last executing test programs: 6m35.164002909s ago: executing program 3 (id=77): syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 6m35.105230952s ago: executing program 3 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004800) 6m35.104239792s ago: executing program 3 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES16=r2], 0x0) 6m32.042111512s ago: executing program 3 (id=100): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x4, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x10000007, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0x10001, 0x20000, 0x8, 0xfffffffb, 0x0, 0x400005, 0x1, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'sit0\x00', {'veth0_macvtap\x00'}, 0xffff}) r1 = socket(0x8000000010, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5b15, 0x100) ppoll(&(0x7f00000001c0)=[{r2, 0x8184}], 0x1, &(0x7f0000000200), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x191) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x0, &(0x7f0000000180)) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000000000)=0x80000000) poll(&(0x7f000000bcc0)=[{r3, 0x40}], 0x1, 0x200) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000740)={{r1}, 0x0, 0x4, @unused=[0x8000000000000001, 0x8, 0x6, 0x4], @name="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"}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f000000c240)=0x11) write(r1, &(0x7f00000002c0)="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", 0xfc) close_range(r1, r1, 0x2) 6m31.440789837s ago: executing program 3 (id=103): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r0], 0x24}, 0x1, 0x8000000, 0xefffffff, 0xc880}, 0x0) 6m31.313583344s ago: executing program 3 (id=104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) 6m31.272935286s ago: executing program 32 (id=104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) 3m23.136362344s ago: executing program 0 (id=1147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) syz_open_dev$usbfs(&(0x7f0000000180), 0x8, 0x8000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000480)={0x0, 'veth1\x00', {0x4}}) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000a80000/0x3000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3m23.077297187s ago: executing program 0 (id=1148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write(r0, &(0x7f0000000140)="34aeb1ea6c8fa1174d3565a15933b02576d36624cc7adad08659ba8723d7", 0x1e) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f358ffe50745f723a7661725f6c6f636b5f743a73302075"], 0x2d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000100), 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) 3m20.575861452s ago: executing program 0 (id=1168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) (fail_nth: 5) 3m20.509168886s ago: executing program 0 (id=1169): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x19, {0x19, 0x22, "63c445269b6cddddb3744d01869ff0949ce187921fabfd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x19, {0x19, 0x22, "63c445269b6cddddb3744d01869ff0949ce187921fabfd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000000c0)={0x3, 0x100, 0x2, 0x3fd, 0x8, 0x81}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="f081550100a000000f010e180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800100c00f20c035f70000000f22c067420f01c3460f79c20cb8400f0099420000000ced45c194710a00000005c68244bcae0090", 0x5a}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x40080) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 3m19.724295812s ago: executing program 0 (id=1173): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 3m19.543078832s ago: executing program 0 (id=1178): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000006680)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x0) 3m19.486381946s ago: executing program 33 (id=1178): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e23, @broadcast}, 'bond_slave_0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000006680)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x0) 43.439683835s ago: executing program 1 (id=2263): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x24000801, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x9, 0x6b, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x27, 0x7, 0x6}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = fcntl$dupfd(r6, 0x406, r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', r4, 0x2f, 0x80, 0x7, 0xd39, 0x7, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x7800, 0x5, 0x10001}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x1, 0x80, 0xde6e, 0x2, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0xf, 0xdb, [@local, @empty, @rand_addr=0x64010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000004c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b8, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, r4}, 0xc) 43.36749652s ago: executing program 1 (id=2264): unshare(0x60000600) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0x6d, 0x5, 0xf9db}, 0x10) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 42.997585371s ago: executing program 5 (id=2269): brk(0x10000000000008) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x410, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,port=0x0000008000004e23,\x00']) 42.986069972s ago: executing program 1 (id=2270): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x892031, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d756e69782c646972656374696f2c6163636573733d636c69656e742c6163636573733d216cf7b05c"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20, 0x24000080}}], 0x2, 0x0) mmap(&(0x7f0000b79000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffd000) 42.865757089s ago: executing program 1 (id=2271): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a00000200000000000000000000092d"], 0x10}}, 0x0) 42.685093469s ago: executing program 4 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r0, 0x2, 0xda5, &(0x7f0000000000)="52b7c7a575ea0490e5a22ce2d63943449610702ad39ae8e9f4188d90f39b2bd2549770263a091357640de8873c1c152045ec614e980b9dcbd41afa3599eab93e6ba2faec4120183065a5f89373e886376f8ef332f26579fbe2cd65a1fefab91158430e12edbcb6af3f85b5c83d5e992711adc76550df03fad15b4b487295b78073434807afd105bd3ee38a071a7b191e528facf17d76f32db39fecac49c80dbdb066733faa2f900f57100f112670", 0xae) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$security_ima(r1, &(0x7f00000001c0), &(0x7f0000000200)=@ng={0x4, 0xf, "980729327cbe1d9d42892e12"}, 0xe, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x18000400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10000}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x64000000}, 0x85) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x84000}, 0x40) (async) r3 = inotify_init() ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000480)={@private0, 0x0}, &(0x7f00000004c0)=0x14) ppoll(&(0x7f0000000500)=[{r0, 0x5000}, {r3, 0x3302}, {r0, 0xc564}, {r2, 0x18}, {r3, 0x8422}, {r0, 0x500a}], 0x6, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f0000000580)={[0x80000000]}, 0x8) (async) r5 = getpid() ptrace$getregset(0x4204, r5, 0x202, &(0x7f00000015c0)={&(0x7f00000005c0)=""/4096, 0x1000}) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000001600)={0x7, 0x3, 0xaeac, 0xfff, 0xc, "da04200f86363ca7"}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x80, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0xc080) pipe2$watch_queue(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_GET_TSC_KHZ_vm(r7, 0xaea3) (async) connect$packet(r7, &(0x7f00000017c0)={0x11, 0xd, r4, 0x1, 0x8, 0x6, @local}, 0x14) recvmsg$can_raw(r7, &(0x7f0000001a80)={&(0x7f0000001800)=@caif=@util, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/132, 0x84}], 0x1, &(0x7f0000001980)=""/198, 0xc6}, 0x40000102) connect$inet6(r0, &(0x7f0000001ac0)={0xa, 0x4e21, 0x2, @remote, 0x4}, 0x1c) (async) getsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000001b00), &(0x7f0000001b40)=0x4) (async) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000001b80)=0x7, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001bc0)={'veth0_virt_wifi\x00', @local}) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x100001) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000001c40)={{0x71, @multicast1, 0x4e21, 0x2, 'wlc\x00', 0x10, 0x53, 0x80}, {@local, 0x4e24, 0x2000, 0x7f, 0x8001, 0x9}}, 0x44) (async) io_setup(0x1, &(0x7f0000001cc0)=0x0) io_cancel(r9, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f0000001d00)="16912413a947", 0x6, 0x1000, 0x0, 0x0, r8}, &(0x7f0000001d80)) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000001dc0)={0x1, 0x6}, 0x4) 42.569621696s ago: executing program 1 (id=2274): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r2, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 42.406019405s ago: executing program 1 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x2}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035217f", 0x7}], 0x2) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) (rerun: 64) 42.255818414s ago: executing program 4 (id=2278): read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000002c00)={0x0, 0xea60}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0080ff00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x148}}, 0x0) recvfrom(r1, &(0x7f0000002cc0)=""/105, 0x69, 0x10000, 0x0, 0x0) setresuid(0xee00, r0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x80000009}}) 42.144334991s ago: executing program 2 (id=2279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x0, &(0x7f0000000080)=0xa}) (async) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000feca0d0000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001010000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff000004008a150000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 42.144114371s ago: executing program 5 (id=2280): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xf, 0x9442) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1e, 0x9, 0x70bd2a, 0x25dfdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mmap(&(0x7f0000b79000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0xffffd000) 41.946150072s ago: executing program 5 (id=2281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x3ffffe, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x2000000) 41.886099716s ago: executing program 2 (id=2282): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e0030000000a2196324ffe020301090224000100000000090400000206d3450009050102100000000009058b02409ba38e47b4f7af2edb2ced382e5333c7f79bd1261bf949ac3e530b7ee58e22f883d3cdadd960ca3ffb513a0e4320b19bed841dfb772e9d178fbe3d92d936dc1a9b3c133f618ca279e1389fbf05b72f422c552df991f4faa13c0d88ce93cd561d20cc386479f7663a35b845d6ddbc3922"], 0x0) (async) setuid(0xee00) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000640)=0x1) (async) r2 = socket$inet6(0xa, 0xa, 0x4000037) dup(r2) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x442, 0x1, @mcast1}, 0x1c) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)="80fd02150000", 0x6}], 0x1, 0x9, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="5522f8ac", 0x4}], 0x0, 0x14, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) time(&(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)=ANY=[], &(0x7f0000000940)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x350}}}}, 0x0) 41.785444532s ago: executing program 4 (id=2283): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000015481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a21bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) close_range(r0, r0, 0x2) 41.690159457s ago: executing program 5 (id=2284): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a00000200000000000000000003002d"], 0x10}}, 0x0) 41.688894907s ago: executing program 2 (id=2285): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0xffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x48) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)=ANY=[@ANYBLOB="14000020", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x2008844) sendto$inet6(r3, &(0x7f0000000340)="23000000220021bb0000409b849ac00a374e296ecb2ccf9ad66c3236de721025e005000000a8", 0x26, 0x26044082, 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 41.688597297s ago: executing program 4 (id=2286): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xa4, 0x0, &(0x7f0000000580)=[@increfs_done={0x40106308, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xffa1, 0x10, 0x0, 0x0, 0x48, 0x17, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/207, 0x0, 0x0, 0x36}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 41.612660802s ago: executing program 2 (id=2287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x21000000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x8002c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0xfffffffffffffff8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 41.612364792s ago: executing program 5 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @multicast2}, 0xc) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xa00) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 41.510779337s ago: executing program 2 (id=2289): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0xa0800) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x7, 0x0, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6, 0xc8}]}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ipvlan0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x57de5e3cc12812b5, 0x200, 0x2, 0x2, 0x52, 0x1, 0x7, 0x1, 0x10, 0x47, [0x7fff, 0x0, 0x48000, 0x0, 0xe, 0x401, 0xfff, 0x4], [0x3, 0x81]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000180)={0x63}) r4 = fcntl$dupfd(r0, 0x406, r3) sendmsg$key(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0201060323"], 0x118}}, 0x20000000) 41.382760285s ago: executing program 4 (id=2290): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 40.892117013s ago: executing program 4 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000084, 0x4}}], 0x20}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x2, 0x1}, {0x40000003, 0x4, 0x4, 0x4, 0x2, 0x7, 0x1}]}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.810540958s ago: executing program 2 (id=2292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x3ffffe, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x9000000) 40.666144987s ago: executing program 5 (id=2293): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b400e0001000500000000000072080003000500030000", 0x39}], 0x1) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8500) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x1, 0x10, 0x5, 0xffc}) 26.67107179s ago: executing program 34 (id=2276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x2}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035217f", 0x7}], 0x2) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b2402"], 0x0) (rerun: 64) 18.221155211s ago: executing program 35 (id=2293): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b400e0001000500000000000072080003000500030000", 0x39}], 0x1) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x8500) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x1, 0x10, 0x5, 0xffc}) 3.931138252s ago: executing program 36 (id=2292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x3ffffe, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x9000000) 0s ago: executing program 37 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000084, 0x4}}], 0x20}) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x2, 0x1}, {0x40000003, 0x4, 0x4, 0x4, 0x2, 0x7, 0x1}]}) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): 361.333153][ T10] usb 6-1: device descriptor read/8, error -71 [ 361.412176][ T31] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 361.445795][ T10] usb usb6-port1: unable to enumerate USB device [ 361.542182][ T377] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 361.562170][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 361.569435][ T31] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 361.572522][ T377] usb 3-1: Invalid ep0 maxpacket: 64 [ 361.577899][ T31] usb 5-1: config 179 has no interface number 0 [ 361.599799][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 361.625556][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 361.649731][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.674403][ T31] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 361.697589][ T31] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 361.721357][ T31] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 361.722295][ T377] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 361.730508][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.752941][T13648] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.782538][ T377] usb 3-1: Invalid ep0 maxpacket: 64 [ 361.792296][ T377] usb usb3-port1: unable to enumerate USB device [ 361.895673][T13658] netlink: 'syz.1.2045': attribute type 12 has an invalid length. [ 361.917717][ T36] audit: type=1400 audit(2000000137.357:496): avc: denied { append } for pid=13659 comm="syz.1.2046" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.941584][ T36] audit: type=1326 audit(2000000137.357:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 361.979851][ T756] usb 5-1: USB disconnect, device number 34 [ 361.985859][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 361.985905][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 362.005190][ T36] audit: type=1326 audit(2000000137.357:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.010526][T13665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 362.029434][ T36] audit: type=1326 audit(2000000137.357:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.064756][ T36] audit: type=1326 audit(2000000137.357:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.069944][T13665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 362.088500][ T36] audit: type=1326 audit(2000000137.357:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.121692][ T36] audit: type=1326 audit(2000000137.357:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.146900][ T36] audit: type=1326 audit(2000000137.357:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.171385][ T36] audit: type=1326 audit(2000000137.357:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.1.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbc79aeb9 code=0x7ffc0000 [ 362.229497][ T901] Bluetooth: hci0: sending frame failed (-49) [ 362.235703][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 362.322219][ T331] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 362.483620][ T331] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 362.491809][ T331] usb 2-1: config 0 has no interface number 0 [ 362.508671][ T331] usb 2-1: New USB device found, idVendor=4f18, idProduct=50cd, bcdDevice=74.c9 [ 362.517792][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.527171][ T331] usb 2-1: Product: syz [ 362.531487][ T331] usb 2-1: Manufacturer: syz [ 362.536369][ T331] usb 2-1: SerialNumber: syz [ 362.542703][ T331] usb 2-1: config 0 descriptor?? [ 362.552686][ T331] usb-storage 2-1:0.201: USB Mass Storage device detected [ 362.832109][ T10] usb 2-1: USB disconnect, device number 27 [ 362.895894][T13686] netlink: 'syz.1.2055': attribute type 12 has an invalid length. [ 363.042195][ T331] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 363.085079][T13694] rust_binder: Error while translating object. [ 363.085119][T13694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.091316][T13694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1260 [ 363.114139][T13696] rust_binder: Got transaction with invalid offset. [ 363.123480][T13696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.130077][T13696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1262 [ 363.172187][ T331] usb 6-1: device descriptor read/64, error -71 [ 363.262227][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 363.413265][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.423087][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.431476][ T331] usb 6-1: device descriptor read/64, error -71 [ 363.432791][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.453290][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 363.462472][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.470502][ T10] usb 2-1: Product: syz [ 363.475009][ T10] usb 2-1: Manufacturer: syz [ 363.484838][ T10] usb 2-1: SerialNumber: syz [ 363.493285][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 363.502734][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 363.622947][T13809] netlink: 'syz.2.2066': attribute type 12 has an invalid length. [ 363.672215][ T331] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 363.702705][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.812213][ T331] usb 6-1: device descriptor read/64, error -71 [ 363.898300][T13688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.912317][T13688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.920889][T13688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (548 ns). Using initial count to start timer. [ 363.949068][T13919] rust_binder: Error while translating object. [ 363.949107][T13919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 363.968860][T13919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9458 [ 364.062202][ T331] usb 6-1: device descriptor read/64, error -71 [ 364.103420][T14023] rust_binder: Got transaction with invalid offset. [ 364.103463][T14023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 364.110109][T14023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9562 [ 364.122274][ T756] usb 2-1: USB disconnect, device number 28 [ 364.138434][ T756] usblp0: removed [ 364.182703][T14027] overlayfs: missing 'lowerdir' [ 364.187709][ T331] usb usb6-port1: attempt power cycle [ 364.250946][T14030] netlink: 'syz.2.2075': attribute type 12 has an invalid length. [ 364.502189][ T756] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 364.542225][ T331] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 364.563568][ T331] usb 6-1: device descriptor read/8, error -71 [ 364.663449][ T756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.674610][ T756] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 364.685470][ T756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.694404][ T756] usb 3-1: config 0 descriptor?? [ 364.703227][ T331] usb 6-1: device descriptor read/8, error -71 [ 364.882184][ T366] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 364.952255][ T331] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 364.993193][ T331] usb 6-1: device descriptor read/8, error -71 [ 365.042205][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 365.048421][ T366] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 365.056939][ T366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.067244][ T366] usb 2-1: config 0 has no interface number 0 [ 365.074981][ T366] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 365.084339][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.092585][ T366] usb 2-1: Product: syz [ 365.096913][ T366] usb 2-1: Manufacturer: syz [ 365.103210][ T756] steelseries 0003:1038:12B6.0031: item fetching failed at offset 5/7 [ 365.111496][ T366] usb 2-1: SerialNumber: syz [ 365.116344][ T756] steelseries 0003:1038:12B6.0031: probe with driver steelseries failed with error -22 [ 365.126988][ T366] usb 2-1: config 0 descriptor?? [ 365.132676][ T331] usb 6-1: device descriptor read/8, error -71 [ 365.139514][ T366] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 365.145931][ T366] usb 2-1: No valid video chain found. [ 365.162198][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 365.242275][ T331] usb usb6-port1: unable to enumerate USB device [ 365.303483][ T377] usb 3-1: USB disconnect, device number 45 [ 365.334498][ T10] usb 2-1: USB disconnect, device number 29 [ 365.695257][T14038] rust_binder: Error while translating object. [ 365.695299][T14038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 365.701503][T14038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1269 [ 365.816723][T14042] rust_binder: Got transaction with invalid offset. [ 365.826236][T14042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 365.834550][T14042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 365.871353][T14048] netlink: 'syz.5.2084': attribute type 12 has an invalid length. [ 365.910305][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 365.962190][ T366] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 366.113269][ T366] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.119917][ T366] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 366.129246][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.138067][ T366] usb 5-1: config 0 descriptor?? [ 366.162192][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 366.323307][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 366.332533][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.342821][ T10] usb 2-1: config 0 descriptor?? [ 366.751122][ T366] usbhid 5-1:0.0: can't add hid device: -71 [ 366.751209][ T10] konepure 0003:1E7D:2DB4.0032: hidraw1: USB HID v0.fd Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 366.762245][ T366] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 366.777393][ T366] usb 5-1: USB disconnect, device number 35 [ 366.958089][ T377] usb 2-1: USB disconnect, device number 30 [ 367.000852][T14261] rust_binder: Error while translating object. [ 367.000948][T14261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.007440][T14261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9783 [ 367.522199][ T366] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 367.693211][ T366] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 367.701387][ T366] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.711701][ T366] usb 5-1: config 0 has no interface number 0 [ 367.719455][ T366] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 367.728802][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.736959][ T366] usb 5-1: Product: syz [ 367.741198][ T366] usb 5-1: Manufacturer: syz [ 367.742185][ T377] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 367.746042][ T366] usb 5-1: SerialNumber: syz [ 367.758828][ T366] usb 5-1: config 0 descriptor?? [ 367.764764][ T366] hub 5-1:0.31: bad descriptor, ignoring hub [ 367.770881][ T366] hub 5-1:0.31: probe with driver hub failed with error -5 [ 367.778602][ T366] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 367.785234][ T366] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 367.793938][ T366] usb 5-1: Failed to create links for entity 6 [ 367.800198][ T366] usb 5-1: Failed to register entities (-22). [ 367.892203][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 367.923649][ T377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 367.931797][ T377] usb 2-1: not running at top speed; connect to a high speed hub [ 367.940616][ T377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.951042][ T377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.962195][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 367.962192][ T901] Bluetooth: hci0: command 0x1003 tx timeout [ 367.962255][ T377] usb 2-1: string descriptor 0 read error: -22 [ 367.986708][ T377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.986746][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.995891][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.012790][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.022001][ T377] usb 2-1: 0:2 : does not exist [ 368.062174][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 