.902256][ T5611] overlayfs: failed to resolve './file0': -2 [ 111.459624][ T5687] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 111.467935][ T5687] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1828'. [ 111.557100][ T36] audit: type=1326 audit(2000000022.306:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5699 comm="syz.2.1833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9d98ebe9 code=0x0 [ 111.683718][ T364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.690800][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 111.767485][ T5745] rust_binder: Failed copying remainder into alloc: EFAULT [ 111.767517][ T5745] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 111.779501][ T5745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.794840][ T5745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:658 [ 111.854252][ T5754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.889104][ T5754] rust_binder: 661: no such ref 4294967295 [ 111.960151][ T36] audit: type=1400 audit(2000000022.706:555): avc: denied { create } for pid=5757 comm="syz.4.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.016901][ T5765] overlayfs: failed to clone lowerpath [ 112.183891][ T5775] can: request_module (can-proto-0) failed. [ 112.195814][ T5777] can: request_module (can-proto-0) failed. [ 112.286883][ T5801] overlayfs: failed to clone upperpath [ 112.349119][ T5806] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.420484][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.429197][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.438027][ T36] audit: type=1400 audit(2000000023.186:556): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.457501][ T36] audit: type=1400 audit(2000000023.186:557): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.479033][ T36] audit: type=1400 audit(2000000023.186:558): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.499209][ T36] audit: type=1400 audit(2000000023.186:559): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.518967][ T36] audit: type=1400 audit(2000000023.186:560): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.538149][ T36] audit: type=1400 audit(2000000023.186:561): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.557279][ T36] audit: type=1400 audit(2000000023.186:562): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.576562][ T36] audit: type=1400 audit(2000000023.186:563): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 112.595678][ T36] audit: type=1400 audit(2000000023.186:564): avc: granted { setsecparam } for pid=5807 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 113.433990][ T5833] rust_binder: Error while translating object. [ 113.434018][ T5833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.440216][ T5833] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 113.449836][ T5833] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:689 [ 113.541732][ T5853] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1884'. [ 113.559240][ T5853] 0ªî{X¹¦: renamed from gretap0 [ 113.564933][ T5853] 0ªî{X¹¦: entered allmulticast mode [ 113.571161][ T5853] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 113.596100][ T65] rust_binder: 0: removing orphan mapping 0:24 [ 113.831885][ T5857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.840601][ T5857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.884432][ T5860] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1887'. [ 113.903920][ T5862] tipc: Enabling of bearer rejected, failed to enable media [ 114.091894][ T5902] netlink: 'syz.2.1904': attribute type 16 has an invalid length. [ 114.101017][ T5902] netlink: 'syz.2.1904': attribute type 3 has an invalid length. [ 114.108986][ T5902] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 114.116980][ T5902] netlink: 64030 bytes leftover after parsing attributes in process `syz.2.1904'. [ 114.152916][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 114.414456][ T5653] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.723050][ T5960] 9pnet_fd: Insufficient options for proto=fd [ 114.723603][ T5958] tipc: Enabling of bearer rejected, failed to enable media [ 114.776720][ T5972] netlink: 'syz.2.1930': attribute type 4 has an invalid length. [ 114.803193][ T5980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.916947][ T5992] netlink: 'syz.1.1935': attribute type 15 has an invalid length. [ 115.191494][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 115.373354][ T6011] netlink: 'syz.2.1942': attribute type 16 has an invalid length. [ 115.381348][ T6011] netlink: 'syz.2.1942': attribute type 3 has an invalid length. [ 115.389436][ T6011] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 115.397614][ T6011] netlink: 64030 bytes leftover after parsing attributes in process `syz.2.1942'. [ 115.677048][ T6028] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1949'. [ 115.705109][ T6034] overlayfs: failed to resolve './file1': -2 [ 115.750331][ T6047] 9p: Unknown access argument : -22 [ 116.483767][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 116.483808][ T364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.679327][ T6073] pim6reg1: entered promiscuous mode [ 116.688135][ T6073] pim6reg1: entered allmulticast mode [ 116.776029][ T6078] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 116.793582][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.801683][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.809697][ T6074] bridge_slave_0: entered allmulticast mode [ 116.816757][ T6074] bridge_slave_0: entered promiscuous mode [ 116.823759][ T6078] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 116.847202][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.855537][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.862765][ T6074] bridge_slave_1: entered allmulticast mode [ 116.869918][ T6074] bridge_slave_1: entered promiscuous mode [ 116.951914][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.959230][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.966605][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.984548][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.008846][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.016635][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.026407][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.033492][ T5652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.044927][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.052284][ T5652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.060803][ T5651] ip6gretap0: left allmulticast mode [ 117.066454][ T5651] ip6gretap0: left promiscuous mode [ 117.071821][ T5651] bridge0: port 3(ip6gretap0) entered disabled state [ 117.079460][ T5651] bridge_slave_1: left allmulticast mode [ 117.085296][ T5651] bridge_slave_1: left promiscuous mode [ 117.091104][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.098787][ T5651] bridge_slave_0: left allmulticast mode [ 117.104939][ T5651] bridge_slave_0: left promiscuous mode [ 117.110950][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.119226][ T5651] tipc: Resetting bearer [ 117.135392][ T5651] tipc: Disabling bearer [ 117.205355][ T6074] veth0_vlan: entered promiscuous mode [ 117.216883][ T6074] veth1_macvtap: entered promiscuous mode [ 117.246872][ T5651] tipc: Left network mode [ 117.252345][ T5651] veth1_macvtap: left promiscuous mode [ 117.356240][ T6110] rust_binder: 9: no such ref 1 [ 117.361193][ T6110] rust_binder: Write failure EFAULT in pid:9 [ 117.594010][ T6147] netlink: 'syz.3.1987': attribute type 13 has an invalid length. [ 117.879850][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 117.879871][ T36] audit: type=1400 audit(2000000002.931:624): avc: denied { read write } for pid=6183 comm="syz.2.2001" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.914644][ T6182] fuse: Unknown parameter '0x0000000000000007' [ 117.933966][ T36] audit: type=1400 audit(2000000002.931:625): avc: denied { open } for pid=6183 comm="syz.2.2001" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.987832][ T36] audit: type=1400 audit(2000000002.941:626): avc: denied { map } for pid=6183 comm="syz.2.2001" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.041974][ T36] audit: type=1400 audit(2000000002.941:627): avc: denied { execute } for pid=6183 comm="syz.2.2001" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.594766][ T6192] tipc: Enabling of bearer rejected, failed to enable media [ 118.615485][ T6192] 9pnet: p9_errstr2errno: server reported unknown error [ 118.650194][ T36] audit: type=1400 audit(2000000003.701:628): avc: denied { write } for pid=6196 comm="syz.3.2005" name="/" dev="configfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.215731][ T6206] tipc: Started in network mode [ 119.233730][ T6206] tipc: Node identity , cluster identity 4711 [ 119.240064][ T6206] tipc: Failed to obtain node identity [ 119.263732][ T6206] tipc: Enabling of bearer rejected, failed to enable media [ 119.309162][ T6212] overlayfs: failed to clone upperpath [ 119.503722][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.634290][ T6250] overlayfs: failed to clone upperpath [ 119.685011][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.696596][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.707958][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 175: 100, using maximum allowed: 30 [ 119.727439][ T10] usb 3-1: config 1 interface 1 altsetting 175 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 119.747463][ T10] usb 3-1: config 1 interface 1 has no altsetting 0 [ 119.758695][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.773772][ T10] usb 3-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 119.788568][ T10] usb 3-1: Product: syz [ 119.794570][ T10] usb 3-1: Manufacturer: syz [ 119.799264][ T10] usb 3-1: SerialNumber: syz [ 