last executing test programs: 50.507338722s ago: executing program 1 (id=3373): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) unshare(0x40400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4a) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r2, 0x22e7c000) 50.503123453s ago: executing program 1 (id=3374): capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000004a40)=0xfffffff8, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x1) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 50.502885493s ago: executing program 1 (id=3375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0xb66f) (async) read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020) sendfile(r1, r2, 0x0, 0x7ffff006) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x0, "622e94"}, 0x6) 50.046138074s ago: executing program 2 (id=3379): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x2, 0xff81, 0x0, 0x7, 0x0}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x20642, 0x0) setns(r3, 0x24020000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x4000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$pptp(0x18, 0x1, 0x2) mkdir(0x0, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x75, 0x0, &(0x7f0000000300)="9e9e0a29e6782beb74890cc1e2f702d4c12aeb9ece35c4c6ef40a243d531061367e47bba2d2b081d7b3efccd4fcd6c3f10c04a65bd10cb4a92ba294bba69c26a8feeb4a2a7cddd092b44a8d3795b2f2e6ccce9fe500b44cb3ce4d533caac85187a24a52abca6d65cd2c7c27264f63b3041065c8a07"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x40000, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000002200)={0xfffffffd, 0x4}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e20, 0x1, @private0}, {0xa, 0x4e20, 0x7fffffff, @private1, 0x5}, 0x0, {[0x6, 0x9, 0x41c9, 0x8, 0x0, 0x2, 0x10001, 0xf4]}}, 0x5c) 49.761492525s ago: executing program 2 (id=3382): prctl$PR_GET_CHILD_SUBREAPER(0x25) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/mem_sleep', 0x102, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="747207000000ffffffffffffff7f46", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 49.711931845s ago: executing program 2 (id=3383): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x620d02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) fadvise64(r0, 0x81, 0x9, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f00000003c0)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='net_prio'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) connect$bt_sco(r2, 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) keyctl$session_to_parent(0x12) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='memory.max\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r5, 0x1, 0x2f, 0x0, &(0x7f0000000300)=0x700) openat$cgroup_freezer_state(r1, &(0x7f00000001c0), 0x2, 0x0) setns(r3, 0x20000) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x315901, 0x0) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nN&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendto$packet(r6, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) 49.434432866s ago: executing program 2 (id=3387): unshare(0x22020600) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0xffffffffffffff05) unshare(0x22020600) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) sendfile(r0, r0, 0x0, 0xffffffffffffff05) (async) 49.258347566s ago: executing program 2 (id=3388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x8, 0xd, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x4}}, 0x26) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r6 = socket(0x2, 0x2, 0x1) (async) r7 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x1000000012abec) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000001c0)={0x6}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r8, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4000000009) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x10000) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r11, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r9, 0x0, 0x1802}]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r12, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000df58"]) ioctl$TIOCNOTTY(r12, 0x5422) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x3101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/154, 0x9a, 0x1, 0x35}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x6cb849f1c30f08f}], 0x0, 0x0, 0x0}) 48.039149699s ago: executing program 0 (id=3392): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) shutdown(r0, 0x1) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x840) r3 = accept4(r0, &(0x7f0000000180)=@ax25={{0x3, @null}, [@rose, @bcast, @default, @null, @netrom, @netrom, @netrom, @null]}, &(0x7f0000000240)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r5 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x800, 0x4e20, 0x0, 0x2, 0x80, 0xe0, 0x84, r4, r6}, {0x7, 0x4, 0x9a2, 0x80000001, 0xff, 0x0, 0x7, 0x3}, {0x4, 0xffff, 0xffffffffffffffff, 0xd}, 0xfffffff7, 0x6e6bb2, 0x2, 0x363a28b31f978fbe, 0x1}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x4, 0x2, 0x0, 0x400000, 0x7, 0x7}}, 0xe8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) write$tun(r1, 0x0, 0x46) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fsetxattr$trusted_overlay_upper(r7, 0x0, &(0x7f0000000000)={0x0, 0xfb, 0xd4, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3", "86d5fb44a22ce20f00000000c4300641432a221781e5a3135284afbf5ae1ec0c007dd9b0cbfe43efba30c638f382980c6a053e9315fedf18a73043f66d7ec837c4e981073eaca93d5c8c4f6633ac4acb5a538c7c79ab762fb0ac78d59671cdbd6dca6e05000000f6b16a0aecbcf98d81897c6c2c1e33ae81759cc4bd1c92cb4c09d04c44732ca8dedf85208afcf776fb38c1e0802a202f0e6f38938e7b9adf5be6b2709d113a430a9b9f8250cd9fc98fa3baa1e90863e6114406c2b571b050"}, 0xd4, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000480)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0xffffc000) 47.79298843s ago: executing program 0 (id=3393): unshare(0x22020600) (async) unshare(0x22020600) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f0000000600)="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", 0xfd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000000c0), 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001f9ffff050004"], 0xe4}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 47.479882321s ago: executing program 0 (id=3394): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) signalfd4(r1, &(0x7f0000000000)={[0xffffffffffff4f84]}, 0x8, 0x41800) 46.111489155s ago: executing program 1 (id=3395): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x3, 0xff, 0x8, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0xc9, 0xb76e}}) setsockopt$inet6_mreq(r0, 0x29, 0x1, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}, 0x14) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x8000) (async) prctl$PR_SET_DUMPABLE(0x4, 0x3) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc225, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9e, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x2e5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xe, 0xff, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x83, 0x4a, 0x1}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x3, 0x80, 0x20, 0x2}, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0x7bce}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x43f}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x20, 0x21, 0xb8, {0xb8, 0xc, "cd459178d1382a715d6f44eae9473c1ca18d8807f4762b0c17aff3c1721bd1d79934140e02a1cfc5466a8ddc8b404b95ad5bfd5c28e59486e2e6920b8ca90e6a909618c1c9be565778e813199e19511bcd93a1cc891241a97711cc9fb129d1d29e13a0dd1dc04244bc17bb61e4a706777946962c39cb605c9a18c8bf616989cf25f8c445d4b571a79a813f1d9b2d038e7bc1ea20d87d15881409d7c44666b0b594d8c0eeb3755ee4ed4315fde59fdd154f0baac93b17"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000380)={0x0, 0x22, 0x19, {[@main=@item_012={0x1, 0x0, 0x9, '?'}, @main=@item_4={0x3, 0x0, 0x8, "c9b71284"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xc, "7dd8838c"}, @main=@item_012={0x1, 0x0, 0xb, "88"}, @main=@item_4={0x3, 0x0, 0xb, "c52cd013"}, @global=@item_4={0x3, 0x1, 0xb, "23f5b126"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xf3, 0x1, {0x22, 0x2b0}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0x16, 0x86, "d1fdc8d5465126c65ed0a5c5e03f0e45c14490f3a9f066dc1e19f5aed0a962a96eb73b32801f9f92fd2aaf10e0c2f63198524d0f6d47d5ba14483fa43ffd47a02833f32a38817126077d0fbf51e24144a9ad3ba3949ed2753b3b869e2ffaf231e8c312c5e31e4fe7dc802cc6d8b07e5267203158724cfe5d49e0c4355b361e841f404216932e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x27}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x1, 0x97, "5b5bbdaab4bdc1a60d6cdcf0510b5de9e5100b6feb2ae969426e4ccdbceb34b1231fa660e8fdd114a16519cc063fb1c59bc1ca30199d1ce8022e1ca2e7a881f2dc09f54fef1856ea25eb0a32155ee6bc3c1d2c556eae55b2895fd82e2af78c12a198c9fe2690cc6b9008ccdf77041ce02d899a4d53970a1115b9ee66d7b2663c7a0c2700f2d3a50579009c43c2e747d4c672b198c0786f"}, &(0x7f0000000640)={0x20, 0x3, 0x1}}) r3 = syz_usb_connect(0x3, 0x463, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0xe4, 0x9f, 0x42, 0x8, 0x413c, 0x8171, 0x8c0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x451, 0x4, 0xe, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x4c, 0x5, 0x2, 0x3a, 0xbe, 0xdd, 0x81, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x800, 0x5, 0x82}, {0x6, 0x24, 0x1a, 0x948f, 0x24}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0x4, 0xc, 0x10, 0x91, 0x1, 0x1, [@generic={0x41, 0x81616dbde35141c3, "a64ead86a97926077f7c9e95b3ded7c815b87b31380ed9e6deff6ccf45b60dc521979f2b9f1a5573b9e8bf260025af9f85e5910fab5317ebb288f924bce9dd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x80}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x7, 0x7, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}, @generic={0xf7, 0x21, "98f3c16e819abf15ec079a3e9fdfa5de9d128947f2cea488365b3ada0fe23933309ab354ef0542ce517c18bcaae7d33a033304fb23cc74f27f007a8dd65b649d33185a01406e0bbeaebabe72a5cd31f08bea56e149fd7ae524a837c620a0bf91f7a2a49a3cda5d20f9c2ac060f787a8f18f605e45663e104921500bb9780de0435b1dff2395d07a6f02cc7dd6d32a6e9bc3d9bae279cc338dd0e1eb423f19a1cd178eaa348c72b0261c183e33eac977c0ba67f17d2a4360b949ac96e4fd47ef820d3d6e73a1d446249c5ed7460d087c05389a10b0db65a83e02f191d98a456ead38d797025fc9af09490e130a9bebde0be769c0585"}]}}]}}, {{0x9, 0x4, 0x4d, 0xd, 0x8, 0xdd, 0x3c, 0xc5, 0x12, [], [{{0x9, 0x5, 0xc, 0x0, 0x3df, 0x0, 0xa, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x4, 0x3e, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xfa, 0x3}}, {{0x9, 0x5, 0x8a, 0xe, 0x40, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xa, 0x9, 0x9}}, {{0x9, 0x5, 0x80, 0x2, 0x618685f64a70d9ee, 0x98, 0x1, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0xff, 0x1, 0xbe, [@generic={0xd2, 0x4, "3ea9581376086039d564ee41cc1ee63e6534a8e5817fb17b9563e7c8b1b515441395bc687672b971c9f584932277128b46e769b9ca35cdd32ff8be27a37bdcb379b8e31f8e1443c51b639f1bafec653f80bbc8a92ccc89c46b7a99b8b6774270004eaf1bd302c087a880c9b5d23ecc44af18ef9d0ad011b3d219eacc85ec7f99004bf05d01f36e7ad8e4d930c1181a54515efe5d6e9b75d65556870e1b8a99a63cd1671f28214d35112b75ef43ef9acbbea3b5045ffe5b9e9b345b4a77c5380e8845b74834aca63b6895ce80cda1f307"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x7, 0x4, 0x8, [@generic={0x6, 0x2, "31006291"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x100}]}}]}}, {{0x9, 0x4, 0x9a, 0x7, 0x0, 0x5f, 0x8f, 0x74, 0xe4, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "dfa5cde21c6f"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x5748, 0xff, 0xff}, {0x6, 0x24, 0x1a, 0x4, 0xe}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1, 0x5}, @country_functional={0xc, 0x24, 0x7, 0x9, 0x40, [0x9, 0x9, 0x6000]}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0xff, 0x7e, 0x9}, @dmm={0x7, 0x24, 0x14, 0x1, 0x6}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x9, 0x9, 0xdf, 0x9, 0x9}]}, @generic={0x33, 0x21, "9608fb2400d5a3bd8d1117342ee5741334831a518a091902e9bbec8349040e71e0bc63b466cfad870be9c57d95d632d0c3"}]}}, {{0x9, 0x4, 0x5a, 0xe0, 0x2, 0xff, 0xff, 0xff, 0x10, [], [{{0x9, 0x5, 0x2, 0x10, 0x400, 0xb2, 0x4, 0x0, [@generic={0x65, 0x5, "ef2763ce78372d898fd21820fc19100ac7747095876d4e95d41b840c3a2fec440af3fcd40db786e6df5c2a2dcbc8822d75d4630a2e56de604f20eabf4b8abdc01e1d312a7ca233581fbd0792b28aacb6108a5354d21753eb2ef1becd59cf9f229b7a6f"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x48, 0x9, 0xf2, [@generic={0x1b, 0x2d, "ac74ee03da93677aa2b17b244bcdc4eb5a5a225e443e326466"}, @generic={0x4d, 0x2, "ecb9aa323a4f1ecd17f83948fe0bab7b076a6b2eace3a985f9d8e04df808d1d273193be151490817edadebb75fd35a01a49054fcbb1fd34443e15c09ba451dfc95c02d7352a4ab2f5f969a"}]}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x110, 0x10, 0x1, 0x2, 0x10}, 0x25, &(0x7f0000000b80)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xe7, 0x5, 0x0, 0xff00, 0xf, [0x30, 0xc000, 0xff000f, 0x0, 0x14000]}]}, 0x3, [{0x100, &(0x7f0000000bc0)=@string={0x100, 0x3, "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"}}, {0x2a, &(0x7f0000000cc0)=@string={0x2a, 0x3, "d4de7ce0199ec4678c05c589a5d97021dd1e731f5c9e23170eafd82d527808818e5e54be3acf65c8"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x40b}}]}) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x9c, &(0x7f0000000d80)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x4, 0x10, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "0920ef8a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x76b, 0x3, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x101}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3, 0xd5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xff, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0xfd, 0xa}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x300, 0x73, 0x8, 0x7, 0xff, 0x1}, 0x28, &(0x7f0000000e80)={0x5, 0xf, 0x28, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x11, 0xd, 0x1, 0x1, 0xf7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xe, 0x0, 0xa1b, 0x6}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x7, 0x3a, 0xd}]}, 0x2, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x1007}}]}) (async) r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000f80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x0, 0x73, [{{0x9, 0x4, 0x0, 0x2b, 0x1, 0x3, 0x1, 0x0, 0xa, {0x9, 0x21, 0xf, 0x5, 0x1, {0x22, 0x3d3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x8b, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x1b, 0x1, 0x4}}]}}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x310, 0x5, 0x7, 0x4, 0x68, 0x5}, 0x14a, &(0x7f0000001000)={0x5, 0xf, 0x14a, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x1, 0x6}, @generic={0x74, 0x10, 0x1, "80d9477ef60a236ae7fb536c6352907655af9da3ad665c1db0fd72647f1034cd33a8664f2f3dadaec2eadd3a08a297d6dc09246db4358b5c2f223c0fe46bbc13cbd4be97fb2fa1a5db81692fa7758218f56b02c1e086583b4326c202604311b6b901c2b4246880cfd7117bdb1bbb4781ed"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "3a5c88d483ef25ac5176d05e77704f56"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x10, 0x5, 0x200}, @wireless={0xb, 0x10, 0x1, 0x0, 0xa6, 0x6, 0x4, 0x9}, @generic={0xa1, 0x10, 0x2, "48a938e5621ddc4acf571ede24d0a71403b976ab0e21e05f44a746dbba38472babd8999522802ea35da232c53d0626e8923ba1ddec1464dc8a1ece4144e243279261821ef2584ff6b3fc888a9d43d149ebf749625b5f2df28fb512ee0cb08785463e3cdcd73d284353bbbe68a4c16a8755a01b34ec62b316e3e3cdaf489610779c96ce963904d42d31c3a0962408bf7b607a7867006aa6c437b6336c2054"}]}, 0x8, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x402}}, {0xec, &(0x7f00000011c0)=@string={0xec, 