last executing test programs: 42.551843688s ago: executing program 2 (id=756): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffc0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async, rerun: 64) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x4}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r7, &(0x7f0000000000), 0x8) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75db011d7605b188d05f8a89e9d3c7432b56ea4df01fcfdc3137718ce2ed2577671efce0942a9dcae951ccf836b76786c0d0e3089b47a16a698188acff8ca0ad7fc5b604f23a30b988d16ada33fe55e8388e6187d5505770db5e3c1c1c0b018d39"], 0x15) (async) r8 = dup(r6) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x5) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) r9 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000003c0)=@ethtool_test={0x1a, 0x4, 0x4}}) (async) write$FUSE_INIT(r8, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@directio}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0/../file0\x00', 0xa0) (async) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r8, &(0x7f00000043c0)={0x2020}, 0x2020) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000001c0)={0x1000, 0x2, 0x4, 0x1, 0x1}) 42.515055432s ago: executing program 2 (id=759): unshare(0x62040200) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004432fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioprio_set$pid(0x2, 0x0, 0x0) unshare(0x2000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000380), 0xffffffff, 0x40000) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x4, {0xdd8f54d7c298f4c8, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000280)={0xa, &(0x7f0000000300)=[{0xfe5a, 0x5, 0x9, 0x4}, {0x4ae1, 0x0, 0x2, 0x7}, {0x7, 0x9, 0x40, 0x4}, {0x7, 0x14, 0x7, 0x30}, {0x7, 0xd, 0x4, 0x3}, {0x8001, 0xa, 0xd3, 0x1}, {0x3, 0x5, 0x40, 0x9}, {0x0, 0x1, 0x10, 0x1}, {0x0, 0x1, 0x5, 0x7ab}, {0x6, 0x3, 0x7, 0x8}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 41.726866785s ago: executing program 2 (id=768): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x54) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="736563030826656c2c00"]) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x81, 0x10, 0xa, 0x401}, {0x4, 0x6, 0x3f, 0x401}]}) 40.790634071s ago: executing program 2 (id=778): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x3, 0x80a0000, 0x1000, &(0x7f0000002000/0x1000)=nil}) creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0xeeee0000, 0xc, 0x6, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x96, 0x0, 0x8}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8080000, 0x10, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x3, 0x92, 0x80}, {0x2, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x8, 0x6}, {0xeeee8000, 0xeeee8000, 0xf, 0x9, 0xa8, 0x1, 0x7, 0xf1, 0x3, 0x66, 0x2, 0x8}, {0x4000, 0xdddd1000, 0x9, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x8000000, 0x10000, 0x9, 0x9, 0xcd, 0x5, 0x5, 0x26, 0x4, 0x6, 0xff, 0x6}, {0x1, 0x1000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x4, 0x7}, {0x100000, 0x5}, {0xe6f40004, 0xfffb}, 0x80000003, 0x0, 0x8000000, 0x20, 0x5, 0x9000, 0x0, 0x1, [0x3, 0x6, 0x3, 0x3]}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x40010, r5, 0x89a5f000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0xb2000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x40, r8}) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000000)) ioctl(r9, 0x8936, &(0x7f0000000000)) copy_file_range(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 40.139272424s ago: executing program 0 (id=785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6b62c0, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="1c0000001c000704ab5b2509b868030002ab087a0100000001481093", 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x8010aebc, &(0x7f0000000080)={0xffff1000, 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f00000004c0)={[0x1000, 0x5000, 0x4, 0x8080000], 0x738, 0x41, 0x10}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x5, r10, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x3, r10, 0x9}, 0xc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x18}}], 0x2, 0x4400c800) 39.970310908s ago: executing program 0 (id=787): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402345000000451161639c545d2ce9daa7602630c686377369efa824c3379300000000b1d2363bdd25b77c5b7708dfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'ip6tnl0\x00'}) 39.769672274s ago: executing program 2 (id=789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ptrace$poke(0x420f, r1, 0x0, 0xfffffffffffffffd) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}}, 0x0) socket(0x2, 0x2, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40085507, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x2) r4 = accept(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg$unix(r5, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x8fe, 0x9}, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 39.70057441s ago: executing program 3 (id=790): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="822a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$bt_hci(r2, 0x0, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x810, r0, 0x57789000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x4b}], 0x1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0xfffffd7f}, {&(0x7f00000014c0)=""/149, 0xa0}, {&(0x7f0000000280)=""/185, 0xc5}, {&(0x7f0000001400)=""/191, 0xfffffffffffffed3}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.219122109s ago: executing program 3 (id=791): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) (async) dup(r0) (async) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) (async) 36.708879563s ago: executing program 2 (id=793): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) chdir(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) rmdir(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, r4, {0x7}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) prlimit64(r5, 0xa, &(0x7f00000001c0)={0xd, 0xffffffff89c5d472}, &(0x7f0000000240)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x191) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x2010, r0, 0x22e7c000) 36.180436816s ago: executing program 3 (id=794): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x13, 0x0, &(0x7f0000000280)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 35.13792309s ago: executing program 0 (id=795): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x4400c800) 32.490207995s ago: executing program 0 (id=796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x805, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) mlockall(0x7) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) io_setup(0x101, &(0x7f0000000a00)) bind$tipc(r1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x10}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 32.079928768s ago: executing program 3 (id=797): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r3, 0x0}]) syz_usb_ep_read(0xffffffffffffffff, 0x6, 0x5c, &(0x7f0000000080)=""/92) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00006b3000/0x13000)=nil, &(0x7f0000345000/0x3000)=nil, 0x13000, 0x2}) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 29.47074276s ago: executing program 3 (id=799): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$KIOCSOUND(r0, 0x4b2f, 0x3) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000100)={0xf, 0x7fffffff, [{0x7, 0x0, 0x7}, {0xe, 0x0, 0x1ff}, {0xc9, 0x0, 0x506}, {0x7, 0x0, 0x3ff}, {0x7, 0x0, 0xac}, {0xa2, 0x0, 0x6}, {0x4, 0x0, 0x4a}, {0x7}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0xb968}, {0x0, 0x0, 0x7fffffffffffffff}, {0x3, 0x0, 0x831}, {0x5, 0x0, 0x8b}, {0xfffffff8, 0x0, 0x10}, {0x9, 0x0, 0x20000000}, {0x5e, 0x0, 0x7fff}]}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000002c0)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000340)={0x9, 0xc000, 0xc6fa, 0x1}) ioctl$FIOCLEX(r3, 0x5451) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) kcmp(r4, r5, 0x0, r7, r0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000480)=@sr0, r6, &(0x7f00000004c0)='./file0\x00') getrlimit(0x0, &(0x7f0000000500)) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000540)={{0x0, 0x0, 0x80, {0xeeee0000, 0xffff1000, 0x3}}, "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", "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"}) r8 = openat(r0, &(0x7f00000025c0)='./file0\x00', 0x80901, 0x2) write$P9_RATTACH(r8, &(0x7f0000002600)={0x14, 0x69, 0x1, {0x1, 0x0, 0x7}}, 0x14) r9 = getuid() mount$fuseblk(&(0x7f0000002640), &(0x7f0000002680)='./file0\x00', &(0x7f00000026c0), 0x24000, &(0x7f0000002700)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xff}}, {@allow_other}], [{@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'net_prio.ifpriomap\x00'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x30, 0x33, 0x62, 0x64, 0x39, 0x2e, 0x34], 0x2d, [0x39, 0x33, 0x38, 0x32], 0x2d, [0x35, 0x62, 0x65, 0x64], 0x2d, [0x39, 0x38, 0x39, 0x61], 0x2d, [0x33, 0x33, 0x35, 0x3, 0x65, 0x31, 0x62, 0x31]}}}, {@hash}, {@uid_lt={'uid<', r6}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}]}}) syz_clone(0x8000, &(0x7f0000002840)="4555d3ed618b175d294b3f1f11b9900f1594327865af1249b8ee5ccfb2cfc65dde716fe5633e0aa6d636b90403f76e375123ec884f4345ae129695e7eea6fb7864d8eb8071136013560335e85f2d0a26773af4a72a7df9c2596c217b64e11e22ed09f0b6f49738e3d23a99c972e7651241648aa6ee010830234769b28a", 0x7d, &(0x7f00000028c0), &(0x7f0000002900), &(0x7f0000002940)='dq') getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000002980)={{{@in=@remote, @in6}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000002a80)=0xe8) futimesat(r8, &(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={{0x77359400}, {0x0, 0x2710}}) mkdirat(r8, &(0x7f0000002b40)='./file0\x00', 0x2) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f0000002b80)={0x8000000, 0x110000}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002bc0), 0xc0c01, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r11, 0x87389000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002c00), &(0x7f0000002c40)=0xc) 29.281074825s ago: executing program 0 (id=800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x44090}, 0x4088000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001100), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r2, 0x1, 0x5, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040d1}, 0x4800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 26.520592449s ago: executing program 0 (id=801): openat$ashmem(0xffffffffffffff9c, 0x0, 0x680040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48a, 0x0, 0x3}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x9, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x20}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1444182e4dd4ff2e, 0x5, 0x6, 0x6}, @mixer_unit={0x0, 0x24, 0x4, 0x5, 0x8}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x2, "12"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x2, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x3, "32c1557751"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x8, 0x0, {0x7, 0x25, 0x1, 0x83, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0xa9, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x81, 0xfffa}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x311, 0x0, 0x8, 0x8, 0x20, 0x3}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x7, 0xff}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}, {0x4a, &(0x7f0000000240)=@string={0x78, 0x3, "4f20b0094737658f2a2880f9c64785bc54d8dc396cbfa094964a418e70769c14603425e7f4cf06899d86da2ef4ff3bdbc029bd375e752646d6a6a5d2e7112b52e5456b85180bcfc1cfd5c5d33456d2809399b4b85c2e4fbd09ec1cbefc5f5bfbc3f0899e26f499469b7cb0cce6b13b7abaafc43277be"}}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x200000000) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0xffff, "00f6ff", 0x1, 0x2}) 25.751285061s ago: executing program 3 (id=803): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x24000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x24000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 23.091762097s ago: executing program 1 (id=804): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x29, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x2, 0x4400c800) 21.891394844s ago: executing program 1 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x95) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r3, &(0x7f0000000340)=""/79, 0x4f) (async) exit(0x8) getdents(r3, 0x0, 0x3b) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) timerfd_create(0x8, 0x80000) (async) close_range(r2, 0xffffffffffffffff, 0x0) setuid(0xee01) (async) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 20.139911926s ago: executing program 32 (id=793): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) chdir(0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0xa0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) rmdir(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, r4, {0x7}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) prlimit64(r5, 0xa, &(0x7f00000001c0)={0xd, 0xffffffff89c5d472}, &(0x7f0000000240)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = openat$incfs(r6, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x40106726, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x191) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x2010, r0, 0x22e7c000) 19.669049375s ago: executing program 1 (id=807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 18.461239313s ago: executing program 1 (id=808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x5) syslog(0x4, &(0x7f0000005480)=""/85, 0x55) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x6) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002340)={0x9c, 0x0, &(0x7f0000002440)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x7, 0x1, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/55, 0x37, 0x0, 0x1a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000002240)={0x0, 0x20, 0x48}}}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000002380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000002400)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x1}], 0x36, 0x0, &(0x7f0000002300)="a06fc8d86802d916471e4f6ca4c5ebd9fce0a8e6734178467da91f9579f9e1cd7ddb72bb5fbf4d93b808804beef9858d3df905d1aa42"}) getsockopt$inet_udp_int(r2, 0x11, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) 16.139772691s ago: executing program 1 (id=809): ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0xc0046209, &(0x7f0000000100)=0x1) 15.086515266s ago: executing program 1 (id=810): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs2/binder1\x00', 0x800, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000080)={{}, "498cdcd56347b3efd7a381c7907d0acb4bb0e947b4ef82422b73fcec02762e2b3cb960cb908363498a6d950fa5357e0c9bcb767f9bd6ea0d4a966b5cb79b559352dc55ad21e5cceef446d62897c1529c39cdbd46fb85e9902d230c9b5baa5d7bf311dd8bda9e685b6f5e042d3385cdefd8d903695ad4d1c611ca0b6f372d426ed33a6cb6a897fad6485bbebf232d7beb24c36ef75725e1b561cbaf75525c590e198860f5534d8ca657e5b7fd9f06f631a595798fe92dffc7da95f9e0b0c14c8bceac689cbd1b4b50a5c80176997b2d665640a548dfae0c6cfc5624c0fa9a9a9600712e78d1c13b9ac396a2a1ad746a3506393d0295d87c06cdd3b936f9f3cffb833a580762f40e06d0c6f63c1718d1cfc957f5867b216d8ec94fb19a7289c69705109771f4c48fe090960fe16a813b854f8f304926c7163dde83790318b103554daa060c7bd156127dd24ee12243ac5974e0ac19ad1d5a2aa68de91ad35a7f952bc9b42fb29f3bd832a75309f9fbe52c4a9439d3f879c4cd555e1c8e524ba287e0cccc6bb03ab4fab2471dab68177eef530e83fe873a45473d7a523d3087edfd786b49c80268918950d1ef70ba670a22329c8d4018871393926b8584cf8bf8a4b5009f8b2aee9d4749f198fcbbe8a38eeea116b56c91d68b4b25078f1c173d2b608ca9ae3dff5a240b6f3d81c97792bd5c2cc1cf75ae378cd1b2baff05b0d1b02a6e6a405d403d7edf11eac038c27de27a51a857332f5fe8f650029dd3f608250adce7154eaed50fcabe9c9bc342abc0be79df32760e4d365571b2faf20e97345b5f57371905d175263d436494c5d3bd1bb74ecf28265e81ce1a054dcc28a2f5e550b51061600d32ce27557a97de26cb451510691e35e1664b2e93557f272621e6aa5fc9575cc34e3beb6dc1c4d0573e52564b68429a47fe911ea3d546bdabd1cca8bca4e35429398d13a2eafe832326ca36b2444eebf9bfad5d6c4a1b18e2fe34102868de80e282f19698b9099c7bd07eb86af95ffcb5ae115561d029fd5777c85b58bf4c66671fe60ae52abd970262efce8301d41eb5bcefbae490dd2385ac46bc21141c01558f7188af5905fbe17745a4fe546d5d081714d9f19b81854d4c8fe3ee65737e7f05b1f8c69c18005c5f66b025c6c45b1ad266ef7e96355ed8ab32ecf1b1f4b2a811cdf8125f6e5d449e6e9961ed10950b9f49df743c5864c057f773beb1c3372d2f47c5561d669df86b4ddad73131cfefd6817fc1c8035e752bdcdd87052dae1572fc5a0ffdd7baad76b016f386916d9aa2d1b5ef8573c725a4e85863c63a98adc5d1dfffc619f2171fb178c269c23e7ecfc7762d76457d194ff07f6564e389c32b660166664600452c936de420e1a34e38e00e25ea04ac235b9c4a241a3414f668f52f00c9e7a8ecaa854b59e0fa91ada599394715b1aa957bce3897866965a8058dde2b9ff7e845b848d3fd399b2f94e7faf60c7fe5fda09778e42f28430aa45209acd5ad8325133ceda5985bf74909cb2ab887e2b4562bbceb105f62c61e7f2541a371470dc81b35d8f3bb67602b3e79c487f71810400d6e0dd9d9be2e4d13ebb0349fadfed5473ba9a0cbf2e1232023804a6229136ec3024834f025df07deb9941d1a850aae1e34a5bb10fd137be56be3af55020c6fef09d6084e0d8b63e3c0df1419844a4785405b37288ced991a7cdfd62dcbefbbe8fc70678824c9cf704cf71cf0c5546b495f6501e8849ac5ef0f59fa56e68e6d212bd7f3373b7da4f18a244ed0eabb5cea76b2e8b267b57c138887990547879379b85242f03d3423cb3bb93b234699d5d160b2807de57262245563fa2946b8dae77ac8703cdbba7eb2867d93b0161b60ce1e4fe2de8f24f9b8b6a86a7cffaadb9cdc974664e4c25f68f0d60fe3447ab7b91a8b6f1133807bda6ee025344f6b937461f2f907d768b5bbaf0274e0fd13f2b753130b2d471c376527c4a2cf21324b21d61e97063e716128d11b47e67b296fcd2ab36dfbb480fad945a913b450e3e25a5120976c04b0bb8cb263f60fc35f500d5da237f65ea297022ca0545171e80b9e7cb41ae9ecc41bc8624135f39369e72735d74799b9f3b9a6f2ccb9e4f423ca97253dec061633af37ec6969f72da13ce3d142ca79c9a91747c33f13d344b2e000d3cf15afed006342e46786601e3a9eb22b3115abb27cb3f292b2e7b168c3b225c2df18e5616e358d8b56ca616f46fd067ae7ad911d7f09b69395a37eb4c23fbc6a6874fc13a31b61aee6a83364a797852128f1265f766f0402291d2595ef1033875322f67a982981684d0cc52b38b14cbd35ef33a307fd9cb5a60ff3c5fab3892f3842337151c18a6ed4994f534646870f7bb6f3fd887b2d538aa32a9bd2552cb93a12d0c1d3ff201ae81a5bc218ff173244dbfecc30ee3550395b0e20036dbf1a367cf625abb683b36040014f472f46471c7f0ccb10e43e48aca35f06012cea6f6ac86d79c0d2723a0fe73eeea242fe3ce04dea1a91181b1a9cbe6b049c9045bada90d7052c8cd826d858971d8b37215c0bf8a29c861adf21ba94524fda229b2393b9397582ec00eaaea2ac06d40d118bc3c89c7f265e45e785adb0efdc6829dd6d1fe80ec27194dbe1658d3910adb66e521bdbb28fb6a3e847ebf0bbf72150d764192e5b8241abbd3d4d63be6bc070e507d00868ddbd7fe56376527d051f2b142d72cbee21b9841a4956250f26c9d2d91116d1586a0a7732d85099fa2ee3231f55e09bb55cf16b03626de8a4528b70b7294b45513dae6e00401d69c6558d61092c4cb36781eb9d38c41a582112bbc1d32564c3135c11de47553061349b680664df22be7e2c38b65a8f931f8976cf579ddd657ced739a171c4dc43722d1fc931ed34d529ad61eca7f10ab82cb55aaeee7f1d0ee7a9d2fb9787b29ca802829b3d677f4e466b84f7d2057ae28bb360158726b2d722c2e28decca39396cfd16b324e78cadecf2f5e4aae517cdb512bc0396ca8e7e892260934d3eeb4a93f1a118085840209db15d19a0b6fa7092a59aa4d81ec0fcbaa0e75d35da4efb5277190824ffded31769e6b48d5afc4e6997b0c9912c2bf8f4af8d84d19bdc70be84fe2333a4d0e2a7473cbb85dda0cb44091b3054b107c3f112461f395218802d7b48512c3da1fc6de7abe17bb0c0648a177a14a97f960f0ba651ea14447b8e053d59ceaf91559d515d4e67fb2e1a583a87b2278821ad22046f9598b40fdb92ef1dea38991afad2750ed93b40036a8865021e92fd8fad21a83890c6e04da1ecb863914c42563e8f59a3020e31ab87d7911b06e70d05684c0f54af69729c4b7b52ae82171c23ad8a633fea162eeb4e1813912cfa7129c63e570e74a79e66dbd8178e2717a14fc7fed151eff300d2c86d234763b6e8b7d269f8ff6f4f355a0c1f6e34df4cee13a26854d970f5f820051f68934831c45179a6c58d4e352cd835fb3c301a5ea0732aacd52bb8cb32e7e4a001c950551865628c1b92b17b40049cbc8ac62e18b69643fd7c253cf1f31e385466d97246b1a93e287a49bf9a47a315f844ec0a2b67709c44e1174e938ea9b6dc7061ca775fc0fe7b13f1f4b1858027a9fb28b9e41ce62b5877d38655ceeaee65e817d4e5bb2ddf5ff64fe5b94f51da06fdbdd83f25b24ad399c6f2644331f3340de41fae7ea8927fb51ab0e68394a1ab2147ab6d24ff21402ec2d015127bde3402cf93fbf4e28b7c619cd16bdb0b2eb035336a5ee7b60effebb8eb2ca8992f088d622d0596ce4ebf98a45d877ac36f707fa5e2911e580628c57de73154b03c87d2de4a667390ead52b47676dc02159721c7f467d29410f6699cb61f92a34a5fb1df843b1192ef1a3df45cef5fa2e228891b2e168ad5885f04d68bc62223a752f62156b063787930eae637262dc42098acb7fe1a746807c559260fe3cf533e18f8ff5b5ab57837990e46eac103f6b2a65616e950e2c20b395c250bd8a9f365b7bb306690ea524aa2c7abde2bfa7d76b1bd13068f1136d2a4d379231516a0fb6642e67d271aebbc14689eba106b8cecff86157a2cf3fd435e3cd0382bc149decec32d36f238ed21135bfb45b9414fe1ecd51ecf83d16efc4f07b3ad8216f459383c253c657ee84d7a7387c8fdb7a4a85e76c2eae7f5bd55d9862aab28f23029af08b769cff968694057d64e769dd902b9f2654f5569a111b4e05155d86490e397d033979c796ef7f56651e72f060060cbd79451fe4f0e12dc2f5bf38dfd8c29b55d00569ca108fb28effacb7e1bc3e59e36431624919d9efe7e81f596a92d151622e13a1b608c02741e2e0962b053b3f2dbfaa54662e72304ebc9d29eef8240b2c2ec1c3ad638ebccf3873dbfd8f3be2d631d12f1f94f9122641a7bfe5cdd02bd1f553871aaa5185a486e73c78f48007fb50389349f23b00a26dc88f3fb06fab306a3bcef2903e4f59e5b1c5083c3c37d804ecb78c19ba3a8909360a2a8f035406d526c2b36ae64fbb3060e41773395c81419a82fc1a2968716e2ad0d31d6d7e83cb8bcd2d27fe4512b323813613d4bdbc4826e3c1eec7c6c2c85d79f9e5bbc42e5eca50ea49159d7ceae681389167ce7ea06d98518da5ef6b1f504b1b998f0e9a1fa64aa6b34fa0b6675346b39348331b0bb296882226b877fce6ee0ca1f8b62cc1bea7d5d9f4bf1b2f4f7d198bfc437de16490daf70836c10d44d9c05fab265d15f36b6d8510260f948b93241d2aacacef102a60f5f98efa37f4d60e38045b44fbacd766a727f7b089c41a9c27d76af751e6facdab16a72805751431ace60f97f105e3eacd6bcbe51119d8be9adac51caeff39fb2343d411ba934c644e97a7faee6dfb6ca0b3e6a546ebf5b201ea2f35374e27e6108523775d61c25e2739ad7af9141c21b7db7fe26d0f2199a1dd55efeb7e5b0d016dd2021635df95d3f0b0e09fa75a72a40ffd867723f19ef7f479260b56f767da0e0618a7b307e08e34fb80c276c576e6654d17d79f2bb5662f667ab8ce25a67c00d8036129d279b63e48ce8198a23d0ec62c35ecd440cb9ccd87dc81c71531e6f542c4308cd5c627c56946a75b3c27ba766e9bdf704539c66c58af9225e86c5eb2d32bcedd5b6bf6a8708ca248da4af0a8788ea6efe6923c81f7cf865de5f140871fefdfe32ead6d8949891b039cf39dd2689a08ab90296cec03cf32456c026d0dba88724af8d0d29606f3de62ac9d79d0031c859690db90216de9dc1d8d8055b2ea384d06d1c3923dcc1488ce68c237a639ba6e99eac6ee2f34fdb38c5e0e6cb88dedaaec3ed1f94d1dc01bba60eb4b50b7b7c3db4e1bd21bd8c5cd5733643cde9906cc814e70a24bfb4e4cde1a525e19c946799bda7b29dab63d1b5562dfa05ed6ab32b8623912e4a331f685fb4d94b1238b26e25fe64e63fa80e5756a9104d588f48366de267760ebe6a6d2a15e5784622daab1c5773de64419b44fbcc9dda9d17dfc1a9beec8c5066845ecdcababff794a7f0580fea439b37c3f48d10c61a910756584ec889af2beb97e3e23cfe5ffa24f2f5cfcaa99a0f72afdabde940bc49375eee26bffc4833929c2adb2f112831d5f14157f160b8f32e60408d3929708ca3b016b94d8dfeb765986b37424b85d7363fc579309aafd251e0b738c03e8eece4f3f82cb97acfdb7260397772b7a389daef783aac9bcbe69bcbf45a5942f2f62725b003f8ca38a06c733b8b3d4281383eff2b233505ac171329c64b42ae7819126b83bfa01b4c755bf5137871abb203133aa644204067"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001200)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000001280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001140)=0x0) syz_open_procfs$namespace(r5, &(0x7f00000011c0)='ns/net\x00') 10.689012353s ago: executing program 33 (id=801): openat$ashmem(0xffffffffffffff9c, 0x0, 0x680040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48a, 0x0, 0x3}]}) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x9, 0xb0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x20}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1444182e4dd4ff2e, 0x5, 0x6, 0x6}, @mixer_unit={0x0, 0x24, 0x4, 0x5, 0x8}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0x2, "12"}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x6, 0x2, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x3, "32c1557751"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x8, 0x0, {0x7, 0x25, 0x1, 0x83, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0xa9, 0xfe, {0x7, 0x25, 0x1, 0x0, 0x81, 0xfffa}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x311, 0x0, 0x8, 0x8, 0x20, 0x3}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x7, 0xff}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x500a}}, {0x4a, &(0x7f0000000240)=@string={0x78, 0x3, "4f20b0094737658f2a2880f9c64785bc54d8dc396cbfa094964a418e70769c14603425e7f4cf06899d86da2ef4ff3bdbc029bd375e752646d6a6a5d2e7112b52e5456b85180bcfc1cfd5c5d33456d2809399b4b85c2e4fbd09ec1cbefc5f5bfbc3f0899e26f499469b7cb0cce6b13b7abaafc43277be"}}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x200000000) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0xffff, "00f6ff", 0x1, 0x2}) 9.200993944s ago: executing program 34 (id=803): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x24000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x24000000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 0s ago: executing program 35 (id=810): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2a) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs2/binder1\x00', 0x800, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000080)={{}, "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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001200)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000001280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001140)=0x0) syz_open_procfs$namespace(r5, &(0x7f00000011c0)='ns/net\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 23.362437][ T36] audit: type=1400 audit(1754642203.710:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.363658][ T281] cgroup: Unknown subsys name 'net' [ 23.385191][ T36] audit: type=1400 audit(1754642203.720:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.412490][ T36] audit: type=1400 audit(1754642203.740:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.412656][ T281] cgroup: Unknown subsys name 'devices' [ 23.594842][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.600448][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.755097][ T36] audit: type=1400 audit(1754642204.110:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.778295][ T36] audit: type=1400 audit(1754642204.110:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.803046][ T36] audit: type=1400 audit(1754642204.110:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.812596][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.835000][ T36] audit: type=1400 audit(1754642204.190:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.860409][ T36] audit: type=1400 audit(1754642204.190:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.913671][ T36] audit: type=1400 audit(1754642204.270:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.914204][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.939145][ T36] audit: type=1400 audit(1754642204.270:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.731236][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.738320][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.745530][ T291] bridge_slave_0: entered allmulticast mode [ 24.751734][ T291] bridge_slave_0: entered promiscuous mode [ 24.759105][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.766171][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.773229][ T291] bridge_slave_1: entered allmulticast mode [ 24.779431][ T291] bridge_slave_1: entered promiscuous mode [ 24.847582][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.854720][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.861832][ T289] bridge_slave_0: entered allmulticast mode [ 24.868014][ T289] bridge_slave_0: entered promiscuous mode [ 24.874200][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.881247][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.888717][ T288] bridge_slave_0: entered allmulticast mode [ 24.895003][ T288] bridge_slave_0: entered promiscuous mode [ 24.907002][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.914049][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.921134][ T289] bridge_slave_1: entered allmulticast mode [ 24.927430][ T289] bridge_slave_1: entered promiscuous mode [ 24.933445][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.940470][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.947678][ T288] bridge_slave_1: entered allmulticast mode [ 24.953897][ T288] bridge_slave_1: entered promiscuous mode [ 24.959890][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.966955][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.974052][ T290] bridge_slave_0: entered allmulticast mode [ 24.980217][ T290] bridge_slave_0: entered promiscuous mode [ 24.997088][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.004375][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.011412][ T290] bridge_slave_1: entered allmulticast mode [ 25.017698][ T290] bridge_slave_1: entered promiscuous mode [ 