last executing test programs: 20.06554884s ago: executing program 3 (id=4): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000800000008000100ffffffff08000a"], 0x20}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 20.024822722s ago: executing program 1 (id=2): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = dup(0xffffffffffffffff) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0xb08089, 0x0) socket$inet6(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = dup(r0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0088f70180c200000328b16565320086dd694f920600303afffe8000000000000000000000000000bbff0200000000000000000000000000010200907800000008632947f010002f00fe8000000000090000000000000000bb000000000000000000000000000000002948f338a8ea9373c4788dac153c345deae38d69e377301d5c9d8f0217c9efda7c38e621f7d723d0bbbd09d4818b8199efbcedc334df16afc9fc9f9efe52d6fb87e524f760777f43c1321fc2ba02457fbce9a98d145fd820f22fd4ad74dd34eb7dfc90ca96e24b0c48ce85ec83d09a07c5a75d3eab7fc4003f3ddec8e63bfa3af3ca3f346b"], 0x6a) 19.960147246s ago: executing program 3 (id=5): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x23, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000005c0)={0x7, {{0xa, 0x4e22, 0x4, @local, 0x5}}, {{0xa, 0x4e24, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}}}, 0x108) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @empty}}}, 0x88) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000200)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xe, 0x5, @l2={'ib', 0x3a, 'vcan0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x48884}, 0x4040014) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.959546856s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000002c0)=0x70e, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f0000000100)=[{&(0x7f0000001180)="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", 0x600}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="e37536e0fccf4494d1803df9d62f87038abfb407ffa5013dfa61d262583c4d85f132ac8d9c3671d292873b919e08b18d36dc46ffce8116c1a0d347e6f74a094c121794"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f3000000030301010400000000000000000000000c00020000000000000000062ba61204cd998b1d04cd0a5c"], 0x20}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chmod(&(0x7f0000000240)='./file0\x00', 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x84e9, 0x2, 0x1}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x400) r5 = inotify_init() r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) read$FUSE(r6, &(0x7f0000001140)={0x2020}, 0x2020) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 19.899804789s ago: executing program 1 (id=7): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3fa, 0x2}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) sendto$packet(r0, &(0x7f0000000340)="1003", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 19.749070169s ago: executing program 3 (id=9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c0000000000000043200000000000000200000000800000000000000600380001", @ANYRES8=r0], 0x78) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c80201030102030905b5af6604"], 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) fchdir(r2) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 19.747952158s ago: executing program 2 (id=10): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) (async) bind$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000100)={0x1a4a84880, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) syz_clone3(&(0x7f0000000100)={0x1a4a84880, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 19.746999678s ago: executing program 0 (id=17): syz_io_uring_complete(0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), 0x59, 0x0, &(0x7f0000000940)="16cf84cc77f5955c36a8a1dc4be81740caf3b943e1256f785ac1979952e4c2d9b2c7bcdb295bf9dea374caf099ab8c5da5e8034878c79d58c01dc5994d6079e1472101088f55d8ee5a9479a7996d1e717bc4a466667e589354"}) 19.684188792s ago: executing program 2 (id=11): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) readahead(r1, 0xe, 0xffffffffffffffff) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_clone3(&(0x7f0000000200)={0x40000000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) io_getevents(0x0, 0x7, 0x0, 0x0, &(0x7f0000001200)) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 19.683365892s ago: executing program 3 (id=12): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0xbd6, 0x5}}], 0x20}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x5, 0x0, [{0xc0000000, 0xf8b, 0x2, 0x4, 0x4, 0x7, 0x4}, {0x80000008, 0x5, 0x6, 0x3, 0x3, 0x2, 0x1}, {0xc000000e, 0x0, 0x4, 0x8, 0x1, 0x80, 0x6}, {0x1, 0x84, 0x0, 0x8, 0x0, 0xffff, 0x9}, {0x7, 0x0, 0x0, 0x30e, 0x5, 0x3, 0x7}]}) recvmsg(r1, &(0x7f0000000440)={0x0, 0xffffffffffffffbe, 0x0}, 0x10142) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = epoll_create1(0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x8659, @empty, 0xd1}, 0x1c) writev(r7, &(0x7f0000000740)=[{&(0x7f0000000580)="c8a8c7c927f26ce4da33ea6301003f1e2117a59756bd2897e5a1ca0bff484d9c357b570a57d08cd830b27319978374a48ab6069960305e954c22a9c8464fc4ece36f0df30f0eae76e4fcd902623a7aec174d1b45e48220c13b1ea8a01fb8b09a7183c3853e15d1896e04c9ae4d7bafc59ff1549a65a64d6224", 0x79}, {&(0x7f0000000600)="8027f586d957cbf8bd463b2879d65dee9d2c71cc9bee70552591146be66685473d19ffc314b7bf187e9897740c12e30e8873e63e818aa4e9506ccab3a03a64eed41293de8c93736057322331a7c3aa1182fdb907e639158edb04ec410a2fbbb9209a5eaab2e1", 