last executing test programs: 1m2.512888241s ago: executing program 2 (id=821): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) (async) r2 = syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200026df780052501013ac0cd95c9f83648cc95b4ec28a0d139de7e6acfea9220f659ba0276398169439069ec4014bb22d64c8e8799ce8c66341934c2f5e9abb87a7eb96ba0d1338dbc1b26872a8efc5b52cc17c17007c48691b8cce2e3355abe7ca023a2aca99789761d"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x10, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e"]}) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000680)={0x62, 0x207, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xbe, 0x1000, "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"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x400, [0xb, 0x7fff, 0x4, 0x94, 0x7]}}, @ra={0x5, 0x2, 0x7ff}]}, 0x1048) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x11, 0x87, {0x87, 0x9, "207f14d0576eef3263b3cc35654112177b5abe5415b933f77af34415a6f7ac00f2d94886c7491b7a56421c01cd1fd619e73bfa4381e7a38f6ee77bfae6fa504729a99e79be1363a7dc3d79b5fb50d2fdd3bded2a000e8d22bd3095704a7901fba7e0898deefec336029ccd07ee85aceac21057b3bf4c65178fca7d550152bcd8dc2ea122b5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0xb8, "9f29d9478f54ec2fbaa74ea4586ff3934c4984af87a7ca957ee38c01db51f99c1269de86d6d77194f0946543295600d815d528ab293b095b9acdda3de049a6bb42248be4dde3f1e2ef7d5fc4b1f2834e729d176273db75b0900fd381233c269540bfe9fc7b650f8721d2ceb4c183d5cf3690274252d8617837c64d25c43d3151712b6c830166778e1113725ec7e1dcf4c8e40ce7b1f9262f518fadf429f673cf6f36b991fc4e2e953d755acd355121e193751af412d1501d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x7f, 0xb, 0xa, 0xc, 0x9, 0x81, 0x2e3, 0x100, 0x1, 0x6}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0xcfd}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) 1m1.161587168s ago: executing program 2 (id=828): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0xa4, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) socket$tipc(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000001100)={0x1, r1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) socket$packet(0x11, 0x3, 0x300) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/244) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r5 = mmap$KVM_VCPU(&(0x7f00003e9000/0x1000)=nil, 0x0, 0x8, 0x11, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000001040)="88f91e6ce0af86c1b7238719bf4ad832b785f46c234fd005c18f1f119762ace5c32c367364b8d372a0069ad3c270eec66e2dd2d14c009b8bc6da2c608c4b0aaf3e05a54d58a52bb4", 0x0, 0x48) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=0x0, @ANYRESOCT=r4], 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000a17000/0x1000)=nil, 0x1000}) mlock(&(0x7f000068f000/0x3000)=nil, 0x3000) 59.658566643s ago: executing program 1 (id=843): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) writev(r1, &(0x7f0000000440)=[{&(0x7f00000004c0)="f726b09ea3d66abe48ac9a864df0abd4169494e5b4154dc8cf77a9fc5d7dd133eb8b0763eba0db6b9d417fd1bac488e5917fec3d64c8aa0dd47de97165d4001a706b513ed42188527eb721ba013bafd8ffb410bbe1bd4073a07c8e9b1c65f14457bb2d17ce0edacf6645ceced697c5477394622c715ad017db89d649b7b638d653c0e59c096924b486f73ad61e82add8d2ee3f6cb3d8cd0ffb0952afdad0ce3a97c42adbc7e9e7b508f66e2bcec319193b70f261c85c81c56714e61ad5166634c265419af7ff6e05c03269bc748d94df9195ec13798f1ac8a6b5dc03d2c7b7bcbc4f4fdbffe3", 0xe6}, {&(0x7f00000005c0)="b58df988a2621bba507237b1c65c6e6d025e8131fcd1130effc9145b417c04d202f5b6f8eef2a3411e76ab6d65da7b10a3afb191d949212d12db6066afcbbb71dc66b8bc089018499c6df3", 0x4b}, {&(0x7f0000000140)="5b6be2ee9eb576bc393155f8deae85a11a9bebef2a9ef1471d37c19a6f1ea50605001ba67ede1aabf5c32746c8cbcc9f90fa2dbe9e2853", 0x37}, {&(0x7f0000000180)="e0b776276a06c9205230f1fc0e08834f68acbd495857085965f2ab3358f32ed71af2dd16ccf64c03885ef59c55e655cb328ef91b1821bd24da9747c79b253171c81ff9ea2294d3c2cd57ab1bb4ad3f4314eadb1ac0f4df7dc7c4ed184a3660828963ce531b28c03701bc20d4fe15d0b7695ae57f4cbecdbc77546bee3ae4c6d9bd941cc434e7a31b5a962cb65aa03cb18084adceb204b1d5cb69eb7b6ba356f6d34d33b9e69037c6a5d1ef328eedc64686d3124936d160121d0501f077f3dd411c023f782b86820969", 0xc9}, {&(0x7f0000000280)="2527f33c7b619c05a2e269cc6997223d38b8ab02a0c3ed7e9e44a0a8ac57b5dc024a860625246f794dd5281515b3ee28ed92e9c714b4ee21ea6a89cd87db03f61c18578b9df95e4cf3ce6a5537f0504aa73e5244e60550e055295a4e73667bb00978dd09674c1941881a6ba672cdb96b9fd1be6d4d82fc30e6afcf9fdea9e28e303d83342ab30196785e7e8ad38cd689fc9cd5b80b60b57c75900c7228cdc27c3d7a23e2447285876b1e31a2461282185e448952c4245b7fbe69c1851d29a83189bc4eaf15f0add1720b017feca993c555", 0xd1}, {&(0x7f0000000380)="7fb657e6aa5981f2c9208c1c606312a69ad0995d3603d56161d8dabd1e870359f34dc23c3c96378565dfffb2fe501e33cd2380215252d1389663be9b3440e144afb3136262104f6c2beac91f0e4bc6aacbb41f2ffba317a39d6250a3cfa68ca57cd092d454c9e5ccc5c645c8710ebffca3751a9eeda6dc65333f980c863461f3f990abb6834f3a", 0x87}], 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) (async) stat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(r1, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000027c0)='./file1\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000002880)={{}, {0x1, 0x2}, [{0x2, 0x4, r2}, {0x2, 0x2, r3}, {0x2, 0xc, r4}, {0x2, 0x4, r5}], {}, [{}, {0x8, 0x4, r6}], {0x10, 0x4}}, 0x54, 0x0) (async, rerun: 64) close(r1) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 59.642291683s ago: executing program 1 (id=844): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f00000000c0)) r1 = getpgid(0x0) r2 = socket(0x11, 0x800000003, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) bind$packet(r2, 0x0, 0x0) r3 = syz_pidfd_open(r1, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x40a100, 0x48, 0x1}, 0x18) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000400)='./file0/file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x144) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) getpgrp(0x0) (async) sched_rr_get_interval(r0, &(0x7f00000000c0)) (async) getpgid(0x0) (async) socket(0x11, 0x800000003, 0x0) (async) sched_rr_get_interval(r0, &(0x7f0000000080)) (async) bind$packet(r2, 0x0, 0x0) (async) syz_pidfd_open(r1, 0x0) (async) pidfd_getfd(r3, r3, 0x0) (async) setns(r4, 0x66020000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x40a100, 0x48, 0x1}, 0x18) (async) open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000400)='./file0/file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x144) (async) 59.569091317s ago: executing program 1 (id=845): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe851000) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001180)='1', 0x1}], 0x1, &(0x7f0000002180)=ANY=[], 0x10e8}}], 0x1, 0x4) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 58.013781685s ago: executing program 2 (id=855): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001700)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = accept(r0, 0x0, &(0x7f0000000080)) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xd4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x2}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035217f", 0x7}], 0x2) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xd965, 0x800, &(0x7f0000000180)={0xc9, 0x3, r1, 0x1, 0x0, 0x6, @local}, 0x14) recvmmsg(r0, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/160, 0xa0}], 0x1}, 0x1}], 0x1, 0x2102, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="2b7205696d6974202d6e65745f7072696f202b68756765746c6220"], 0x1b) 57.90191064s ago: executing program 2 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000003c0)={0xcdd, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20000801) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2, 0x2, 0x1, 0xa}}}}}}}, 0x4a) (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000002035120382400001020301090269000301090002080b0001010920090904000000010120"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 57.823892654s ago: executing program 1 (id=858): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="1201100100000010341a05f7000000000001090224000100005007090400020d0300070009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="7c8700fe01"]) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.180981695s ago: executing program 3 (id=868): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x8401) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f0"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x20008080) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x40}]}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/uts\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x1, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r10, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setpriority(0x2, 0xff, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/48, 0x30}], 0x2) 55.815067333s ago: executing program 1 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/108, 