25.139067][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.146131][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.153441][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.160462][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.189573][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.196624][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.203886][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.210912][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.228984][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.236051][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.243339][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.250366][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.272407][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.279455][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.286711][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.293734][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.313079][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.320363][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.327644][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.336181][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.343513][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.350665][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.357922][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.365139][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.379472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.386516][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.394295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.401325][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.420744][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.427797][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.441236][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.448316][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.471519][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.478603][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.491914][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.498968][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.514800][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.521844][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.529585][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.536666][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.557713][ T291] veth0_vlan: entered promiscuous mode [ 25.580851][ T290] veth0_vlan: entered promiscuous mode [ 25.590679][ T288] veth0_vlan: entered promiscuous mode [ 25.607679][ T288] veth1_macvtap: entered promiscuous mode [ 25.617502][ T291] veth1_macvtap: entered promiscuous mode [ 25.625778][ T290] veth1_macvtap: entered promiscuous mode [ 25.652560][ T289] veth0_vlan: entered promiscuous mode [ 25.681300][ T289] veth1_macvtap: entered promiscuous mode [ 25.691939][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.762393][ T332] random: crng reseeded on system resumption [ 25.882388][ T345] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 25.882422][ T345] rust_binder: Error while translating object. [ 25.887838][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.900891][ T345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.916023][ T345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.052747][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.077250][ T353] Zero length message leads to an empty skb [ 26.223079][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.316361][ T356] rust_binder: 8: no such ref 0 [ 26.321266][ T356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 26.462690][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.616597][ T360] rust_binder: Got transaction with invalid offset. [ 26.616653][ T360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.623603][ T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 26.647580][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 26.722700][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.766734][ T362] rust_binder: Error while translating object. [ 26.766833][ T362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.773134][ T362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 26.852877][ T45] usb 3-1: device descriptor read/64, error -71 [ 27.102856][ T45] usb 3-1: device descriptor read/64, error -71 [ 27.165792][ T373] rust_binder: 372 RLIMIT_NICE not set [ 27.165955][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 27.165993][ T372] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 80) [ 27.180575][ T372] rust_binder: Error while translating object. [ 27.191053][ T372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.197274][ T372] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 27.206676][ T372] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:11 [ 27.222842][ T45] usb usb3-port1: attempt power cycle [ 27.572679][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.604247][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.616582][ T402] kvm: user requested TSC rate below hardware speed [ 27.677539][ T407] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 27.727811][ T402] rust_binder: Error while translating object. [ 27.727837][ T402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.734310][ T402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:14 [ 27.746888][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.772689][ T31] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 27.798796][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.932662][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 28.002682][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.023821][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.062682][ T31] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 28.153689][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.212674][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 28.218071][ T31] usb usb4-port1: attempt power cycle [ 28.262782][ T45] usb usb3-port1: unable to enumerate USB device [ 28.436993][ T366] rust_binder: 401: removing orphan mapping 0:112 [ 28.562686][ T31] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 28.583012][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 28.722706][ T31] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 28.737205][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 28.737221][ T36] audit: type=1400 audit(1754642209.090:161): avc: denied { unlink } for pid=288 comm="syz-executor" name="file2" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.745189][ T429] rust_binder: 428 RLIMIT_NICE not set [ 28.770660][ T428] rust_binder: Write failure EINVAL in pid:18 [ 28.776225][ T31] usb 4-1: Invalid ep0 maxpacket: 32 [ 28.788100][ T31] usb usb4-port1: unable to enumerate USB device [ 28.795311][ T36] audit: type=1400 audit(1754642209.150:162): avc: denied { write } for pid=426 comm="syz.0.30" name="softnet_stat" dev="proc" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.839629][ T366] rust_binder: 426: removing orphan mapping 0:40 [ 29.102716][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.252658][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 29.259205][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.267659][ T31] usb 1-1: config 3 has an invalid interface number: 243 but max is 0 [ 29.275907][ T31] usb 1-1: config 3 has an invalid descriptor of length 147, skipping remainder of the config [ 29.286188][ T31] usb 1-1: config 3 has no interface number 0 [ 29.292304][ T31] usb 1-1: config 3 interface 243 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 32 [ 29.302224][ T31] usb 1-1: config 3 interface 243 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.315210][ T31] usb 1-1: config 3 interface 243 has no altsetting 0 [ 29.323449][ T31] usb 1-1: New USB device found, idVendor=305a, idProduct=1405, bcdDevice=a4.69 [ 29.332545][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.340570][ T31] usb 1-1: Product: syz [ 29.344814][ T31] usb 1-1: Manufacturer: syz [ 29.349422][ T31] usb 1-1: SerialNumber: syz [ 29.355524][ T436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.563666][ T36] audit: type=1400 audit(1754642209.920:163): avc: denied { read write } for pid=435 comm="syz.0.32" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.587644][ T36] audit: type=1400 audit(1754642209.920:164): avc: denied { open } for pid=435 comm="syz.0.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.611446][ T36] audit: type=1400 audit(1754642209.940:165): avc: denied { ioctl } for pid=435 comm="syz.0.32" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.642343][ T36] audit: type=1400 audit(1754642209.950:166): avc: denied { create } for pid=435 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.662010][ T36] audit: type=1400 audit(1754642209.950:167): avc: denied { ioctl } for pid=435 comm="syz.0.32" path="socket:[3736]" dev="sockfs" ino=3736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.686498][ T36] audit: type=1400 audit(1754642209.950:168): avc: denied { bind } for pid=435 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.802803][ T423] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.802871][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 29.815536][ T422] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 30.118871][ T31] usb 1-1: USB disconnect, device number 2 [ 30.149432][ T36] audit: type=1400 audit(1754642210.500:169): avc: denied { append } for pid=448 comm="syz.0.36" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.172052][ T36] audit: type=1400 audit(1754642210.520:170): avc: denied { ioctl } for pid=448 comm="syz.0.36" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.256233][ T454] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 30.407393][ T461] SELinux: policydb string length 1836477231 does not match expected length 8 [ 30.416544][ T461] SELinux: failed to load policy [ 30.424789][ T461] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 30.662835][ T473] mmap: syz.3.44 (473): VmData 29339648 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 30.688060][ T477] rust_binder: 21: no such ref 3 [ 30.693185][ T477] rust_binder: 21: no such ref 0 [ 30.695416][ T475] rust_binder: 37: no such ref 0 [ 30.713045][ T474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.713066][ T474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.719648][ T474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.726315][ T474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.780212][ T482] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 30.915753][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.944705][ T497] netlink: 'syz.2.52': attribute type 4 has an invalid length. [ 30.952285][ T497] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.52'. [ 31.274921][ T511] fuse: Unknown parameter 'group_Çd' [ 31.446751][ T525] FAT-fs (rnullb0): bogus number of reserved sectors [ 31.453501][ T525] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 31.518942][ T531] overlayfs: failed to clone upperpath [ 31.580051][ T532] cgroup: fork rejected by pids controller in /syz2 [ 31.631610][ T668] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.675642][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 31.905326][ T675] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.979707][ T690] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.232653][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.392644][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 32.398723][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.409636][ T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.419427][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.426053][ T10] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 32.435112][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.443981][ T10] usb 1-1: config 0 descriptor?? [ 32.651193][ T10] smartjoyplus 0003:0B43:0003.0001: ignoring exceeding usage max [ 32.661702][ T10] smartjoyplus 0003:0B43:0003.0001: unbalanced collection at end of report description [ 32.671546][ T10] smartjoyplus 0003:0B43:0003.0001: parse failed [ 32.677943][ T10] smartjoyplus 0003:0B43:0003.0001: probe with driver smartjoyplus failed with error -22 [ 32.867623][ T366] usb 1-1: USB disconnect, device number 3 [ 32.922700][ T424] Bluetooth: hci0: command 0x1003 tx timeout [ 32.922707][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.191839][ T721] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.251073][ T736] capability: warning: `syz.2.86' uses deprecated v2 capabilities in a way that may be insecure [ 33.459263][ T767] capability: warning: `syz.3.97' uses 32-bit capabilities (legacy support in use) [ 33.663000][ T779] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 33.719671][ T366] rust_binder: 777: removing orphan mapping 0:112 [ 33.722658][ T423] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 33.728020][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 33.743176][ T366] rust_binder: 0: removing orphan mapping 112:1048 [ 33.763068][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 33.763081][ T36] audit: type=1400 audit(1754642214.120:225): avc: denied { getopt } for pid=784 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.778353][ T783] binder: Bad value for 'stats' [ 33.809659][ T36] audit: type=1400 audit(1754642214.160:226): avc: denied { ioctl } for pid=789 comm="syz.0.107" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.848351][ T36] audit: type=1400 audit(1754642214.200:227): avc: denied { mount } for pid=798 comm="syz.0.110" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 33.936714][ T36] audit: type=1400 audit(1754642214.290:228): avc: denied { setopt } for pid=811 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.985549][ T815] rust_binder: Error while translating object. [ 33.985595][ T815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.001394][ T815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:80 [ 34.303458][ T36] audit: type=1400 audit(1754642214.660:229): avc: denied { execute } for pid=819 comm="syz.3.116" path="/selinux/create" dev="selinuxfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 34.335656][ T36] audit: type=1400 audit(1754642214.680:230): avc: denied { write } for pid=821 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.354812][ T36] audit: type=1400 audit(1754642214.680:231): avc: denied { read } for pid=821 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.430878][ T823] rust_binder: Write failure EFAULT in pid:54 [ 34.526115][ T36] audit: type=1400 audit(1754642214.880:232): avc: denied { setopt } for pid=824 