368.069220][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 368.078653][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=20 [ 368.086958][ T10] usb 3-1: SerialNumber: syz [ 368.092507][ T10] usb 3-1: config 0 descriptor?? [ 368.098626][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 368.106663][ T10] usb 3-1: Detected FT232A [ 368.112365][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 368.132305][ T63] usb 5-1: USB disconnect, device number 36 [ 368.299962][ T63] usb 3-1: USB disconnect, device number 46 [ 368.307433][ T63] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 368.317378][ T63] ftdi_sio 3-1:0.0: device disconnected [ 368.500115][ T377] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 368.522216][ T377] usb 2-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 368.548460][T14285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.548569][T14285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1275 [ 368.552201][ T377] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 368.577542][T14287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.577662][T14287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1277 [ 368.583767][ T377] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 368.602177][T14289] rust_binder: Got transaction with invalid offset. [ 368.602220][T14289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 368.608838][T14289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 368.614115][ T377] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 368.672274][ T377] usb 2-1: USB disconnect, device number 31 [ 368.876684][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 368.882194][ T366] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 368.892191][ T756] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 368.992199][ T377] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 369.022191][ T756] usb 5-1: device descriptor read/64, error -71 [ 369.032208][ T366] usb 6-1: Using ep0 maxpacket: 16 [ 369.039950][ T366] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 369.049069][ T366] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.057222][ T366] usb 6-1: Product: syz [ 369.061430][ T366] usb 6-1: Manufacturer: syz [ 369.066184][ T366] usb 6-1: SerialNumber: syz [ 369.072630][ T366] r8152-cfgselector 6-1: Unknown version 0x0000 [ 369.078892][ T366] r8152-cfgselector 6-1: config 0 descriptor?? [ 369.142185][ T377] usb 2-1: Using ep0 maxpacket: 16 [ 369.148747][ T377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.157178][ T377] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 369.166076][ T377] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 369.176332][ T377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.186821][ T377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.196067][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.204288][ T377] usb 2-1: Product: syz [ 369.208456][ T377] usb 2-1: Manufacturer: syz [ 369.213227][ T377] usb 2-1: SerialNumber: syz [ 369.272238][ T756] usb 5-1: device descriptor read/64, error -71 [ 369.488528][ T366] r8152-cfgselector 6-1: USB disconnect, device number 72 [ 369.522207][ T756] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 369.634163][ T377] usb 2-1: 0:2 : does not exist [ 369.648706][ T377] usb 2-1: USB disconnect, device number 32 [ 369.671874][ T756] usb 5-1: device descriptor read/64, error -71 [ 369.912175][ T756] usb 5-1: device descriptor read/64, error -71 [ 370.012796][T14400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14400 comm=syz.5.2108 [ 370.025741][ T756] usb usb5-port1: attempt power cycle [ 370.262196][ T377] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 370.382243][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 370.382243][ T756] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 370.403213][ T756] usb 5-1: device descriptor read/8, error -71 [ 370.413368][ T377] usb 6-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 370.422560][ T377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.432860][ T377] usb 6-1: config 0 descriptor?? [ 370.533274][ T756] usb 5-1: device descriptor read/8, error -71 [ 370.543657][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.551826][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 370.560527][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.570782][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.582386][ T10] usb 2-1: string descriptor 0 read error: -22 [ 370.588676][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.598315][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.610407][ T10] usb 2-1: 0:2 : does not exist [ 370.772189][ T756] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 370.813210][ T756] usb 5-1: device descriptor read/8, error -71 [ 370.843193][ T377] usbhid 6-1:0.0: can't add hid device: -71 [ 370.849513][ T377] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 370.858583][ T377] usb 6-1: USB disconnect, device number 73 [ 370.922190][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 370.940921][T14405] rust_binder: Error while translating object. [ 370.940960][T14405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 370.947251][T14405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9900 [ 370.957514][ T756] usb 5-1: device descriptor read/8, error -71 [ 371.009780][T14411] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 371.009848][T14411] rust_binder: Error in use_page_slow: EFAULT [ 371.020716][T14411] rust_binder: use_range failure EFAULT [ 371.027377][T14411] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 371.033820][T14411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 371.041866][T14411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9906 [ 371.076904][T14415] rust_binder: Got transaction with invalid offset. [ 371.086309][ T756] usb usb5-port1: unable to enumerate USB device [ 371.099337][T14415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.099369][T14415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9910 [ 371.572180][ T377] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 371.628558][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 371.642776][ T10] usb 2-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 371.657444][ T10] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 371.668208][T14524] rust_binder: Error while translating object. [ 371.668285][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 371.682368][T14524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 371.682398][T14524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281 [ 371.694134][ T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 371.716143][ T10] usb 2-1: USB disconnect, device number 33 [ 371.730980][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 371.730997][ T36] audit: type=1400 audit(2000000147.167:514): avc: denied { create } for pid=14525 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 371.743268][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.768021][ T377] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 371.780342][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.789600][T14528] fuseblk: Bad value for 'source' [ 371.797737][ T377] usb 3-1: config 0 descriptor?? [ 371.868489][T14528] x_tables: duplicate underflow at hook 1 [ 371.994644][T14533] incfs_lookup_dentry err:-13 [ 371.999727][T14533] bridge0: port 3(veth0_to_bridge) entered blocking state [ 372.007197][T14533] bridge0: port 3(veth0_to_bridge) entered disabled state [ 372.014499][T14533] veth0_to_bridge: entered allmulticast mode [ 372.021094][T14533] veth0_to_bridge: entered promiscuous mode [ 372.027375][T14533] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.039812][T14533] bridge0: port 3(veth0_to_bridge) entered blocking state [ 372.046964][T14533] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 372.063570][ T377] usbhid 3-1:0.0: can't add hid device: -71 [ 372.073249][T14635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 372.073364][T14635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1288 [ 372.084220][ T377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 372.105546][T14638] rust_binder: Got transaction with invalid offset. [ 372.105600][T14638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.111928][ T377] usb 3-1: USB disconnect, device number 47 [ 372.113896][T14638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10116 [ 372.132979][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2127'. [ 372.188718][T14647] rust_binder: Error while translating object. [ 372.188762][T14647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.202362][T14647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10118 [ 372.271072][T14654] SELinux: policydb version -692540760 does not match my version range 15-33 [ 372.298440][T14654] SELinux: failed to load policy [ 372.366520][T14662] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 372.366555][T14662] rust_binder: Error in use_page_slow: EFAULT [ 372.392230][T14662] rust_binder: use_range failure EFAULT [ 372.398515][T14662] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 372.422195][T14662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 372.430234][T14662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:483 [ 372.662174][ T377] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 372.702223][ T756] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 372.791339][T14772] rust_binder: Got transaction with invalid offset. [ 372.791385][T14772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.798133][T14772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1070 [ 372.820274][T14774] rust_binder: Error while translating object. [ 372.823181][ T377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.829657][T14774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.846078][ T377] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 372.846141][T14774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1072 [ 372.869689][ T756] usb 5-1: unable to get BOS descriptor or descriptor too short [ 372.872175][ T377] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 372.879575][ T756] usb 5-1: not running at top speed; connect to a high speed hub [ 372.896698][ T377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.913918][ T756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.926351][ T756] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.935867][ T377] usb 3-1: config 0 descriptor?? [ 372.939542][ T756] usb 5-1: string descriptor 0 read error: -22 [ 372.947401][ T756] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.957019][ T756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.967993][ T756] usb 5-1: 0:2 : does not exist [ 373.171406][T14781] netlink: 'syz.1.2142': attribute type 4 has an invalid length. [ 373.179345][T14781] netlink: 'syz.1.2142': attribute type 2 has an invalid length. [ 373.356002][ T377] kovaplus 0003:1E7D:2D50.0033: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 373.392592][T14790] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 373.392627][T14790] rust_binder: Error in use_page_slow: EFAULT [ 373.403330][T14790] rust_binder: use_range failure EFAULT [ 373.409816][T14790] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 373.415444][T14790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 373.424653][T14790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:491 [ 373.460955][T14794] netlink: 'syz.1.2147': attribute type 12 has an invalid length. [ 373.564453][ T10] usb 3-1: USB disconnect, device number 48 [ 373.722206][ T377] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 373.872184][ T377] usb 2-1: Using ep0 maxpacket: 32 [ 373.878537][ T377] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 373.886988][ T377] usb 2-1: config 0 has no interface number 0 [ 373.893417][ T377] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 373.905101][ T377] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 373.918752][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.931302][ T377] usb 2-1: Product: syz [ 373.935674][ T377] usb 2-1: Manufacturer: syz [ 373.940366][ T377] usb 2-1: SerialNumber: syz [ 373.952424][ T377] usb 2-1: config 0 descriptor?? [ 373.957807][T14796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 374.091742][T11872] Bluetooth: hci0: Frame reassembly failed (-84) [ 374.098275][T11872] Bluetooth: hci0: Frame reassembly failed (-84) [ 374.165446][T14796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 374.488841][T14912] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 374.488878][T14912] rust_binder: Error in use_page_slow: EFAULT [ 374.499456][T14912] rust_binder: use_range failure EFAULT [ 374.505573][T14912] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 374.511245][T14912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 374.519364][T14912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1300 [ 374.542845][T14914] netlink: 'syz.4.2156': attribute type 12 has an invalid length. [ 374.573866][T14916] rust_binder: Error while translating object. [ 374.573905][T14916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 374.580189][T14916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1304 [ 374.589658][ T10] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 374.620103][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.629345][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.637645][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.646181][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.654499][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.663030][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.671187][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.679996][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.688279][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.696862][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.705270][T14918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.713840][T14918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.742242][ T10] usb 6-1: device descriptor read/64, error -71 [ 374.990305][ T10] usb 6-1: device descriptor read/64, error -71 [ 375.233087][ T10] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 375.382193][ T10] usb 6-1: device descriptor read/64, error -71 [ 375.405718][ T36] audit: type=1326 audit(2000000150.847:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14926 comm="syz.4.2161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08b19aeb9 code=0x0 [ 375.602087][T14934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14934 comm=syz.4.2163 [ 375.622224][ T10] usb 6-1: device descriptor read/64, error -71 [ 375.685566][ T36] audit: type=1400 audit(2000000151.127:516): avc: denied { ioctl } for pid=14939 comm="syz.4.2166" path="socket:[44506]" dev="sockfs" ino=44506 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.742319][ T10] usb usb6-port1: attempt power cycle [ 375.794883][T14946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.812344][T14946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.903411][T14955] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 375.903467][T14955] rust_binder: Error in use_page_slow: EFAULT [ 375.942187][T14955] rust_binder: use_range failure EFAULT [ 375.948342][T14955] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 375.971647][T14955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 375.999977][T14955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1343 [ 376.082196][ T10] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 376.122259][ T901] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 376.136032][ T10] usb 6-1: device descriptor read/8, error -71 [ 376.151061][T14962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 376.151194][T14962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10328 [ 376.182399][ T36] audit: type=1400 audit(2000000151.627:517): avc: denied { write } for pid=14963 comm="syz.4.2173" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 376.273699][ T10] usb 6-1: device descriptor read/8, error -71 [ 376.412459][ T331] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 376.512224][ T10] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 376.553185][ T10] usb 6-1: device descriptor read/8, error -71 [ 376.593210][ T331] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 376.601465][ T331] usb 3-1: config 0 has no interface number 0 [ 376.617753][ T331] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 376.639093][ T331] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 376.660673][ T331] usb 3-1: New USB device found, idVendor=0499, idProduct=ebb7, bcdDevice=68.2f [ 376.680003][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.691147][ T10] usb 6-1: device descriptor read/8, error -71 [ 376.692162][ T331] usb 3-1: Product: syz [ 376.721744][ T331] usb 3-1: Manufacturer: syz [ 376.727665][ T331] usb 3-1: SerialNumber: syz [ 376.737945][ T331] usb 3-1: config 0 descriptor?? [ 376.829438][T14796] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2148'. [ 376.864454][ T377] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 376.872313][T14972] rust_binder: Got transaction with invalid offset. [ 376.874689][T14972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 376.874816][ T10] usb usb6-port1: unable to enumerate USB device [ 376.897305][ T377] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 376.908618][ T377] asix 2-1:0.188: probe with driver asix failed with error -71 [ 376.911716][T14972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1092 [ 376.918076][ T377] usb 2-1: USB disconnect, device number 34 [ 377.375965][T14983] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 377.376016][T14983] rust_binder: Error in use_page_slow: EFAULT [ 377.386801][T14983] rust_binder: use_range failure EFAULT [ 377.393094][T14983] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 377.398959][T14983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 377.407341][T14983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:508 [ 377.452247][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 377.580946][ T36] audit: type=1400 audit(2000000153.017:518): avc: denied { bind } for pid=14989 comm="syz.2.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 377.650337][T14992] rust_binder: Got transaction with invalid offset. [ 377.650384][T14992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 377.657148][T14992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10336 [ 377.916828][T15202] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 377.926313][T15202] rust_binder: Error in use_page_slow: EFAULT [ 377.937038][T15202] rust_binder: use_range failure EFAULT [ 377.943323][T15202] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 377.948942][T15202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 377.957276][T15202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1101 [ 378.065480][T15208] 9pnet_fd: Insufficient options for proto=fd [ 378.216619][T15211] rust_binder: Error while translating object. [ 378.216663][T15211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 378.222984][T15211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1110 [ 378.245486][T15213] rust_binder: Got transaction with invalid offset. [ 378.255124][T15213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 378.261965][T15213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1112 [ 378.290667][T15215] tipc: Enabled bearer , priority 0 [ 378.316967][T15215] syzkaller0: entered promiscuous mode [ 378.322620][T15215] syzkaller0: entered allmulticast mode [ 378.682210][ T388] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 378.833270][ T388] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.844359][ T388] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 378.856971][ T388] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.868594][ T756] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 378.875850][ T388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.883977][ T388] usb 2-1: Product: syz [ 378.888258][ T388] usb 2-1: Manufacturer: syz [ 378.892969][ T388] usb 2-1: SerialNumber: syz [ 378.899067][ T756] usb 5-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 378.909787][ T388] cdc_mbim 2-1:1.0: skipping garbage [ 378.915226][ T756] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 378.925521][ T756] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 378.935329][ T756] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 378.950179][ T331] usb 3-1: USB disconnect, device number 49 [ 379.014508][T15224] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 379.014544][T15224] rust_binder: Error in use_page_slow: EFAULT [ 379.025216][T15224] rust_binder: use_range failure EFAULT [ 379.031314][T15224] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 379.037093][T15224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 379.045316][T15224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1353 [ 379.101719][T15228] netlink: 'syz.4.2200': attribute type 12 has an invalid length. [ 379.121575][T15222] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 379.153694][ T36] audit: type=1326 audit(2000000154.597:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.4.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08b19aeb9 code=0x0 [ 379.252195][ T331] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 379.413316][ T331] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.421433][ T331] usb 3-1: config 0 has no interface number 0 [ 379.427896][ T331] usb 3-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.439193][ T331] usb 3-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.449283][ T331] usb 3-1: config 0 interface 1 has no altsetting 0 [ 379.456114][ T331] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 379.465486][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.474498][ T331] usb 3-1: config 0 descriptor?? [ 379.482190][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 379.488194][ T901] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.733238][T15222] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 379.740585][ T388] cdc_mbim 2-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 379.748376][ T388] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 379.884550][T15200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.893897][T15200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.903482][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.911000][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.918670][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.926393][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.934553][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.942332][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.949837][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.958025][ T388] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 379.965296][ T388] wwan wwan0: port wwan0mbim0 attached [ 379.972685][ T388] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, be:2e:bf:85:d9:80 [ 379.983184][ T331] holtek_mouse 0003:04D9:A067.0034: unknown main item tag 0x0 [ 379.996581][ T331] holtek_mouse 0003:04D9:A067.0034: hidraw1: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input1 [ 380.010407][ T388] usb 2-1: USB disconnect, device number 35 [ 380.017111][T15235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.017255][T15235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1364 [ 380.023908][ T388] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 380.089802][ T388] wwan wwan0: port wwan0mbim0 disconnected [ 380.107443][ T377] usb 3-1: USB disconnect, device number 50 [ 380.124009][T15244] rust_binder: Got transaction with invalid offset. [ 380.124053][T15244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.130692][T15244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1370 [ 380.310451][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.328388][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.457618][T15252] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 380.457653][T15252] rust_binder: Error in use_page_slow: EFAULT [ 380.468301][T15252] rust_binder: use_range failure EFAULT [ 380.474524][T15252] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 380.480253][T15252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 380.488433][T15252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1123 [ 380.643314][T15260] rust_binder: Error while translating object. [ 380.652635][T15260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.658811][T15260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10548 [ 380.690550][T15264] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2215'. [ 380.720518][T15266] rust_binder: Got transaction with invalid offset. [ 380.720562][T15266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 380.727270][T15266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10554 [ 380.892941][T15269] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 380.912171][T15269] rust_binder: Error in use_page_slow: EFAULT [ 380.935094][T15269] rust_binder: use_range failure EFAULT [ 380.941199][T15269] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 380.972283][T15269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 380.982579][T15269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1377 [ 381.002516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.023854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.035967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.048084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.060201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.072308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.084440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.096600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.108743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.112652][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.120870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 381.132196][ T388] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 381.163161][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.184315][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.202415][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.251448][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.282893][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.290847][T15288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.290974][T15288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1385 [ 381.311689][T15272] bridge_slave_0: entered allmulticast mode [ 381.356811][ T388] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.368088][ T36] audit: type=1400 audit(2000000156.747:520): avc: denied { write } for pid=15289 comm="syz.1.2223" name="usbmon2" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.399324][T15272] bridge_slave_0: entered promiscuous mode [ 381.413840][ T388] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 381.429709][T15296] rust_binder: Got transaction with invalid offset. [ 381.429749][T15296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.437266][T15272] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.463558][ T388] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.476730][T15296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1140 [ 381.486645][ T36] audit: type=1400 audit(2000000156.777:521): avc: denied { ioctl } for pid=15289 comm="syz.1.2223" path="/dev/usbmon2" dev="devtmpfs" ino=96 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 381.535323][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.543674][ T388] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.550299][ T388] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 381.572225][T15272] bridge_slave_1: entered allmulticast mode [ 381.578586][T15272] bridge_slave_1: entered promiscuous mode [ 381.592269][ T388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.604036][T11872] tipc: Left network mode [ 381.632621][ T388] usb 6-1: config 0 descriptor?? [ 381.639789][T15271] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 381.842217][ T366] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 382.002222][ T366] usb 2-1: Using ep0 maxpacket: 32 [ 382.022208][ T366] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 382.030417][ T366] usb 2-1: config 0 has no interface number 0 [ 382.051885][ T366] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 382.074384][ T388] wacom 0003:056A:00FB.0035: hidraw1: USB HID v0.07 Device [HID 056a:00fb] on usb-dummy_hcd.5-1/input0 [ 382.104258][ T366] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 382.123687][ T366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.131721][ T366] usb 2-1: Product: syz [ 382.165158][ T366] usb 2-1: Manufacturer: syz [ 382.176099][ T366] usb 2-1: SerialNumber: syz [ 382.192991][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.200046][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.211794][ T366] usb 2-1: config 0 descriptor?? [ 382.222464][T15298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 382.241630][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.248717][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.269088][ T331] usb 6-1: USB disconnect, device number 78 [ 382.311664][T15272] veth0_vlan: entered promiscuous mode [ 382.341408][T15272] veth1_macvtap: entered promiscuous mode [ 382.429427][T15310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.429564][T15310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1389 [ 382.457594][T15298] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 382.813766][ T36] audit: type=1326 audit(2000000158.257:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15315 comm="syz.5.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd59aeb9 code=0x7ffc0000 [ 382.879981][ T36] audit: type=1326 audit(2000000158.277:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15315 comm="syz.5.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd59aeb9 code=0x7ffc0000 [ 382.932563][ T36] audit: type=1326 audit(2000000158.287:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15315 comm="syz.5.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe4bd59aeb9 code=0x7ffc0000 [ 382.992204][ T36] audit: type=1326 audit(2000000158.287:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15315 comm="syz.5.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd59aeb9 code=0x7ffc0000 [ 383.162909][ T756] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 383.312178][ T331] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 383.326770][ T366] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 383.338104][ T366] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 383.349062][ T756] usb 6-1: Using ep0 maxpacket: 32 [ 383.368806][ T366] asix 2-1:0.188: probe with driver asix failed with error -32 [ 383.377841][ T756] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.392179][ T756] usb 6-1: config 0 has no interface number 0 [ 383.399360][ T366] usb 2-1: USB disconnect, device number 36 [ 383.409868][ T756] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.422313][ T756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.442424][ T756] usb 6-1: Product: syz [ 383.446597][ T756] usb 6-1: Manufacturer: syz [ 383.451189][ T756] usb 6-1: SerialNumber: syz [ 383.485052][ T756] usb 6-1: config 0 descriptor?? [ 383.493070][ T756] smsc95xx v2.0.0 [ 383.505375][ T331] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.516290][ T331] usb 3-1: config 0 has no interface number 0 [ 383.533611][ T331] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.564091][ T331] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.582431][ T331] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.612189][ T331] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 383.631450][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.652510][ T331] usb 3-1: config 0 descriptor?? [ 384.264725][ T331] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0036/input/input24 [ 384.288870][ T756] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 384.310631][ T331] uclogic 0003:28BD:0042.0036: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 384.322521][ T756] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 384.332635][ T756] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 384.364211][ T331] usb 3-1: USB disconnect, device number 51 [ 384.370284][ T756] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 384.401998][ T756] usb 6-1: USB disconnect, device number 79 [ 384.704627][T15347] input: syz1 as /devices/virtual/input/input25 [ 384.739058][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 384.786948][ T31] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 384.863679][ T36] audit: type=1400 audit(2000000160.307:526): avc: denied { create } for pid=15350 comm="syz.2.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 384.904327][ T36] audit: type=1400 audit(2000000160.327:527): avc: denied { ioctl } for pid=15340 comm="syz.1.2237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.964310][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 384.975631][ T31] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 384.984917][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.002811][T15353] fuse: Unknown parameter 'd0x0000000000000003' [ 385.009291][ T36] audit: type=1400 audit(2000000160.327:528): avc: denied { read write } for pid=15350 comm="syz.2.2243" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.042600][ T31] usb 2-1: config 0 descriptor?? [ 385.062173][ T36] audit: type=1400 audit(2000000160.327:529): avc: denied { open } for pid=15350 comm="syz.2.2243" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 385.259723][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.272375][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.413404][T15341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.454197][T15341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.483523][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 385.500888][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 385.510939][T15362] netlink: 'syz.5.2245': attribute type 12 has an invalid length. [ 385.539129][ T31] usb 2-1: USB disconnect, device number 37 [ 385.702178][ T756] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 385.852170][ T756] usb 3-1: Using ep0 maxpacket: 16 [ 385.869898][ T756] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 385.879257][ T756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.894974][ T756] usb 3-1: Product: syz [ 385.903514][ T756] usb 3-1: Manufacturer: syz [ 385.917861][ T756] usb 3-1: SerialNumber: syz [ 385.928599][ T756] r8152-cfgselector 3-1: Unknown version 0x0000 [ 385.941855][ T756] r8152-cfgselector 3-1: config 0 descriptor?? [ 385.950089][T15377] ªªªªª»: renamed from bridge_slave_1 (while UP) [ 386.012192][ C0] net_ratelimit: 101524 callbacks suppressed [ 386.012213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.030317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.042443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.054562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.066683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.078796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.090896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.103004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.115107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.127223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 386.158846][T15357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.176747][T15357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.196838][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.220526][ T756] r8152-cfgselector 3-1: Unknown version 0x40b0 [ 386.233581][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.249483][ T756] r8152-cfgselector 3-1: bad CDC descriptors [ 386.425915][ T36] audit: type=1400 audit(2000000161.867:530): avc: denied { compute_member } for pid=15389 comm="syz.1.2256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 386.458629][ T756] r8152-cfgselector 3-1: USB disconnect, device number 52 [ 386.593425][T15396] netlink: 'syz.5.2258': attribute type 12 has an invalid length. [ 386.694117][T15402] rust_binder: Error while translating object. [ 386.694156][T15402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.715932][T15402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 386.757923][T15404] rust_binder: Got transaction with invalid offset. [ 386.767974][T15404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.777950][T15404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1166 [ 386.861753][T15412] tipc: Failed to remove unknown binding: 66,1,1/4:861685675/861685677 [ 387.228608][T15423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:545 [ 387.228702][T15423] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2269'. [ 387.272162][T15418] tipc: Started in network mode [ 387.277118][T15418] tipc: Node identity 4, cluster identity 4711 [ 387.292266][T15418] tipc: Node number set to 4 [ 387.310409][T15420] netlink: 'syz.4.2268': attribute type 12 has an invalid length. [ 387.319360][ T36] audit: type=1400 audit(2000000162.757:531): avc: denied { remount } for pid=15426 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 387.515427][T15431] rust_binder: Got transaction with invalid offset. [ 387.515471][T15431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.532224][T15431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 387.741234][T15438] rust_binder: Error while translating object. [ 387.782875][T15438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 387.801013][T15438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 388.004433][T15446] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2278'. [ 388.061269][T15425] 9pnet_fd: p9_fd_create_tcp (15425): problem connecting socket to 127.0.0.1 [ 388.122314][ T331] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 388.272552][ T331] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 388.285772][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 388.294929][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.318305][ T331] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 388.335477][ T331] usb 2-1: No valid video chain found. [ 388.454848][T15463] netlink: 'syz.4.2283': attribute type 12 has an invalid length. [ 388.518249][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.526810][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.542501][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.550974][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.578573][T15467] rust_binder: Got transaction with invalid offset. [ 388.578616][T15467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.612538][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.633982][T15472] rust_binder: Error while translating object. [ 388.634020][T15472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.640275][T15472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 388.652717][T15467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1441 [ 388.688203][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.708255][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.731171][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.866081][T15443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.098532][T15443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.942459][ T331] usb 2-1: USB disconnect, device number 38 [ 391.022155][ C0] net_ratelimit: 171701 callbacks suppressed [ 391.022177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.022179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.022221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.028234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.040226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.052197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.064056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.075940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.087897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.099852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.965876][ C0] sched: DL replenish lagged too much [ 396.032169][ C0] net_ratelimit: 274532 callbacks suppressed [ 396.032191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.032195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.032246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.038251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.050160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.062034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.074012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.085978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.097832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.109705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.042154][ C0] net_ratelimit: 280965 callbacks suppressed [ 401.042177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.042193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.048248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.060115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.072069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.084052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.095927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.107806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.119759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.131793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.583356][T15486] sit0: entered promiscuous mode [ 406.052177][ C0] net_ratelimit: 261806 callbacks suppressed [ 406.052200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.052204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.052255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.058251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.070220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.082169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.094063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.105926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.117798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.129781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.352988][T15486] netlink: 'syz.5.2293': attribute type 1 has an invalid length. [ 409.360758][T15486] netlink: 'syz.5.2293': attribute type 3 has an invalid length. [ 410.502492][T14649] tipc: Resetting bearer [ 411.062157][ C1] net_ratelimit: 272490 callbacks suppressed [ 411.062180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.062192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.062230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.068217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.080201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.092168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.104106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.115973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.127966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.139923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.072162][ C1] net_ratelimit: 263919 callbacks suppressed [ 416.072185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.072224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.078230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.090210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.102184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.114053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.125925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.137861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.149836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.161700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.082148][ C0] net_ratelimit: 265200 callbacks suppressed [ 421.082172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.082211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.088223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.100103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.112050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.124059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.135901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.148966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.160914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.172895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.092167][ C0] net_ratelimit: 277905 callbacks suppressed [ 426.092189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.092205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.092253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.098231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.110201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.122085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.134034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.145884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.157751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.169741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.593455][T14649] tipc: Disabling bearer [ 431.102161][ C0] net_ratelimit: 253953 callbacks suppressed [ 431.102183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.102207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.108232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.120216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.132091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.144011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.155966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.167944][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.179802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.191658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.034929][ T366] usb 5-1: USB disconnect, device number 41 [ 436.112164][ C0] net_ratelimit: 255959 callbacks suppressed [ 436.112187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.112208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.118269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.130222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.142070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.154130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.166121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.177973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.190162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.202166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.122151][ C0] net_ratelimit: 271186 callbacks suppressed [ 441.122172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.122196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.128225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.140108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.152096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.164074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.175971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.187998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.200037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.212018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.132180][ C1] net_ratelimit: 278950 callbacks suppressed [ 446.132203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.132204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.132261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.138252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.150206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.162093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.174045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.185889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.197841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.209831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.142156][ C1] net_ratelimit: 261748 callbacks suppressed [ 451.142178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.142179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.142223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.148215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.160220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.172188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.184008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.195876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.207852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.219796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.152168][ C0] net_ratelimit: 264894 callbacks suppressed [ 456.152190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.152200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.152239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.158230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.170229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.182189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.194050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.205929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.217882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.229838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.162165][ C0] net_ratelimit: 276118 callbacks suppressed [ 461.162186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.162197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.162246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.168228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.180191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.192084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.204029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.215895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.227753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.239732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.172158][ C1] net_ratelimit: 265515 callbacks suppressed [ 466.172181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.172207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.178229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.190102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.202060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.214120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.225981][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.237840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.249877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.261855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.182171][ C1] net_ratelimit: 265157 callbacks suppressed [ 471.182193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.182207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.182263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.188233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.200238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.212201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.224171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.236014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.247882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.260219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.192156][ C1] net_ratelimit: 245858 callbacks suppressed [ 476.192178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.192179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.192233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.198237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.210122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.222004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.233973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.245957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.257804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.269688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.202172][ C1] net_ratelimit: 242784 callbacks suppressed [ 481.202193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.202213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:43:29:b9:cb:eb, vlan:0) [ 481.208244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.220905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.232836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.244679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.256654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.268626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.280499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.292355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.212169][ C0] net_ratelimit: 266557 callbacks suppressed [ 486.212192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.212211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.218280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.230143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.242040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.254062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.266045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.277903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.289754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.301804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.222174][ C0] net_ratelimit: 267890 callbacks suppressed [ 491.222198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.222235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.228260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.240182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.252176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.264118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.275984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.287833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.299795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.311768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.232148][ C0] net_ratelimit: 278008 callbacks suppressed [ 496.232170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.232199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.238235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.250284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.262236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.274205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.286086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.297936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.309884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.321863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.653778][ T330] bridge_slave_1: left allmulticast mode [ 498.203486][ T330] bridge_slave_1: left promiscuous mode [ 498.632836][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.812463][ T330] bridge_slave_0: left allmulticast mode [ 499.062571][ T330] bridge_slave_0: left promiscuous mode [ 499.093434][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.242151][ C1] net_ratelimit: 259236 callbacks suppressed [ 501.242172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.242178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.242232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.248207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.260198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.272077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.284044][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.295989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.307895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.319837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.252153][ C1] net_ratelimit: 268285 callbacks suppressed [ 506.252175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.252207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.258238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.270140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.282083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.294142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.306009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.317861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.329826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.341801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.262153][ C0] net_ratelimit: 272788 callbacks suppressed [ 511.262176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.262179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.262219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.268251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.280124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.292065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.303937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.315911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.327864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.339712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.272154][ C0] net_ratelimit: 271842 callbacks suppressed [ 516.272175][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.272176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.272234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.278210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.290182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.302074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.314031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.325879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.337877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.349828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.282150][ C1] net_ratelimit: 262639 callbacks suppressed [ 521.282173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.282196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.288209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.300209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.312102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.323946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.335957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.348126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.359965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.371838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.292154][ C0] net_ratelimit: 270272 callbacks suppressed [ 526.292175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.292182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.292223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.298220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.310132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.322056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.333935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.345900][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.357859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.369703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.302153][ C0] net_ratelimit: 272883 callbacks suppressed [ 531.302176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.302213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.308223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.320104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.332078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.344037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.355910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.367769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.379721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.391720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.312155][ C0] net_ratelimit: 270667 callbacks suppressed [ 536.312183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.312198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.312251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.318221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.330203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.342092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.354055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.365906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.377791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.389741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.322165][ C1] net_ratelimit: 266999 callbacks suppressed [ 541.322188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.322204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.322281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.328241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.340247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.352093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.364030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.375894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.387874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.399813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.332154][ C1] net_ratelimit: 272845 callbacks suppressed [ 546.332177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.332190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.332230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.338244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.350121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.362063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.373925][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.385899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.397869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.409705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.342154][ C1] net_ratelimit: 275709 callbacks suppressed [ 551.342178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.342180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.342231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.348229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.360101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.371991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.383975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.395904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.407761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.419640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.352180][ C0] net_ratelimit: 267223 callbacks suppressed [ 556.352203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.352205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.352423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.358237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.370234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.382108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.394071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.405910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.417783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.429745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.362155][ C1] net_ratelimit: 269830 callbacks suppressed [ 561.362178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.362185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.362238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.368213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.380207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.392095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.404038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.415892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.427761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.439731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.372142][ C1] net_ratelimit: 268190 callbacks suppressed [ 566.372166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.372174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.372224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.378225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.390101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.402018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.413978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.425948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.437815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.449956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.382150][ C1] net_ratelimit: 272758 callbacks suppressed [ 571.382172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.382201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.388217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.400196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.412067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.423920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.435897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.447850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.459805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.471653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.392147][ C0] net_ratelimit: 270778 callbacks suppressed [ 576.392168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.392203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.398209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.410190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.422194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.434048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.445902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.457862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.469839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 576.481702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.402174][ C0] net_ratelimit: 261660 callbacks suppressed [ 581.402196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.402234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.408256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.420139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.432094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.444082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.455965][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.467831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.479681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 581.491694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.412164][ C0] net_ratelimit: 267549 callbacks suppressed [ 586.412188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.412205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.418230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.430205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.442190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.454067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.466028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.477960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.489933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 586.501971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.422185][ C0] net_ratelimit: 267124 callbacks suppressed [ 591.422208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.422209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.422262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.428254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.440272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.452240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.464200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.476497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.488384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 591.500428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.432158][ C0] net_ratelimit: 274080 callbacks suppressed [ 596.432180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.432189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.432234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.438240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.450141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.462093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.473952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.485924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.497882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 596.509729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.442149][ C1] net_ratelimit: 277097 callbacks suppressed [ 601.442172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.442181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.442231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.448241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.460114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.471971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.483959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.495905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.507756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 601.519622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.452148][ C0] net_ratelimit: 256919 callbacks suppressed [ 606.452171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.452178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.452228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.458254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.470131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.481996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.493984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.505935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.517787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 