0x6c}], 0x1}, 0x7}], 0x1, 0x40002000, 0x0) socket$inet6(0xa, 0x80003, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) (rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 55.709786438s ago: executing program 2 (id=870): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000103512148240000102030109027a00030103802f0904000000010100000a2401bb000a0002010209040100000102000009040197eb010200000a24020202005cb8f9010324010202021009240201060801043609050109ff"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) eventfd2(0x10000, 0x80003) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000040)={0x0, 0x0, 0x80000}, 0x14) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 54.953463785s ago: executing program 3 (id=871): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000), 0x10) sendmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) 54.891311778s ago: executing program 1 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x9000}, {r2, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cacGe=loose,noextend,access=user']) 52.965095763s ago: executing program 0 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x50, 0x0, &(0x7f0000000680)="46277d4c1d99824cf457998c39ba94f1730394382b65ea6e16e982037689b95865af045f9bf1858cd12f4a76fc241a57f2a794d3a61a31fa5a1b10b5c386f5c08f71ec12146f8200761ef6651a03dc38"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[@acquire_done, @acquire={0x40046305, 0x2}, @decrefs, @acquire, @enter_looper], 0xfffffddf, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000040"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r4, 0x40095505, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x5034, &(0x7f00000002c0)={0x0, 0xea6e, 0x2000, 0x3, 0xbd}, &(0x7f00000001c0)=0x0, &(0x7f0000000340)) syz_usb_connect$cdc_ncm(0x5, 0xcf, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x7, 0x110, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "641d4344"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ef, 0x401, 0xa7}, {0x6, 0x24, 0x1a, 0xe}, [@obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x8c, 0xf9, 0x6, 0xf2}, @mdlm_detail={0x43, 0x24, 0x13, 0x9, "e6d37f941f5b715a209bc5d39578a11c0bbf1514495f0dbf1fbc9499cc1c92bef7b1c98674b0526f7135aecec4aa6d03bca470f5874e539f99013c301e9bca"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7945}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x22, 0x5, 0x8}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x0, 0x3, 0x7, 0x20, 0x7}, 0x4c, &(0x7f0000000480)={0x5, 0xf, 0x4c, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0x0, 0xf, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0xdff9}, @generic={0x22, 0x10, 0xa, "4cd01d6ae6bbf32a9503484e271aca1792bc0fb981eb16372c7f5fb3153ca6"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x4, 0x9, 0x8001, 0x9}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x814}}, {0x89, &(0x7f0000000800)=@string={0x89, 0x3, "765be12036be0a685840002c2ce506407de545728d502cffa4f050f934c4719e6c5eb75ecf244a8d43e7ab380b7971318869f083b1c43da4536b452a9e6c38c2287a32ce31ed32fe7806d3164486937ca27723e48e8810c2a99d96c158e335b811d70714a3e39e43ad802a53f8d8b17f7e313cab74911ab3944a09f145dbc810e546b9c8430b7f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x444}}]}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000380)=0x1, 0x0, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @local, 0xfff}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x50, 0x0, &(0x7f0000000680)="46277d4c1d99824cf457998c39ba94f1730394382b65ea6e16e982037689b95865af045f9bf1858cd12f4a76fc241a57f2a794d3a61a31fa5a1b10b5c386f5c08f71ec12146f8200761ef6651a03dc38"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[@acquire_done, @acquire={0x40046305, 0x2}, @decrefs, @acquire, @enter_looper], 0xfffffddf, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000300000040"], 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) close(r4) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x40095505, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x50, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) syz_io_uring_setup(0x5034, &(0x7f00000002c0)={0x0, 0xea6e, 0x2000, 0x3, 0xbd}, &(0x7f00000001c0), &(0x7f0000000340)) (async) syz_usb_connect$cdc_ncm(0x5, 0xcf, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x2, 0x1, 0x7, 0x110, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "641d4344"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ef, 0x401, 0xa7}, {0x6, 0x24, 0x1a, 0xe}, [@obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x8c, 0xf9, 0x6, 0xf2}, @mdlm_detail={0x43, 0x24, 0x13, 0x9, "e6d37f941f5b715a209bc5d39578a11c0bbf1514495f0dbf1fbc9499cc1c92bef7b1c98674b0526f7135aecec4aa6d03bca470f5874e539f99013c301e9bca"}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7945}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x22, 0x5, 0x8}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x0, 0x3, 0x7, 0x20, 0x7}, 0x4c, &(0x7f0000000480)={0x5, 0xf, 0x4c, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x0, 0x0, 0xf, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0xdff9}, @generic={0x22, 0x10, 0xa, "4cd01d6ae6bbf32a9503484e271aca1792bc0fb981eb16372c7f5fb3153ca6"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x4, 0x9, 0x8001, 0x9}]}, 0x5, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x814}}, {0x89, &(0x7f0000000800)=@string={0x89, 0x3, "765be12036be0a685840002c2ce506407de545728d502cffa4f050f934c4719e6c5eb75ecf244a8d43e7ab380b7971318869f083b1c43da4536b452a9e6c38c2287a32ce31ed32fe7806d3164486937ca27723e48e8810c2a99d96c158e335b811d70714a3e39e43ad802a53f8d8b17f7e313cab74911ab3944a09f145dbc810e546b9c8430b7f"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x444}}]}) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000380)=0x1, 0x0, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @local, 0xfff}, 0x1c) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) (async) 52.300731686s ago: executing program 2 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001040)='tasks\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffff7f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x107) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x61742, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f00000012c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="d5d89283cd67f739cecad6c83a9e3ca5cff3fc190114fc74bcbc5f6d0e89f1c1e062b28523519ff4bf1ec1cfd8a8c9b4fbaafe5966fb6f2ca6ad1b333ecaa958de445e4861307f0d5144dcccc00542b5f1317278c35d7892c157635626b959f55d3871db615839e29597d03c8d541320ead09a7344d59ef827ff00d70fb8c5769c26061ed70f16dd4038", @ANYRESOCT=r3, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES16=r2]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000001200)=r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00d302", @ANYRES32=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x44000) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES8=r1, @ANYRES32=0x0], 0x0, 0x0) r4 = inotify_init() fcntl$getflags(r4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x78, 0x0, 0x0, 0x7}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) socket(0x10, 0x806, 0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4c83, 0x0) read$FUSE(r6, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200001, 0x40200003, 0xd, 0x6, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@uuid_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_off}, {@metacopy_on}]}) 52.024251349s ago: executing program 3 (id=875): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020a0157103d1bdd016bc4010203010902240001b800a0030904130602dc61adc209050b0208001c2ba3f8a8e93174000909050e02000406051f"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0xfd, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a44000010203010902eb000101000001090400ba03020600040624060000270524001000f2240f0101000000020005000206241a45040a992413019c6db01841ddf2d018838d53a4f105b6ef5544c2157ff996960e4baf1b3247e6986e6d1d11fdb2d758b4fc1d5091faf6c248c2116deb71e5e1eaa0fb0ff66ddb1b34c573f84641d688574ca71bfe371f5b46d56fbff066814103d2852dd460d08dc46176bd1081fa998d677a34d801baa70c2489083334d795c096df53e77d51bb94e18bbd97fe39f246e66e5f8182fd21ac30e27c072414006002000905810300040402e609058202ff030a024d09050302638e018004"], &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x80, 0x80, 0xe0, 0x10, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0xb4, &(0x7f00000001c0)=@string={0xb4, 0x3, "da94374667be1c62b649f3dadaf843730f77203c05fbf7a440abc1d908026d0c1d597d1a2925f8ed96eb0f4f2363ceee1f5d15d6eebdbe53defeb1763d1f0cd8dbce02c73b3500cb3382296301afe8b8d2e7314017f78c07e267f80fe8bea74bfca6c83265af4c206a320338a9046e172966680d78b282fc4f11c3c8cb09e9d551e4bf2c9f4782146456159e4cd1208b75560b54ca084f564653b1ae60e004321f929cd2cfd27eef7debb0ea696dd8c9e366"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}, {0xca, &(0x7f00000002c0)=@string={0xca, 