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.832707][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.872446][ T843] kernel profiling enabled (shift: 5) [ 34.888486][ T36] audit: type=1400 audit(1754642215.240:233): avc: denied { mounton } for pid=842 comm="syz.0.124" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 34.888739][ T843] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 34.934877][ T845] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 34.953441][ T847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17267 sclass=netlink_route_socket pid=847 comm=syz.0.125 [ 35.003008][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 35.009860][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 35.018393][ T31] usb 2-1: config 0 has no interface number 0 [ 35.024708][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 35.033101][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 35.042305][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.050503][ T31] usb 2-1: Product: syz [ 35.054980][ T31] usb 2-1: Manufacturer: syz [ 35.059690][ T31] usb 2-1: SerialNumber: syz [ 35.072066][ T31] usb 2-1: config 0 descriptor?? [ 35.081416][ T31] smsc75xx v1.0.0 [ 35.152398][ T36] audit: type=1400 audit(1754642215.500:234): avc: denied { ioctl } for pid=850 comm="syz.2.127" path="socket:[5574]" dev="sockfs" ino=5574 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.210985][ T861] x_tables: duplicate underflow at hook 1 [ 35.495261][ T409] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 35.642654][ T409] usb 4-1: device descriptor read/64, error -71 [ 35.682563][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 35.693603][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.714568][ T878] tipc: Started in network mode [ 35.719465][ T878] tipc: Node identity 46654c5b239f, cluster identity 4711 [ 35.726873][ T878] tipc: Enabled bearer , priority 0 [ 35.817397][ T877] tipc: Disabling bearer [ 35.879747][ T885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.136'. [ 35.888708][ T885] netlink: 43 bytes leftover after parsing attributes in process `syz.2.136'. [ 35.897667][ T885] netlink: 'syz.2.136': attribute type 6 has an invalid length. [ 35.905366][ T885] netlink: 'syz.2.136': attribute type 5 has an invalid length. [ 35.912659][ T409] usb 4-1: device descriptor read/64, error -71 [ 35.919348][ T885] netlink: 43 bytes leftover after parsing attributes in process `syz.2.136'. [ 35.996039][ T897] ======================================================= [ 35.996039][ T897] WARNING: The mand mount option has been deprecated and [ 35.996039][ T897] and is ignored by this kernel. Remove the mand [ 35.996039][ T897] option from the mount to silence this warning. [ 35.996039][ T897] ======================================================= [ 36.031406][ T897] binder: Unknown parameter 'contextÀ' [ 36.037893][ T899] fuse: Bad value for 'fd' [ 36.152666][ T409] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 36.228605][ T909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 36.282677][ T409] usb 4-1: device descriptor read/64, error -71 [ 36.522652][ T409] usb 4-1: device descriptor read/64, error -71 [ 36.632794][ T409] usb usb4-port1: attempt power cycle [ 36.762584][ T911] 9pnet_fd: Insufficient options for proto=fd [ 36.792287][ T914] proc: Unknown parameter 'fd' [ 36.802348][ T914] proc: Unknown parameter 'fd' [ 36.812400][ T914] proc: Unknown parameter 'fd' [ 36.833730][ T914] proc: Unknown parameter 'fd' [ 36.953590][ T929] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 36.967475][ T929] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 36.982638][ T929] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 36.992686][ T409] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 37.000337][ T929] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 37.010541][ T929] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 37.033648][ T409] usb 4-1: device descriptor read/8, error -71 [ 37.054358][ T933] cgroup2: Unknown parameter 'net_prio' [ 37.165789][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 37.178869][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 37.189388][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 37.199306][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 37.199378][ T409] usb 4-1: device descriptor read/8, error -71 [ 37.215155][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 37.226662][ T31] usb 2-1: USB disconnect, device number 3 [ 37.378431][ T939] incfs: mount failed -22 [ 37.462682][ T409] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 37.493702][ T409] usb 4-1: device descriptor read/8, error -71 [ 37.623652][ T409] usb 4-1: device descriptor read/8, error -71 [ 37.642660][ T366] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.724751][ T954] __vm_enough_memory: pid: 954, comm: syz.1.159, bytes: 18014402804453376 not enough memory for the allocation [ 37.742822][ T409] usb usb4-port1: unable to enumerate USB device [ 37.781086][ T956] fuse: Bad value for 'fd' [ 37.803963][ T366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.822650][ T366] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.842654][ T366] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.864602][ T366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.873897][ T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.881922][ T366] usb 1-1: Product: syz [ 37.892633][ T366] usb 1-1: Manufacturer: syz [ 37.897275][ T366] usb 1-1: SerialNumber: syz [ 37.906994][ T366] cdc_mbim 1-1:1.0: skipping garbage [ 38.014585][ T959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 38.274562][ T972] can0: slcan on ptm0. [ 38.308419][ T366] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 38.314959][ T366] cdc_mbim 1-1:1.0: bind() failure [ 38.326242][ T366] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 38.342687][ T366] cdc_ncm 1-1:1.1: bind() failure [ 38.346547][ T982] overlayfs: failed to resolve './file1': -2 [ 38.348964][ T366] usb 1-1: USB disconnect, device number 4 [ 38.387539][ T972] can0 (unregistered): slcan off ptm0. [ 38.550084][ T997] tipc: Enabling of bearer rejected, failed to enable media [ 38.899347][ T1028] overlayfs: failed to clone upperpath [ 39.157478][ T1035] fuse: Bad value for 'fd' [ 39.180098][ T1040] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 39.195339][ T1040] tipc: Enabling of bearer rejected, failed to enable media [ 39.231440][ T1046] overlayfs: failed to clone upperpath [ 39.481806][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 39.481821][ T36] audit: type=1400 audit(1754642219.830:265): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.534029][ T36] audit: type=1400 audit(1754642219.890:266): avc: denied { remount } for pid=1069 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 39.554081][ T36] audit: type=1400 audit(1754642219.890:267): avc: denied { mounton } for pid=1069 comm="syz.3.186" path="/27/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 39.582984][ T1075] overlayfs: disabling nfs_export due to verity=on [ 39.708895][ T1086] fuse: Bad value for 'user_id' [ 39.713910][ T1086] fuse: Bad value for 'user_id' [ 39.817272][ T36] audit: type=1400 audit(1754642220.170:268): avc: denied { bind } for pid=1090 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.048365][ T1107] tipc: Enabling of bearer rejected, failed to enable media [ 40.065852][ T36] audit: type=1400 audit(1754642220.420:269): avc: denied { create } for pid=1111 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 40.093792][ T1112] binder: Bad value for 'max' [ 40.098532][ T36] audit: type=1400 audit(1754642220.450:270): avc: denied { ioctl } for pid=1111 comm="syz.3.202" path="socket:[7441]" dev="sockfs" ino=7441 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 40.179077][ T36] audit: type=1326 audit(1754642220.530:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1114 comm="syz.3.203" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f315598ebe9 code=0x0 [ 40.285472][ T1122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 40.285502][ T1122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:171 [ 40.336447][ T36] audit: type=1400 audit(1754642220.690:272): avc: denied { connect } for pid=1123 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.392648][ T36] audit: type=1400 audit(1754642220.720:273): avc: denied { setopt } for pid=1123 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.501588][ T36] audit: type=1400 audit(1754642220.850:274): avc: denied { read } for pid=94 comm="acpid" name="event7" dev="devtmpfs" ino=442 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 40.549191][ T1136] overlayfs: failed to clone upperpath [ 40.582464][ T1138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.211'. [ 40.643106][ T1138] rust_binder: Write failure EFAULT in pid:181 [ 40.653344][ T1146] tipc: Enabling of bearer rejected, failed to enable media [ 40.852375][ T1158] binder: Unknown parameter 'statsÐHÇÂ' [ 40.999362][ T1183] futex_wake_op: syz.2.226 tries to shift op by -1; fix this program [ 41.016322][ T1183] raw_sendmsg: syz.2.226 forgot to set AF_INET. Fix it! [ 41.268936][ T1215] netlink: 100 bytes leftover after parsing attributes in process `syz.3.237'. [ 41.291329][ T1215] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 41.463197][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.532664][ T409] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.654914][ T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 41.682645][ T10] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 41.693885][ T409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.705064][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.712762][ T409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.714183][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.734074][ T409] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.758609][ T10] usb 1-1: SerialNumber: syz [ 41.767367][ T409] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.776583][ T10] usb 1-1: 0:2 : does not exist [ 41.794243][ T409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.817692][ T409] usb 4-1: config 0 descriptor?? [ 41.936876][ T1233] mmap: syz.1.243 (1233) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.950167][ T1233] overlay: ./bus is not a directory [ 41.969409][ T1240] overlay: Unknown parameter 'dont_measure' [ 41.986885][ T10] usb 1-1: USB disconnect, device number 5 [ 42.022523][ T1248] 9pnet_fd: Insufficient options for proto=fd [ 42.232020][ T409] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 42.246792][ T409] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 42.834796][ C0] plantronics 0003:047F:FFFF.0002: hid_field_extract() called with n (132) > 32! (swapper/0) [ 42.845523][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 42.851852][ T409] usb 4-1: USB disconnect, device number 10 [ 42.992674][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.142642][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 43.148772][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.159670][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.169441][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.178573][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.189670][ T45] usb 1-1: config 0 descriptor?? [ 43.195657][ T45] hub 1-1:0.0: USB hub found [ 43.395585][ T45] hub 1-1:0.0: 1 port detected [ 43.780932][ T1326] tipc: Enabling of bearer rejected, failed to enable media [ 43.999294][ T45] hub 1-1:0.0: activate --> -90 [ 44.111294][ T1351] overlayfs: failed to clone upperpath [ 44.272689][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 44.402653][ T10] usb 4-1: device descriptor read/64, error -71 [ 44.642662][ T10] usb 4-1: device descriptor read/64, error -71 [ 44.706547][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 44.706563][ T36] audit: type=1400 audit(1754642225.060:301): avc: denied { read } for pid=1278 comm="syz.0.258" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 44.735362][ T36] audit: type=1400 audit(1754642225.060:302): avc: denied { open } for pid=1278 comm="syz.0.258" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 44.882665][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.012666][ T10] usb 4-1: device descriptor read/64, error -71 [ 45.243183][ T45] usb 1-1-port1: cannot disable (err = -32) [ 45.261819][ T45] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 45.271295][ T45] usb 1-1-port1: connect-debounce failed [ 45.272684][ T10] usb 4-1: device descriptor read/64, error -71 [ 45.403508][ T10] usb usb4-port1: attempt power cycle [ 45.752661][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.774077][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.789746][ T1411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.790047][ T1411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 45.800620][ T1411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:212 [ 45.872724][ T31] usb 1-1: USB disconnect, device number 6 [ 45.912591][ T10] usb 4-1: device descriptor read/8, error -71 [ 45.933728][ T36] audit: type=1400 audit(1754642226.290:303): avc: denied { create } for pid=1423 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.954799][ T36] audit: type=1400 audit(1754642226.310:304): avc: denied { setopt } for pid=1423 comm="syz.0.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 46.108188][ T1431] binder: Unknown parameter 'seclabej' [ 46.152732][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 46.173766][ T1434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 46.183832][ T10] usb 4-1: device descriptor read/8, error -71 [ 46.240612][ T36] audit: type=1400 audit(1754642226.590:305): avc: denied { mount } for pid=1448 comm="syz.2.315" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.241223][ T1449] netlink: 'syz.2.315': attribute type 64 has an invalid length. [ 46.270118][ T1449] netlink: 5 bytes leftover after parsing attributes in process `syz.2.315'. [ 46.289488][ T1454] binder: Bad value for 'max' [ 46.307301][ T1463] syz.2.318 uses obsolete (PF_INET,SOCK_PACKET) [ 46.313686][ T36] audit: type=1400 audit(1754642226.660:306): avc: denied { create } for pid=1461 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.314354][ T10] usb 4-1: device descriptor read/8, error -71 [ 46.341905][ T1466] rust_binder: Error while translating object. [ 46.341935][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.348659][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:236 [ 46.442987][ T10] usb usb4-port1: unable to enumerate USB device [ 46.460680][ T36] audit: type=1400 audit(1754642226.810:307): avc: denied { read } for pid=1478 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.481787][ T36] audit: type=1326 audit(1754642226.830:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1478 comm="syz.2.