0x3, "9c77b01d7ff63c33941a4a6cf234e29153bf7a9209799d36ed5a280ab26d16a6da4af64f956de3c37f35ca2162382dfe95f1ab8965c0028842b894d6afc10417724d5366769b616846788521e651b53edfb5d576d5d32c590e2124def23636978683d4ed5b16b1287f74d6064d060e0772ef6e14ff321171b69cb002a93e64e23fed49dadfa8f52d347526e856969ac5886881bd4b54ae2b7cc71a3dc227d6ff4718498ed5eb3a9a3ea19e2d5f22568ba05fabc20da502d3f1ccb8fa4e6a600f8e596c02baaaf02d3a8f493a8fb8b9a86b5c0b5227c6a5059d8d986c73e8e3178c34ff77d3be265f80ab"}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x81a}}, {0xbc, &(0x7f0000001380)=@string={0xbc, 0x3, "f1041b849ba0aee4c461e8c0602a626b9e3990a3d7318059571cabb003eb9c9216739ffb8a497547693543c5f9ef03a0525785a1cac8affddbbe9ea5515dd9500cc20900d61058df53e4f216ee530b4222d32461bf127c55868221c5329beb7471cb293b03d423e595f9cd1d97a2078205fc71dc41fa683f0c705fc286e0d3a62aa25be67dfffa6514320fc3c75b6727d6bdcddfcdf2524b58d3dd91b5025244863785c32e5a7483c33c974e1345925251f088451e957280a1bf"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x3c23}}]}) (async) r6 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r6, &(0x7f0000001540)=""/168, 0xa8, 0x12061, &(0x7f0000001600)=@hci={0x1f, 0x3, 0x3}, 0x80) syz_usb_disconnect(r5) (async) syz_usb_control_io(r4, &(0x7f0000001880)={0x2c, &(0x7f0000001680)={0x0, 0x22, 0x1b, {0x1b, 0xd, "f8784cb546bacfc293e7b94bdbac84169721170b816d0971f7"}}, &(0x7f00000016c0)={0x0, 0x3, 0x59, @string={0x59, 0x3, "170101454017fe466462dc0890467060bc04d3396b8a219ec20483eeef83f33f521a9ef3a797a0f37556a8c3efabef03d4a3d93ac17e0e9fab3a333d7d51795591dec005799e092ed298ef8575c552b3081be90541b3f9"}}, &(0x7f0000001740)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x8, 0x0, 0xfff, [0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x9, 0x2, 0x101, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0xfe, 0x1, 0x4, 0xf000, 0x5d84, [0x0]}, @generic={0x4d, 0x10, 0x1, "241ffc4ecaa25eec2ed9015e491ba062428fe509eb432d157b25fd34eeabf363103874a7445e995c3691f8146cd4f69141e5bc8645d662876abefe16da4eb22db7a6ab73ee4b527f423c"}]}}, &(0x7f0000001800)={0x20, 0x29, 0xf, {0xf, 0x29, 0x42, 0x10, 0x3, 0x7, "93824a8c", "821e30eb"}}, &(0x7f0000001840)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x54, 0x1, 0xdd, 0x1, 0x7}}}, &(0x7f0000001d80)={0x84, &(0x7f00000018c0)={0x0, 0xf, 0xea, "d324f6c9d681875bb4de2b41e59597ec02d024d322f088a09ef37bbd8cc04ef23febcb326853d24438102d146dfd8f74bfc76f8c2dd111981b8d995f862057b66993615add170734c0ae85e3e729483ec65f33269c275202023f4f76df0fd3c6d61b11caf7698c752adde05e68424b9516796ab14fa0bb2ba40bc34b81ff08951891bd054fce1c960425d99e7b34dc454df523df5ff0d612c7c3b91bbb717c4cd47e9dd02a2fa8089d426d04e2a07d4bfb2bbe580443058ef1e661e57414c6fcfc6dde009df65b74c1c4a4fa84db0b34bb81e024d02a24d62eb032810dda327435733d18b06aee619cdc"}, &(0x7f00000019c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001a00)={0x0, 0x8, 0x1, 0x3b}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0xf6e9ef0469f70a0d, 0x1}}, &(0x7f0000001a80)={0x20, 0x0, 0x8, {0x8, 0x20, [0xf000]}}, &(0x7f0000001ac0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001b00)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000001b40)={0x40, 0xb, 0x2, 'WW'}, &(0x7f0000001b80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001bc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000001c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001c40)={0x40, 0x19, 0x2, '*N'}, &(0x7f0000001c80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000001cc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001d00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001d40)={0x40, 0x21, 0x1, 0x8}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001ec0)={0x0, @broadcast, @dev}, &(0x7f0000001f00)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000002040)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xb4, r8, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) pipe2(&(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) (async) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f00000020c0)={0x2}) (async) lstat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)) (async) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000002200)=0xf3) syz_usb_control_io(r3, &(0x7f0000002400)={0x2c, &(0x7f0000002240)={0x20, 0x6bf24db7d94dd8bb, 0x91, {0x91, 0x6, "c978c24f7846a4559fa9fb2fd3468385a342d3275108d80ffa9363fbd8f8898f10a878f9a5c0715c68faa2d08e18fbe9fdd45032079dc7971688bf623780ee6b8cfe6c1728eab08fbf346fe4912e5e767f5cdbcc77added246fc7f1569bf3725cdbbfb91a2b708772996c9843e0cc6751b6468d355773f418c45c6db64b8692ea54353ea5bf3068f6ab8395fbd5af0"}}, &(0x7f0000002300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000002340)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x7fffffc, 0xf00f, 0x0, [0xff3f, 0x0, 0xff0000, 0xc000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x3, 0x62, 0xbb0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2, 0x2, 0x80}]}}, &(0x7f0000002380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x2, 0x8, 0xaa, "81ac11ae", "2d26f88b"}}, &(0x7f00000023c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x13, 0x1, 0x5, 0xa, 0x80, 0x9}}}, &(0x7f0000002880)={0x84, &(0x7f0000002440)={0x40, 0x5, 0x75, "38e9443b9227cfdd48ea8b88b1779d37f7086e4c89f274d40f75895d1ef0e025729ec2d3de5b3b062f8ebae0263eff08f692ecb872506dfa24df0ad9d4ea4d9fbd3f2d588e922ff1d38eafaf3ec1211474f9e1bde360387d94a44f054291ca6012510cc4c53b72706e98baa4886d7baa9ff2975e36"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x7c}, &(0x7f0000002540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000002580)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000025c0)={0x40, 0x7, 0x2, 0x3b5}, &(0x7f0000002600)={0x40, 0x9, 0x1, 0xf8}, &(0x7f0000002640)={0x40, 0xb, 0x2, "8c9d"}, &(0x7f0000002680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000026c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002700)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002740)={0x40, 0x19, 0x2, '_\n'}, &(0x7f0000002780)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000027c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002800)={0x40, 0x1e, 0x1, 0xa5}, &(0x7f0000002840)={0x40, 0x21, 0x1}}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000002940), 0x802, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000002b40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002b00)={&(0x7f00000029c0)={0x12c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x28}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ae9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4040000}, 0x200448c4) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x3d) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002b80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x955, 0x7214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xa000, 0x1, 0x1, {0x22, 0x64}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x24, 0x2a, 0x81}}}}}]}}]}}, &(0x7f0000002d00)={0xa, &(0x7f0000002bc0)={0xa, 0x6, 0x310, 0x3, 0xc5, 0x6, 0x0, 0x3}, 0x1a, &(0x7f0000002c00)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x4, 0x7, 0x14, 0x18}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0xbc}, @ptm_cap={0x3}]}, 0x2, [{0x3, &(0x7f0000002c40)=@string={0x3, 0x3, 'l'}}, {0x76, &(0x7f0000002c80)=@string={0x76, 0x3, "5454ad5b8488bf2916407704193f2d791440c3ff408fd6cca11969a2bec44feee82e3923b012239a7b1dd4efaa5c75fd96f4c3e1ba2211dce11aea6548de510b382cdcb3a948d2dac6bc6b108dead3679461287e5a562b31028ad36e67ac3d5dfc5dfbd64768e176447af6bb9975d9cc82247057"}}]}) setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85) (async) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000002d80)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x220, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000002d40), {[{{@arp={@multicast2, @loopback, 0xffffffff, 0x0, 0x7, 0xd, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x6d, 0x9, 0x7, 0xfff3, 0x74, 0x4, 'pimreg\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1e}, 0x6, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x0, 0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 45.008547068s ago: executing program 0 (id=3396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x0, 0x2, 0x1000, &(0x7f000000d000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x0, 0x2, 0x1000, &(0x7f000000d000/0x1000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x19, 0x8d, 0xf1, 0x10, 0x1a0a, 0x101, 0xfed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x0, 0xbd, 0x5c, 0x52}}]}}]}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x19, 0x8d, 0xf1, 0x10, 0x1a0a, 0x101, 0xfed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x0, 0xbd, 0x5c, 0x52}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00fc003a2a5e247b000000080001"], 0x24}], 0x1}, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 44.20043434s ago: executing program 3 (id=3397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x6027) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000010100000700000007000000018000000700000000000000"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000100)={0x5, 0xc, 0x81, 0x7fffffffffffffff, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRESDEC], 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 37.786950177s ago: executing program 3 (id=3398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) 37.123186579s ago: executing program 0 (id=3399): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c901a90d7655ecb26414fb866751ea6eda4a700"/34]) (async) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c901a90d7655ecb26414fb866751ea6eda4a700"/34]) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) (async) ftruncate(r2, 0x10000) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000240)={r2, 0x0, 0x0, 0x10000}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bind$bt_sco(r0, &(0x7f0000000e40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000e40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000002480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000002380)=""/250, 0xfa, 0x0, 0x8}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}], 0x50, 0x0, &(0x7f0000000200)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x2003f, 0x0) getpid() (async) r7 = getpid() syz_pidfd_open(r7, 0x0) (async) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) setns(r8, 0x24020000) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r6}], 0x3c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r6}], 0x29, 0x0, &(0x7f0000000100)="e564e102cfcd7d5dc9c02a93bf000908e07fd2e56d2986c3289e904cbb1dd0f1fa1a0c65c683e13456"}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000000340)={0x2020}, 0xcb0a) 33.660632759s ago: executing program 1 (id=3400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 33.26723108s ago: executing program 0 (id=3401): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) clock_gettime(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) lseek(r1, 0x40000000000003, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 32.90990721s ago: executing program 32 (id=3388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x8, 0xd, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x4}}, 0x26) (async) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) r6 = socket(0x2, 0x2, 0x1) (async) r7 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x1000000012abec) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f00000001c0)={0x6}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r8, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4000000009) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000200), 0x0, 0x10000) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) (async) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r11, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r9, 0x0, 0x1802}]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r12, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000df58"]) ioctl$TIOCNOTTY(r12, 0x5422) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x3101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/154, 0x9a, 0x1, 0x35}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x6cb849f1c30f08f}], 0x0, 0x0, 0x0}) 31.442350115s ago: executing program 3 (id=3403): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000340)=0x3, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x6, 0x2, 0x10001, 0x4, 0x9}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80a000, 0x1aa) getdents64(r2, &(0x7f0000000140)=""/81, 0x51) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0xa, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 24.718330733s ago: executing program 1 (id=3404): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x10, 0x408882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) 18.640781499s ago: executing program 3 (id=3405): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x13, "000000000047562c38f5ae896b00"}) r2 = syz_open_pts(r1, 0x29a440) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x3) ptrace$peekuser(0x3, r0, 0x128) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x167302, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) 16.538479825s ago: executing program 33 (id=3401): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) clock_gettime(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) lseek(r1, 0x40000000000003, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) lsetxattr$security_selinux(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 980.350988ms ago: executing program 34 (id=3404): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x10, 0x408882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) 0s ago: executing program 35 (id=3405): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x13, "000000000047562c38f5ae896b00"}) r2 = syz_open_pts(r1, 0x29a440) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x3) ptrace$peekuser(0x3, r0, 0x128) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x167302, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): 5932][ T8306] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2682'. [ 212.435130][ T8306] netlink: 'syz.2.2682': attribute type 6 has an invalid length. [ 212.443145][ T8306] netlink: 'syz.2.2682': attribute type 5 has an invalid length. [ 212.451498][ T8306] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2682'. [ 212.487598][ T36] audit: type=1400 audit(202.541:9811): avc: denied { map } for pid=8309 comm="syz.2.2684" path="socket:[32458]" dev="sockfs" ino=32458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.857263][ T8343] overlayfs: failed to resolve './file0': -2 [ 212.863584][ T8344] overlayfs: failed to resolve './file0': -2 [ 212.976400][ T8350] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 212.986602][ T36] audit: type=1400 audit(203.019:9812): avc: denied { relabelto } for pid=8347 comm="syz.3.2696" name="rnullb0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 213.016400][ T36] audit: type=1400 audit(203.019:9813): avc: denied { associate } for pid=8347 comm="syz.3.2696" name="rnullb0" dev="tmpfs" ino=108 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 213.043040][ T36] audit: type=1400 audit(203.019:9814): avc: denied { write } for pid=8347 comm="syz.3.2696" name="rnullb0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 213.127151][ T8371] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 213.145021][ T8371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8371 comm=syz.1.2703 [ 214.029414][ T8420] rust_binder: Write failure EFAULT in pid:159 [ 214.173471][ T8437] overlay: ./file0 is not a directory [ 214.312862][ T66] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 214.451836][ T66] usb 2-1: device descriptor read/64, error -71 [ 214.707229][ T66] usb 2-1: device descriptor read/64, error -71 [ 214.963026][ T66] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 