0x3, "7b61fcaebfaa7f24073f9d1e3902300602cb852182a8bc4334b881d31358cae5a7140ab2813af74fb1ccc0e791a492e8cf62ff0034e4c7db6bbc397a25fbe5885cd77f88c2533137c5b1d93bcb05716a6e9705963f121ffefa460a5ab6707cdaa02a6e982d0af7471364fa33d4171d02320b56971dc5d4412cca9e2f00e193eab1af66e5eb28ba3c3d68b04a15c0601abcbb7a88f30fdfb90c4e835987261b68b79f3dfd95fdb03aae8d9b5391822b57ce5715b819b7c5e43d07001d878295339fc7b6d93ad3547f"}}]}) 48.781093599s ago: executing program 0 (id=876): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0481, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300) ppoll(&(0x7f0000000100)=[{r1, 0x8200}, {r2, 0x608}, {r3, 0x304}], 0x3, &(0x7f0000000140), &(0x7f0000000200)={[0x310]}, 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x7, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0xfdff, 0x402, 0x0, 0x6}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40080300000003013d5a31b5b381d9b804f9c13ea9a0bc796021154797a576fc8e625ac3a7304622655ee024ce1bed8683d6eccd9a5644557216a4249e989606ccbc41a56f2a9837893de7945bf04c8d8359791503bd099b4b47fd57b6eb4e26759f62adebaa24e3437d82d473d5bc72757ed55b3a15ba033b662983ba1d666f17434896b5206ca3b31eb37e212f00"/155], 0x0, 0x0, 0x0}, 0x0) 47.654429584s ago: executing program 3 (id=877): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_usb_connect(0x3, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000095174103d1b960104000000030109021b0001000000000904"], 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", '@;6\x00', "ef3c6c588e3360e2"}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendfile(r1, r2, 0x0, 0x7ffff000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) close_range(r0, 0xffffffffffffffff, 0x0) 44.941133518s ago: executing program 0 (id=878): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x4, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x302}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa0}}, 0x0) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x37, &(0x7f0000000040)=ANY=[]) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r6, &(0x7f0000000000)=""/151, 0x97) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r7, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) r8 = syz_io_uring_setup(0x1dc7, &(0x7f0000000580)={0x0, 0xd5a8, 0x1000, 0x1}, &(0x7f00000003c0), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000000)={0x0, 0x1c, 0x27, 0x5, 0x372, 0x0, r8}, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x1, 0x9, 0xc, 0x0, 0x80000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e22, 0x0, @remote, 0x4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r10, &(0x7f0000000100)=""/7, 0x7, 0x40000341, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$incfs(r0, &(0x7f0000000480)='.pending_reads\x00', 0x2, 0x145) 38.840693608s ago: executing program 32 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffffd, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x9000}, {r2, 0x88a0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cacGe=loose,noextend,access=user']) 36.868134165s ago: executing program 33 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001040)='tasks\x00', 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffff7f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x107) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x61742, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f00000012c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="d5d89283cd67f739cecad6c83a9e3ca5cff3fc190114fc74bcbc5f6d0e89f1c1e062b28523519ff4bf1ec1cfd8a8c9b4fbaafe5966fb6f2ca6ad1b333ecaa958de445e4861307f0d5144dcccc00542b5f1317278c35d7892c157635626b959f55d3871db615839e29597d03c8d541320ead09a7344d59ef827ff00d70fb8c5769c26061ed70f16dd4038", @ANYRESOCT=r3, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES16=r2]) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000001200)=r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00d302", @ANYRES32=r0, @ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x44000) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000001000)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRES8=r1, @ANYRES32=0x0], 0x0, 0x0) r4 = inotify_init() fcntl$getflags(r4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x78, 0x0, 0x0, 0x7}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) socket(0x10, 0x806, 0xd) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4b4c83, 0x0) read$FUSE(r6, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200001, 0x40200003, 0xd, 0x6, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@uuid_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@redirect_dir_off}, {@metacopy_on}]}) 33.973149177s ago: executing program 0 (id=881): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r1 = add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000000c0)="4fce0870abe0d84689e3a0d21a9fe87ee279192297c71984655525a4429685f077979962525b4bfceddc58b73b6e6b9957a3ceeab0e38e6b14b4ce72065ae05e5405672ed78230189ff6b3b46775fd6f51b71e7cfa13b4ec405ec12e24cb3363bd79deeba547c5f82ecbf40b08952cf1558d65feda44328d4e8160db7de8b0fcb1fd145d9fbfbe", 0x87, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x10b001, 0x0) 32.632134503s ago: executing program 3 (id=882): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x80000006, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) r1 = syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r3, &(0x7f0000003100)=@known='trusted.overlay.origin\x00', 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f00000015c0)=@newtfilter={0x24, 0x2c, 0x603, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0xffff, 0xa}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x4180) syz_usb_control_io$uac2(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "64bcd2d9abda07cbfd0a6199b5d5aef66100d8f5"}}}, 0x0) 30.852760051s ago: executing program 0 (id=883): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c040001200000010000000200060041000000dd0000003800000045030000080000000100200002000400090000000000000005000000a86bbf2503000000ffffffff0900000004000000ae0000000100000003"], 0x78) close(r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3044200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x24000000) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0) 28.188707572s ago: executing program 3 (id=884): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x0, 0xfffffffffffffffd}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) 21.350655359s ago: executing program 0 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="0f20e035200000000f22e0c744240060000000c74424021d3bc8b3c7442406000000000f01142466b8cd000f00d065660f1c83a00c000066ba4300b800000000ef66baf80cb868e88e87ef66bafc0cedc4e12dd22b2664670f0093e5600f21b3", 0x60}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xf, 0x0, 0x42, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'u'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x0, 0xfe}, {0x6, 0x24, 0x1a, 0x6, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0xc6, 0xffff, [0x1, 0x3, 0x8, 0x7, 0x9, 0x9]}, @obex={0x5, 0x24, 0x15, 0xc0}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x81, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0x6, 0x7f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x6, 0xe, 0x10, 0xff}, 0xc9, &(0x7f00000002c0)={0x5, 0xf, 0xc9, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x6, 0xf0f, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x1, 0xf00f, 0x79, [0xf, 0x3f, 0x0, 0xff0000]}, @generic={0x9c, 0x10, 0x3, "902cd84a5a92638a091afc76e3259079fcfce494ec2e743a0d77cb6f531577286334e377252045b8ac036b5b5b42c37bfb088ef922514ca55ff80261d358887af2ab245a9c447441d6b664bd4d0ce29ba2a934338ebe26373b0e8351bba54f8bb6c2d282b4e587b1cdf251c2bcae47dfc6da9e5e796daa1e423249659d640f0202ca9cbf66a0eca2377bc5a0d6fc7cd9ba49c184a32ab2ac03"}]}, 0x1, [{0x72, &(0x7f00000003c0)=@string={0x72, 0x3, "782a4da078ece3fd222e1e8639fcea96477d1e4ef3f7530b97feb9b04723639d7a97d74275e187f6e49ddebcb2069334c2ae002ebb47667621ea6d3f32379dc995a62b12df66e473677bf871123716fcff44ef5d6588ab25740657dd0040b556e0d2d581dd41207b7e6a31703bf8533e"}}]}) 9.599681577s ago: executing program 34 (id=884): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x0, 0xfffffffffffffffd}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) tkill(r2, 0x14) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) 0s ago: executing program 35 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="0f20e035200000000f22e0c744240060000000c74424021d3bc8b3c7442406000000000f01142466b8cd000f00d065660f1c83a00c000066ba4300b800000000ef66baf80cb868e88e87ef66bafc0cedc4e12dd22b2664670f0093e5600f21b3", 0x60}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x2, 0x1, 0xf, 0x0, 0x42, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'u'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x0, 0xfe}, {0x6, 0x24, 0x1a, 0x6, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0xc6, 