606.529650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.462159][ C0] net_ratelimit: 246337 callbacks suppressed [ 611.462200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.462207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.462262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.468259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.480243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.492140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.504077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.515930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.527796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 611.539767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 615.243478][ T37] INFO: task syz.4.1766:9953 blocked for more than 122 seconds. [ 615.251155][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.643378][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.644170][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 615.644184][ T36] audit: type=1400 audit(2000000390.777:535): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[748]" dev="pipefs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 615.652077][ T37] task:syz.4.1766 state:D stack:0 pid:9953 tgid:9953 ppid:689 flags:0x00004006 [ 615.837139][ T37] Call Trace: [ 615.840432][ T37] [ 615.843395][ T37] __schedule+0x134a/0x1dd0 [ 615.847919][ T37] ? __sched_text_start+0x10/0x10 [ 615.852969][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 615.858358][ T37] ? _raw_spin_unlock+0x45/0x60 [ 615.863226][ T37] ? rcu_barrier_entrain+0x36c/0x4f0 [ 615.868533][ T37] schedule+0xc5/0x240 [ 615.872627][ T37] schedule_timeout+0xc7/0x3b0 [ 615.877395][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 615.882850][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 615.888407][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 615.893537][ T37] ? generic_exec_single+0x206/0x500 [ 615.898837][ T37] wait_for_common+0x369/0x650 [ 615.903619][ T37] ? wait_for_completion+0x40/0x40 [ 615.908742][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 615.914232][ T37] wait_for_completion+0x1c/0x40 [ 615.919176][ T37] rcu_barrier+0x415/0x540 [ 615.923611][ T37] netdev_run_todo+0x118/0xce0 [ 615.928387][ T37] ? kvfree+0x39/0x50 [ 615.932386][ T37] ? netdev_state_change+0xaa/0x240 [ 615.937594][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 615.942902][ T37] rtnl_unlock+0x12/0x20 [ 615.947150][ T37] tun_chr_close+0xc5/0x150 [ 615.951700][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 615.956836][ T37] __fput+0x1fe/0xa00 [ 615.960823][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 615.966389][ T37] ____fput+0x20/0x30 [ 615.970380][ T37] task_work_run+0x1e8/0x260 [ 615.974995][ T37] ? __cfi_task_work_run+0x10/0x10 [ 615.980117][ T37] ? __kasan_check_write+0x18/0x20 [ 615.985250][ T37] do_exit+0x9e3/0x2650 [ 615.989412][ T37] ? __cfi_do_exit+0x10/0x10 [ 615.994046][ T37] ? __kasan_check_write+0x18/0x20 [ 615.999166][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 616.004298][ T37] ? __kasan_check_read+0x15/0x20 [ 616.009328][ T37] ? cgroup_update_frozen+0x160/0x970 [ 616.014719][ T37] do_group_exit+0x229/0x2f0 [ 616.019313][ T37] ? cgroup_leave_frozen+0x16b/0x2b0 [ 616.024616][ T37] get_signal+0x1398/0x14e0 [ 616.029126][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 616.034700][ T37] ? common_nsleep+0x93/0xb0 [ 616.039295][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 616.045475][ T37] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 616.051199][ T37] ? __kasan_check_read+0x15/0x20 [ 616.056244][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 616.062331][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 616.067793][ T37] do_syscall_64+0x63/0xf0 [ 616.072314][ T37] ? clear_bhb_loop+0x50/0xa0 [ 616.076997][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 616.082909][ T37] RIP: 00fb:0x294e66b3c7c44cb4 [ 616.087674][ T37] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 616.096286][ T37] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 616.104277][ T37] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 616.112271][ T37] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 616.120246][ T37] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 616.128339][ T37] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 616.136334][ T37] [ 616.472151][ C0] net_ratelimit: 265364 callbacks suppressed [ 616.472172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.472196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.478203][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.490175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.502157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.514013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.525864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.537893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.549794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.561661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.342764][ T37] NMI backtrace for cpu 1 [ 619.342790][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 946995d19d674f9300a5002509ea8fae89fb6511 [ 619.342820][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.342833][ T37] Call Trace: [ 619.342840][ T37] [ 619.342849][ T37] __dump_stack+0x21/0x30 [ 619.342879][ T37] dump_stack_lvl+0x140/0x1c0 [ 619.342903][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 619.342929][ T37] dump_stack+0x19/0x20 [ 619.342950][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 619.342974][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 619.342997][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 619.343019][ T37] ? sched_show_task+0x371/0x530 [ 619.343043][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 619.343065][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 619.343088][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 619.343111][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 619.343135][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 619.343158][ T37] watchdog+0xdad/0xf00 [ 619.343184][ T37] ? __kasan_check_write+0x18/0x20 [ 619.343210][ T37] ? __cfi_watchdog+0x10/0x10 [ 619.343236][ T37] ? __kasan_check_read+0x15/0x20 [ 619.343258][ T37] ? __kthread_parkme+0x137/0x180 [ 619.343284][ T37] ? schedule+0xc5/0x240 [ 619.343309][ T37] kthread+0x2c6/0x370 [ 619.343327][ T37] ? __cfi_watchdog+0x10/0x10 [ 619.343353][ T37] ? __cfi_kthread+0x10/0x10 [ 619.343371][ T37] ret_from_fork+0x67/0xa0 [ 619.343395][ T37] ? __cfi_kthread+0x10/0x10 [ 619.343414][ T37] ret_from_fork_asm+0x1a/0x30 [ 619.343441][ T37] [ 619.343449][ T37] Sending NMI from CPU 1 to CPUs 0: [ 619.528720][ C0] NMI backtrace for cpu 0 [ 619.528736][ C0] CPU: 0 UID: 0 PID: 15492 Comm: kworker/0:6 Not tainted syzkaller #0 946995d19d674f9300a5002509ea8fae89fb6511 [ 619.528757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.528769][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 619.528789][ C0] RIP: 0010:update_stack_state+0x3da/0x4b0 [ 619.528811][ C0] Code: 8b 05 1a 2d c0 7e 49 39 45 00 74 0e 48 8b 7d d0 e8 1b fc ff ff 49 89 c6 eb 1d 4c 8b 75 d0 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 6c 90 9a 00 4d 8b 36 48 83 c3 48 48 89 d8 48 c1 [ 619.528825][ C0] RSP: 0018:ffffc90000006ed8 EFLAGS: 00000246 [ 619.528838][ C0] RAX: 1ffff920007fffe4 RBX: ffffc90000007028 RCX: ffffc90003ffff01 [ 619.528850][ C0] RDX: ffffc90003ffff18 RSI: 1ffff92000000e06 RDI: ffffc90000007080 [ 619.528862][ C0] RBP: ffffc90000006f98 R08: ffffc900000070f0 R09: ffffc900000070e8 [ 619.528875][ C0] R10: 0000000000000019 R11: ffffffff8175b680 R12: dffffc0000000000 [ 619.528886][ C0] R13: ffffc90000007050 R14: ffffc90003ffff20 R15: 1ffff92000000e0d [ 619.528898][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 619.528912][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.528924][ C0] CR2: 00007fc291745000 CR3: 000000010dbbc000 CR4: 00000000003526b0 [ 619.528938][ C0] Call Trace: [ 619.528943][ C0] [ 619.528952][ C0] unwind_next_frame+0x3c1/0x750 [ 619.528969][ C0] ? __kernel_text_address+0x11/0x40 [ 619.528987][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 619.529002][ C0] arch_stack_walk+0x138/0x170 [ 619.529024][ C0] ? kthread+0x2c6/0x370 [ 619.529038][ C0] stack_trace_save+0xaa/0x100 [ 619.529052][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 619.529066][ C0] ? _raw_spin_lock_bh+0x96/0x130 [ 619.529086][ C0] kasan_save_track+0x3e/0x80 [ 619.529105][ C0] ? kasan_save_track+0x3e/0x80 [ 619.529129][ C0] ? kasan_save_free_info+0x4a/0x60 [ 619.529145][ C0] ? __kasan_slab_free+0x5f/0x80 [ 619.529164][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 619.529183][ C0] ? __kfree_skb+0x18f/0x210 [ 619.529197][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 619.529212][ C0] ? ip_rcv_finish_core+0xc13/0x1440 [ 619.529235][ C0] ? ip_rcv+0xe8/0x310 [ 619.529256][ C0] ? netif_receive_skb+0x1f7/0x7b0 [ 619.529271][ C0] ? br_pass_frame_up+0x126/0x1b0 [ 619.529290][ C0] ? br_handle_frame_finish+0x1317/0x1760 [ 619.529309][ C0] ? br_handle_frame+0x5a6/0xba0 [ 619.529328][ C0] ? __netif_receive_skb_core+0xfae/0x3ab0 [ 619.529342][ C0] ? process_backlog+0x3e5/0xad0 [ 619.529357][ C0] ? __napi_poll+0xd0/0x610 [ 619.529370][ C0] ? net_rx_action+0x5ea/0xd80 [ 619.529385][ C0] ? handle_softirqs+0x1ad/0x630 [ 619.529405][ C0] ? __do_softirq+0xf/0x16 [ 619.529425][ C0] ? do_softirq+0xb8/0x110 [ 619.529444][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 619.529464][ C0] ? _raw_read_unlock_bh+0x2d/0x40 [ 619.529483][ C0] ? wg_socket_send_skb_to_peer+0x176/0x1e0 [ 619.529498][ C0] ? wg_packet_tx_worker+0x1d2/0x4e0 [ 619.529512][ C0] ? process_scheduled_works+0x7d1/0x1020 [ 619.529532][ C0] ? worker_thread+0xc70/0x10b0 [ 619.529552][ C0] ? kthread+0x2c6/0x370 [ 619.529575][ C0] kasan_save_free_info+0x4a/0x60 [ 619.529591][ C0] __kasan_slab_free+0x5f/0x80 [ 619.529611][ C0] kmem_cache_free+0x1bd/0x4f0 [ 619.529629][ C0] ? __kfree_skb+0x18f/0x210 [ 619.529644][ C0] __kfree_skb+0x18f/0x210 [ 619.529658][ C0] ? ip_rcv_finish_core+0xc13/0x1440 [ 619.529681][ C0] sk_skb_reason_drop+0xd8/0x310 [ 619.529696][ C0] ip_rcv_finish_core+0xc13/0x1440 [ 619.529719][ C0] ip_rcv+0xe8/0x310 [ 619.529739][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 619.529759][ C0] ? br_dev_queue_push_xmit+0x55c/0x700 [ 619.529778][ C0] ? __cfi_ip_rcv_finish+0x10/0x10 [ 619.529799][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 619.529818][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 619.529839][ C0] netif_receive_skb+0x1f7/0x7b0 [ 619.529855][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 619.529870][ C0] ? br_flood+0x67e/0x730 [ 619.529887][ C0] br_pass_frame_up+0x126/0x1b0 [ 619.529906][ C0] br_handle_frame_finish+0x1317/0x1760 [ 619.529925][ C0] ? ip_rcv_finish_core+0xc13/0x1440 [ 619.529947][ C0] ? ip_rcv+0xe8/0x310 [ 619.529969][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 619.529990][ C0] br_handle_frame+0x5a6/0xba0 [ 619.530009][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 619.530028][ C0] __netif_receive_skb_core+0xfae/0x3ab0 [ 619.530043][ C0] ? __kasan_slab_free+0x6a/0x80 [ 619.530063][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 619.530082][ C0] ? __kfree_skb+0x18f/0x210 [ 619.530096][ C0] ? ip_rcv_finish_core+0xc13/0x1440 [ 619.530118][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 619.530134][ C0] ? qdisc_run_end+0x120/0x120 [ 619.530148][ C0] ? ip_rcv+0xfe/0x310 [ 619.530169][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 619.530190][ C0] ? __cfi_ip_rcv_finish+0x10/0x10 [ 619.530211][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 619.530230][ C0] process_backlog+0x3e5/0xad0 [ 619.530248][ C0] __napi_poll+0xd0/0x610 [ 619.530262][ C0] net_rx_action+0x5ea/0xd80 [ 619.530278][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 619.530293][ C0] ? sched_clock+0x44/0x60 [ 619.530310][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 619.530330][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 619.530348][ C0] handle_softirqs+0x1ad/0x630 [ 619.530369][ C0] __do_softirq+0xf/0x16 [ 619.530388][ C0] do_softirq+0xb8/0x110 [ 619.530407][ C0] [ 619.530413][ C0] [ 619.530418][ C0] ? __cfi_do_softirq+0x10/0x10 [ 619.530439][ C0] __local_bh_enable_ip+0x74/0x80 [ 619.530459][ C0] _raw_read_unlock_bh+0x2d/0x40 [ 619.530477][ C0] wg_socket_send_skb_to_peer+0x176/0x1e0 [ 619.530494][ C0] wg_packet_tx_worker+0x1d2/0x4e0 [ 619.530509][ C0] process_scheduled_works+0x7d1/0x1020 [ 619.530533][ C0] worker_thread+0xc70/0x10b0 [ 619.530553][ C0] ? __cfi_try_to_wake_up+0x10/0x10 [ 619.530578][ C0] kthread+0x2c6/0x370 [ 619.530591][ C0] ? __cfi_worker_thread+0x10/0x10 [ 619.530611][ C0] ? __cfi_kthread+0x10/0x10 [ 619.530625][ C0] ret_from_fork+0x67/0xa0 [ 619.530643][ C0] ? __cfi_kthread+0x10/0x10 [ 619.530656][ C0] ret_from_fork_asm+0x1a/0x30 [ 619.530678][ C0] [ 621.482143][ C1] net_ratelimit: 259849 callbacks suppressed [ 621.482166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.482171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.482222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.488201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.500169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.512050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.524063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.535935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.547799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.559766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)