119.810554][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 119.817604][ T10] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 119.818980][ T6260] 9pnet_fd: Insufficient options for proto=fd [ 119.825388][ T10] cdc_ncm 3-1:1.0: bind() failure [ 119.855752][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.864874][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.873002][ T6260] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2027'. [ 119.873536][ T6262] batadv_slave_1: entered promiscuous mode [ 119.890546][ T6261] batadv_slave_1: left promiscuous mode [ 119.930126][ T6266] 9pnet_fd: Insufficient options for proto=fd [ 120.013383][ T6206] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 120.020819][ T6206] rust_binder: Write failure EINVAL in pid:24 [ 120.025606][ T65] usb 3-1: USB disconnect, device number 2 [ 120.412335][ T6295] pim6reg1: entered promiscuous mode [ 120.418178][ T6295] pim6reg1: entered allmulticast mode [ 120.479553][ T6297] fuse: Bad value for 'fd' [ 120.485123][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.494017][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.502298][ T6297] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 120.542192][ T6299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2043'. [ 120.560010][ T6299] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2043'. [ 120.569498][ T6299] netlink: 'syz.2.2043': attribute type 6 has an invalid length. [ 120.577650][ T6299] netlink: 'syz.2.2043': attribute type 5 has an invalid length. [ 120.586337][ T6299] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2043'. [ 120.618071][ T6303] pim6reg1: entered promiscuous mode [ 120.624713][ T6303] pim6reg1: entered allmulticast mode [ 120.802319][ T36] audit: type=1400 audit(2000000005.851:629): avc: denied { setattr } for pid=6312 comm="syz.2.2048" name="NETLINK" dev="sockfs" ino=28148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.862323][ T6322] rust_binder: Error while translating object. [ 120.862354][ T6322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 120.869063][ T6322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 121.150001][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 121.173769][ T65] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.335150][ T65] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 121.347042][ T65] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.359233][ T65] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.375122][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.385075][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.393611][ T65] usb 3-1: SerialNumber: syz [ 121.418866][ T6387] overlayfs: failed to clone upperpath [ 121.567330][ T6401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:789 [ 121.567370][ T6401] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 121.576601][ T6401] rust_binder: Read failure Err(EFAULT) in pid:789 [ 121.608115][ T65] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 121.621419][ T65] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 121.637411][ T65] usb 3-1: USB disconnect, device number 3 [ 121.642701][ T6411] rust_binder: Write failure EFAULT in pid:799 [ 121.841609][ T6439] rust_binder: 821: no such ref 2 [ 121.947936][ T6441] netlink: 'syz.3.2090': attribute type 16 has an invalid length. [ 121.956341][ T6441] netlink: 'syz.3.2090': attribute type 4 has an invalid length. [ 121.964699][ T6441] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.2090'. [ 122.254200][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2099'. [ 122.329713][ T6473] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 122.362949][ T6477] 9pnet_fd: Insufficient options for proto=fd [ 122.373850][ T417] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.523745][ T417] usb 3-1: Using ep0 maxpacket: 8 [ 122.530287][ T417] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.540826][ T417] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 122.550992][ T417] usb 3-1: config 1 interface 0 has no altsetting 0 [ 122.559554][ T417] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.568846][ T417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.577071][ T417] usb 3-1: Product:   [ 122.581797][ T417] usb 3-1: Manufacturer: 袅胡誂竿⧋ï€å”¨å“ƒå“³î¥ë–©ç†–첖쓥㾧슓ëšÇ†èµºëµ›æ”¤â„™à¨ƒà¹®í•–ï‰æ™§í‰™æ’›ì¥‡é“§æ‘—â¡¿îž™ãµé³»áššå¼±ã”§ë„¬â·á‰”å¸çŸ´ä€ï›Šï¢èœ¾è…„Ö„ê¤â¹«êŸ£çŽ‰ïš©ä‹Œï³€éŒœé†¸é˜¹ï’á©í…ªî¢¸ä˜¢ì¯½áž¹æ¤”ȅ밻霊㲶á¤áŠ—⿋릈쯼墒쥚ã£å—­í›§È¢ï’® [ 122.608962][ T417] usb 3-1: SerialNumber: 哨î•æ‡šë§„㟻ä¤ãšä¼¡ì”µéƒ›á—㰪눒ì·é“™åš¨åŠ¬å–Šï„¨íšªî³·ì¨žèŒ£é“µã²ä«‚᳄㎓﬈ꡈ宀我絛괓긟鑽ꯖꃗ삕á칼鑞ë¥Âžî«‹ëŒ¥éƒ¢â»Žì“줶헄凉蜼콹刱㞊ﺣ⊽䕳置౳ꭩῂç¶ï–㓚㫗ᑤ猿憃æŽä–ṛé˜ê ©è™¿æ‰¹ì’化ꙶ䕿ⳮ庤盛嶯æºä‡©è³‘ऎﲈ煼 [ 122.642073][ T6457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.649493][ T6457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.757053][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.766530][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.776846][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.785740][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.265016][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.273971][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.291424][ T417] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 123.302029][ T417] usb 3-1: USB disconnect, device number 4 [ 123.339775][ T36] audit: type=1400 audit(2000000008.391:630): avc: denied { listen } for pid=6525 comm="syz.4.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.834996][ T6557] syz.2.2127 (6557): /proc/6556/oom_adj is deprecated, please use /proc/6556/oom_score_adj instead. [ 123.906036][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 124.125449][ T36] audit: type=1400 audit(2000000009.181:631): avc: denied { mounton } for pid=6572 comm="syz.3.2133" path="/551/file0" dev="tmpfs" ino=2991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 124.125480][ T6573] No source specified [ 124.402896][ T6589] rust_binder: Write failure EFAULT in pid:61 [ 124.403372][ T6589] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 124.417545][ T6589] rust_binder: 61: no such ref 0 [ 124.458015][ T6593] rust_binder: Write failure EFAULT in pid:65 [ 124.829081][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.844485][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.195974][ T6629] random: crng reseeded on system resumption [ 125.222115][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 125.232388][ T6629] binder: Bad value for 'stats' [ 125.267081][ T36] audit: type=1400 audit(2000000010.321:632): avc: denied { read } for pid=6630 comm="syz.2.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.381251][ T36] audit: type=1400 audit(2000000010.431:633): avc: denied { ioctl } for pid=6636 comm="syz.4.2157" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.388359][ T6634] syz.2.2156: attempt to access beyond end of device [ 125.388359][ T6634] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 125.410777][ T6637] binder: Unknown parameter 'ÿÿev/rnullb0' [ 125.419572][ T6634] FAT-fs (loop2): unable to read boot sector [ 125.661601][ T6671] EXT4-fs: dax option not supported [ 125.814352][ T6697] overlayfs: failed to clone upperpath [ 125.920152][ T6707] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2179'. [ 126.005246][ T6719] overlayfs: failed to clone upperpath [ 126.040847][ T6722] fuse: Bad value for 'rootmode' [ 126.303811][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6736 comm=syz.4.2186 [ 126.509506][ T6746] rust_binder: 113: no such ref 3 [ 127.275853][ T6773] netlink: 'syz.3.2200': attribute type 64 has an invalid length. [ 127.451048][ T5652] Bluetooth: hci0: Frame reassembly failed (-84) [ 128.144935][ T6790] bridge0: port 3(erspan0) entered blocking state [ 128.151583][ T6790] bridge0: port 3(erspan0) entered disabled state [ 128.158639][ T6790] erspan0: entered allmulticast mode [ 128.164528][ T6790] erspan0: entered promiscuous mode [ 128.170528][ T6790] bridge0: port 3(erspan0) entered blocking state [ 128.177290][ T6790] bridge0: port 3(erspan0) entered forwarding state [ 128.847872][ T6810] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2212'. [ 129.246027][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2219'. [ 129.422865][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 129.468406][ T5652] tipc: Subscription rejected, illegal request [ 129.504542][ T6863] netlink: 'syz.3.2229': attribute type 6 has an invalid length. [ 129.523712][ T364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.529875][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 129.536081][ T36] audit: type=1400 audit(2000000014.581:634): avc: denied { create } for pid=6864 comm="syz.3.