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cf0f8ebe9 code=0x0 [ 46.700731][ T1488] random: crng reseeded on system resumption [ 46.745687][ T1496] 9pnet_fd: Insufficient options for proto=fd [ 46.753045][ T36] audit: type=1400 audit(1754642227.110:309): avc: denied { connect } for pid=1495 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.799432][ T1504] fuseblk: Bad value for 'source' [ 46.962679][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.112646][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 47.119009][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.129421][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.139933][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.149157][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.157522][ T31] usb 1-1: Product: syz [ 47.161739][ T31] usb 1-1: Manufacturer: syz [ 47.166555][ T31] usb 1-1: SerialNumber: syz [ 47.375816][ T31] usb 1-1: 0:2 : does not exist [ 47.386875][ T31] usb 1-1: USB disconnect, device number 7 [ 47.408503][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.503194][ T1532] process 'syz.1.344' launched '/dev/fd/5' with NULL argv: empty string added [ 47.512634][ T1532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'. [ 47.531756][ T10] rust_binder: 1527: removing orphan mapping 0:1048 [ 47.598794][ T1540] tipc: Started in network mode [ 47.603698][ T1540] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 47.612792][ T1540] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 47.620913][ T1540] tipc: Enabled bearer , priority 10 [ 47.689446][ T1546] bridge0: port 3(veth0_to_bridge) entered blocking state [ 47.696596][ T1546] bridge0: port 3(veth0_to_bridge) entered disabled state [ 47.703760][ T1546] veth0_to_bridge: entered allmulticast mode [ 47.710012][ T1546] veth0_to_bridge: entered promiscuous mode [ 47.716014][ T1546] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.728334][ T1546] bridge0: port 3(veth0_to_bridge) entered blocking state [ 47.735501][ T1546] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 47.976362][ T1557] overlayfs: missing 'workdir' [ 47.995954][ T1559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 48.061728][ T1572] netlink: 'syz.1.358': attribute type 6 has an invalid length. [ 48.079409][ T1572] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.103602][ T1574] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.111524][ T1574] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 48.122684][ T1574] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 48.130656][ T1574] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 48.156901][ T1579] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 48.164567][ T1579] rust_binder: Write failure EINVAL in pid:264 [ 48.542703][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.685095][ T1595] overlayfs: failed to clone upperpath [ 48.702650][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 48.704053][ T1598] overlay: Unknown parameter 'fsname' [ 48.708880][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.721494][ T10] usb 1-1: config 179 has no interface number 0 [ 48.727964][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 48.739224][ T366] tipc: Node number set to 1 [ 48.743944][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 48.755652][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.764400][ T1605] futex_wake_op: syz.1.372 tries to shift op by 32; fix this program [ 48.768500][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 48.785057][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.798519][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 48.807763][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.821084][ T1590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.833343][ T10] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 49.039715][ T10] usb 1-1: USB disconnect, device number 8 [ 49.070804][ T1609] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 49.070822][ T1609] rust_binder: Error while translating object. [ 49.079687][ T1609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.086171][ T1609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 49.225101][ T1626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.235312][ T1626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.285562][ T1632] netlink: 72 bytes leftover after parsing attributes in process `syz.3.382'. [ 49.316579][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 49.557154][ T1656] 9pnet_fd: Insufficient options for proto=fd [ 49.574297][ T1658] netlink: 'syz.1.394': attribute type 7 has an invalid length. [ 50.012658][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 50.163678][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.173876][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.186184][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.195344][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.203369][ T10] usb 1-1: Product: syz [ 50.207595][ T10] usb 1-1: Manufacturer: syz [ 50.212189][ T10] usb 1-1: SerialNumber: syz [ 50.218349][ T10] usb 1-1: selecting invalid altsetting 1 [ 50.263365][ T1680] overlayfs: failed to clone upperpath [ 50.439326][ T10] cdc_mbim 1-1:1.0: bind() failure [ 50.448977][ T10] usb 1-1: USB disconnect, device number 9 [ 51.170055][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 51.170074][ T36] audit: type=1400 audit(1754642231.520:321): avc: denied { create } for pid=1720 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 51.221296][ T1733] 9pnet: Could not find request transport: 2l~µfdno=0xffffffffffffffff [ 51.764075][ T36] audit: type=1400 audit(1754642232.120:322): avc: denied { accept } for pid=1775 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 51.996305][ T1778] overlayfs: failed to clone upperpath [ 52.256257][ T36] audit: type=1326 audit(1754642232.610:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afab8ebe9 code=0x7fc00000 [ 52.283613][ T36] audit: type=1326 audit(1754642232.610:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afab8ebe9 code=0x7fc00000 [ 52.333293][ T1798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.444'. [ 52.379070][ T1800] netlink: 8568 bytes leftover after parsing attributes in process `syz.1.445'. [ 52.388481][ T1800] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 52.522651][ T36] audit: type=1400 audit(1754642232.870:325): avc: denied { create } for pid=1805 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.920315][ T36] audit: type=1326 audit(1754642233.270:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1822 comm="syz.1.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3afab8ebe9 code=0x0 [ 52.966165][ T1824] tmpfs: Unknown parameter 'WÌë>Рswap' [ 53.492725][ T36] audit: type=1400 audit(1754642233.850:327): avc: denied { setattr } for pid=1827 comm="syz.3.455" name="secretmem" dev="secretmem" ino=10552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.517095][ T36] audit: type=1400 audit(1754642233.870:328): avc: denied { accept } for pid=1827 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 53.537404][ T36] audit: type=1400 audit(1754642233.870:329): avc: denied { remount } for pid=1827 comm="syz.3.455" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.543596][ T1829] overlayfs: failed to clone upperpath [ 53.559786][ T36] audit: type=1400 audit(1754642234.907:330): avc: denied { mounton } for pid=1826 comm="syz.0.454" path="/proc/291/task" dev="proc" ino=10554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.612016][ T1837] netlink: 72 bytes leftover after parsing attributes in process `syz.3.458'. [ 53.621220][ T1839] netlink: 72 bytes leftover after parsing attributes in process `syz.3.458'. [ 53.643242][ T1844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61046 sclass=netlink_route_socket pid=1844 comm=syz.3.461 [ 53.660145][ T1850] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 53.686788][ T1854] netlink: 140 bytes leftover after parsing attributes in process `syz.3.464'. [ 53.696078][ T1854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.464'. [ 53.902702][ T430] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 54.052666][ T430] usb 1-1: Using ep0 maxpacket: 8 [ 54.056472][ T1892] overlayfs: failed to clone upperpath [ 54.059993][ T430] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.071835][ T430] usb 1-1: config 4 has an invalid descriptor of length 170, skipping remainder of the config [ 54.082478][ T430] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 54.093095][ T430] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 54.102153][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.110291][ T430] usb 1-1: Product: syz [ 54.114601][ T430] usb 1-1: Manufacturer: syz [ 54.119211][ T430] usb 1-1: SerialNumber: syz [ 54.326591][ T1850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.326726][ T1850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305 [ 54.553460][ T1899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 54.603174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 54.615365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.627593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 54.639656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.651801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 54.663865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.675904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 54.687992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 54.700051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 54.712149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 55.341373][ T1921] netlink: 'syz.1.488': attribute type 46 has an invalid length. [ 55.362630][ T1921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.488'. [ 56.260706][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 56.260723][ T36] audit: type=1326 audit(1754642237.607:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.319931][ T36] audit: type=1326 audit(1754642237.607:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.394926][ T36] audit: type=1326 audit(1754642237.607:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.458977][ T36] audit: type=1326 audit(1754642237.607:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.556222][ T36] audit: type=1326 audit(1754642237.607:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.634226][ T1975] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 56.650697][ T36] audit: type=1326 audit(1754642237.607:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.679801][ T1975] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.505'. [ 56.720237][ T36] audit: type=1326 audit(1754642237.647:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.792626][ T36] audit: type=1326 audit(1754642237.647:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.890733][ T36] audit: type=1326 audit(1754642237.647:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 56.965960][ T36] audit: type=1326 audit(1754642237.647:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.2.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf0f8ebe9 code=0x7ffc0000 [ 57.000461][ T430] usb 1-1: USB disconnect, device number 10 [ 57.023694][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.665170][ T2012] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 57.682814][ T2012] netlink: 'syz.3.519': attribute type 2 has an invalid length. [ 57.805784][ T2028] /dev/loop0: Can't lookup blockdev [ 58.677220][ T2040] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 58.699354][ T2040] netlink: 44 bytes leftover after parsing attributes in process `syz.1.530'. [ 58.901981][ T2069] 9pnet_fd: Insufficient options for proto=fd [ 58.911862][ T2071] netlink: 176 bytes leftover after parsing attributes in process `syz.1.534'. [ 59.083874][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 59.089935][ T423] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.612624][ C0] net_ratelimit: 58933 callbacks suppressed [ 59.612648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.630720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 59.642821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 59.655068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.667125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.677511][ T2088] tmpfs: Unknown parameter 'no' [ 59.679243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 59.696037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 59.708100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.720092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 59.732197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 59.787926][ T2100] overlayfs: missing 'lowerdir' [ 59.832394][ T2104] netlink: 'syz.0.550': attribute type 12 has an invalid length. [ 59.886775][ T2104] syzkaller0: entered promiscuous mode [ 59.898085][ T2104] syzkaller0: entered allmulticast mode [ 60.029699][ T2117] FAT-fs (rnullb0): bogus number of reserved sectors [ 60.048407][ T2117] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 60.190566][ T2119] cgroup: fork rejected by pids controller in /syz3 [ 60.487691][ T2169] tipc: Started in network mode [ 60.497613][ T2169] tipc: Node identity 7f000001, cluster identity 4711 [ 60.508047][ T2169] tipc: Enabled bearer , priority 10 [ 61.067120][ T2199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 61.076166][ T2199] erspan0: default FDB implementation only supports local addresses [ 61.086531][ T2199] netlink: 4988 bytes leftover after parsing attributes in process `syz.1.571'. [ 61.445275][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 61.445294][ T36] audit: type=1400 audit(1754642242.797:379): avc: denied { read write } for pid=2223 comm="syz.0.577" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.492899][ T409] hid (null): unknown global tag 0xc [ 61.505038][ T409] hid (null): bogus close delimiter [ 61.515913][ T409] hid-generic 004E:FFFF6BEA:0001.0003: unknown main item tag 0xd [ 61.526627][ T65] tipc: Node number set to 2130706433 [ 61.539647][ T409] hid-generic 004E:FFFF6BEA:0001.0003: unknown global tag 0xc [ 61.546893][ T36] audit: type=1400 audit(1754642242.827:380): avc: denied { open } for pid=2223 