0x66}, {&(0x7f0000000680)="037c234b7cd2036c72ea1fb9ba3b2dfa80c49269e7d94d058b6a98a2b95711bc1bcebf6903b45ecb9387925a231f67178e9d57ed71458d56a2abe0ca854579cffd9e5ab7a3e74ce69e389d70a9d0ec125f12fe6ae69224d225487770d04b8403ceb23349b65e393c69bb528d44f232f16797cbc5e3ed141aeda04fc101c839509b3753aa908392429ca1ba6897c1b460a0e32bc745e1", 0x96}], 0x3) r8 = fcntl$dupfd(r7, 0x406, r7) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r10, &(0x7f00000000c0)=""/105, 0x69, 0x12c) recvmsg(r8, &(0x7f0000000200)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/154, 0x98}, {0x0, 0x61}, {&(0x7f00000003c0)=""/221, 0xdd}], 0x3}, 0x8020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x20c002, 0x90) epoll_pwait(r6, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) 19.681556882s ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r8, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0x104}}, 0x0) 19.617475156s ago: executing program 0 (id=14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002500)={0x1, 0x0, [{0x6e0, 0x0, 0x7}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES32=r5, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 19.531469321s ago: executing program 2 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)={0x5, {{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x4, [{{0x2, 0x4e21, @rand_addr=0x64010102}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @multicast1}}]}, 0x290) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$netlink(0x10, 0x3, 0x0) 19.428356637s ago: executing program 1 (id=16): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x207, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x21, 0x12, {0x12, 0x23, "404116c99ecec72fa52ab9ce80d0502b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 19.427980247s ago: executing program 0 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mknod$loop(0x0, 0xfff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0000f000", "ec094e071adf0f218d0903020037a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0xd) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 19.37006106s ago: executing program 2 (id=19): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x15, "f42a97b96d025891dd3f75fdda624457ad3d5c3618"}}) 19.278919456s ago: executing program 2 (id=20): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x13}}}}}]}}]}}, 0x0) futex(&(0x7f0000000180)=0x2, 0x5, 0x2, 0x0, &(0x7f00000001c0)=0x2, 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 18.246881266s ago: executing program 0 (id=21): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chmod(&(0x7f0000000240)='./file0\x00', 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x400) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 16.925573123s ago: executing program 1 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0x1, 0x3, 0x0, 0x8, 0xe, 0x2, 0x8, 0x8, 0x9, 0x33, 0x0, 0x0, 0x81, 0x25, 0x9, 0x0, 0x5, 0x9, '\x00', 0x5, 0x8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c010000100007000000000000201900ff943da2540000000000000000000001000000000000000000050000000000014e200000000000000000000011000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000020010000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000008000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffefe80a000000000000043500000a000200700000000000000014000e00fe8000000000000000000000000000bb08001d0002000000"], 0x10c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00005d9000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="660f1da00c00670f0866b9800000c00f326635008000000f30baf80c66b8249d688766efbafc0cb80080ef26ed0f0d4800b8000c8ec866b9700500000f320f01c9673693", 0x44}], 0x1, 0x11, &(0x7f0000000280), 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.055463392s ago: executing program 2 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) 13.705328201s ago: executing program 0 (id=24): syz_io_uring_complete(0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a00)={0x4c, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000740)={0x30, 0x30, 0x30}}, 0x1000}], 0x59, 0x0, &(0x7f0000000940)="16cf84cc77f5955c36a8a1dc4be81740caf3b943e1256f785ac1979952e4c2d9b2c7bcdb295bf9dea374caf099ab8c5da5e8034878c79d58c01dc5994d6079e1472101088f55d8ee5a9479a7996d1e717bc4a466667e589354"}) 0s ago: executing program 32 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x4, 0x1, 0x3, 0x0, 0x8, 0xe, 0x2, 0x8, 0x8, 0x9, 0x33, 0x0, 0x0, 0x81, 0x25, 0x9, 0x0, 0x5, 0x9, '\x00', 0x5, 0x8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0c010000100007000000000000201900ff943da2540000000000000000000001000000000000000000050000000000014e200000000000000000000011000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000020010000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000008000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffefe80a000000000000043500000a000200700000000000000014000e00fe8000000000000000000000000000bb08001d0002000000"], 0x10c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00005d9000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="660f1da00c00670f0866b9800000c00f326635008000000f30baf80c66b8249d688766efbafc0cb80080ef26ed0f0d4800b8000c8ec866b9700500000f320f01c9673693", 0x44}], 0x1, 0x11, &(0x7f0000000280), 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 22.423619][ T36] audit: type=1400 