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 129.854076][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.003764][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 130.010648][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.021791][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.032237][ T46] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 130.041525][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.050654][ T46] usb 3-1: config 0 descriptor?? [ 130.443701][ T36] audit: type=1326 audit(2000000015.485:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6938 comm="syz.4.2257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fa6c458ebe9 code=0x0 [ 130.492371][ T36] audit: type=1400 audit(2000000015.535:636): avc: denied { execmod } for pid=6873 comm="syz.2.2232" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.521709][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 130.528100][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 130.546294][ T46] usb 3-1: USB disconnect, device number 5 [ 130.995608][ T6976] 9pnet_fd: Insufficient options for proto=fd [ 131.064138][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 131.074784][ T6994] 9pnet_fd: Insufficient options for proto=fd [ 131.142749][ T7010] rust_binder: Write failure EFAULT in pid:127 [ 131.154054][ T7012] rust_binder: Write failure EFAULT in pid:127 [ 131.346933][ T7023] loop2: detected capacity change from 0 to 7 [ 131.387655][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.397262][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.418730][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.428130][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.436272][ T7023] loop2: unable to read partition table [ 131.442237][ T7023] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 131.457537][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.466769][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.475518][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.484765][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.494567][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 131.506360][ T7027] tipc: Enabling of bearer rejected, failed to enable media [ 131.516238][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.526322][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.535167][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.544472][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.552895][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.562220][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.605600][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 131.629623][ T7035] netlink: 'syz.4.2289': attribute type 4 has an invalid length. [ 131.667915][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.679660][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.693113][ T7026] bridge_slave_0: entered allmulticast mode [ 131.704114][ T7026] bridge_slave_0: entered promiscuous mode [ 131.724661][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.732202][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.740071][ T7026] bridge_slave_1: entered allmulticast mode [ 131.747312][ T7026] bridge_slave_1: entered promiscuous mode [ 131.764304][ T5651] erspan0: left allmulticast mode [ 131.769497][ T5651] erspan0: left promiscuous mode [ 131.783294][ T5651] bridge0: port 3(erspan0) entered disabled state [ 131.801367][ T5651] bridge_slave_1: left allmulticast mode [ 131.807666][ T5651] bridge_slave_1: left promiscuous mode [ 131.813809][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.821573][ T5651] bridge_slave_0: left allmulticast mode [ 131.830961][ T5651] bridge_slave_0: left promiscuous mode [ 131.836978][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.934295][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2295'. [ 131.956731][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2295'. [ 131.974921][ T5651] tipc: Left network mode [ 131.985269][ T5651] veth1_macvtap: left promiscuous mode [ 131.991221][ T5651] veth0_vlan: left promiscuous mode [ 132.015256][ T36] audit: type=1326 audit(2000000017.072:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7071 comm="syz.1.2299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473198ebe9 code=0x0 [ 132.093540][ T7075] veth1: entered allmulticast mode [ 132.099185][ T7075] veth1: left allmulticast mode [ 132.128994][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.136261][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.143754][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.151011][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.181242][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.189423][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.202318][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.209809][ T5653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.219918][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.227065][ T5652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.257598][ T7026] veth0_vlan: entered promiscuous mode [ 132.281069][ T7026] veth1_macvtap: entered promiscuous mode [ 132.325130][ T7093] netlink: 'syz.4.2304': attribute type 12 has an invalid length. [ 132.583871][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.733753][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 132.740777][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.749306][ T10] usb 4-1: config 2 has an invalid interface number: 53 but max is 0 [ 132.757564][ T10] usb 4-1: config 2 has no interface number 0 [ 132.763983][ T10] usb 4-1: config 2 interface 53 altsetting 15 has an endpoint descriptor with address 0x96, changing to 0x86 [ 132.776325][ T10] usb 4-1: config 2 interface 53 altsetting 15 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 132.788146][ T10] usb 4-1: config 2 interface 53 has no altsetting 0 [ 132.796517][ T10] usb 4-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=29.38 [ 132.806221][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.814419][ T10] usb 4-1: Product: syz [ 132.818762][ T10] usb 4-1: Manufacturer: syz [ 132.823397][ T10] usb 4-1: SerialNumber: syz [ 133.015976][ T36] audit: type=1400 audit(2000000018.072:638): avc: denied { create } for pid=7135 comm="syz.1.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 133.043589][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.053344][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.080614][ T7141] overlayfs: failed to resolve './file0': -2 [ 133.088677][ T7141] overlayfs: failed to resolve './file1': -2 [ 133.393704][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.534648][ T10] usb-storage 4-1:2.53: USB Mass Storage device detected [ 133.544823][ T10] usb-storage 4-1:2.53: Quirks match for vid 07cf pid 1001: a [ 133.574788][ T46] usb 3-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 133.599751][ T46] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.603772][ T10] usb 4-1: USB disconnect, device number 6 [ 133.623740][ T46] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 133.663745][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.684706][ T46] usb 3-1: config 0 descriptor?? [ 133.919709][ T7190] rust_binder: Write failure EFAULT in pid:13 [ 133.948017][ T7192] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2339'. [ 134.092621][ T46] a4tech 0003:09DA:001A.000E: invalid report_size -795022069 [ 134.101303][ T46] a4tech 0003:09DA:001A.000E: item 0 4 1 7 parsing failed [ 134.110183][ T46] a4tech 0003:09DA:001A.000E: parse failed [ 134.116491][ T46] a4tech 0003:09DA:001A.000E: probe with driver a4tech failed with error -22 [ 134.433853][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 134.541501][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7219 comm=syz.4.2347 [ 134.842182][ T7224] fuse: Bad value for 'user_id' [ 134.847222][ T7224] fuse: Bad value for 'user_id' [ 135.262046][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.270141][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.278269][ T7243] bridge_slave_0: entered allmulticast mode [ 135.285172][ T7243] bridge_slave_0: entered promiscuous mode [ 135.292284][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.300241][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.308094][ T7243] bridge_slave_1: entered allmulticast mode [ 135.314444][ T7243] bridge_slave_1: entered promiscuous mode [ 135.409417][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.416634][ T7243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.423970][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.431061][ T7243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.459660][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.467854][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.484966][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.492116][ T5651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.500793][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.508185][ T5651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.536267][ T7243] veth0_vlan: entered promiscuous mode [ 135.551350][ T7243] veth1_macvtap: entered promiscuous mode [ 135.602250][ T36] audit: type=1400 audit(2000000020.652:639): avc: denied { getopt } for pid=7272 comm="syz.1.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.603256][ T7274] SELinux: security_context_str_to_sid () failed with errno=-22 [ 135.643803][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.735726][ T5653] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.804928][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 135.817057][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.827686][ T46] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 135.837886][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.847205][ T46] usb 4-1: config 0 descriptor?? [ 136.157419][ T65] usb 3-1: USB disconnect, device number 6 [ 136.257308][ T46] uclogic 0003:2179:0077.000F: interface is invalid, ignoring [ 136.285017][ T7283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 136.285049][ T7283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:182 [ 136.314318][ T7285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.488797][ T7302] tipc: Started in network mode [ 136.493835][ T7302] tipc: Node identity ac14140f, cluster identity 4711 [ 136.500928][ T7302] tipc: New replicast peer: 255.255.255.255 [ 136.507274][ T7302] tipc: Enabled bearer , priority 10 [ 136.530580][ T7304] bridge0: port 3(ip6gretap0) entered blocking state [ 136.537535][ T7304] bridge0: port 3(ip6gretap0) entered disabled state [ 136.544786][ T7304] ip6gretap0: entered allmulticast mode [ 136.551135][ T7304] ip6gretap0: entered promiscuous mode [ 136.557208][ T7304] bridge0: port 3(ip6gretap0) entered blocking state [ 136.564064][ T7304] bridge0: port 3(ip6gretap0) entered forwarding state [ 136.590641][ T36] audit: type=1400 audit(2000000021.642:640): avc: denied { write } for pid=7312 comm="syz.2.2376" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 136.762194][ T7322] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 