comm="syz.0.577" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.553968][ T409] hid-generic 004E:FFFF6BEA:0001.0003: item 0 1 1 12 parsing failed [ 61.603587][ T409] hid-generic 004E:FFFF6BEA:0001.0003: probe with driver hid-generic failed with error -22 [ 61.709139][ T2228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 61.747359][ T36] audit: type=1400 audit(1754642243.097:381): avc: denied { ioctl } for pid=2229 comm="syz.0.580" path="socket:[12148]" dev="sockfs" ino=12148 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.043407][ T2253] tipc: Enabling of bearer rejected, failed to enable media [ 62.064864][ T36] audit: type=1400 audit(1754642243.417:382): avc: denied { connect } for pid=2251 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.150313][ T36] audit: type=1400 audit(1754642243.447:383): avc: denied { connect } for pid=2252 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.271388][ T36] audit: type=1400 audit(1754642243.617:384): avc: denied { setopt } for pid=2260 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.342770][ T2266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 62.432807][ T36] audit: type=1400 audit(1754642243.787:385): avc: denied { write } for pid=2269 comm="syz.0.593" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.460977][ T36] audit: type=1400 audit(1754642243.807:386): avc: denied { remove_name } for pid=2269 comm="syz.0.593" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.490897][ T36] audit: type=1400 audit(1754642243.807:387): avc: denied { unlink } for pid=2269 comm="syz.0.593" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.558323][ T2280] /dev/rnullb0: Can't open blockdev [ 62.588267][ T36] audit: type=1400 audit(1754642243.937:388): avc: denied { create } for pid=2283 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.616257][ T2285] veth0_to_batadv: entered allmulticast mode [ 62.645277][ T2291] overlayfs: missing 'lowerdir' [ 62.654299][ T2292] overlayfs: missing 'lowerdir' [ 63.024682][ T2316] netlink: 176 bytes leftover after parsing attributes in process `syz.0.609'. [ 63.326261][ T2349] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 63.875828][ T2381] cgroup: subsys name conflicts with all [ 63.908688][ T2384] fuse: Bad value for 'user_id' [ 63.918668][ T2384] fuse: Bad value for 'user_id' [ 63.932616][ T409] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 64.072615][ T409] usb 1-1: device descriptor read/64, error -71 [ 64.092953][ T2401] netlink: 76 bytes leftover after parsing attributes in process `syz.1.640'. [ 64.102037][ T2401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 64.118789][ T2401] overlayfs: failed to clone lowerpath [ 64.312565][ T409] usb 1-1: device descriptor read/64, error -71 [ 64.444640][ T2412] 9pnet_fd: Insufficient options for proto=fd [ 64.492056][ T2420] fuse: Bad value for 'fd' [ 64.554556][ T409] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 64.622592][ C0] net_ratelimit: 55097 callbacks suppressed [ 64.622606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.640543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.652611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 64.664705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.677014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.689029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.701080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 64.702553][ T409] usb 1-1: device descriptor read/64, error -71 [ 64.713152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.731462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.743479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 64.953315][ T409] usb 1-1: device descriptor read/64, error -71 [ 65.072583][ T409] usb usb1-port1: attempt power cycle [ 65.294415][ T2464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 65.322942][ T2464] overlayfs: failed to clone upperpath [ 65.366807][ T2466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'. [ 65.422448][ T409] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 65.463459][ T409] usb 1-1: device descriptor read/8, error -71 [ 65.611012][ T409] usb 1-1: device descriptor read/8, error -71 [ 65.872389][ T409] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 65.913326][ T409] usb 1-1: device descriptor read/8, error -71 [ 66.052240][ T409] usb 1-1: device descriptor read/8, error -71 [ 66.162490][ T409] usb usb1-port1: unable to enumerate USB device [ 66.259021][ T2490] overlayfs: failed to clone upperpath [ 67.082534][ T2522] /dev/rnullb0: Can't open blockdev [ 67.151369][ T2524] af_packet: tpacket_rcv: packet too big, clamped from 64712 to 3944. macoff=96 [ 67.415176][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 67.415197][ T36] audit: type=1400 audit(1754642504.768:400): avc: denied { mounton } for pid=2532 comm="syz.0.689" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 68.293265][ T2552] /dev/rnullb0: Can't lookup blockdev [ 68.588535][ T2557] fuse: Bad value for 'user_id' [ 68.616625][ T2557] fuse: Bad value for 'user_id' [ 69.631956][ C0] net_ratelimit: 54488 callbacks suppressed [ 69.631981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 69.650022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 69.662252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.674321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.686428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 69.698504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 69.710677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.722700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.734820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 69.746903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 69.790453][ T36] audit: type=1400 audit(1754642507.138:401): avc: denied { wake_alarm } for pid=2588 comm="syz.3.707" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.858643][ T36] audit: type=1400 audit(1754642507.208:402): avc: denied { name_bind } for pid=2594 comm="syz.3.708" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 70.288609][ T2604] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 72.820071][ T36] audit: type=1400 audit(1754642510.168:403): avc: denied { create } for pid=2624 comm="syz.1.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 72.941884][ T2629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 72.990591][ T2629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'. [ 73.055884][ T2635] netlink: 324 bytes leftover after parsing attributes in process `syz.2.720'. [ 73.104073][ T409] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 73.241484][ T409] usb 1-1: device descriptor read/64, error -71 [ 73.481491][ T409] usb 1-1: device descriptor read/64, error -71 [ 73.641750][ T36] audit: type=1400 audit(1754642510.999:404): avc: denied { read } for pid=2651 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.741405][ T409] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 73.911383][ T409] usb 1-1: device descriptor read/64, error -71 [ 73.964954][ T36] audit: type=1400 audit(1754642511.319:405): avc: denied { getopt } for pid=2667 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.161398][ T409] usb 1-1: device descriptor read/64, error -71 [ 74.231774][ T2688] fuse: Unknown parameter 'grŽÑoup_i00000000000000000000' [ 74.271471][ T409] usb usb1-port1: attempt power cycle [ 74.318538][ T2693] netlink: 'syz.2.743': attribute type 13 has an invalid length. [ 74.327312][ T2693] erspan0: refused to change device tx_queue_len [ 74.478876][ T2701] fuse: Bad value for 'fd' [ 74.531592][ T2707] netlink: 'syz.3.749': attribute type 13 has an invalid length. [ 74.621448][ T409] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 74.641281][ C0] net_ratelimit: 62996 callbacks suppressed [ 74.641296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.642400][ T409] usb 1-1: device descriptor read/8, error -71 [ 74.647392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.677433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 74.689459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.701527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.713492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.725712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 74.737849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 74.749930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.761901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.792647][ T409] usb 1-1: device descriptor read/8, error -71 [ 75.051336][ T409] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 75.082333][ T409] usb 1-1: device descriptor read/8, error -71 [ 75.225018][ T409] usb 1-1: device descriptor read/8, error -71 [ 75.343960][ T409] usb usb1-port1: unable to enumerate USB device [ 75.486443][ T36] audit: type=1400 audit(1754642512.839:406): avc: denied { create } for pid=2744 comm="syz.3.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.533283][ T2749] overlayfs: failed to clone upperpath [ 75.644619][ T36] audit: type=1326 audit(1754642512.999:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2756 comm="syz.2.768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cf0f8ebe9 code=0x0 [ 75.772563][ T36] audit: type=1326 audit(1754642513.129:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315598ebe9 code=0x7ffc0000 [ 75.823852][ T36] audit: type=1326 audit(1754642513.149:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f315598ebe9 code=0x7ffc0000 [ 75.850446][ T36] audit: type=1326 audit(1754642513.149:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315598ebe9 code=0x7ffc0000 [ 75.878145][ T36] audit: type=1326 audit(1754642513.149:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315598ebe9 code=0x7ffc0000 [ 75.903616][ T36] audit: type=1326 audit(1754642513.149:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f315598ebe9 code=0x7ffc0000 [ 76.911626][ T2797] fuse: Bad value for 'group_id' [ 76.934708][ T2797] fuse: Bad value for 'group_id' [ 77.161025][ T2807] netlink: 200 bytes leftover after parsing attributes in process `syz.3.784'. [ 77.781822][ T367] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 77.852533][ T2821] netlink: 196 bytes leftover after parsing attributes in process `syz.2.789'. [ 79.650662][ C1] net_ratelimit: 91615 callbacks suppressed [ 79.650697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.650737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.656662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.668666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 79.680687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.692496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 79.704480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.716652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.728386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.740248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.112337][ T2837] overlayfs: failed to clone upperpath [ 84.660058][ C1] net_ratelimit: 138453 callbacks suppressed [ 84.660078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.660079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.660158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.666223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.678228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 84.690125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.702048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.713936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.726107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.737946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.117276][ T36] kauditd_printk_skb: 501 callbacks suppressed [ 87.117296][ T36] audit: type=1400 audit(1754642524.460:914): avc: denied { bind } for pid=2845 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.362232][ C1] sched: DL replenish lagged too much [ 89.669455][ C1] net_ratelimit: 143887 callbacks suppressed [ 89.669475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.669559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.675561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.687448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.699310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.711319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 89.723301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.735157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.747129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.759213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.231738][ T2848] rust_binder: Write failure EFAULT in pid:424 [ 94.031077][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 94.402178][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 94.483251][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.654456][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.665914][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.678826][ C0] net_ratelimit: 136213 callbacks suppressed [ 94.678842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 94.678844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.678943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.684882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.696877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.708778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.720799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.732680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.744568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.756554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.019948][ T10] usb 1-1: Product: syz [ 95.024192][ T10] usb 1-1: Manufacturer: âরã‡è½¥â ªï¦€äŸ†ë²…㧜뽬钠䪖è¹ç™°á’œã‘ îœ¥ì¿´è¤†èšâ»šï¿´â§€ãž½ç•žä˜¦ê›–íŠ¥á‡§åˆ«ä—¥è•«à¬˜ì‡ [ 95.151054][ T10] usb 1-1: SerialNumber: syz [ 97.152351][ T10] usb 1-1: 0:2 : does not exist [ 97.360019][ T10] usb 1-1: USB disconnect, device number 20 [ 97.998816][ T2861] udevd[2861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.609700][ T36] audit: type=1400 audit(1754642536.922:915): avc: denied { mounton } for pid=2885 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.688248][ C1] net_ratelimit: 134507 callbacks suppressed [ 99.688266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.688399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.694374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.706290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 