audit(1770166902.640:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.426684][ T283] cgroup: Unknown subsys name 'net' [ 22.446271][ T36] audit: type=1400 audit(1770166902.640:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.473685][ T36] audit: type=1400 audit(1770166902.670:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.474030][ T283] cgroup: Unknown subsys name 'devices' [ 22.657915][ T283] cgroup: Unknown subsys name 'hugetlb' [ 22.663624][ T283] cgroup: Unknown subsys name 'rlimit' [ 22.757509][ T36] audit: type=1400 audit(1770166902.980:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.780791][ T36] audit: type=1400 audit(1770166902.980:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.805545][ T36] audit: type=1400 audit(1770166902.980:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.828867][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.837670][ T36] audit: type=1400 audit(1770166903.060:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.863203][ T36] audit: type=1400 audit(1770166903.060:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.897424][ T36] audit: type=1400 audit(1770166903.120:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.898511][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.923120][ T36] audit: type=1400 audit(1770166903.120:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.179329][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.186522][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.193638][ T290] bridge_slave_0: entered allmulticast mode [ 24.199981][ T290] bridge_slave_0: entered promiscuous mode [ 24.206673][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.213742][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.220846][ T290] bridge_slave_1: entered allmulticast mode [ 24.227135][ T290] bridge_slave_1: entered promiscuous mode [ 24.262012][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.269243][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.276355][ T291] bridge_slave_0: entered allmulticast mode [ 24.282539][ T291] bridge_slave_0: entered promiscuous mode [ 24.288964][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.296070][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.303119][ T291] bridge_slave_1: entered allmulticast mode [ 24.309383][ T291] bridge_slave_1: entered promiscuous mode [ 24.360038][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.367138][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.374201][ T293] bridge_slave_0: entered allmulticast mode [ 24.380574][ T293] bridge_slave_0: entered promiscuous mode [ 24.387053][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.394095][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.401220][ T293] bridge_slave_1: entered allmulticast mode [ 24.407577][ T293] bridge_slave_1: entered promiscuous mode [ 24.437188][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.444239][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.451395][ T292] bridge_slave_0: entered allmulticast mode [ 24.457663][ T292] bridge_slave_0: entered promiscuous mode [ 24.474476][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.481557][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.488668][ T292] bridge_slave_1: entered allmulticast mode [ 24.494831][ T292] bridge_slave_1: entered promiscuous mode [ 24.575143][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.582331][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.589777][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.596857][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.629084][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.636165][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.643438][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.650486][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.681488][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.689031][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.696407][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.703607][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.722417][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.729463][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.750530][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.757610][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.770487][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.777572][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.794481][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.801548][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.847814][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.854872][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.862533][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.869616][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.877211][ T291] veth0_vlan: entered promiscuous mode [ 24.889293][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.896363][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.919170][ T293] veth0_vlan: entered promiscuous mode [ 24.928708][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.935826][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.951595][ T290] veth0_vlan: entered promiscuous mode [ 24.966716][ T291] veth1_macvtap: entered promiscuous mode [ 24.979956][ T290] veth1_macvtap: entered promiscuous mode [ 25.001505][ T293] veth1_macvtap: entered