215.101582][ T66] usb 2-1: device descriptor read/64, error -71 [ 215.357427][ T66] usb 2-1: device descriptor read/64, error -71 [ 215.474780][ T66] usb usb2-port1: attempt power cycle [ 215.890354][ T66] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 215.961314][ T66] usb 2-1: device descriptor read/8, error -71 [ 216.115202][ T66] usb 2-1: device descriptor read/8, error -71 [ 216.125574][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.132659][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.147520][ T8498] bridge_slave_0: entered allmulticast mode [ 216.154063][ T8498] bridge_slave_0: entered promiscuous mode [ 216.160643][ T8491] netlink: 'syz.2.2745': attribute type 4 has an invalid length. [ 216.174505][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.182536][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.189871][ T8498] bridge_slave_1: entered allmulticast mode [ 216.197558][ T8498] bridge_slave_1: entered promiscuous mode [ 216.207782][ T8517] 9pnet_fd: Insufficient options for proto=fd [ 216.285791][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.292849][ T8498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.300180][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.307428][ T8498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.330129][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.337574][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.347596][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.354684][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.364068][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.371159][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.380691][ T66] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 216.400519][ T8498] veth0_vlan: entered promiscuous mode [ 216.411651][ T8498] veth1_macvtap: entered promiscuous mode [ 216.418619][ T66] usb 2-1: device descriptor read/8, error -71 [ 216.442258][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 216.442279][ T36] audit: type=1400 audit(206.247:9825): avc: denied { read write } for pid=8529 comm="syz.0.2744" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.471665][ T36] audit: type=1400 audit(206.247:9826): avc: denied { open } for pid=8529 comm="syz.0.2744" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.562855][ T66] usb 2-1: device descriptor read/8, error -71 [ 216.679192][ T66] usb usb2-port1: unable to enumerate USB device [ 217.346287][ T8577] netlink: 'syz.0.2768': attribute type 3 has an invalid length. [ 217.354939][ T36] audit: type=1400 audit(207.110:9827): avc: denied { nlmsg_write } for pid=8576 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 217.375320][ T36] audit: type=1400 audit(207.119:9828): avc: denied { accept } for pid=8576 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 217.403412][ T36] audit: type=1400 audit(207.147:9829): avc: denied { map } for pid=8578 comm="syz.0.2769" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.433234][ T8583] rust_binder: 12: no such ref 1 [ 217.438406][ T8583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 217.539611][ T8608] 9pnet_fd: Insufficient options for proto=fd [ 217.735743][ T8619] rust_binder: Error while translating object. [ 217.735778][ T8619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 217.741994][ T8619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 218.011453][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 218.132176][ T8632] rust_binder: 23: no such ref 3 [ 218.137206][ T8632] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 218.185544][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.198468][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.208588][ T10] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 218.217908][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.227089][ T10] usb 2-1: config 0 descriptor?? [ 218.242280][ T8646] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 218.252688][ T8646] fuse: Bad value for 'fd' [ 218.274614][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 218.557592][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 218.563778][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 218.577918][ T10] usb 2-1: USB disconnect, device number 37 [ 218.587782][ T8675] rust_binder: Error in use_page_slow: ESRCH [ 218.587809][ T8675] rust_binder: use_range failure ESRCH [ 218.593832][ T8675] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 218.599518][ T8675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 218.607542][ T8675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38 [ 218.917452][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 219.019789][ T8697] fuse: Bad value for 'group_id' [ 219.024807][ T8697] fuse: Bad value for 'group_id' [ 219.030465][ T8697] netlink: 'syz.3.2811': attribute type 10 has an invalid length. [ 219.066665][ T10] usb 2-1: device descriptor read/64, error -71 [ 219.114533][ T8705] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2814'. [ 219.140639][ T8708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2815'. [ 219.322461][ T10] usb 2-1: device descriptor read/64, error -71 [ 219.563223][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.563248][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.569772][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.576359][ T8721] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 219.577418][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.582915][ T8721] rust_binder: Error while translating object. [ 219.591537][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 219.592144][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.599133][ T8721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.604682][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.612033][ T8721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 219.618837][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.643516][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.649958][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.656440][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.662878][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.669359][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.675835][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.682381][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.688945][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.695379][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.702212][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.708800][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.715237][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.721886][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.728353][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.734778][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.741574][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.748056][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.754550][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.761078][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.767541][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.774127][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.780584][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.787077][ T10] usb 2-1: device descriptor read/64, error -71 [ 219.793617][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.799915][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.806416][ T8722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.051223][ T10] usb 2-1: device descriptor read/64, error -71 [ 220.149820][ T8745] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.151176][ T8745] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.205274][ T8746] @0Ù: renamed from bond_slave_1 [ 220.242753][ T10] usb usb2-port1: attempt power cycle [ 220.556624][ T36] audit: type=1400 audit(210.112:9830): avc: denied { read } for pid=8756 comm="syz.3.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 220.697474][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 220.719921][ T10] usb 2-1: device descriptor read/8, error -71 [ 220.858625][ T10] usb 2-1: device descriptor read/8, error -71 [ 220.936487][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2833'. [ 221.065852][ T8764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 221.890230][ T8797] rust_binder: Error while translating object. [ 221.899582][ T8797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 221.905838][ T8797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:195 [ 222.020148][ T8812] No source specified [ 222.033944][ T8812] batadv_slave_1: entered promiscuous mode [ 222.060106][ T36] audit: type=1400 audit(211.519:9831): avc: denied { create } for pid=8811 comm="syz.0.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 222.080485][ T8811] batadv_slave_1: left promiscuous mode [ 222.111229][ T8819] rust_binder: Write failure EFAULT in pid:204 [ 222.116929][ T8824] binder: Unknown parameter '0xffffffffffffffff' [ 222.320286][ T8850] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2863'. [ 222.373608][ T8835] fuse: root generation should be zero [ 222.379628][ T8853] random: crng reseeded on system resumption [ 222.521571][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 222.722571][ T560] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 222.882450][ T560] usb 1-1: Using ep0 maxpacket: 32 [ 222.885841][ T8861] netlink: 'syz.3.2867': attribute type 27 has an invalid length. [ 222.888972][ T560] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.904280][ T560] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.912971][ T560] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.922235][ T560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.932129][ T560] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.942432][ T560] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.955680][ T560] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 222.965012][ T560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.976634][ T560] usb 1-1: config 0 descriptor?? [ 223.116339][ T8874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 223.116378][ T8874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:213 [ 223.162089][ T8883] fuse: Bad value for 'fd' [ 223.189881][ T36] audit: type=1326 audit(212.580:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.1.2877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a7d38efc9 code=0x0 [ 223.199122][ T560] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 223.229110][ T560] usb 1-1: USB disconnect, device number 49 [ 223.236254][ T560] usblp0: removed [ 223.692516][ T331] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 223.852376][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 223.864230][ T331] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.880456][ T331] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.895100][ T331] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.904263][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.914377][ T331] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.924945][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.938141][ T331] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.947397][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.956472][ T331] usb 1-1: config 0 descriptor?? [ 224.109535][ T4055] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.185777][ T331] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 224.609432][ T8922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8922 comm=syz.2.2889 [ 224.771185][ T331] usb 1-1: USB disconnect, device number 50 [ 224.778213][ T331] usblp0: removed [ 225.568440][ T560] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 225.729467][ T560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.740458][ T560] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.750249][ T560] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.763182][ T560] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.772239][ T560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.780854][ T560] usb 1-1: config 0 descriptor?? [ 225.860611][ T8951] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2900'. [ 225.885593][ T8953] mmap: syz.3.2901 (8953): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 226.036841][ T36] audit: type=1400 audit(215.253:9833): avc: denied { getopt } for pid=8965 comm="syz.2.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.214485][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.221977][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.229407][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.236827][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.244258][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.251673][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.259232][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.266686][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.271920][ T7205] Bluetooth: hci0: command 0x1003 tx timeout [ 226.272992][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.286202][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.293634][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.301017][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.308435][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.315859][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.323235][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.330644][ T560] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 226.338196][ T560] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 226.347109][ T560] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 226.485612][ T10] usb 1-1: USB disconnect, device number 51 [ 226.585473][ T8984] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 226.594267][ T8984] rust_binder: Write failure EINVAL in pid:95 [ 226.626097][ T8990] incfs: Error accessing: : 1 [ 226.626097][ T8990] ivsize : 0 [ 226.626097][ T8990] maxauthsize : 20 [ 226.626097][ T8990] geniv : [ 226.626097][ T8990] [ 226.626097][ T8990] name : __rfc4106(gcm(aes)) [ 226.626097][ T8990] driver : cryptd(__rfc4106-gcm-aesni-avx) [ 226.626097][ T8990] module : kernel [ 226.626097][ T8990] priority : 550 [ 226.626097][ T8990] refcnt : 2 [ 226.626097][ T8990] selftest : passed [ 226.626097][ T8990] internal : yes [ 226.626097][ T8990] type : aead [ 226.626097][ T8990] async : yes [ 226.626097][ T8990] blocksize : 1 [ 226.626097][ T8990] ivsize : 8 [ 226.626097][ T8990] maxauthsize : 16 [ 226.626097][ T8990] geniv : [ 226.626097][ T8990] [ 226.626097][ T8990] name : seqiv(rfc4106(gcm(aes))) [ 226.626097][ T8990] driver : seqiv(rfc4106-gcm-aesni-avx) [ 226.626097][ T8990] module : kernel [ 226.626097][ T8990] priority : 500 [ 226.626097][ T8990] refcnt : 2 [ 226.626097][ T8990] selftest : passed [ 226.626097][ T8990] internal : no [ 226.626097][ T8990] type : aead [ 226.626097][ T8990] async : yes [ 226.626097][ T8990] blocksize : 1 [ 226.626097][ T8990] ivsize : 8 [ 226.626097][ T8990] maxauthsize : 16 [ 226.626097][ T8990] geniv : [ 226.626097][ T8990] [ 226.626097][ T8990] name : rfc7539(chacha20,poly1305) [ 226.626097][ T8990] driver : rfc7539(chacha20-simd,poly1305-simd) [ 226.626097][ T8990] module : kernel [ 226.626097][ T8990] priority : 300 [ 226.626097][ T8990] refcnt : 1 [ 226.626097][ T8990] selftest : passed [ 226.626097][ T8990] internal : no [ 226.626097][ T8990] type : aead [ 226.626097][ T8990] async : no [ 226.626097][ T8990] blocksize : 1 [ 226.626097][ T8990] ivsize : 12 [ 226.626097][ T8990] maxauthsize : 16 [ 226.626097][ T8990] geniv : [ 226.632704][ T8990] incfs: mount failed -36 [ 226.822192][ T8994] rust_binder: 99: no such ref 1 [ 226.852026][ T9000] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 226.852045][ T9000] rust_binder: Error while translating object. [ 226.864258][ T9000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.870550][ T9000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 227.050720][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2927'. [ 227.103296][ T66] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 227.167287][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 227.275145][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.286354][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.296278][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.309519][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.316811][ T10] usb 1-1: device descriptor read/64, error -71 [ 227.318629][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.336462][ T66] usb 2-1: config 0 descriptor?? [ 227.504030][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 227.520979][ T9060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9060 comm=syz.3.2938 [ 227.536067][ T9060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9060 comm=syz.3.2938 [ 227.582939][ T10] usb 1-1: device descriptor read/64, error -71 [ 227.778958][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.786512][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.793915][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.801384][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.808826][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.816258][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.823711][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.831230][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.838626][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.846147][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.849412][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 227.853588][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.868563][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.876073][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.883587][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.891007][ T66] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 227.898651][ T66] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 227.907672][ T66] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 227.998635][ T10] usb 1-1: device descriptor read/64, error -71 [ 228.009951][ T331] usb 2-1: USB disconnect, device number 42 [ 228.479330][ T10] usb 1-1: device descriptor read/64, error -71 [ 228.595614][ T10] usb usb1-port1: attempt power cycle [ 228.696232][ T9095] overlay: ./file0 is not a directory [ 228.874415][ T9107] sit0: entered promiscuous mode [ 228.881130][ T9107] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 228.888996][ T9107] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2954'. [ 228.968594][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 229.001686][ T10] usb 1-1: device descriptor read/8, error -71 [ 229.140763][ T10] usb 1-1: device descriptor read/8, error -71 [ 229.396017][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 229.427968][ T10] usb 1-1: device descriptor read/8, error -71 [ 229.490932][ T9136] fuseblk: Bad value for 'fd' [ 229.544599][ T9147] netlink: 'syz.3.2961': attribute type 8 has an invalid length. [ 229.577278][ T10] usb 1-1: device descriptor read/8, error -71 [ 229.693454][ T10] usb usb1-port1: unable to enumerate USB device [ 229.778683][ T505] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 229.939717][ T505] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.949971][ T505] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 229.960837][ T505] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 229.974760][ T505] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.983867][ T505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.991933][ T505] usb 2-1: SerialNumber: syz [ 230.136552][ T9155] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2970'. [ 230.146723][ T9155] bridge0: port 3(veth0_to_bridge) entered blocking state [ 230.153923][ T9155] bridge0: port 3(veth0_to_bridge) entered disabled state [ 230.161209][ T9155] veth0_to_bridge: entered allmulticast mode [ 230.167748][ T9155] veth0_to_bridge: entered promiscuous mode [ 230.174132][ T9155] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.186522][ T9155] bridge0: port 3(veth0_to_bridge) entered blocking state [ 230.193683][ T9155] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 230.201204][ T9158] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 230.213093][ T9142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2965'. [ 230.244336][ T10] usb 2-1: USB disconnect, device number 43 [ 230.621167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 230.633327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.645413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.657724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.669842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 230.682024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.694134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.706297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.718437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 230.730693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.737977][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 230.966968][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.002177][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 253, changing to 7 [ 231.045594][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 25696, setting to 1024 [ 231.081329][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.100780][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.130473][ T10] usb 1-1: Product: syz [ 231.140402][ T10] usb 1-1: Manufacturer: syz [ 231.155243][ T10] usb 1-1: SerialNumber: syz [ 231.187010][ T10] usb 1-1: config 0 descriptor?? [ 231.200016][ T10] usb 1-1: 0:0 : invalid sync pipe. bmAttributes b9, bLength 9, bSynchAddress 64 [ 231.414086][ T9180] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 231.422008][ T10] usb 1-1: USB disconnect, device number 56 [ 235.960671][ C1] net_ratelimit: 142400 callbacks suppressed [ 235.960691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.978795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.990884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 236.002986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.014996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.027082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.039093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 236.051207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.063229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.075318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.300672][ C1] net_ratelimit: 147432 callbacks suppressed [ 241.300706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 241.318800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.330852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.342922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.354973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 241.367044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.379287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.391463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.403569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 241.415732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.640665][ C1] net_ratelimit: 147081 callbacks suppressed [ 246.640689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.658791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.670951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.683004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.695062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.707151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 246.719234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.731251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.743395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.755527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.736705][ C1] sched: DL replenish lagged too much [ 249.474109][ T9228] rust_binder: 123: no such ref 0 [ 249.483682][ T9231] __vm_enough_memory: pid: 9231, comm: syz.1.2994, bytes: 21474836480 not enough memory for the allocation [ 249.524146][ T9228] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 249.565309][ T9228] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 249.934925][ T9242] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.038707][ T36] audit: type=1400 audit(237.770:9834): avc: denied { load_policy } for pid=9272 comm="syz.1.3009" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 250.169188][ T9286] devpts: called with bogus options [ 250.339441][ T36] audit: type=1400 audit(238.061:9835): avc: denied { setopt } for pid=9308 comm="syz.0.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.378354][ T9314] netlink: 'syz.0.3015': attribute type 4 has an invalid length. [ 250.386449][ T36] audit: type=1400 audit(238.070:9836): avc: denied { ioctl } for pid=9308 comm="syz.0.3014" path="socket:[35605]" dev="sockfs" ino=35605 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.411804][ T9314] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3015'. [ 250.479963][ T36] audit: type=1400 audit(238.192:9837): avc: denied { accept } for pid=9317 comm="syz.0.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 250.506679][ T9319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 250.506716][ T9319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:133 [ 250.560881][ T9327] binder: Bad value for 'defcontext' [ 250.584564][ T9328] binder: Bad value for 'defcontext' [ 250.875373][ T9355] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3028'. [ 250.886249][ T9355] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3028'. [ 250.895416][ T331] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 251.064042][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 251.071849][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.090902][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.101831][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.111186][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.119420][ T331] usb 1-1: Product: syz [ 251.123703][ T331] usb 1-1: Manufacturer: syz [ 251.128540][ T331] usb 1-1: SerialNumber: syz [ 251.160843][ T36] audit: type=1400 audit(238.830:9838): avc: denied { execute } for pid=9382 comm="syz.1.3036" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 251.324621][ T9389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 251.324661][ T9389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:299 [ 251.361268][ T9393] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 251.377840][ T9393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 251.403488][ T9395] 9pnet_fd: Insufficient options for proto=fd [ 251.421973][ T9395] fuse: Bad value for 'rootmode' [ 251.575900][ T331] usb 1-1: cannot find UAC_HEADER [ 251.597884][ T331] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 251.607644][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 251.634082][ T9237] udevd[9237]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 251.653611][ T331] usb 1-1: USB disconnect, device number 57 [ 251.794787][ T10] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 251.810162][ T10] usb 2-1: config 0 has no interface number 0 [ 251.827362][ T10] usb 2-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 251.848969][ T10] usb 2-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.866866][ T10] usb 2-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.889065][ T10] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 251.906087][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.925059][ T10] usb 2-1: Product: syz [ 251.931107][ T10] usb 2-1: Manufacturer: syz [ 251.938206][ T10] usb 2-1: SerialNumber: syz [ 251.952606][ T10] usb 2-1: config 0 descriptor?? [ 251.968874][ T9391] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.977278][ T10] ftdi_sio 2-1:0.99: FTDI USB Serial Device converter detected [ 251.980704][ C1] net_ratelimit: 91537 callbacks suppressed [ 251.980725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.993225][ T10] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 252.002969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 252.021520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.033636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.045885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 252.058029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.070115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.082357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.094417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.106605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 252.198397][ T9408] hub 1-0:1.0: USB hub found [ 252.224715][ T9408] hub 1-0:1.0: 1 port detected [ 252.629235][ T10] usb 2-1: USB disconnect, device number 44 [ 252.646936][ T10] ftdi_sio 2-1:0.99: device disconnected [ 252.890047][ T9438] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.898114][ T9439] rust_binder: Write failure EFAULT in pid:155 [ 253.163217][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3057'. [ 253.216541][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 253.239285][ T9455] 9pnet_fd: Insufficient options for proto=fd [ 253.259884][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 253.304808][ T9457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.340095][ T9463] random: crng reseeded on system resumption [ 253.695778][ T36] audit: type=1400 audit(241.204:9839): avc: denied { map } for pid=9477 comm="syz.0.3065" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.804278][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 253.974198][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 253.982125][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.992946][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.012969][ T725] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 254.027397][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 254.036564][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.048087][ T10] usb 2-1: SerialNumber: syz [ 254.179928][ T725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.190988][ T725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.202267][ T725] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 254.221543][ T725] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.229591][ T725] usb 1-1: Manufacturer: syz [ 254.256870][ T725] usb 1-1: config 0 descriptor?? [ 254.281048][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 254.297071][ T10] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 254.377770][ T10] usb 2-1: USB disconnect, device number 45 [ 254.494149][ T725] usbhid 1-1:0.0: can't add hid device: -71 [ 254.509489][ T725] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 254.519168][ T725] usb 1-1: USB disconnect, device number 58 [ 254.551408][ T9507] kvm: MWAIT instruction emulated as NOP! [ 254.896585][ T9518] x_tables: duplicate underflow at hook 1 [ 254.969934][ T9522] netlink: 'syz.1.3076': attribute type 29 has an invalid length. [ 255.085247][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 255.116779][ T9527] bridge_slave_1: left allmulticast mode [ 255.133860][ T9527] bridge_slave_1: left promiscuous mode [ 255.149785][ T9530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3080'. [ 255.165587][ T36] audit: type=1400 audit(242.583:9840): avc: denied { nlmsg_tty_audit } for pid=9529 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 255.199694][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.220033][ T9527] bridge_slave_0: left allmulticast mode [ 255.225883][ T9527] bridge_slave_0: left promiscuous mode [ 255.236972][ T9533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=9533 comm=syz.2.3081 [ 255.253159][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.278596][ T331] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 256.398370][ T9562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.398404][ T9562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:324 [ 256.470625][ T331] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 256.503050][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.534769][ T331] usb 1-1: config 0 descriptor?? [ 256.691847][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 256.874794][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.894883][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 256.922697][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 256.946317][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.966198][ T10] usb 2-1: config 0 descriptor?? [ 256.998751][ T331] samsung 0003:0419:0001.0013: unknown main item tag 0x7 [ 257.020004][ T331] samsung 0003:0419:0001.0013: hidraw0: USB HID v0.05 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 257.170111][ T9583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3097'. [ 257.320695][ C1] net_ratelimit: 63106 callbacks suppressed [ 257.320718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 257.338831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.350953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.363118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.375216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.387313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 257.399620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.411714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.421047][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 257.423890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 257.438809][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.441800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.460488][ T10] usb 2-1: USB disconnect, device number 46 [ 257.516483][ T9] usb 1-1: USB disconnect, device number 59 [ 262.660721][ C1] net_ratelimit: 110022 callbacks suppressed [ 262.660740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 262.678854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.690932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.703063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.715137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.727202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 262.739438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.751462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.763628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 262.775700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.136019][ T4030] bridge_slave_1: left allmulticast mode [ 264.141713][ T4030] bridge_slave_1: left promiscuous mode [ 264.151808][ T4030] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.168475][ T4030] bridge_slave_0: left allmulticast mode [ 264.174177][ T4030] bridge_slave_0: left promiscuous mode [ 264.180019][ T4030] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.352298][ T4030] tipc: Disabling bearer [ 264.357613][ T4030] tipc: Left network mode [ 264.369971][ T4030] veth1_macvtap: left promiscuous mode [ 264.375593][ T4030] veth0_vlan: left promiscuous mode [ 268.000803][ C1] net_ratelimit: 109796 callbacks suppressed [ 268.000821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.018855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.031003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 268.043127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.055186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.067361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.079417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.091471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 268.103705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.115770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.340767][ C1] net_ratelimit: 109382 callbacks suppressed [ 273.340785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.358802][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.370936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 273.383048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.395116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.407209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.419216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.431315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 273.443552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.455567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.680752][ C1] net_ratelimit: 110741 callbacks suppressed [ 278.680770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 278.699000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.711091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.723223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.735273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.747380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 278.759506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.771563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.783660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.795709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.338377][ T66] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 280.581182][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.598498][ T9655] devpts: called with bogus options [ 280.600503][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.663271][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 280.834953][ T10] usb 2-1: config 0 has no interfaces? [ 280.845886][ T10] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 280.876446][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 280.906047][ T10] usb 2-1: SerialNumber: syz [ 280.917569][ T10] usb 2-1: config 0 descriptor?? [ 281.112745][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.144368][ T66] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.164896][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.176302][ T9650] rust_binder: inc_ref_done called when no active inc_refs [ 281.176326][ T9650] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 281.186959][ T66] usb 1-1: config 0 descriptor?? [ 281.207759][ T9650] rust_binder: 341: no such ref 2 [ 281.212921][ T9650] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 281.213490][ T9] usb 2-1: USB disconnect, device number 47 [ 281.536865][ T9698] netlink: 'syz.3.3132': attribute type 10 has an invalid length. [ 281.544844][ T9698] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3132'. [ 281.554355][ T9698] bridge_slave_1: left promiscuous mode [ 281.560231][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.644908][ T9705] x_tables: unsorted underflow at hook 2 [ 281.647583][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.655342][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3134'. [ 281.675987][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.683423][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.708698][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.716127][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.740664][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.748077][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.825797][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.833352][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.857683][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.889294][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.896756][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.921477][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.928923][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.953317][ T66] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 281.961994][ T66] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 281.996539][ T66] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 282.085399][ T66] usb 1-1: USB disconnect, device number 60 [ 282.273652][ T9732] 9pnet_fd: Insufficient options for proto=fd [ 282.358007][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 282.529676][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.551549][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.577818][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.617635][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.636131][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.658130][ T9] usb 2-1: config 0 descriptor?? [ 283.102130][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 283.116701][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 283.131575][ T9] usb 2-1: USB disconnect, device number 48 [ 283.185383][ T9754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 283.752578][ T9783] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 283.784859][ T9783] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 283.870436][ T9795] netlink: 'syz.1.3167': attribute type 27 has an invalid length. [ 283.893069][ T9795] sit0: left promiscuous mode [ 284.020832][ C1] net_ratelimit: 73516 callbacks suppressed [ 284.020855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 284.039077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.051203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.063396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.075567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.087762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.100302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 284.112498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.124628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.136803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.143362][ T36] audit: type=1326 audit(269.772:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9809 comm="syz.3.3171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ff8efc9 code=0x0 [ 284.315012][ T9805] rust_binder: Write failure EFAULT in pid:249 [ 284.408468][ T9822] netlink: 'syz.3.3176': attribute type 4 has an invalid length. [ 284.427435][ T36] audit: type=1400 audit(270.035:9842): avc: denied { append } for pid=9823 comm="syz.1.3177" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.458042][ T9822] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3176'. [ 284.483603][ T36] audit: type=1400 audit(270.035:9843): avc: denied { ioctl } for pid=9823 comm="syz.1.3177" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.570823][ T9833] rust_binder: Write failure EFAULT in pid:378 [ 284.639461][ T4056] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.653934][ T4056] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.671050][ T725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.684555][ T36] audit: type=1326 audit(270.279:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.1.3181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a7d38efc9 code=0x0 [ 284.852206][ T725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.944746][ T36] audit: type=1400 audit(270.523:9845): avc: denied { mounton } for pid=9840 comm="syz.0.3182" path="/82/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 285.146891][ T331] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 285.432936][ T9868] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 285.855056][ T9904] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3205'. [ 285.865405][ T36] audit: type=1400 audit(271.377:9846): avc: denied { getopt } for pid=9903 comm="syz.2.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 286.019454][ T9920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 286.019492][ T9920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:260 [ 286.074115][ T9925] 9pnet_fd: Insufficient options for proto=fd [ 286.565370][ T36] audit: type=1400 audit(272.043:9847): avc: denied { remount } for pid=9958 comm="syz.3.3223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 286.731317][ T9962] tipc: Can't bind to reserved service type 0 [ 286.843805][ T9968] binder: Binderfs stats mode cannot be changed during a remount [ 286.904204][ T9976] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 286.904315][ T9976] rust_binder: Error while translating object. [ 286.923833][ T9976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.936781][ T9976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 287.029426][ T9984] fuseblk: Bad value for 'rootmode' [ 287.360557][ T331] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 287.585734][ T331] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 287.638024][ T331] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 287.706264][ T331] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 287.757587][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.985720][ T9990] binder: Bad value for 'defcontext' [ 288.432834][ T331] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 288.521943][ T331] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input17 [ 288.628190][ T331] usb 1-1: USB disconnect, device number 61 [ 288.793478][ T9999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9999 comm=syz.1.3235 [ 289.105100][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.342404][T10010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.360770][ C1] net_ratelimit: 67219 callbacks suppressed [ 289.360794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.385496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 289.397633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.409750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.421893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.434009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.446117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 289.458363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 289.470592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.482769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.912936][T10021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 289.912978][T10021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:294 [ 290.102906][T10025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.149530][ T331] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 290.289700][T10054] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3254'. [ 290.353224][ T331] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 290.362436][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.375238][ T331] usb 2-1: config 0 descriptor?? [ 290.382905][ T331] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 290.392703][ T331] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 290.620808][T10061] sit0: entered promiscuous mode [ 290.635822][T10061] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3244'. [ 290.655812][ T331] usb 2-1: USB disconnect, device number 49 [ 290.662396][ T331] ftdi_sio 2-1:0.0: device disconnected [ 290.809991][T10069] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 290.820192][ T36] audit: type=1400 audit(276.030:9848): avc: denied { relabelto } for pid=10068 comm="syz.1.3258" name="file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 290.885663][ T36] audit: type=1400 audit(276.058:9849): avc: denied { associate } for pid=10068 comm="syz.1.3258" name="file0" dev="tmpfs" ino=784 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 291.121372][ T36] audit: type=1400 audit(276.321:9850): avc: denied { unlink } for pid=7441 comm="syz-executor" name="file0" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 291.181036][T10073] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 291.190308][ T36] audit: type=1400 audit(276.377:9851): avc: granted { setsecparam } for pid=10074 comm="syz.1.3262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 291.815796][T10146] netlink: 'syz.1.3266': attribute type 6 has an invalid length. [ 291.857584][T10143] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.905240][T10146] >: renamed from veth0_vlan (while UP) [ 292.422921][T10163] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 292.445033][T10165] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3287'. [ 292.454267][T10163] overlayfs: failed to set xattr on upper [ 292.478877][T10163] overlayfs: ...falling back to redirect_dir=nofollow. [ 292.622660][ T36] audit: type=1326 audit(277.728:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10168 comm="syz.3.3288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ff8efc9 code=0x7fc00000 [ 292.824237][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3291'. [ 293.020339][ T4055] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.335692][T10193] devpts: called with bogus options [ 293.422071][T10193] 9pnet_fd: p9_fd_create_tcp (10193): problem binding to privport [ 293.866650][T10217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10217 comm=syz.0.3302 [ 293.940366][ T36] audit: type=1326 audit(278.957:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.3.3304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ff8efc9 code=0x0 [ 294.543985][T10224] 9pnet: Could not find request transport: unIx [ 294.550766][ T36] audit: type=1400 audit(279.530:9854): avc: denied { create } for pid=10222 comm="syz.0.