136.769683][ T7322] rust_binder: Write failure EINVAL in pid:209 [ 136.782796][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 137.623759][ T65] tipc: Node number set to 2886997007 [ 137.639317][ T36] audit: type=1400 audit(2000000022.692:641): avc: denied { append } for pid=7338 comm="syz.2.2385" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.763997][ T364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.764099][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 137.861607][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 137.896305][ T36] audit: type=1400 audit(2000000022.952:642): avc: denied { map } for pid=7356 comm="syz.2.2391" path="socket:[34175]" dev="sockfs" ino=34175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.975810][ T7369] bridge0: port 3(veth0_to_bridge) entered blocking state [ 137.983600][ T7369] bridge0: port 3(veth0_to_bridge) entered disabled state [ 137.991314][ T7369] veth0_to_bridge: entered allmulticast mode [ 137.999102][ T7369] veth0_to_bridge: entered promiscuous mode [ 138.005791][ T7369] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.019061][ T7369] bridge0: port 3(veth0_to_bridge) entered blocking state [ 138.027372][ T7369] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 138.147982][ T36] audit: type=1400 audit(2000000023.202:643): avc: denied { map } for pid=7399 comm="syz.2.2406" path="socket:[34925]" dev="sockfs" ino=34925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.394870][ T417] usb 4-1: USB disconnect, device number 7 [ 138.426173][ T7408] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 138.453906][ T7408] SELinux: failed to load policy [ 138.459773][ T7408] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 138.478145][ T7410] binder: Unknown parameter '' [ 138.488707][ T7412] netlink: 'syz.3.2412': attribute type 4 has an invalid length. [ 138.549153][ T7417] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7417 comm=syz.3.2414 [ 138.566901][ T7416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=7416 comm=syz.3.2414 [ 138.595894][ T7421] pim6reg1: entered promiscuous mode [ 138.601389][ T7421] pim6reg1: entered allmulticast mode [ 138.735074][ T7436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=153 sclass=netlink_route_socket pid=7436 comm=syz.2.2421 [ 138.760152][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 138.768992][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 138.878430][ T7468] fuse: Bad value for 'fd' [ 138.963744][ T417] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.010133][ T7481] 9pnet_fd: Insufficient options for proto=fd [ 139.030082][ T7484] 9pnet_fd: Insufficient options for proto=fd [ 139.113773][ T417] usb 4-1: Using ep0 maxpacket: 16 [ 139.122524][ T417] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 139.134464][ T417] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 139.144403][ T417] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 139.156468][ T417] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.165753][ T417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.174018][ T417] usb 4-1: Product: syz [ 139.178363][ T417] usb 4-1: Manufacturer: 僭﫫﮿倮瓞夽儈버곦蜹㬉刽╘被â¿ä£¹ä“´ì²‡ç¢”ï¤ã‚⛟툣æ¿åšŽæ—®å³‘ë©ä”¥ [ 139.191070][ T417] usb 4-1: SerialNumber: syz [ 139.200678][ T417] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 139.209931][ T417] usb 4-1: no configuration chosen from 1 choice [ 139.345474][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2446'. [ 139.365914][ T7512] batadv_slave_0: mtu less than device minimum [ 139.381366][ T7512] overlayfs: failed to clone upperpath [ 139.384885][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 139.413909][ T7516] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2449'. [ 139.448195][ T36] audit: type=1400 audit(2000000024.502:644): avc: denied { execute } for pid=7511 comm="syz.2.2447" path="pipe:[35109]" dev="pipefs" ino=35109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 139.603982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.616524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.628922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.641498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.654153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.666544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.678654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.691173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.703497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.328794][ T7568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7568 comm=syz.2.2467 [ 140.355860][ T7568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7568 comm=syz.2.2467 [ 140.369983][ T7569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7569 comm=syz.2.2467 [ 140.383163][ T7564] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7564 comm=syz.2.2467 [ 140.494327][ T7586] netlink: 'syz.1.2475': attribute type 30 has an invalid length. [ 140.876022][ T7596] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 141.745935][ T65] usb 4-1: USB disconnect, device number 8 [ 144.373699][ C0] net_ratelimit: 190718 callbacks suppressed [ 144.373723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.373730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 144.373808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 144.379839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.392002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 144.403919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.416293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.428041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.440917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.452922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.193666][ C1] sched: DL replenish lagged too much [ 149.383695][ C0] net_ratelimit: 209632 callbacks suppressed [ 149.383717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.383913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.389799][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.402177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 149.414301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.426400][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 149.438923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.451145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 149.463364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.475459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 150.941459][ T7619] binder: Bad value for 'stats' [ 154.393674][ C0] net_ratelimit: 178727 callbacks suppressed [ 154.393698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.393860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.399784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.412271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 154.424930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.437017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 154.449111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.461096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 154.473407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.485503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 159.403701][ C0] net_ratelimit: 180206 callbacks suppressed [ 159.403726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.403837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.409803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.422166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 159.434120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.446329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 159.458402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.470522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 159.482793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.495088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 160.934824][ T7644] netlink: 'syz.4.2493': attribute type 6 has an invalid length. [ 160.942880][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 161.435372][ T36] audit: type=1400 audit(2000000045.962:645): avc: denied { create } for pid=7641 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 164.098855][ T7646] netlink: 'syz.4.2493': attribute type 6 has an invalid length. [ 164.413692][ C0] net_ratelimit: 181747 callbacks suppressed [ 164.413715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.413766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 164.419890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.431935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.444103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.456594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.468422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.480642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 164.492816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.505031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 165.914345][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 169.423690][ C0] net_ratelimit: 184028 callbacks suppressed [ 169.423715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.423839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.429927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.442163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 169.454253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.466289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 169.478204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.490437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 169.502430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.514851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 174.433673][ C0] net_ratelimit: 189515 callbacks suppressed [ 174.433701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.433760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 