promiscuous mode [ 25.016019][ T292] veth0_vlan: entered promiscuous mode [ 25.036162][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.059598][ T292] veth1_macvtap: entered promiscuous mode [ 25.132514][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.212308][ T341] cgroup: fork rejected by pids controller in /syz3 [ 25.267042][ T369] tipc: Started in network mode [ 25.271984][ T369] tipc: Node identity ce8590b9f1c5, cluster identity 4711 [ 25.279386][ T369] tipc: Enabled bearer , priority 0 [ 25.306403][ T368] tipc: Resetting bearer [ 25.331953][ T368] tipc: Disabling bearer [ 25.408557][ T53] bridge_slave_1: left allmulticast mode [ 25.414228][ T53] bridge_slave_1: left promiscuous mode [ 25.422819][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.433588][ T53] bridge_slave_0: left allmulticast mode [ 25.443889][ T53] bridge_slave_0: left promiscuous mode [ 25.449954][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.467751][ T458] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 25.546813][ T468] Zero length message leads to an empty skb [ 25.576551][ T53] veth1_macvtap: left promiscuous mode [ 25.582118][ T53] veth0_vlan: left promiscuous mode [ 25.704035][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.711107][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.718204][ T475] bridge_slave_0: entered allmulticast mode [ 25.724403][ T475] bridge_slave_0: entered promiscuous mode [ 25.731062][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.738552][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.746838][ T475] bridge_slave_1: entered allmulticast mode [ 25.757978][ T475] bridge_slave_1: entered promiscuous mode [ 25.776993][ T482] bridge0: port 3(veth0_to_bridge) entered blocking state [ 25.784210][ T482] bridge0: port 3(veth0_to_bridge) entered disabled state [ 25.791497][ T482] veth0_to_bridge: entered allmulticast mode [ 25.798277][ T482] veth0_to_bridge: entered promiscuous mode [ 25.804285][ T482] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.816774][ T482] bridge0: port 3(veth0_to_bridge) entered blocking state [ 25.823960][ T482] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 25.871872][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.878946][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.886260][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.893315][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.902507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.914568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.915764][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.926701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.945925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.957907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.969855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.983760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 25.995761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 26.007774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 26.019786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 26.076855][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.087852][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.097860][ T45] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 26.107413][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.117123][ T45] usb 2-1: config 0 descriptor?? [ 26.361204][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.369317][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.728509][ T45] kye 0003:0458:5019.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 26.808702][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.627293][ T45] kye 0003:0458:5019.0001: unknown main item tag 0x1 [ 28.634039][ T45] kye 0003:0458:5019.0001: unknown main item tag 0x4 [ 30.905603][ C0] net_ratelimit: 171057 callbacks suppressed [ 30.905624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 30.905640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.911876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 30.923719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.935602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 30.947518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.959500][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.971324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.983392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 30.995203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 31.298312][ T45] kye 0003:0458:5019.0001: hidraw0: USB HID v2.07 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 31.496052][ T45] kye 0003:0458:5019.0001: tablet-enabling feature report not found [ 31.504084][ T45] kye 0003:0458:5019.0001: tablet enabling failed [ 35.915589][ C0] net_ratelimit: 178165 callbacks suppressed [ 35.915612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.915638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.921923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.933840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.945843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.957821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.969921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.981848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 35.993620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 