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 294.700827][ C1] net_ratelimit: 58601 callbacks suppressed [ 294.700851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.718907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.730979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.743076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 294.755359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 294.767630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.779684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.791884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.803941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.816053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.063803][T10252] vcan0: entered allmulticast mode [ 295.159137][ T7205] Bluetooth: hci0: command 0x1003 tx timeout [ 295.165221][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.302624][T10263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.303615][T10263] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 295.317117][T10263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 295.334200][T10263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:439 [ 295.387593][T10265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.406662][T10265] rust_binder: Error while translating object. [ 295.424103][T10265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 295.433793][T10265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 295.509698][T10274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.666155][ T36] audit: type=1400 audit(280.580:9855): avc: denied { read } for pid=10276 comm="syz.3.3321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 295.787066][ T331] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 295.809540][T10288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10288 comm=syz.3.3325 [ 295.822458][T10288] netlink: 'syz.3.3325': attribute type 15 has an invalid length. [ 295.959948][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.968253][ T331] usb 2-1: not running at top speed; connect to a high speed hub [ 295.977402][ T331] usb 2-1: config 1 has an invalid interface number: 121 but max is 0 [ 295.985906][ T331] usb 2-1: config 1 has no interface number 0 [ 296.001136][ T331] usb 2-1: config 1 interface 121 has no altsetting 0 [ 296.010387][ T331] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 296.019994][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.028183][ T331] usb 2-1: Product: syz [ 296.032503][ T331] usb 2-1: Manufacturer: ,êŠå©§ì—½ä®‘í é³´ìˆ©îž§î„³ê”²í‚„ᢩ辬졘ꚯ뫭ãŒé§”질⛸䫕ྃﱵ薶ç‡á„胬ã›áŽç¦‚⮘紒栢í€ä©°ï±»ä®¥é£²à§€ì¾˜è¨í•™ì¦áœ¹å¬¥ï ½ãª‘à´‡ã€‚è€‰æ£ [ 296.055159][ T331] usb 2-1: SerialNumber: syz [ 296.286894][T10274] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 296.294351][T10274] rust_binder: Read failure Err(EAGAIN) in pid:444 [ 296.298290][ T331] usb_ehset_test 2-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 296.318805][ T331] usb 2-1: USB disconnect, device number 50 [ 296.397563][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3329'. [ 296.410502][ T36] audit: type=1326 audit(281.284:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.0.3329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f511b78efc9 code=0x0 [ 296.447818][ T36] audit: type=1326 audit(281.312:9857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.2.3330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f38b8efc9 code=0x0 [ 296.958693][T10309] SELinux: security_context_str_to_sid (EþàL|¶¾<…) failed with errno=-22 [ 297.193331][ T36] audit: type=1326 audit(282.006:9858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.3.3328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4ff8efc9 code=0x0 [ 297.248244][ T331] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 297.419958][ T331] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.443772][ T331] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.468357][ T331] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 297.492345][ T331] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 297.505453][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.519390][T10312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.519466][T10382] raw_sendmsg: syz.2.3359 forgot to set AF_INET. Fix it! [ 298.826043][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.985839][ T331] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 298.997685][ T331] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input18 [ 299.022298][ T331] usb 2-1: USB disconnect, device number 51 [ 299.114828][T10405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10405 comm=syz.3.3366 [ 299.213336][ T36] audit: type=1400 audit(283.902:9859): avc: denied { connect } for pid=10411 comm="syz.3.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.260753][T10420] fuse: Bad value for 'user_id' [ 299.267705][T10420] fuse: Bad value for 'user_id' [ 299.301196][ T36] audit: type=1400 audit(283.995:9860): avc: denied { setattr } for pid=10423 comm="syz.3.3372" path="/389/file0" dev="tmpfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.040771][ C1] net_ratelimit: 69317 callbacks suppressed [ 300.040794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 300.058981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 300.064514][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 300.071239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.091938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.104062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.116134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.128358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.140628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 300.152764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.164957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.987708][ T36] audit: type=1400 audit(286.500:9861): avc: denied { shutdown } for pid=10488 comm="syz.0.3392" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.199479][T10491] netlink: 'syz.0.3393': attribute type 12 has an invalid length. [ 305.380876][ C1] net_ratelimit: 75770 callbacks suppressed [ 305.380904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 305.380968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.387039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.399221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.410937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.423285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.435263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.447316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.459349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.471215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.720809][ C0] net_ratelimit: 101978 callbacks suppressed [ 310.720834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.720957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 310.726968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.739156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.751068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.763064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.774875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.786878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.798892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.810807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.358060][ T66] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 312.895800][ T66] usb 2-1: Invalid ep0 maxpacket: 16 [ 313.060028][ T66] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 313.362423][ T66] usb 2-1: Invalid ep0 maxpacket: 16 [ 313.394278][ T66] usb usb2-port1: attempt power cycle [ 316.060867][ C1] net_ratelimit: 98984 callbacks suppressed [ 316.060891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 316.060928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.067032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.078989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.090921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.102773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.114752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.126784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.138683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.150541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.926829][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 321.400852][ C1] net_ratelimit: 97256 callbacks suppressed [ 321.400876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.400890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.400994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.406977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.419151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.431336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 321.442963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.454818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.466927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.478901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.740869][ C0] net_ratelimit: 98689 callbacks suppressed [ 326.740892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.740978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 326.746980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.758988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.770982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.782880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.794711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.806701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.818765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.830661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.080871][ C0] net_ratelimit: 101841 callbacks suppressed [ 332.080898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.081023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.087216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.099349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.111252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.123225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.135327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.147166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.159128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.171062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.420854][ C1] net_ratelimit: 102183 callbacks suppressed [ 337.420878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.420885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.421021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.427034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.438928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.450828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.462940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.475026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.486834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.498779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 342.760848][ C1] net_ratelimit: 99024 callbacks suppressed [ 342.760874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.760938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.767102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 342.778919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.790899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.802975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.814925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.826756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.838746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.850765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.100899][ C1] net_ratelimit: 101997 callbacks suppressed [ 348.100925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.100936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.101017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.107101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.119049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.130983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.142853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.154928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.167097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 348.178938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 353.440881][ C0] net_ratelimit: 95677 callbacks suppressed [ 353.440911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.440987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.446986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.459025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.471067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.483187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 353.495101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.506980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.518922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 353.530962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.128125][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.780911][ C1] net_ratelimit: 101226 callbacks suppressed [ 358.780935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.780965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.787091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.799058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.811274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 358.823170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.835016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.847010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 