174.439861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.451934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 174.464472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.476440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.488818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.501162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 174.512917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.525389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.294142][ T46] usb 5-1: USB disconnect, device number 8 [ 179.443660][ C0] net_ratelimit: 192934 callbacks suppressed [ 179.443683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.443744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.449921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.462042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.474066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.486279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.498211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.510284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 179.522546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.534663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 184.453708][ C0] net_ratelimit: 185139 callbacks suppressed [ 184.453753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.453816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.459855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.472290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.484240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.496515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 184.496698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 184.508740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.520772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 184.532777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.463677][ C0] net_ratelimit: 183080 callbacks suppressed [ 189.463702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.463722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 189.470053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.482448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.494586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.506883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.518802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.530768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.542715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.555028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 194.473657][ C1] net_ratelimit: 172090 callbacks suppressed [ 194.473683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 194.473696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.473756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.479904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 194.492035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.504244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.516351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.528481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 194.540306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.552285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.483690][ C0] net_ratelimit: 168877 callbacks suppressed [ 199.483713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.483778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 199.489812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.502239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.514205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.526696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.538639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.550818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.562974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.575029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 204.493685][ C1] net_ratelimit: 174363 callbacks suppressed [ 204.493708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 204.493721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.493763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.500282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 204.512487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.524725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 204.536740][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.548972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.561147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.573323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 209.503686][ C1] net_ratelimit: 173266 callbacks suppressed [ 209.503709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.503732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.510321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.522314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.534421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.546344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.558321][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 209.570609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.582643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 209.594887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.513653][ C0] net_ratelimit: 178294 callbacks suppressed [ 214.513678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.513811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.519882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.532362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.544475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.556535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 214.568539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.580891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 214.593224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.605483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 219.523644][ C1] net_ratelimit: 173046 callbacks suppressed [ 219.523668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.523710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.530002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 219.541989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.554035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 219.565994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.578067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 219.590347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.602413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 219.614430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.533651][ C0] net_ratelimit: 183205 callbacks suppressed [ 224.533675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.533726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.539816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.553033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.563973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.576002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.588123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.600424][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 224.612683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.624759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 229.543643][ C0] net_ratelimit: 184738 callbacks suppressed [ 229.543667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.543691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 229.549807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.561898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.573977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.586828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 229.598674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.611385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.623483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.636069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.553647][ C0] net_ratelimit: 181272 callbacks suppressed [ 234.553670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.553737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.559766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.572530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 234.584441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.596719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.608761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.620904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.633106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.645445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.563643][ C1] net_ratelimit: 174783 callbacks suppressed [ 239.563667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 239.563675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.563735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.569994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 239.582331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.594457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.606606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.618851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 239.631180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.643791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.486677][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.504148][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.511813][ T7663] bridge_slave_0: entered allmulticast mode [ 243.255038][ T7663] bridge_slave_0: entered promiscuous mode [ 244.435725][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.443022][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.493704][ T7663] bridge_slave_1: entered allmulticast mode [ 244.573636][ C0] net_ratelimit: 178771 callbacks suppressed [ 244.573660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.573700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 