99.718153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.730455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.742227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.754098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.765973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.777925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 104.697625][ C0] net_ratelimit: 141809 callbacks suppressed [ 104.697645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.697647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.697706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.703722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 104.715788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.727679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.739586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.751567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.763579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.775430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.707019][ C0] net_ratelimit: 140805 callbacks suppressed [ 109.707040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.707055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.713252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.725224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.737245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 109.749137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.761225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.773020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.785040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.796949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.716412][ C1] net_ratelimit: 144011 callbacks suppressed [ 114.716435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.716475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.722548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.734430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 114.746482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.758465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.770479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.782332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.794226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.806261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.725817][ C0] net_ratelimit: 139157 callbacks suppressed [ 119.725840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.725860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.731947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 119.743833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.756063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.767837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.779756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.791587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.803586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 119.815576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.735208][ C0] net_ratelimit: 142889 callbacks suppressed [ 124.735243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.735299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.741485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.753400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.765424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 124.777324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.789375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.801137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.813207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.825113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.744598][ C0] net_ratelimit: 143127 callbacks suppressed [ 129.744621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.744650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.750751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 129.762618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.774872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.786644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.798491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.810369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.822364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 129.834367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.754037][ C1] net_ratelimit: 145372 callbacks suppressed [ 134.754061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.754113][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.760141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.772144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 134.784169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.795988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.807960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.819934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.831832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.843705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.763409][ C1] net_ratelimit: 143664 callbacks suppressed [ 139.763430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.763540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.769574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.781437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.793323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.805313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 139.817384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.829139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.841146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.853110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.772841][ C0] net_ratelimit: 144809 callbacks suppressed [ 144.772863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.772884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.778957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 144.790874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.802935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.814693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.826673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.838584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.850440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 144.862426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.782192][ C0] net_ratelimit: 145651 callbacks suppressed [ 149.782213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.782251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.788304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.800222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.812106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.823953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.835933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 149.847934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.859773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.871740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.791610][ C1] net_ratelimit: 149293 callbacks suppressed [ 154.791630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.791680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.797680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.809681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.821621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.833484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 154.845359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.857333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.869331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.881183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 159.800981][ C0] net_ratelimit: 145224 callbacks suppressed [ 159.801004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.801011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.801072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.807089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 159.819127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.831026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.842925][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.855016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.866997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.878874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.810402][ C0] net_ratelimit: 147003 callbacks suppressed [ 164.810425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.810431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.810500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.816516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.828520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.850419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.852413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.864421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 164.876418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.888262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.819779][ C1] net_ratelimit: 139824 callbacks suppressed [ 169.819821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.819828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.819896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 169.825905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.837888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.849901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.861848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.873701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.885627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.897617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.829215][ C1] net_ratelimit: 147462 callbacks suppressed [ 174.829237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.829238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.829313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 174.835418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.847426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.859363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.871310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.883152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.895367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.907052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.838590][ C1] net_ratelimit: 141396 callbacks suppressed [ 179.838620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.838663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 179.844709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.856690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.868719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.880587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.892439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.904799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.916425][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.928422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.848020][ C1] net_ratelimit: 148635 callbacks suppressed [ 184.848042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.848271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.854196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.866018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.877897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.889904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 184.901779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.913649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.925618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.937611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 189.857390][ C1] net_ratelimit: 147507 callbacks suppressed [ 189.857410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.857449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 189.863503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.875369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.887357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.899333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.911260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.923138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.934999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.947042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.866800][ C0] net_ratelimit: 145768 callbacks suppressed [ 194.866821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.866833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.866921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.872906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.884833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.896721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.908735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.921165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.932989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.944991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 199.876274][ C0] net_ratelimit: 145176 callbacks suppressed [ 199.876296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 199.876307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.876391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.882359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.894399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.906290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.918285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.930420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.941990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.953963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.885637][ C1] net_ratelimit: 146329 callbacks suppressed [ 204.885659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.885830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.891798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.903795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.915715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.927573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 204.939466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.951393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.963405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.975294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 207.548431][ T37] INFO: task syz.2.793:2836 blocked for more than 122 seconds. [ 207.657104][ T36] audit: type=1400 audit(1754642645.025:916): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2608]" dev="pipefs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 