358.859010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.871137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.120916][ C1] net_ratelimit: 98978 callbacks suppressed [ 364.120940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.120990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.127108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 364.139238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.151091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.163074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.175105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.187028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.198885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 364.210770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.460931][ C0] net_ratelimit: 99014 callbacks suppressed [ 369.460973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.461021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 369.467138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.479117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.491006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.503232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.514963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.526865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.538893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.550917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.800938][ C1] net_ratelimit: 99573 callbacks suppressed [ 374.800963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.801008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.807087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 374.819276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.831747][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.843544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.855403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.867350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.879584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 374.891422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.140921][ C0] net_ratelimit: 97636 callbacks suppressed [ 380.140945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.141021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.147044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.158916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.170899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.183030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.194967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.206777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.218763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.231011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.480977][ C1] net_ratelimit: 97932 callbacks suppressed [ 385.481001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.481047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.487310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.499003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.511013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.523053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.534978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.546808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.558780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.570841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.820995][ C1] net_ratelimit: 96664 callbacks suppressed [ 390.821021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 390.821080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.827058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.839166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.851009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.862993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.875071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.886993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.898933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 390.910760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.160974][ C0] net_ratelimit: 95409 callbacks suppressed [ 396.160999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.161004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.161247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 396.167028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.179146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.191158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.203138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.214974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.226944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 396.239109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.501058][ C0] net_ratelimit: 97383 callbacks suppressed [ 401.501080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.501148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.507125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.519326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 401.531338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.543140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.555139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.567143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.579061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.590951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 406.841000][ C0] net_ratelimit: 97402 callbacks suppressed [ 406.841026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.841131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 406.847067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.859102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.871246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.883067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.894919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.906964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 406.918875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.930765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.181000][ C1] net_ratelimit: 99352 callbacks suppressed [ 412.181025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.181142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.187063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 412.199104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.211410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.223236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.235140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.247027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.259151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 412.271076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.521045][ C1] net_ratelimit: 95985 callbacks suppressed [ 417.521070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 417.521112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.527112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.539257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.551088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 417.562952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.575025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 417.586890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.598772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.610768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.861018][ C1] net_ratelimit: 98871 callbacks suppressed [ 422.861043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.861100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.867206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.879141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.891031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 422.902872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.915016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 422.927010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.939071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.950910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.201036][ C0] net_ratelimit: 97330 callbacks suppressed [ 428.201063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.201063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.201406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.207169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.219026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.230966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.242995][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.254993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.266877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.278828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.211479][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 433.541053][ C0] net_ratelimit: 106496 callbacks suppressed [ 433.541079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.541221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 433.547230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.559097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.571075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.583097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.595027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.606935][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 433.618783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.630843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.881043][ C0] net_ratelimit: 135370 callbacks suppressed [ 438.881068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.881097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.887161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.899305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 438.911323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.923149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.935220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.947264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.959191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.971067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 444.221058][ C1] net_ratelimit: 132317 callbacks suppressed [ 444.221084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 444.221120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.227304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 444.239291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.251226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.263115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.275364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.287083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.298932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.310900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.561099][ C0] net_ratelimit: 132500 callbacks suppressed [ 449.561124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.561135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.561288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.567267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.579261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.591268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.603399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 449.615317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.627280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.639176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.901169][ C0] net_ratelimit: 131950 callbacks suppressed [ 454.901193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.901388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.907305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.919315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.931553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.943398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.955243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.967224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 454.979281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.991248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.241081][ C1] net_ratelimit: 131935 callbacks suppressed [ 460.241107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.241161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.247267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 460.259135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.271175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.283166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.295025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.306991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 460.319056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 460.330953][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.581092][ C1] net_ratelimit: 133475 callbacks suppressed [ 465.581116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.581117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.581179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.587255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.599200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.611267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 465.623045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.635033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.647054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 465.659005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.921132][ C1] net_ratelimit: 137471 callbacks suppressed [ 470.921156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.921197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.927339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 470.939293][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.951128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.963068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.975071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.987172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.999041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 471.010907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.261173][ C1] net_ratelimit: 133177 callbacks suppressed [ 476.261199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 476.261213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.261335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.267447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 476.279309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.291304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.303236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.315380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.327067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.338991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.601142][ C0] net_ratelimit: 130821 callbacks suppressed [ 481.601168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.601313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.607276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.619349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.631410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.643860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.655718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.667735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.679691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.691595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.376600][ T37] INFO: task syz.0.2791:8655 blocked for more than 122 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 484.500475][ T37] Not tainted syzkaller #0 [ 484.505471][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.536843][ T36] audit: type=1400 audit(457.722:9862): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[700]" dev="pipefs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 485.089022][ T37] task:syz.0.2791 state:D stack:0 pid:8655 tgid:8655 ppid:8498 flags:0x00004006 [ 485.099363][ T37] Call Trace: [ 485.102666][ T37] [ 485.105610][ T37] __schedule+0x1322/0x1df0 [ 485.110163][ T37] ? __sched_text_start+0x10/0x10 [ 485.115213][ T37] ? __kasan_check_write+0x18/0x20 [ 485.120360][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 485.125585][ T37] ? __kasan_check_write+0x18/0x20 [ 485.130731][ T37] ? trace_contention_begin+0xc0/0xc0 [ 485.136124][ T37] ? unwind_get_return_address+0x51/0x90 [ 485.141778][ T37] schedule+0xc6/0x240 [ 485.145868][ T37] schedule_preempt_disabled+0x14/0x30 [ 485.151359][ T37] __mutex_lock+0x81e/0x1b50 [ 485.155960][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 485.162745][ T37] ? kasan_save_track+0x4f/0x80 [ 485.167610][ T37] ? kasan_save_track+0x3e/0x80 [ 485.172492][ T37] ? kasan_save_free_info+0x4a/0x60 [ 485.177711][ T37] ? kfree+0x15c/0x460 [ 485.181788][ T37] ? kvfree+0x39/0x50 [ 485.185812][ T37] ? __tun_detach+0x112c/0x1460 [ 485.190675][ T37] ? __fput+0x1fb/0xa00 [ 485.194862][ T37] ? ____fput+0x20/0x30 [ 485.199035][ T37] ? task_work_run+0x1e0/0x250 [ 485.203827][ T37] ? do_exit+0x9bc/0x2630 [ 485.208256][ T37] ? do_group_exit+0x22a/0x300 [ 485.213034][ T37] ? get_signal+0x139d/0x14f0 [ 485.217742][ T37] ? arch_do_signal_or_restart+0x96/0x720 [ 485.223491][ T37] ? do_syscall_64+0x64/0xf0 [ 485.228112][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 485.234196][ T37] __mutex_lock_slowpath+0xe/0x20 [ 485.239248][ T37] mutex_lock+0x102/0x1c0 [ 485.243592][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 485.248464][ T37] ? __kasan_check_write+0x18/0x20 [ 485.253599][ T37] rcu_barrier+0x4d/0x530 [ 485.257966][ T37] ? __kasan_slab_free+0x6a/0x80 [ 485.262914][ T37] netdev_run_todo+0x10e/0xcb0 [ 485.267725][ T37] ? kvfree+0x39/0x50 [ 485.271729][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 485.277030][ T37] rtnl_unlock+0x12/0x20 [ 485.281309][ T37] tun_chr_close+0xc5/0x150 [ 485.285823][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 485.290953][ T37] __fput+0x1fb/0xa00 [ 485.294955][ T37] ? call_rcu+0x14/0x20 [ 485.299118][ T37] ____fput+0x20/0x30 [ 485.303145][ T37] task_work_run+0x1e0/0x250 [ 485.307753][ T37] ? __cfi_task_work_run+0x10/0x10 [ 485.312887][ T37] ? free_nsproxy+0x223/0x290 [ 485.317584][ T37] do_exit+0x9bc/0x2630 [ 485.321791][ T37] ? __sched_text_start+0x10/0x10 [ 485.326884][ T37] ? __cfi_do_exit+0x10/0x10 [ 485.331516][ T37] ? __kasan_check_write+0x18/0x20 [ 485.336702][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 485.341859][ T37] ? __kasan_check_read+0x15/0x20 [ 485.346942][ T37] ? cgroup_update_frozen+0x160/0x990 [ 485.352348][ T37] do_group_exit+0x22a/0x300 [ 485.356989][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 485.362320][ T37] get_signal+0x139d/0x14f0 [ 485.366873][ T37] arch_do_signal_or_restart+0x96/0x720 [ 485.372450][ T37] ? common_nsleep+0x93/0xb0 [ 485.377067][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 485.383239][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 485.388995][ T37] ? __kasan_check_read+0x15/0x20 [ 485.394046][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 485.400139][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 485.405613][ T37] do_syscall_64+0x64/0xf0 [ 485.410079][ T37] ? clear_bhb_loop+0x50/0xa0 [ 485.414768][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 485.420689][ T37] RIP: 0033:0x7f511b7c1885 [ 485.425143][ T37] RSP: 002b:00007f511c696f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 485.433618][ T37] RAX: fffffffffffffdfc RBX: 00007f511b9e6090 RCX: 00007f511b7c1885 [ 485.441623][ T37] RDX: 00007f511c696fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.449614][ T37] RBP: 00007f511b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.457592][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 485.465590][ T37] R13: 00007f511b9e6128 R14: 00007f511b9e6090 R15: 00007fffbe1b7fd8 [ 485.473600][ T37] [ 485.476679][ T37] INFO: task syz.2.3041:9398 blocked for more than 123 seconds. [ 485.515290][ T37] Not tainted syzkaller #0 [ 485.520277][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.531794][ T37] task:syz.2.3041 state:D stack:0 pid:9398 tgid:9398 ppid:6545 flags:0x00004006 [ 485.542059][ T37] Call Trace: [ 485.545378][ T37] [ 485.548336][ T37] __schedule+0x1322/0x1df0 [ 485.552883][ T37] ? __sched_text_start+0x10/0x10 [ 485.557966][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 485.563351][ T37] ? _raw_spin_unlock+0x45/0x60 [ 485.568230][ T37] ? __kasan_check_write+0x18/0x20 [ 485.573366][ T37] schedule+0xc6/0x240 [ 485.577516][ T37] schedule_timeout+0xb2/0x3a0 [ 485.582314][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 485.587715][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 485.593284][ T37] ? __smp_call_single_queue+0xd5/0x390 [ 485.598862][ T37] ? generic_exec_single+0x201/0x500 [ 485.604163][ T37] wait_for_common+0x359/0x630 [ 485.608968][ T37] ? wait_for_completion+0x40/0x40 [ 485.614100][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 485.619583][ T37] wait_for_completion+0x1c/0x40 [ 485.624555][ T37] rcu_barrier+0x415/0x530 [ 485.628984][ T37] netdev_run_todo+0x10e/0xcb0 [ 485.633774][ T37] ? kvfree+0x39/0x50 [ 485.637791][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 485.643101][ T37] rtnl_unlock+0x12/0x20 [ 485.647378][ T37] tun_chr_close+0xc5/0x150 [ 485.651928][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 485.657102][ T37] __fput+0x1fb/0xa00 [ 485.661120][ T37] ? call_rcu+0x14/0x20 [ 485.665326][ T37] ____fput+0x20/0x30 [ 485.669336][ T37] task_work_run+0x1e0/0x250 [ 485.673967][ T37] ? __cfi_task_work_run+0x10/0x10 [ 485.679102][ T37] ? free_nsproxy+0x223/0x290 [ 485.683815][ T37] do_exit+0x9bc/0x2630 [ 485.688013][ T37] ? __sched_text_start+0x10/0x10 [ 485.693057][ T37] ? __cfi_do_exit+0x10/0x10 [ 485.697679][ T37] ? __kasan_check_write+0x18/0x20 [ 485.702815][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 485.707960][ T37] ? __kasan_check_read+0x15/0x20 [ 485.713122][ T37] ? cgroup_update_frozen+0x160/0x990 [ 485.718544][ T37] do_group_exit+0x22a/0x300 [ 485.723155][ T37] ? cgroup_leave_frozen+0x16c/0x2b0 [ 485.728469][ T37] get_signal+0x139d/0x14f0 [ 485.733001][ T37] arch_do_signal_or_restart+0x96/0x720 [ 485.738580][ T37] ? common_nsleep+0x93/0xb0 [ 485.743189][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 485.749378][ T37] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 485.755125][ T37] ? __kasan_check_read+0x15/0x20 [ 485.760196][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 485.766280][ T37] syscall_exit_to_user_mode+0x58/0xb0 [ 485.771766][ T37] do_syscall_64+0x64/0xf0 [ 485.776201][ T37] ? clear_bhb_loop+0x50/0xa0 [ 485.780900][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 485.786805][ T37] RIP: 0033:0x7f9f38bc1885 [ 485.791238][ T37] RSP: 002b:00007f9f39a09f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 485.799664][ T37] RAX: fffffffffffffdfc RBX: 00007f9f38de5fa0 RCX: 00007f9f38bc1885 [ 485.807664][ T37] RDX: 00007f9f39a09fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.815660][ T37] RBP: 00007f9f38c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 485.823655][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 485.831634][ T37] R13: 00007f9f38de6038 R14: 00007f9f38de5fa0 R15: 00007ffe87f56898 [ 485.839635][ T37] [ 486.207589][ T37] NMI backtrace for cpu 0 [ 486.207613][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 486.207645][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.207660][ T37] Call Trace: [ 486.207669][ T37] [ 486.207679][ T37] __dump_stack+0x21/0x30 [ 486.207715][ T37] dump_stack_lvl+0x10c/0x190 [ 486.207748][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 486.207781][ T37] dump_stack+0x19/0x20 [ 486.207811][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 486.207841][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 486.207870][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 486.207899][ T37] ? sched_show_task+0x379/0x560 [ 486.207930][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 486.207957][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.207988][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.208018][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 486.208050][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 486.208080][ T37] watchdog+0xd8f/0xed0 [ 486.208114][ T37] ? __cfi_watchdog+0x10/0x10 [ 486.208145][ T37] ? __kasan_check_read+0x15/0x20 [ 486.208187][ T37] ? __kthread_parkme+0x138/0x180 [ 486.208209][ T37] ? schedule+0xc6/0x240 [ 486.208241][ T37] kthread+0x2ca/0x370 [ 486.208265][ T37] ? __cfi_watchdog+0x10/0x10 [ 486.208296][ T37] ? __cfi_kthread+0x10/0x10 [ 486.208320][ T37] ret_from_fork+0x67/0xa0 [ 486.208352][ T37] ? __cfi_kthread+0x10/0x10 [ 486.208377][ T37] ret_from_fork_asm+0x1a/0x30 [ 486.208413][ T37] [ 486.208423][ T37] Sending NMI from CPU 0 to CPUs 1: [ 486.424065][ C1] NMI backtrace for cpu 1 [ 486.424081][ C1] CPU: 1 UID: 0 PID: 208 Comm: kworker/u8:3 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 486.424105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.424118][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 486.424149][ C1] RIP: 0010:get_stack_info_noinstr+0x2e/0x130 [ 486.424187][ C1] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 d6 49 89 f4 49 89 ff e8 21 01 00 00 b3 01 84 c0 75 10 65 48 8b 04 25 00 eb 04 00 <49> 39 c4 74 14 31 db 89 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 486.424202][ C1] RSP: 0018:ffffc90000230120 EFLAGS: 00000246 [ 486.424217][ C1] RAX: ffff888120a0cc00 RBX: ffffc90000230201 RCX: ffffc90000ea8000 [ 486.424231][ C1] RDX: ffffc90000230208 RSI: ffffc90000eb0000 RDI: ffffc900002301f8 [ 486.424244][ C1] RBP: ffffc90000230148 R08: ffffc90000230200 R09: 0000000000000000 [ 486.424256][ C1] R10: ffffc90000230208 R11: fffff5200004604d R12: ffff888120a0cc00 [ 486.424270][ C1] R13: ffffc900002301f8 R14: ffffc90000230208 R15: ffffc900002301f8 [ 486.424284][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 486.424299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.424311][ C1] CR2: 000056485c977b90 CR3: 0000000174386000 CR4: 00000000003526b0 [ 486.424326][ C1] Call Trace: [ 486.424332][ C1] [ 486.424341][ C1] get_stack_info+0x3f/0x100 [ 486.424358][ C1] __unwind_start+0x20c/0x410 [ 486.424378][ C1] ? __kasan_slab_free+0x5f/0x80 [ 486.424397][ C1] ? kmem_cache_free+0x1c1/0x510 [ 486.424413][ C1] ? __kfree_skb+0x18f/0x210 [ 486.424435][ C1] ? consume_skb+0x65/0x1a0 [ 486.424455][ C1] ? netlink_broadcast_filtered+0x10e1/0x11f0 [ 486.424479][ C1] ? nlmsg_notify+0xf1/0x1b0 [ 486.424502][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 486.424529][ C1] arch_stack_walk+0xf3/0x170 [ 486.424546][ C1] stack_trace_save+0x9d/0xe0 [ 486.424570][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 486.424596][ C1] kasan_save_track+0x3e/0x80 [ 486.424620][ C1] ? br_mdb_ip_get+0x80/0x80 [ 486.424643][ C1] kasan_save_alloc_info+0x40/0x50 [ 486.424667][ C1] __kasan_slab_alloc+0x73/0x90 [ 486.424686][ C1] kmem_cache_alloc_noprof+0x1cb/0x430 [ 486.424702][ C1] ? skb_clone+0x229/0x460 [ 486.424726][ C1] skb_clone+0x229/0x460 [ 486.424749][ C1] br_flood+0x4ed/0x730 [ 486.424773][ C1] br_handle_frame_finish+0x12bb/0x1720 [ 486.424798][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 486.424825][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 486.424853][ C1] br_handle_frame+0x5a6/0xba0 [ 486.424878][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 486.424901][ C1] __netif_receive_skb_core+0xf4b/0x3940 [ 486.424936][ C1] ? ip6_mc_input+0x4f3/0x670 [ 486.424956][ C1] ? ip6_mc_input+0x4f3/0x670 [ 486.424975][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 486.424994][ C1] ? qdisc_run_end+0x120/0x120 [ 486.425015][ C1] ? ip6_rcv_finish+0x360/0x3e0 [ 486.425034][ C1] ? ipv6_rcv+0xed/0x220 [ 486.425051][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 486.425070][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 486.425087][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 486.425110][ C1] process_backlog+0x3e5/0xae0 [ 486.425136][ C1] __napi_poll+0xd3/0x610 [ 486.425157][ C1] net_rx_action+0x584/0xce0 [ 486.425182][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 486.425204][ C1] ? sched_clock+0x44/0x60 [ 486.425225][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 486.425248][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 486.425268][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 486.425290][ C1] handle_softirqs+0x1ab/0x630 [ 486.425307][ C1] __do_softirq+0xf/0x16 [ 486.425330][ C1] do_softirq+0xa6/0x100 [ 486.425355][ C1] [ 486.425361][ C1] [ 486.425367][ C1] ? __cfi_do_softirq+0x10/0x10 [ 486.425391][ C1] ? _raw_spin_lock_bh+0x90/0x120 [ 486.425413][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 486.425435][ C1] __local_bh_enable_ip+0x74/0x80 [ 486.425460][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 486.425481][ C1] wg_index_hashtable_insert+0x100/0x430 [ 486.425508][ C1] ? __asan_memset+0x39/0x50 [ 486.425523][ C1] wg_noise_handshake_create_initiation+0x5de/0x7f0 [ 486.425546][ C1] ? __cfi_wg_noise_handshake_create_initiation+0x10/0x10 [ 486.425568][ C1] ? update_curr+0xdc/0xaa0 [ 486.425583][ C1] ? psi_task_change+0x1ce/0x360 [ 486.425608][ C1] ? check_preempt_wakeup_fair+0x886/0xae0 [ 486.425634][ C1] ? ttwu_do_activate+0x630/0x630 [ 486.425652][ C1] ? ktime_get_coarse_with_offset+0x157/0x1a0 [ 486.425676][ C1] wg_packet_handshake_send_worker+0x160/0x240 [ 486.425700][ C1] ? __kasan_check_read+0x15/0x20 [ 486.425725][ C1] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 486.425753][ C1] ? wake_up_process+0x14/0x20 [ 486.425777][ C1] ? kick_pool+0x3d8/0x550 [ 486.425796][ C1] process_scheduled_works+0x7d2/0x1020 [ 486.425826][ C1] worker_thread+0xc58/0x1250 [ 486.425844][ C1] kthread+0x2ca/0x370 [ 486.425862][ C1] ? __cfi_worker_thread+0x10/0x10 [ 486.425877][ C1] ? __cfi_kthread+0x10/0x10 [ 486.425895][ C1] ret_from_fork+0x67/0xa0 [ 486.425923][ C1] ? __cfi_kthread+0x10/0x10 [ 486.425940][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.425967][ C1] [ 486.941177][ C1] net_ratelimit: 101929 callbacks suppressed [ 486.941201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 486.941222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.947357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 486.959252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.971290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.983307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.995289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 487.007305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.019308][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:5f:ae:09:5f:13, vlan:0) [ 487.031221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.281182][ C1] net_ratelimit: 134793 callbacks suppressed [ 492.281208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.281243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.287322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.299368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.311315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.323181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.335224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.347136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.358994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.371179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)