244.579906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.592316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.604884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.617148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.629275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.641283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.653249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.665362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.697137][ T7663] bridge_slave_1: entered promiscuous mode [ 245.856623][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.866448][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.896600][ T7664] bridge_slave_0: entered allmulticast mode [ 245.934339][ T7664] bridge_slave_0: entered promiscuous mode [ 246.034462][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.041924][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.074374][ T7664] bridge_slave_1: entered allmulticast mode [ 246.114184][ T7664] bridge_slave_1: entered promiscuous mode [ 246.257571][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.317578][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.388688][ T7665] bridge_slave_0: entered allmulticast mode [ 246.415704][ T7665] bridge_slave_0: entered promiscuous mode [ 246.505649][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.512763][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.544882][ T7665] bridge_slave_1: entered allmulticast mode [ 246.565832][ T7665] bridge_slave_1: entered promiscuous mode [ 249.583668][ C1] net_ratelimit: 183659 callbacks suppressed [ 249.583692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 249.583715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.589994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.601903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.614154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 249.625939][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.638320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.650391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.662616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.674762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.593655][ C1] net_ratelimit: 178779 callbacks suppressed [ 254.593680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 254.593683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.593747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.599760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.611970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.624044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.636301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.648316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.660398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.672447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.603635][ C0] net_ratelimit: 169100 callbacks suppressed [ 259.603658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.603674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 259.603783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 259.609967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.622522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 259.634511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.646639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.658864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.671306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 259.683562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.613640][ C0] net_ratelimit: 172072 callbacks suppressed [ 264.613662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.613685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 264.619921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.632245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.644910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.657427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.669430][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.681421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.693640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.706244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.623624][ C0] net_ratelimit: 169872 callbacks suppressed [ 269.623648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.623720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 269.629788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.641694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.654227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.666452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 269.678254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.690276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.702565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.714935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 274.633619][ C1] net_ratelimit: 167263 callbacks suppressed [ 274.633643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 274.633653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.639767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 274.652037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.664498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 274.676616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.688465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.700726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.713256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 274.725129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.643622][ C1] net_ratelimit: 174805 callbacks suppressed [ 279.643645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 279.643706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.649925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.661833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.674317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 279.686157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.698298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.710383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.722292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.734171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.653638][ C0] net_ratelimit: 171307 callbacks suppressed [ 284.653662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.653717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 284.659742][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.672035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.684114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.696748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 284.708735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.720939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.732798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.745537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 289.663645][ C0] net_ratelimit: 170263 callbacks suppressed [ 289.663669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.663671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 289.663750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.669755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.681906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 289.693869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.706015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.718734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.731425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 289.743717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.673615][ C0] net_ratelimit: 170126 callbacks suppressed [ 294.673638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.673678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.679806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.692164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.704475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.716844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.729291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.741673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 294.753761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.766025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 299.683620][ C1] net_ratelimit: 164006 callbacks suppressed [ 299.683643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.683671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.689844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 299.701809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.713930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 299.726293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.738308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 299.750335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.762710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 299.774526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.693633][ C0] net_ratelimit: 164235 callbacks suppressed [ 304.693655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.693759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 304.699832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.712185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 304.724276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.736484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.748587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.761013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 304.772953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.785195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.703613][ C0] net_ratelimit: 173254 callbacks suppressed [ 309.703636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.703831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 