0xffff, [0x1, 0x3, 0x8, 0x7, 0x9, 0x9]}, @obex={0x5, 0x24, 0x15, 0xc0}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x4, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x81, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0x6, 0x7f}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x6, 0xe, 0x10, 0xff}, 0xc9, &(0x7f00000002c0)={0x5, 0xf, 0xc9, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x6, 0xf0f, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x1, 0xf00f, 0x79, [0xf, 0x3f, 0x0, 0xff0000]}, @generic={0x9c, 0x10, 0x3, "902cd84a5a92638a091afc76e3259079fcfce494ec2e743a0d77cb6f531577286334e377252045b8ac036b5b5b42c37bfb088ef922514ca55ff80261d358887af2ab245a9c447441d6b664bd4d0ce29ba2a934338ebe26373b0e8351bba54f8bb6c2d282b4e587b1cdf251c2bcae47dfc6da9e5e796daa1e423249659d640f0202ca9cbf66a0eca2377bc5a0d6fc7cd9ba49c184a32ab2ac03"}]}, 0x1, [{0x72, &(0x7f00000003c0)=@string={0x72, 0x3, "782a4da078ece3fd222e1e8639fcea96477d1e4ef3f7530b97feb9b04723639d7a97d74275e187f6e49ddebcb2069334c2ae002ebb47667621ea6d3f32379dc995a62b12df66e473677bf871123716fcff44ef5d6588ab25740657dd0040b556e0d2d581dd41207b7e6a31703bf8533e"}}]}) kernel console output (not intermixed with test programs): -1: new high-speed USB device number 39 using dummy_hcd [ 91.716995][ T36] audit: type=1400 audit(1774347330.533:371): avc: denied { read } for pid=2162 comm="syz.0.525" name="file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.739285][ T36] audit: type=1400 audit(1774347330.533:372): avc: denied { mounton } for pid=2162 comm="syz.0.525" path="/114/file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.790873][ T350] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 91.799166][ T350] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 91.808734][ T350] usb 2-1: config 220 has an invalid descriptor of length 170, skipping remainder of the config [ 91.821125][ T323] usbhid 3-1:0.0: can't add hid device: -71 [ 91.827071][ T323] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 91.835269][ T350] usb 2-1: config 220 has no interface number 2 [ 91.842463][ T350] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 91.855878][ T323] usb 3-1: USB disconnect, device number 31 [ 91.863020][ T350] usb 2-1: config 220 interface 0 has no altsetting 0 [ 91.870285][ T350] usb 2-1: config 220 interface 76 has no altsetting 0 [ 91.877161][ T350] usb 2-1: config 220 interface 1 has no altsetting 0 [ 91.885293][ T350] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.894397][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.902738][ T350] usb 2-1: Product: syz [ 91.906895][ T350] usb 2-1: Manufacturer: syz [ 91.911517][ T350] usb 2-1: SerialNumber: syz [ 92.121066][ T350] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 92.128275][ T350] usb 2-1: No valid video chain found. [ 92.133930][ T350] usb 2-1: selecting invalid altsetting 0 [ 92.143559][ T350] usb 2-1: USB disconnect, device number 39 [ 92.569933][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 92.609898][ T350] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 92.700380][ T31] usb 3-1: device descriptor read/64, error -71 [ 92.716051][ T2175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.725108][ T2175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.733231][ T2175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.741778][ T2175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.758324][ T2176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.766763][ T350] usb 1-1: Using ep0 maxpacket: 16 [ 92.772792][ T2176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.774021][ T350] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.793355][ T350] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 92.802420][ T350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.810938][ T350] usb 1-1: config 0 descriptor?? [ 92.949899][ T307] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 92.957537][ T31] usb 3-1: device descriptor read/64, error -71 [ 93.199894][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 93.218261][ T350] kone 0003:1E7D:2CED.000F: item fetching failed at offset 2/44 [ 93.226179][ T350] kone 0003:1E7D:2CED.000F: parse failed [ 93.231861][ T350] kone 0003:1E7D:2CED.000F: probe with driver kone failed with error -22 [ 93.309926][ T307] usb 2-1: device descriptor read/64, error -71 [ 93.329898][ T31] usb 3-1: device descriptor read/64, error -71 [ 93.421172][ T350] usb 1-1: USB disconnect, device number 45 [ 93.569880][ T307] usb 2-1: Using ep0 maxpacket: 8 [ 93.574981][ T31] usb 3-1: device descriptor read/64, error -71 [ 93.582366][ T307] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.590683][ T307] usb 2-1: config 179 has no interface number 0 [ 93.596955][ T307] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.608027][ T307] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.619345][ T307] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.630520][ T307] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.641938][ T307] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.655169][ T307] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.664219][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.673264][ T2179] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 93.689961][ T31] usb usb3-port1: attempt power cycle [ 93.936917][ T2187] 9pnet_fd: p9_fd_create_tcp (2187): problem connecting socket to 127.0.0.1 [ 93.947268][ T2187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 93.972538][ T2190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 93.972644][ T2191] syz.0.534 (2191): attempted to duplicate a private mapping with mremap. This is not supported. [ 93.993402][ T36] audit: type=1400 audit(1774347332.813:373): avc: denied { append } for pid=2188 comm="syz.0.534" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 94.029875][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 94.050815][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.180829][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.419874][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 94.440868][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.570815][ T31] usb 3-1: device descriptor read/8, error -71 [ 94.679952][ T31] usb usb3-port1: unable to enumerate USB device [ 95.414861][ T36] audit: type=1400 audit(1774347334.233:374): avc: denied { map } for pid=2208 comm="syz.2.540" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.415183][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 95.462619][ T36] audit: type=1400 audit(1774347334.283:375): avc: denied { read } for pid=2210 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.533016][ T2211] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 95.540825][ T2211] netlink: 5 bytes leftover after parsing attributes in process `syz.2.541'. [ 95.550178][ T2211] bridge_slave_1: left promiscuous mode [ 95.555976][ T2211] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.582535][ T2214] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 95.592859][ T2214] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 95.629250][ T36] audit: type=1326 audit(1774347334.443:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.652743][ T36] audit: type=1326 audit(1774347334.443:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.676288][ T36] audit: type=1326 audit(1774347334.443:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.699880][ T36] audit: type=1326 audit(1774347334.443:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.723217][ T36] audit: type=1326 audit(1774347334.443:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.746510][ T36] audit: type=1326 audit(1774347334.443:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.769864][ T36] audit: type=1326 audit(1774347334.443:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2217 comm="syz.2.