36.005534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.925584][ C1] net_ratelimit: 168398 callbacks suppressed [ 40.925607][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.925627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 40.931878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.943910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 40.955908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.967895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 40.979740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 40.991827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 41.003692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 41.015608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 41.075682][ T45] usb 2-1: USB disconnect, device number 2 [ 42.085581][ C1] sched: DL replenish lagged too much [ 45.935588][ C1] net_ratelimit: 173790 callbacks suppressed [ 45.935608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.935645][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.941942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.953873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.965804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.977938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.989787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 46.001733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 46.013553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 46.025481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.976439][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 47.976460][ T36] audit: type=1400 audit(1770166928.190:149): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2202]" dev="pipefs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 49.783831][ T514] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 50.316102][ T514] CPU: 0 UID: 0 PID: 514 Comm: syz-executor Not tainted syzkaller #0 ca1356f2cd16bfc15aeb7d3d887f3f77f8f4461b [ 50.316144][ T514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.316165][ T514] Call Trace: [ 50.316172][ T514] [ 50.316181][ T514] __dump_stack+0x21/0x30 [ 50.316215][ T514] dump_stack_lvl+0x140/0x1c0 [ 50.316239][ T514] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.316264][ T514] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 50.316294][ T514] dump_stack+0x19/0x20 [ 50.316317][ T514] warn_alloc+0x1e7/0x2c0 [ 50.316337][ T514] ? kasan_save_free_info+0x4a/0x60 [ 50.316359][ T514] ? __cfi_warn_alloc+0x10/0x10 [ 50.316379][ T514] ? __get_vm_area_node+0x201/0x3d0 [ 50.316400][ T514] ? kcov_ioctl+0x5d/0x5a0 [ 50.316427][ T514] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 50.316471][ T514] ? locks_remove_posix+0x358/0x570 [ 50.316497][ T514] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 50.316521][ T514] ? expand_files+0xd5/0x6e0 [ 50.316552][ T514] vmalloc_user_noprof+0x77/0x90 [ 50.316576][ T514] ? kcov_ioctl+0x5d/0x5a0 [ 50.316604][ T514] kcov_ioctl+0x5d/0x5a0 [ 50.316632][ T514] ? bpf_lsm_file_ioctl+0xd/0x20 [ 50.316652][ T514] ? security_file_ioctl+0x3e/0x110 [ 50.316673][ T514] ? __cfi_kcov_ioctl+0x10/0x10 [ 50.316701][ T514] __se_sys_ioctl+0x132/0x1b0 [ 50.316729][ T514] __x64_sys_ioctl+0x7f/0xa0 [ 50.316757][ T514] x64_sys_call+0x1878/0x2ee0 [ 50.316785][ T514] do_syscall_64+0x57/0xf0 [ 50.316814][ T514] ? clear_bhb_loop+0x50/0xa0 [ 50.316843][ T514] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.316871][ T514] RIP: 0033:0x7f7c4179ab4b [ 50.316894][ T514] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 50.316912][ T514] RSP: 002b:00007ffd02f3f480 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.316935][ T514] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7c4179ab4b [ 50.316951][ T514] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9 [ 50.316965][ T514] RBP: 00007f7c41a16128 R08: 0000000000000000 R09: 0000000000000000 [ 50.316978][ T514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.316991][ T514] R13: 0000000000000003 R14: 00007ffd02f3f738 R15: 0000000000000000 [ 50.317008][ T514] [ 50.317021][ T514] Mem-Info: [ 50.945582][ C0] net_ratelimit: 161875 callbacks suppressed [ 50.945614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.945634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.951896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.963777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.975704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 50.987718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.999565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 51.011475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 51.023348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 51.035217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.955593][ C1] net_ratelimit: 180352 callbacks suppressed [ 55.955630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.961743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.973819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.985795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 55.997644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 56.009661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 56.021522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 56.036197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 56.045476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 56.057314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)