309.709840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.721958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.734093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.746520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 309.758355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.770495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.782398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.794676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 314.713635][ C0] net_ratelimit: 170771 callbacks suppressed [ 314.713658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.713718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 314.719868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.731940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.744248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.756278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 314.768022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.780055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.792028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.804886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 319.723608][ C0] net_ratelimit: 164857 callbacks suppressed [ 319.723631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.723644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.723730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.729995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.742188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.754098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.766771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.778706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.790881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 319.803025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.733627][ C0] net_ratelimit: 166785 callbacks suppressed [ 324.733649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.733771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 324.739851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.752273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.764210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.776493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 324.788154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.800195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.812180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.824473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.743613][ C0] net_ratelimit: 177382 callbacks suppressed [ 329.743637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.743694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.749821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.762075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.774312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.786211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 329.798298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.810403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 329.822457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.834551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.496598][ T37] INFO: task syz.1.2460:7547 blocked for more than 122 seconds. [ 334.546285][ T37] Not tainted syzkaller #0 [ 334.551298][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.560038][ T37] task:syz.1.2460 state:D stack:0 pid:7547 tgid:7547 ppid:7243 flags:0x00004006 [ 334.570500][ T37] Call Trace: [ 334.574102][ T37] [ 334.577183][ T37] __schedule+0x1322/0x1df0 [ 334.581921][ T37] ? __sched_text_start+0x10/0x10 [ 334.587155][ T37] ? __kasan_check_write+0x18/0x20 [ 334.592323][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 334.597697][ T37] ? __kasan_check_write+0x18/0x20 [ 334.602863][ T37] ? trace_contention_begin+0xc0/0xc0 [ 334.608413][ T37] schedule+0xc6/0x240 [ 334.612520][ T37] schedule_preempt_disabled+0x14/0x30 [ 334.618107][ T37] __mutex_lock+0x81e/0x1b50 [ 334.622922][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 334.629936][ T37] ? __kasan_check_write+0x18/0x20 [ 334.635133][ T37] ? __kasan_check_write+0x18/0x20 [ 334.640298][ T37] ? wake_up_q+0x10f/0x1c0 [ 334.644888][ T37] ? __mutex_unlock_slowpath+0x48a/0x740 [ 334.650561][ T37] ? mutex_unlock+0x240/0x240 [ 334.655648][ T37] __mutex_lock_slowpath+0xe/0x20 [ 334.660755][ T37] mutex_lock+0x102/0x1c0 [ 334.665154][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 334.670131][ T37] rcu_barrier+0x4d/0x530 [ 334.674570][ T37] ? __kasan_slab_free+0x6a/0x80 [ 334.679549][ T37] netdev_run_todo+0x10e/0xcb0 [ 334.684387][ T37] ? kvfree+0x39/0x50 [ 334.688434][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 334.693792][ T37] rtnl_unlock+0x12/0x20 [ 334.698166][ T37] tun_chr_close+0xc5/0x150 [ 334.702894][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 334.708298][ T37] __fput+0x1fb/0xa00 [ 334.712412][ T37] ? call_rcu+0x14/0x20 [ 334.716628][ T37] ____fput+0x20/0x30 [ 334.720824][ T37] task_work_run+0x1e3/0x250 [ 334.725514][ T37] ? __cfi_task_work_run+0x10/0x10 [ 334.730753][ T37] ? free_nsproxy+0x223/0x290 [ 334.735518][ T37] do_exit+0x9bc/0x2630 [ 334.739825][ T37] ? __sched_text_start+0x10/0x10 [ 334.744913][ T37] ? __cfi_do_exit+0x10/0x10 [ 334.749544][ T37] ? __kasan_check_write+0x18/0x20 [ 334.754739][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 334.754895][ C1] net_ratelimit: 162867 callbacks suppressed [ 334.754914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.760070][ T37] ? __kasan_check_read+0x15/0x20 [ 334.766227][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.778160][ T37] ? cgroup_update_frozen+0x160/0x990 [ 334.783323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.795106][ T37] do_group_exit+0x22a/0x300 [ 334.800729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.812803][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 334.817992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.830160][ T37] get_signal+0x139d/0x14f0 [ 334.835854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.847821][ T37] arch_do_signal_or_restart+0x96/0x720 [ 334.852561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.864510][ T37] ? common_nsleep+0x93/0xb0 [ 334.870264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.882162][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 334.887257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 334.899282][ T37] ? __se_sys_clock_nanosleep+0x300/0x390 [ 334.905571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.917649][ T37] ? __kasan_check_read+0x15/0x20 [ 334.940955][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 334.947132][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 334.952710][ T37] do_syscall_64+0x64/0xf0 [ 334.957212][ T37] ? clear_bhb_loop+0x50/0xa0 [ 334.962194][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 334.968159][ T37] RIP: 0033:0x7f86663c14a5 [ 334.972618][ T37] RSP: 002b:00007f8667144f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 334.981460][ T37] RAX: fffffffffffffdfc RBX: 00007f86665c5fa0 RCX: 00007f86663c14a5 [ 334.989624][ T37] RDX: 00007f8667144fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 334.997667][ T37] RBP: 00007f8666411e19 R08: 0000000000000000 R09: 0000000000000000 [ 335.005894][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 335.014018][ T37] R13: 00007f86665c6038 R14: 00007f86665c5fa0 R15: 00007fff830dec28 [ 335.022038][ T37] [ 335.034580][ T37] INFO: task syz.3.2497:7652 blocked for more than 123 seconds. [ 335.042278][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.054137][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.064441][ T36] audit: type=1400 audit(2000000220.112:646): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2811]" dev="pipefs" ino=2811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 335.089558][ T37] task:syz.3.2497 state:D stack:0 pid:7652 tgid:7652 ppid:7026 flags:0x00004006 [ 335.099927][ T37] Call Trace: [ 335.103249][ T37] [ 335.106271][ T37] __schedule+0x1322/0x1df0 [ 335.110897][ T37] ? __sched_text_start+0x10/0x10 [ 335.115971][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 335.120698][ T37] ? __kasan_check_write+0x18/0x20 [ 335.125887][ T37] schedule+0xc6/0x240 [ 335.130085][ T37] schedule_timeout+0xb2/0x3a0 [ 335.134920][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 335.140430][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 335.146055][ T37] ? __smp_call_single_queue+0xd8/0x390 [ 335.151652][ T37] ? generic_exec_single+0x201/0x500 [ 335.157106][ T37] wait_for_common+0x359/0x630 [ 335.161918][ T37] ? wait_for_completion+0x40/0x40 [ 335.167184][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 335.173016][ T37] wait_for_completion+0x1c/0x40 [ 335.178196][ T37] rcu_barrier+0x415/0x530 [ 335.182656][ T37] netdev_run_todo+0x10e/0xcb0 [ 335.187535][ T37] ? kvfree+0x39/0x50 [ 335.191570][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 335.197106][ T37] rtnl_unlock+0x12/0x20 [ 335.201398][ T37] tun_chr_close+0xc5/0x150 [ 335.205961][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 335.211158][ T37] __fput+0x1fb/0xa00 [ 335.215198][ T37] ? call_rcu+0x14/0x20 [ 335.219391][ T37] ____fput+0x20/0x30 [ 335.223512][ T37] task_work_run+0x1e3/0x250 [ 335.228375][ T37] ? __cfi_task_work_run+0x10/0x10 [ 335.233543][ T37] ? free_nsproxy+0x223/0x290 [ 335.238312][ T37] do_exit+0x9bc/0x2630 [ 335.242522][ T37] ? __kasan_check_write+0x18/0x20 [ 335.247747][ T37] ? preempt_schedule_common+0x2d/0x60 [ 335.253260][ T37] ? __cfi_do_exit+0x10/0x10 [ 335.258099][ T37] ? preempt_schedule+0xb0/0xd0 [ 335.262990][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 335.268602][ T37] ? rwsem_spin_on_owner+0x3d0/0x3d0 [ 335.273956][ T37] ? mprotect_fixup+0x77a/0x890 [ 335.278860][ T37] ? __kasan_check_write+0x18/0x20 [ 335.284070][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 335.289530][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 