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4e9f9c799 code=0x7ffc0000 [ 95.800981][ T2226] bridge0: port 3(veth1_to_bridge) entered blocking state [ 95.808648][ T2226] bridge0: port 3(veth1_to_bridge) entered disabled state [ 95.816170][ T2226] veth1_to_bridge: entered allmulticast mode [ 95.822738][ T2226] veth1_to_bridge: entered promiscuous mode [ 95.828801][ T2226] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.841343][ T2226] bridge0: port 3(veth1_to_bridge) entered blocking state [ 95.848498][ T2226] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 95.875632][ T2230] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 95.906865][ T10] usb 2-1: USB disconnect, device number 40 [ 95.906867][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 95.921159][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 96.129881][ T350] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 96.259879][ T350] usb 1-1: device descriptor read/64, error -71 [ 96.464952][ T2242] netlink: 'syz.1.552': attribute type 27 has an invalid length. [ 96.487330][ T2242] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.499969][ T350] usb 1-1: device descriptor read/64, error -71 [ 96.537545][ T2246] netlink: 'syz.1.554': attribute type 2 has an invalid length. [ 96.546060][ T2246] netlink: 1 bytes leftover after parsing attributes in process `syz.1.554'. [ 96.635902][ T2253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 96.677879][ T2262] tipc: Enabling of bearer rejected, already enabled [ 96.686226][ T2262] netlink: 'syz.3.560': attribute type 13 has an invalid length. [ 96.695748][ T2262] tipc: New replicast peer: 255.255.255.255 [ 96.702410][ T2262] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 96.709897][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 96.739878][ T350] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 96.859887][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 96.866113][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.877074][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.879876][ T350] usb 1-1: device descriptor read/64, error -71 [ 96.886847][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 96.902155][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.910709][ T31] usb 3-1: config 0 descriptor?? [ 97.129894][ T350] usb 1-1: device descriptor read/64, error -71 [ 97.176512][ T2278] can0: slcan on ttyS3. [ 97.245807][ T350] usb usb1-port1: attempt power cycle [ 97.251313][ T2278] can0 (unregistered): slcan off ttyS3. [ 97.370281][ T2312] netlink: 96 bytes leftover after parsing attributes in process `syz.2.553'. [ 97.380700][ T2312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.389213][ T2312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.402345][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 97.408337][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 97.417520][ T31] usb 3-1: USB disconnect, device number 36 [ 97.443327][ T2317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'. [ 97.464040][ T2320] syz.2.571 uses obsolete (PF_INET,SOCK_PACKET) [ 97.599876][ T350] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 97.623649][ T350] usb 1-1: device descriptor read/8, error -71 [ 97.761093][ T350] usb 1-1: device descriptor read/8, error -71 [ 97.999892][ T350] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 98.020956][ T350] usb 1-1: device descriptor read/8, error -71 [ 98.109873][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 98.150883][ T350] usb 1-1: device descriptor read/8, error -71 [ 98.259886][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 98.259989][ T350] usb usb1-port1: unable to enumerate USB device [ 98.266600][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.279735][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.289885][ T31] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.304241][ T31] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 98.313361][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.321395][ T31] usb 2-1: Product: syz [ 98.325798][ T31] usb 2-1: Manufacturer: syz [ 98.330572][ T31] usb 2-1: SerialNumber: syz [ 98.569491][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.578221][ T31] usb-storage 2-1:1.2: USB Mass Storage device detected [ 98.603167][ T31] usb 2-1: USB disconnect, device number 41 [ 98.679905][ T350] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 98.831292][ T350] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.840956][ T350] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 98.850065][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.858035][ T350] usb 3-1: Product: syz [ 98.862285][ T350] usb 3-1: Manufacturer: syz [ 98.866874][ T350] usb 3-1: SerialNumber: syz [ 98.996094][ T2380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 99.033702][ T2386] netlink: 'syz.3.591': attribute type 12 has an invalid length. [ 99.042481][ T2386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36351 sclass=netlink_route_socket pid=2386 comm=syz.3.591 [ 99.299877][ T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 99.439867][ T10] usb 1-1: device descriptor read/64, error -71 [ 99.679888][ T10] usb 1-1: device descriptor read/64, error -71 [ 99.919896][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 100.049979][ T10] usb 1-1: device descriptor read/64, error -71 [ 100.108702][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 100.108734][ T36] audit: type=1400 audit(1774347338.923:1043): avc: denied { create } for pid=2402 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 100.289886][ T10] usb 1-1: device descriptor read/64, error -71 [ 100.400286][ T10] usb usb1-port1: attempt power cycle [ 100.739897][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 100.760871][ T10] usb 1-1: device descriptor read/8, error -71 [ 100.769897][ T323] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 100.890804][ T10] usb 1-1: device descriptor read/8, error -71 [ 100.899878][ T323] usb 2-1: device descriptor read/64, error -71 [ 101.129888][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 101.139871][ T323] usb 2-1: device descriptor read/64, error -71 [ 101.150877][ T10] usb 1-1: device descriptor read/8, error -71 [ 101.280881][ T10] usb 1-1: device descriptor read/8, error -71 [ 101.349771][ T350] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.365637][ T350] usb 3-1: unit 13 not found! [ 101.378090][ T350] usb 3-1: USB disconnect, device number 37 [ 101.388382][ T323] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 101.399019][ T10] usb usb1-port1: unable to enumerate USB device [ 101.519692][ T2432] netlink: 'syz.3.609': attribute type 4 has an invalid length. [ 101.527430][ T2432] netlink: 17 bytes leftover after parsing attributes in process `syz.3.609'. [ 101.539893][ T323] usb 2-1: device descriptor read/64, error -71 [ 101.699902][ T350] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 101.779897][ T323] usb 2-1: device descriptor read/64, error -71 [ 101.850979][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.861978][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.871727][ T350] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 101.880765][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.889225][ T350] usb 3-1: config 0 descriptor?? [ 101.894376][ T323] usb usb2-port1: attempt power cycle [ 102.239967][ T323] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 102.260876][ T323] usb 2-1: device descriptor read/8, error -71 [ 102.349894][ T307] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 102.390926][ T323] usb 2-1: device descriptor read/8, error -71 [ 102.499883][ T307] usb 1-1: Using ep0 maxpacket: 32 [ 102.506425][ T307] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.515015][ T307] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 102.527382][ T307] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 102.536481][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.544535][ T307] usb 1-1: Product: syz [ 102.548802][ T307] usb 1-1: Manufacturer: syz [ 102.553505][ T307] usb 1-1: SerialNumber: syz [ 102.599762][ T2450] x_tables: duplicate underflow at hook 1 [ 102.613418][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 102.621937][ T350] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 102.630070][ T323] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 102.639870][ T350] usb 3-1: USB disconnect, device number 38 [ 102.660859][ T323] usb 2-1: device descriptor read/8, error -71 [ 102.689887][ T2463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.619'. [ 102.700735][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 102.730509][ T2467] overlayfs: failed to clone upperpath [ 102.750528][ T2469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 102.766076][ T2440] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 102.775060][ T2440] overlayfs: missing 'lowerdir' [ 102.790953][ T323] usb 2-1: device descriptor read/8, error -71 [ 102.836475][ T36] audit: type=1400 audit(1774347341.653:1044): avc: denied { bpf } for pid=2487 comm="syz.3.626" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.909996][ T323] usb usb2-port1: unable to enumerate USB device [ 102.931475][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.942756][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.953836][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.963532][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.151422][ T2502] netlink: 5 bytes leftover after parsing attributes in process `syz.2.631'. [ 103.160550][ T2502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.178332][ T2502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.631'. [ 103.449876][ T724] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 103.611450][ T724] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.619649][ T724] usb 3-1: config 0 has no interface