207.696615][ T37] Not tainted 6.12.38-syzkaller-g209015b548fb #0 [ 207.703488][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 207.926829][ T37] task:syz.2.793 state:D stack:0 pid:2836 tgid:2836 ppid:288 flags:0x00004004 [ 208.038667][ T37] Call Trace: [ 208.041990][ T37] [ 208.044939][ T37] __schedule+0x1322/0x1df0 [ 208.195364][ T37] ? __sched_text_start+0x10/0x10 [ 208.200456][ T37] ? __kasan_check_write+0x18/0x20 [ 208.236553][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 208.241794][ T37] ? __kasan_check_write+0x18/0x20 [ 208.300708][ T37] ? trace_contention_begin+0xc0/0xc0 [ 208.425515][ T37] schedule+0xc6/0x240 [ 208.429629][ T37] schedule_preempt_disabled+0x14/0x30 [ 208.435106][ T37] __mutex_lock+0x81e/0x1b50 [ 208.586783][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 208.593620][ T37] ? arch_stack_walk+0x10b/0x170 [ 208.666605][ T37] ? stack_trace_save+0x9d/0xe0 [ 208.671507][ T37] ? stack_depot_save_flags+0x38/0x800 [ 208.702650][ T37] ? __kernel_text_address+0x11/0x40 [ 208.715208][ T37] ? kasan_save_stack+0x4d/0x60 [ 208.720118][ T37] ? kasan_save_stack+0x3e/0x60 [ 208.724995][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 208.775968][ T37] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 208.782013][ T37] ? __call_rcu_common+0xd5/0x700 [ 208.808708][ T37] ? call_rcu+0x14/0x20 [ 208.812910][ T37] __mutex_lock_slowpath+0xe/0x20 [ 208.830136][ T37] mutex_lock+0x102/0x1c0 [ 208.834504][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 208.877080][ T37] synchronize_rcu_expedited+0x288/0x7b0 [ 208.882780][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 208.919613][ T37] ? locks_remove_file+0x346/0x1000 [ 208.924881][ T37] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 208.951772][ T37] ? skb_queue_purge_reason+0x1fc/0x350 [ 208.971949][ T37] synchronize_rcu+0x77/0x2e0 [ 208.990565][ T37] ? __cfi_synchronize_rcu+0x10/0x10 [ 209.016473][ T37] ? __kasan_check_write+0x18/0x20 [ 209.021614][ T37] ? down_write+0xe9/0x2a0 [ 209.037019][ T37] pfkey_release+0x2a3/0x370 [ 209.041639][ T37] sock_close+0xdd/0x280 [ 209.062916][ T37] ? __cfi_sock_close+0x10/0x10 [ 209.089360][ T37] __fput+0x1fb/0xa00 [ 209.093409][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 209.120437][ T37] ____fput+0x20/0x30 [ 209.124457][ T37] task_work_run+0x1e0/0x250 [ 209.151616][ T37] ? __cfi_task_work_run+0x10/0x10 [ 209.162819][ T37] ? __kasan_check_read+0x15/0x20 [ 209.185929][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 209.192042][ T37] resume_user_mode_work+0x36/0x50 [ 209.220905][ T37] syscall_exit_to_user_mode+0x64/0xb0 [ 209.242387][ T37] do_syscall_64+0x64/0xf0 [ 209.263056][ T37] ? clear_bhb_loop+0x50/0xa0 [ 209.275945][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 209.281875][ T37] RIP: 0033:0x7f6cf0f8ebe9 [ 209.313994][ T37] RSP: 002b:00007ffd2659fcb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 209.346288][ T37] RAX: 0000000000000000 RBX: 00007f6cf11b7da0 RCX: 00007f6cf0f8ebe9 [ 209.354297][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 209.396232][ T37] RBP: 00007f6cf11b7da0 R08: 00000000000001fc R09: 0000001b2659ffaf [ 209.404242][ T37] R10: 00007f6cf11b7cb0 R11: 0000000000000246 R12: 0000000000014b28 [ 209.525833][ T37] R13: 00007f6cf11b6090 R14: ffffffffffffffff R15: 00007ffd2659fdd0 [ 209.533872][ T37] [ 209.549572][ T37] INFO: task syz.2.793:2837 blocked for more than 124 seconds. [ 209.581660][ T37] Not tainted 6.12.38-syzkaller-g209015b548fb #0 [ 209.619371][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 209.645323][ T37] task:syz.2.793 state:D stack:0 pid:2837 tgid:2836 ppid:288 flags:0x00000004 [ 209.685911][ T37] Call Trace: [ 209.689219][ T37] [ 209.692158][ T37] __schedule+0x1322/0x1df0 [ 209.726333][ T37] ? __sched_text_start+0x10/0x10 [ 209.731392][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 209.750457][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 209.786445][ T37] ? wake_up_process+0x14/0x20 [ 209.791247][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 209.816291][ T37] schedule+0xc6/0x240 [ 209.820409][ T37] synchronize_rcu_expedited+0x6b0/0x7b0 [ 209.850330][ T37] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 209.877936][ T37] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 209.883270][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 209.895019][ C0] net_ratelimit: 134473 callbacks suppressed [ 209.895037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.895057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.901147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.913083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.925093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 209.936980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.948821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.960803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.972798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.984715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.001894][ T37] kern_unmount_array+0x2ea/0x420 [ 210.067287][ T37] ovl_free_fs+0x3fe/0x6d0 [ 210.071776][ T37] ovl_fill_super+0x235/0x36f0 [ 210.087269][ T37] ? xas_store+0xb6c/0x17e0 [ 210.091805][ T37] ? xas_nomem+0x71/0x2d0 [ 210.107086][ T37] ? ida_alloc_range+0xa12/0xa50 [ 210.112061][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 210.136923][ T37] ? __kasan_check_write+0x18/0x20 [ 210.142156][ T37] ? mutex_unlock+0x8b/0x240 [ 210.156995][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 210.162133][ T37] ? __kasan_check_write+0x18/0x20 [ 210.178714][ T37] ? _raw_spin_lock+0x8c/0x120 [ 210.183524][ T37] ? sget_fc+0x9ce/0xad0 [ 210.202628][ T37] ? __cfi_set_anon_super_fc+0x10/0x10 [ 210.227419][ T37] get_tree_nodev+0xcb/0x170 [ 210.232058][ T37] ? __cfi_ovl_fill_super+0x10/0x10 [ 210.250774][ T37] ovl_get_tree+0x20/0x30 [ 210.260678][ T37] vfs_get_tree+0xa1/0x290 [ 210.283557][ T37] do_new_mount+0x251/0xb40 [ 210.293832][ T37] ? security_capable+0xcf/0xf0 [ 210.311375][ T37] path_mount+0x688/0x1050 [ 210.329734][ T37] ? putname+0x113/0x150 [ 210.334018][ T37] __se_sys_mount+0x2bd/0x480 [ 210.365946][ T37] ? __x64_sys_mount+0xf0/0xf0 [ 210.370752][ T37] ? __kasan_check_write+0x18/0x20 [ 210.393365][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 210.411563][ T37] __x64_sys_mount+0xc3/0xf0 [ 210.435676][ T37] x64_sys_call+0x2021/0x2ee0 [ 210.440389][ T37] do_syscall_64+0x58/0xf0 [ 210.444832][ T37] ? clear_bhb_loop+0x50/0xa0 [ 210.475935][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.481862][ T37] RIP: 0033:0x7f6cf0f8ebe9 [ 210.495971][ T37] RSP: 002b:00007f6cf1e66038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.504406][ T37] RAX: ffffffffffffffda RBX: 00007f6cf11b5fa0 RCX: 00007f6cf0f8ebe9 [ 210.655605][ T37] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 210.663616][ T37] RBP: 00007f6cf1011e19 R08: 0000200000000100 R09: 0000000000000000 [ 210.694976][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.702989][ T37] R13: 00007f6cf11b6038 R14: 00007f6cf11b5fa0 R15: 00007ffd2659fb58 [ 210.725879][ T37] [ 210.728940][ T37] NMI backtrace for cpu 0 [ 210.728958][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 210.728989][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.729001][ T37] Call Trace: [ 210.729008][ T37] [ 210.729015][ T37] __dump_stack+0x21/0x30 [ 210.729043][ T37] dump_stack_lvl+0x10c/0x190 [ 210.729067][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.729093][ T37] dump_stack+0x19/0x20 [ 210.729115][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 210.729143][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 210.729164][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 210.729192][ T37] ? sched_show_task+0x379/0x560 [ 210.729214][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 210.729234][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 210.729258][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 210.729281][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 210.729309][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 210.729332][ T37] watchdog+0xd8f/0xed0 [ 210.729357][ T37] ? __cfi_watchdog+0x10/0x10 [ 210.729379][ T37] ? __kasan_check_read+0x15/0x20 [ 210.729405][ T37] ? __kthread_parkme+0x138/0x180 [ 210.729432][ T37] ? schedule+0xc6/0x240 [ 210.729451][ T37] kthread+0x2ca/0x370 [ 210.729467][ T37] ? __cfi_watchdog+0x10/0x10 [ 210.729491][ T37] ? __cfi_kthread+0x10/0x10 [ 210.729508][ T37] ret_from_fork+0x67/0xa0 [ 210.729532][ T37] ? __cfi_kthread+0x10/0x10 [ 210.729549][ T37] ret_from_fork_asm+0x1a/0x30 [ 210.729577][ T37] [ 210.729585][ T37] Sending NMI from CPU 0 to CPUs 1: [ 210.921951][ C1] NMI backtrace for cpu 1 [ 210.921963][ C1] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.12.38-syzkaller-g209015b548fb #0 c4bb26c31dabe4a25adff9e3720090d1cd174d38 [ 210.921982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.921992][ C1] Workqueue: mld mld_query_work [ 210.922008][ C1] RIP: 0010:ip6_protocol_deliver_rcu+0x95/0x12d0 [ 210.922030][ C1] Code: 49 8d 44 24 70 48 89 45 b0 49 8d 44 24 74 48 89 45 b8 49 8d 84 24 b8 00 00 00 48 89 45 d0 49 8d 84 24 80 00 00 00 48 89 45 88 <49> 8d 84 24 8c 00 00 00 48 89 45 90 49 8d 44 24 10 48 89 85 30 ff [ 210.922041][ C1] RSP: 0018:ffffc90000230218 EFLAGS: 00000246 [ 210.922053][ C1] RAX: ffff888180048e40 RBX: ffff888180048e18 RCX: ffff888180048df6 [ 210.922063][ C1] RDX: 0000000000000100 RSI: ffff888180048dc0 RDI: ffff88812c63ea80 [ 210.922073][ C1] RBP: ffffc90000230310 R08: ffff888104a49300 R09: 0000000000000004 [ 210.922083][ C1] R10: 0000000000000003 R11: 0000000000000100 R12: ffff888180048dc0 [ 210.922092][ C1] R13: dffffc0000000000 R14: 0000000000810620 R15: 0000000000000000 [ 210.922101][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 210.922113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.922122][ C1] CR2: 000056308c8e4b88 CR3: 000000011ff7c000 CR4: 00000000003526b0 [ 210.922135][ C1] Call Trace: [ 210.922139][ C1] [ 210.922146][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 210.922162][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 210.922181][ C1] ip6_input+0x1c2/0x380 [ 210.922198][ C1] ? __cfi_ip6_input+0x10/0x10 [ 210.922214][ C1] ? __cfi_ip6_input_finish+0x10/0x10 [ 210.922230][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 210.922248][ C1] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 210.922268][ C1] ip6_mc_input+0x35a/0x670 [ 210.922285][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.922302][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 210.922322][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.922338][ C1] ip6_rcv_finish+0x344/0x3c0 [ 210.922355][ C1] ipv6_rcv+0xed/0x220 [ 210.922370][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 210.922386][ C1] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 210.922407][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 210.922423][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 210.922443][ C1] netif_receive_skb+0x147/0x7b0 [ 210.922464][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 210.922483][ C1] ? br_flood+0x67e/0x730 [ 210.922503][ C1] br_pass_frame_up+0x126/0x1c0 [ 210.922516][ C1] br_handle_frame_finish+0x12d9/0x1720 [ 210.922530][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 210.922546][ C1] br_handle_frame+0x5a6/0xba0 [ 210.922558][ C1] ? __cfi_ip6_input+0x10/0x10 [ 210.922575][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 210.922587][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 210.922612][ C1] ? ipv6_chk_mcast_addr+0x3be/0x3e0 [ 210.922633][ C1] ? ip6_mc_input+0x35a/0x670 [ 210.922649][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.922666][ C1] ? qdisc_run_end+0x120/0x120 [ 210.922684][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 210.922701][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 210.922717][ C1] ? ipv6_rcv+0xed/0x220 [ 210.922732][ C1] ? irqentry_exit+0x4a/0x60 [ 210.922748][ C1] ? __kasan_check_write+0x18/0x20 [ 210.922765][ C1] ? _raw_spin_lock_irq+0x8d/0x120 [ 210.922784][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 210.922819][ C1] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 210.922858][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 210.922879][ C1] process_backlog+0x3e5/0xae0 [ 210.922902][ C1] __napi_poll+0xd0/0x610 [ 210.922921][ C1] net_rx_action+0x584/0xce0 [ 210.922944][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 210.922965][ C1] ? timer_expire_remote+0xa0/0xa0 [ 210.922987][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 210.923004][ C1] handle_softirqs+0x1ab/0x630 [ 210.923024][ C1] __do_softirq+0xf/0x16 [ 210.923038][ C1] do_softirq+0xa6/0x100 [ 210.923056][ C1] [ 210.923060][ C1] [ 210.923066][ C1] ? __cfi_do_softirq+0x10/0x10 [ 210.923084][ C1] ? _raw_spin_lock_bh+0x90/0x120 [ 210.923104][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 210.923123][ C1] ? __kfree_skb+0x18f/0x210 [ 210.923145][ C1] __local_bh_enable_ip+0x74/0x80 [ 210.923163][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 210.923183][ C1] mld_query_work+0x951/0x2c10 [ 210.923197][ C1] ? __kasan_check_write+0x18/0x20 [ 210.923214][ C1] ? __pwq_activate_work+0x308/0x410 [ 210.923234][ C1] ? __cfi_mld_query_work+0x10/0x10 [ 210.923247][ C1] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 210.923266][ C1] ? _raw_write_unlock_bh+0x33/0x70 [ 210.923279][ C1] ? kick_pool+0xb9/0x550 [ 210.923293][ C1] process_scheduled_works+0x7d2/0x1020 [ 210.923315][ C1] worker_thread+0xc58/0x1250 [ 210.923337][ C1] kthread+0x2ca/0x370 [ 210.923349][ C1] ? __cfi_worker_thread+0x10/0x10 [ 210.923368][ C1] ? __cfi_kthread+0x10/0x10 [ 210.923380][ C1] ret_from_fork+0x67/0xa0 [ 210.923397][ C1] ? __cfi_kthread+0x10/0x10 [ 210.923409][ C1] ret_from_fork_asm+0x1a/0x30 [ 210.923430][ C1] [ 214.904463][ C1] net_ratelimit: 133160 callbacks suppressed [ 214.904486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.904756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.910590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.922462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.934361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.946361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0) [ 214.958267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.970115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.982074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.994065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3a:36:08:eb:62:97, vlan:0)