335.295142][ T37] do_group_exit+0x22a/0x300 [ 335.299776][ T37] ? __kasan_check_write+0x18/0x20 [ 335.305012][ T37] get_signal+0x139d/0x14f0 [ 335.309825][ T37] arch_do_signal_or_restart+0x96/0x720 [ 335.315531][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 335.321833][ T37] ? __kasan_check_read+0x15/0x20 [ 335.327121][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 335.332706][ T37] do_syscall_64+0x64/0xf0 [ 335.337291][ T37] ? clear_bhb_loop+0x50/0xa0 [ 335.342149][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 335.348106][ T37] RIP: 0033:0x7f7c43f8eca7 [ 335.352550][ T37] RSP: 002b:00007ffef166f288 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 335.361112][ T37] RAX: 0000000000000000 RBX: 00007f7c44d776c0 RCX: 00007f7c43f8eca7 [ 335.369248][ T37] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f7c44d58000 [ 335.377533][ T37] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 335.385552][ T37] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffef166f3e0 [ 335.393661][ T37] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 335.401762][ T37] [ 335.584981][ T37] NMI backtrace for cpu 0 [ 335.585011][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 335.585044][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.585057][ T37] Call Trace: [ 335.585065][ T37] [ 335.585074][ T37] __dump_stack+0x21/0x30 [ 335.585110][ T37] dump_stack_lvl+0x10c/0x190 [ 335.585139][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 335.585170][ T37] dump_stack+0x19/0x20 [ 335.585198][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 335.585228][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 335.585255][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 335.585283][ T37] ? sched_show_task+0x379/0x560 [ 335.585311][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 335.585337][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.585367][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.585394][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 335.585426][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 335.585454][ T37] watchdog+0xd8f/0xed0 [ 335.585486][ T37] ? __cfi_watchdog+0x10/0x10 [ 335.585514][ T37] ? __kasan_check_read+0x15/0x20 [ 335.585544][ T37] ? __kthread_parkme+0x138/0x180 [ 335.585564][ T37] ? schedule+0xc6/0x240 [ 335.585583][ T37] kthread+0x2c7/0x370 [ 335.585604][ T37] ? __cfi_watchdog+0x10/0x10 [ 335.585634][ T37] ? __cfi_kthread+0x10/0x10 [ 335.585655][ T37] ret_from_fork+0x64/0xa0 [ 335.585685][ T37] ? __cfi_kthread+0x10/0x10 [ 335.585707][ T37] ret_from_fork_asm+0x1a/0x30 [ 335.585740][ T37] [ 335.585749][ T37] Sending NMI from CPU 0 to CPUs 1: [ 335.769857][ C1] NMI backtrace for cpu 1 [ 335.769873][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 335.769894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.769906][ C1] RIP: 0010:ipv6_mc_check_mld+0x98/0x2070 [ 335.769937][ C1] Code: f1 f1 01 f2 02 f3 48 89 8c 24 98 00 00 00 48 89 04 19 e8 ab 6c 8b fc 4d 8d a6 e0 00 00 00 4c 89 e0 48 c1 e8 03 48 89 44 24 48 <80> 3c 18 00 74 08 4c 89 e7 e8 8a 94 e1 fc 4d 8b be e0 00 00 00 49 [ 335.769951][ C1] RSP: 0018:ffffc9000022ffc0 EFLAGS: 00000a06 [ 335.769967][ C1] RAX: 1ffff11029eddc6c RBX: dffffc0000000000 RCX: ffff888103679300 [ 335.769979][ C1] RDX: 0000000000000100 RSI: ffffffff87b51e60 RDI: ffff88814f6ee280 [ 335.769991][ C1] RBP: ffffc900002300f0 R08: ffff888103679300 R09: 0000000000000002 [ 335.770007][ C1] R10: 000000000000dd86 R11: 0000000000000100 R12: ffff88814f6ee360 [ 335.770019][ C1] R13: ffff8881179a6150 R14: ffff88814f6ee280 R15: dffffc0000000000 [ 335.770031][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 335.770045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.770056][ C1] CR2: 00007f7f1dcf7d60 CR3: 000000010b702000 CR4: 00000000003526b0 [ 335.770071][ C1] Call Trace: [ 335.770076][ C1] [ 335.770084][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 335.770112][ C1] ? __cfi_ipv6_mc_check_mld+0x10/0x10 [ 335.770134][ C1] br_multicast_rcv+0x576/0x7af0 [ 335.770150][ C1] ? __kfree_skb+0x18f/0x210 [ 335.770174][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 335.770196][ C1] ? ip6_mc_input+0x4f3/0x670 [ 335.770215][ C1] ? ipv6_rcv+0xed/0x220 [ 335.770234][ C1] ? br_handle_frame_finish+0x12d9/0x1720 [ 335.770249][ C1] ? rt6_score_route+0x63d/0x8a0 [ 335.770267][ C1] ? __napi_poll+0xd3/0x610 [ 335.770289][ C1] ? handle_softirqs+0x1ab/0x630 [ 335.770313][ C1] ? __do_softirq+0xf/0x16 [ 335.770327][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 335.770350][ C1] ? rcu_nocb_cb_kthread+0x4dc/0xac0 [ 335.770373][ C1] ? kthread+0x2c7/0x370 [ 335.770389][ C1] ? ret_from_fork+0x64/0xa0 [ 335.770412][ C1] ? find_match+0x1a3/0x10f0 [ 335.770428][ C1] ? __cfi_br_multicast_rcv+0x10/0x10 [ 335.770445][ C1] ? __find_rr_leaf+0x4c7/0x790 [ 335.770461][ C1] ? rt6_check_expired+0x250/0x250 [ 335.770475][ C1] ? __siphash_unaligned+0x26e/0x3c0 [ 335.770492][ C1] ? get_stack_info_noinstr+0x1f/0x130 [ 335.770509][ C1] ? get_stack_info+0x3f/0x100 [ 335.770534][ C1] ? update_stack_state+0x16b/0x4b0 [ 335.770556][ C1] ? __kasan_check_write+0x18/0x20 [ 335.770579][ C1] ? _raw_spin_trylock+0xaf/0x130 [ 335.770601][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 335.770624][ C1] ? fdb_find_rcu+0xaa/0x530 [ 335.770644][ C1] ? __asan_memcpy+0x5a/0x80 [ 335.770669][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 335.770692][ C1] ? ___ratelimit+0x3f7/0x5a0 [ 335.770707][ C1] ? __cfi____ratelimit+0x10/0x10 [ 335.770721][ C1] ? br_fdb_find_rcu+0x50/0x50 [ 335.770741][ C1] ? stack_depot_save_flags+0x38/0x800 [ 335.770759][ C1] ? net_ratelimit+0x20/0x30 [ 335.770780][ C1] ? br_fdb_update+0x413/0x680 [ 335.770801][ C1] ? kmem_cache_free+0x1c1/0x510 [ 335.770826][ C1] ? __cfi_br_fdb_update+0x10/0x10 [ 335.770847][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 335.770865][ C1] ? process_backlog+0x44b/0xae0 [ 335.770887][ C1] ? __napi_poll+0xd3/0x610 [ 335.770908][ C1] ? net_rx_action+0x584/0xce0 [ 335.770930][ C1] ? __do_softirq+0xf/0x16 [ 335.770944][ C1] ? do_softirq+0xa6/0x100 [ 335.770966][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 335.770989][ C1] ? rcu_do_batch+0x5c6/0xd20 [ 335.771017][ C1] br_handle_frame_finish+0x5be/0x1720 [ 335.771034][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 335.771053][ C1] br_handle_frame+0x5a6/0xba0 [ 335.771068][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 335.771082][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 335.771105][ C1] ? ip6_mc_input+0x4f3/0x670 [ 335.771124][ C1] ? ip6_mc_input+0x4f3/0x670 [ 335.771144][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 335.771163][ C1] ? qdisc_run_end+0x120/0x120 [ 335.771185][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 335.771204][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 335.771222][ C1] ? ipv6_rcv+0xed/0x220 [ 335.771240][ C1] ? __cfi_arp_process+0x10/0x10 [ 335.771260][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 335.771279][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 335.771299][ C1] process_backlog+0x3e5/0xae0 [ 335.771325][ C1] __napi_poll+0xd3/0x610 [ 335.771346][ C1] net_rx_action+0x584/0xce0 [ 335.771371][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 335.771393][ C1] ? sched_clock+0x44/0x60 [ 335.771413][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 335.771435][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 335.771453][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 335.771475][ C1] handle_softirqs+0x1ab/0x630 [ 335.771501][ C1] __do_softirq+0xf/0x16 [ 335.771514][ C1] do_softirq+0xa6/0x100 [ 335.771536][ C1] [ 335.771541][ C1] [ 335.771547][ C1] ? __cfi_do_softirq+0x10/0x10 [ 335.771570][ C1] ? dst_destroy+0x37d/0x460 [ 335.771586][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 335.771603][ C1] __local_bh_enable_ip+0x74/0x80 [ 335.771627][ C1] rcu_do_batch+0x5c6/0xd20 [ 335.771650][ C1] ? rcu_core+0xd20/0xd20 [ 335.771670][ C1] ? __kasan_check_write+0x18/0x20 [ 335.771693][ C1] ? _raw_spin_lock+0x8c/0x120 [ 335.771714][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 335.771738][ C1] ? __kasan_check_read+0x15/0x20 [ 335.771761][ C1] ? rcu_nocb_cb_kthread+0x4c7/0xac0 [ 335.771784][ C1] rcu_nocb_cb_kthread+0x4dc/0xac0 [ 335.771809][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 335.771832][ C1] ? __kasan_check_write+0x18/0x20 [ 335.771854][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 335.771877][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 335.771905][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 335.771928][ C1] ? set_cpus_allowed_ptr+0x93/0xe0 [ 335.771944][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 335.771960][ C1] ? __kasan_check_read+0x15/0x20 [ 335.771982][ C1] ? __kthread_parkme+0x138/0x180 [ 335.771996][ C1] ? schedule+0xc6/0x240 [ 335.772015][ C1] kthread+0x2c7/0x370 [ 335.772031][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 335.772054][ C1] ? __cfi_kthread+0x10/0x10 [ 335.772070][ C1] ret_from_fork+0x64/0xa0 [ 335.772091][ C1] ? __cfi_kthread+0x10/0x10 [ 335.772107][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.772132][ C1] [ 339.763627][ C0] net_ratelimit: 148067 callbacks suppressed [ 339.763660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.763686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:b1:59:88:0c:26, vlan:0) [ 339.769906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.782004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.794027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.806045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.817947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.830147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.842330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.854435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)