number 0 [ 103.625842][ T724] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.637049][ T724] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.647007][ T724] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.660220][ T724] usb 3-1: config 0 interface 1 has no altsetting 0 [ 103.666883][ T724] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 103.675975][ T724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.688277][ T724] usb 3-1: config 0 descriptor?? [ 103.773623][ T2527] kvm: emulating exchange as write [ 104.096205][ T724] hid (null): invalid report_size 10457 [ 104.138548][ T36] audit: type=1400 audit(1774347342.953:1045): avc: denied { shutdown } for pid=2531 comm="syz.3.641" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.299258][ T724] uclogic 0003:145F:0212.0010: failed retrieving string descriptor #100: -71 [ 104.309790][ T724] uclogic 0003:145F:0212.0010: failed retrieving pen parameters: -71 [ 104.318389][ T724] uclogic 0003:145F:0212.0010: pen probing failed: -71 [ 104.325771][ T724] uclogic 0003:145F:0212.0010: failed probing parameters: -71 [ 104.333573][ T724] uclogic 0003:145F:0212.0010: probe with driver uclogic failed with error -71 [ 104.348597][ T724] usb 3-1: USB disconnect, device number 39 [ 104.839891][ T323] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 104.989871][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 104.996112][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.007040][ T323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.020432][ T323] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 105.029471][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.038126][ T323] usb 2-1: config 0 descriptor?? [ 105.059950][ T724] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 105.071071][ T307] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.078562][ T307] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.090584][ T307] usb 1-1: USB disconnect, device number 54 [ 105.106242][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.211000][ T724] usb 3-1: config 0 has an invalid interface number: 133 but max is 1 [ 105.220691][ T724] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 105.229436][ T724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.239868][ T724] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 105.248809][ T724] usb 3-1: config 0 has no interface number 0 [ 105.255205][ T724] usb 3-1: config 0 interface 133 altsetting 2 endpoint 0x4 has an invalid bInterval 69, changing to 7 [ 105.270144][ T2565] bridge0: port 3(veth1_to_bridge) entered blocking state [ 105.272394][ T724] usb 3-1: config 0 interface 133 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 105.277504][ T2565] bridge0: port 3(veth1_to_bridge) entered disabled state [ 105.295912][ T2565] veth1_to_bridge: entered allmulticast mode [ 105.296015][ T724] usb 3-1: config 0 interface 133 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.303088][ T2565] veth1_to_bridge: entered promiscuous mode [ 105.311857][ T724] usb 3-1: config 0 interface 133 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 105.318440][ T2565] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 105.331012][ T724] usb 3-1: config 0 interface 133 has no altsetting 0 [ 105.343950][ T2565] bridge0: port 3(veth1_to_bridge) entered blocking state [ 105.352485][ T724] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=90.92 [ 105.356939][ T2565] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 105.366023][ T724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.381491][ T724] usb 3-1: Product: syz [ 105.385678][ T724] usb 3-1: Manufacturer: syz [ 105.390483][ T724] usb 3-1: SerialNumber: syz [ 105.394684][ T2570] netlink: 388 bytes leftover after parsing attributes in process `syz.0.655'. [ 105.398826][ T724] usb 3-1: config 0 descriptor?? [ 105.451524][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.458585][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.465700][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.472762][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.479712][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.486791][ T323] belkin 0003:1020:0006.0011: unknown main item tag 0x0 [ 105.493813][ T323] belkin 0003:1020:0006.0011: unexpected long global item [ 105.501718][ T323] belkin 0003:1020:0006.0011: parse failed [ 105.507582][ T323] belkin 0003:1020:0006.0011: probe with driver belkin failed with error -22 [ 105.610426][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.619027][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.638720][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.133/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.639139][ T724] usb 3-1: USB disconnect, device number 40 [ 105.662042][ T9] usb 2-1: USB disconnect, device number 46 [ 105.799883][ T350] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 105.949889][ T350] usb 1-1: Using ep0 maxpacket: 32 [ 105.956184][ T350] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 105.964421][ T350] usb 1-1: config 0 has no interface number 0 [ 105.970578][ T350] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 105.981967][ T350] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 105.991039][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.999004][ T350] usb 1-1: Product: syz [ 106.003199][ T350] usb 1-1: Manufacturer: syz [ 106.007783][ T350] usb 1-1: SerialNumber: syz [ 106.013058][ T350] usb 1-1: config 0 descriptor?? [ 106.019126][ T2579] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.227104][ T2579] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.389896][ T724] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 106.409905][ T307] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 106.519888][ T724] usb 3-1: device descriptor read/64, error -71 [ 106.559873][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 106.566052][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.577097][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.586967][ T307] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 106.596050][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.604697][ T307] usb 2-1: config 0 descriptor?? [ 106.610564][ T307] hub 2-1:0.0: USB hub found [ 106.635187][ T350] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 106.645474][ T350] asix 1-1:0.188: probe with driver asix failed with error -61 [ 106.759879][ T724] usb 3-1: device descriptor read/64, error -71 [ 106.815040][ T307] hub 2-1:0.0: 1 port detected [ 106.999874][ T724] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 107.129880][ T724] usb 3-1: device descriptor read/64, error -71 [ 107.369909][ T724] usb 3-1: device descriptor read/64, error -71 [ 107.419004][ T307] hub 2-1:0.0: activate --> -90 [ 107.481449][ T724] usb usb3-port1: attempt power cycle [ 107.819915][ T724] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 107.821081][ T9] usb 2-1: USB disconnect, device number 47 [ 107.840910][ T724] usb 3-1: device descriptor read/8, error -71 [ 107.970965][ T724] usb 3-1: device descriptor read/8, error -71 [ 108.039905][ T307] usb 2-1-port1: config error [ 108.209883][ T724] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 108.230862][ T724] usb 3-1: device descriptor read/8, error -71 [ 108.360996][ T724] usb 3-1: device descriptor read/8, error -71 [ 108.469983][ T724] usb usb3-port1: unable to enumerate USB device [ 108.477920][ T36] audit: type=1400 audit(1774347347.293:1046): avc: denied { accept } for pid=2617 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.511714][ T2621] fuse: blksize only supported for fuseblk [ 108.518292][ T2621] overlay: ./file0 is not a directory [ 108.542124][ T350] usb 1-1: USB disconnect, device number 55 [ 108.664926][ T2627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 108.999886][ T350] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 109.129920][ T350] usb 1-1: device descriptor read/64, error -71 [ 109.369895][ T350] usb 1-1: device descriptor read/64, error -71 [ 109.544940][ T2643] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 109.553284][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 109.571234][ T2645] netlink: 'syz.3.680': attribute type 27 has an invalid length. [ 109.611195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.623359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.635471][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.639917][ T724] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 109.647629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.667109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.679212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.691335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.703438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.715523][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.727618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 109.750216][ T350] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 109.800951][ T724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.811234][ T724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.821765][ T724] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 109.830873][ T724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.838998][ T724] usb 2-1: Product: syz [ 109.843754][ T724] usb 2-1: Manufacturer: syz [ 109.848369][ T724] usb 2-1: SerialNumber: syz [ 109.882158][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 109.902157][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.921187][ T350] usb 1-1: device descriptor read/64, error -71 [ 109.930983][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.061308][ T724] usb 2-1: 0:1 : does not exist [ 110.061396][ T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 110.078310][ T724] usb 2-1: unit 4 not found! [ 110.083209][ T724] usb 2-1: unit 120 not found! [ 110.105077][ T724] usb 2-1: USB disconnect, device number 48 [ 110.251457][ T36] audit: type=1326 audit(1774347349.073:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2649 comm="syz.3.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca0f59c799 code=0x7fc00000 [ 110.720009][ T350] usb 1-1: device descriptor read/64, error -71 [ 110.760359][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.780216][ T9] usb 3-1: config 0 descriptor?? [ 110.833981][ T350] usb usb1-port1: attempt power cycle [ 110.834904][ T2668] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.908879][ T2674] netlink: 92 bytes leftover after parsing attributes in process `syz.3.690'. [ 110.918297][ T2674] netlink: 25 bytes leftover after parsing attributes in process `syz.3.690'. [ 110.962525][ T2674] netlink: 'syz.3.690': attribute type 4 has an invalid length. [ 110.985922][ T2676] overlay: ./file0 is not a directory [ 110.991431][ T724] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 111.129891][ T724] usb 2-1: device descriptor read/64, error -71 [ 111.205937][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 111.369884][ T724] usb 2-1: device descriptor read/64, error -71 [ 111.609895][ T724] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 111.739875][ T724] usb 2-1: device descriptor read/64, error -71 [ 111.979929][ T724] usb 2-1: device descriptor read/64, error -71 [ 112.092287][ T724] usb usb2-port1: attempt power cycle [ 112.429897][ T724] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 112.450996][ T724] usb 2-1: device descriptor read/8, error -71 [ 112.593961][ T724] usb 2-1: device descriptor read/8, error -71 [ 112.630939][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 112.638040][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 112.665027][ T2720] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 112.691774][ T2725] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.849916][ T724] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 112.870975][ T724] usb 2-1: device descriptor read/8, error -71 [ 112.941140][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 112.948195][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 112.980172][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x0 [ 112.987228][ T9] chicony 0003:04F2:1123.0012: unknown main item tag 0x7 [ 113.001244][ T724] usb 2-1: device descriptor read/8, error -71 [ 113.111598][ T724] usb usb2-port1: unable to enumerate USB device [ 113.491559][ T350] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 113.701304][ T9] chicony 0003:04F2:1123.0012: invalid report_size 24940 [ 113.750650][ T350] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.767339][ T9] chicony 0003:04F2:1123.0012: item 0 2 1 7 parsing failed [ 113.778807][ T350] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 113.960594][ T9] chicony 0003:04F2:1123.0012: Chicony hid parse failed: -22 [ 113.968009][ T9] chicony 0003:04F2:1123.0012: probe with driver chicony failed with error -22 [ 113.978827][ T350] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 114.042363][ T9] usb 3-1: USB disconnect, device number 45 [ 114.120115][ T350] usb 1-1: string descriptor 0 read error: -22 [ 114.150485][ T350] usb 1-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 114.159538][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.169875][ T724] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 114.319903][ T724] usb 2-1: Invalid ep0 maxpacket: 9 [ 114.434851][ T350] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 114.449923][ T724] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 114.480834][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 114.497222][ T350] usb 1-1: USB disconnect, device number 58 [ 114.599884][ T724] usb 2-1: Invalid ep0 maxpacket: 9 [ 114.605282][ T724] usb usb2-port1: attempt power cycle [ 114.619892][ C0] net_ratelimit: 130358 callbacks suppressed [ 114.619917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.637881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 114.649962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.661959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.673935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.686070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.698052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.710170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 114.722235][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.734212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 114.803217][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 114.803368][ T2747] overlay: ./file0 is not a directory [ 114.814355][ T2748] overlay: ./file0 is not a directory [ 114.831706][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.852723][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.929952][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.949911][ T724] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 114.980717][ T724] usb 2-1: Invalid ep0 maxpacket: 9 [ 115.010092][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.019135][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.051826][ T9] usb 3-1: config 0 descriptor?? [ 115.109877][ T724] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 115.130236][ T724] usb 2-1: Invalid ep0 maxpacket: 9 [ 115.136112][ T724] usb usb2-port1: unable to enumerate USB device [ 115.199888][ T307] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 115.266904][ T2727] netlink: 'syz.2.709': attribute type 27 has an invalid length. [ 115.281480][ T2727] bridge_slave_1: left allmulticast mode [ 115.361059][ T307] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.374634][ T307] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.386669][ T307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 115.398096][ T307] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.421404][ T307] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 115.438747][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.453736][ T307] usb 1-1: Product: syz [ 115.463990][ T307] usb 1-1: Manufacturer: syz [ 115.473787][ T307] usb 1-1: SerialNumber: syz [ 115.489747][ T307] usb 1-1: config 0 descriptor?? [ 115.496836][ T2752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.510429][ T307] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 115.522047][ T2759] overlayfs: failed to clone upperpath [ 115.607100][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 115.620153][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 115.643375][ T9] usb 3-1: USB disconnect, device number 46 [ 115.730478][ T307] usb 1-1: USB disconnect, device number 59 [ 116.303655][ T2781] usb usb1: usbfs: process 2781 (syz.0.729) did not claim interface 0 before use [ 116.401202][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 116.481156][ T36] audit: type=1400 audit(1774347355.303:1048): avc: denied { ioctl } for pid=2792 comm="syz.0.732" path="/150/file2" dev="tmpfs" ino=834 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 116.596000][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 116.620313][ T9] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 116.650074][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.692834][ T9] usb 3-1: string descriptor 0 read error: -22 [ 116.699065][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40 [ 116.720916][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.727065][ T2796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.733'. [ 116.749893][ T307] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 116.910062][ T307] usb 1-1: Using ep0 maxpacket: 16 [ 116.924361][ T307] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 116.938691][ T307] usb 1-1: config 1 has no interface number 0 [ 116.948359][ T307] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 116.984716][ T307] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.015126][ T307] usb 1-1: config 1 interface 105 has no altsetting 0 [ 117.038004][ T307] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 117.067628][ T307] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 117.096110][ T307] usb 1-1: Product: syz [ 117.109933][ T307] usb 1-1: Manufacturer: syz [ 117.125796][ T307] usb 1-1: SerialNumber: syz [ 117.151518][ T2794] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.170652][ T2794] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.402039][ T2794] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.421049][ T2794] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 117.447268][ T9] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:28BD:0909.0013/input/input17 [ 117.491251][ T9] uclogic 0003:28BD:0909.0013: input,hidraw0: USB HID v0.02 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 117.587750][ T9] usb 3-1: USB disconnect, device number 47 [ 117.641804][ T307] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 117.667007][ T307] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 117.683047][ T307] usb 1-1: USB disconnect, device number 60 [ 118.191005][ T307] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 118.349881][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 118.358997][ T307] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 118.368538][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.376784][ T307] usb 3-1: Product: syz [ 118.381214][ T724] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 118.389319][ T307] usb 3-1: Manufacturer: syz [ 118.394410][ T307] usb 3-1: SerialNumber: syz [ 118.405813][ T307] usb 3-1: config 0 descriptor?? [ 118.413708][ T307] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 118.559863][ T724] usb 2-1: Using ep0 maxpacket: 16 [ 118.566295][ T724] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 118.575663][ T724] usb 2-1: config 0 has no interface number 0 [ 118.582106][ T724] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 118.592388][ T724] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 118.604068][ T724] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 118.615843][ T307] usb 3-1: USB disconnect, device number 48 [ 118.622553][ T724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.635930][ T724] usb 2-1: Product: syz [ 118.640290][ T724] usb 2-1: Manufacturer: syz [ 118.645023][ T724] usb 2-1: SerialNumber: syz [ 118.654119][ T724] usb 2-1: config 0 descriptor?? [ 118.660325][ T2824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.667518][ T2824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.894614][ T724] asix 2-1:0.34: probe with driver asix failed with error -71 [ 118.913439][ T724] usb 2-1: USB disconnect, device number 57 [ 118.929638][ T2838] binder: Unknown parameter 'ŽàI4ync' [ 118.935072][ T36] audit: type=1400 audit(1774347357.743:1049): avc: denied { remount } for pid=2837 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.053538][ T36] audit: type=1400 audit(1774347357.873:1050): avc: denied { getattr } for pid=2849 comm="syz.0.750" path="cgroup:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.116234][ T36] audit: type=1400 audit(1774347357.933:1051): avc: denied { mounton } for pid=2851 comm="syz.0.751" path="/157/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.289871][ T36] audit: type=1400 audit(1774347358.103:1052): avc: denied { mounton } for pid=2851 comm="syz.0.751" path="/157/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 119.319911][ T724] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 119.479870][ T724] usb 2-1: Using ep0 maxpacket: 32 [ 119.482765][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 119.486216][ T724] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.501591][ T724] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.510484][ T724] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.519683][ T724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.530006][ T724] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.540155][ T724] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.553549][ T724] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.562861][ T724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.576558][ T724] usb 2-1: config 0 descriptor?? [ 119.629863][ C0] net_ratelimit: 139834 callbacks suppressed [ 119.629878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.648057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.660144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.672346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 119.684447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.696498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 119.708591][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.720613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.732631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.744817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.786097][ T724] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.802637][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 119.880382][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 119.888468][ T9] usb 3-1: config 0 has no interface number 0 [ 119.914706][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 119.930069][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.938171][ T9] usb 3-1: Product: syz [ 119.970405][ T9] usb 3-1: Manufacturer: syz [ 119.975013][ T9] usb 3-1: SerialNumber: syz [ 119.983576][ T9] usb 3-1: config 0 descriptor?? [ 119.993756][ T36] audit: type=1400 audit(1774347358.813:1053): avc: denied { read write } for pid=2839 comm="syz.1.746" name="lp0" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 119.997000][ T9] smsc95xx v2.0.0 [ 120.025137][ T724] usb 2-1: USB disconnect, device number 58 [ 120.026429][ T724] usblp0: removed [ 120.032330][ T36] audit: type=1400 audit(1774347358.843:1054): avc: denied { open } for pid=2839 comm="syz.1.746" path="/dev/usb/lp0" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 120.799959][ T724] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 120.959930][ T724] usb 2-1: Using ep0 maxpacket: 32 [ 120.968116][ T724] usb 2-1: config 0 has no interfaces? [ 120.980006][ T724] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 120.999991][ T724] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 121.008454][ T724] usb 2-1: Product: syz [ 121.037276][ T724] usb 2-1: Manufacturer: syz [ 121.040911][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 121.052017][ T724] usb 2-1: SerialNumber: syz [ 121.055551][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.068868][ T724] usb 2-1: config 0 descriptor?? [ 121.095766][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 121.120957][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 121.146915][ T9] usb 3-1: USB disconnect, device number 49 [ 121.174196][ T307] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 121.276447][ T2870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.293715][ T2870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.313391][ T2870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.341065][ T307] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 121.351379][ T307] usb 1-1: config 0 has no interface number 0 [ 121.364489][ T307] usb 1-1: config 0 interface 41 has no altsetting 0 [ 121.382809][ T307] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 121.390681][ T2870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.393912][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.417686][ T9] usb 2-1: USB disconnect, device number 59 [ 121.425310][ T307] usb 1-1: Product: syz [ 121.425332][ T307] usb 1-1: Manufacturer: syz [ 121.425347][ T307] usb 1-1: SerialNumber: syz [ 121.429724][ T307] usb 1-1: config 0 descriptor?? [ 121.849882][ T45] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 122.029881][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 122.043035][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 122.059939][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.074315][ T45] usb 2-1: Product: syz [ 122.079338][ T45] usb 2-1: Manufacturer: syz [ 122.084331][ T45] usb 2-1: SerialNumber: syz [ 122.145602][ T36] audit: type=1400 audit(1774347360.963:1055): avc: denied { connect } for pid=2901 comm="syz.2.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.202078][ T2875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.211686][ T2875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.241643][ T36] audit: type=1400 audit(1774347361.043:1056): avc: granted { setsecparam } for pid=2903 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 122.271452][ T307] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 122.289674][ T307] usb 1-1: USB disconnect, device number 61 [ 122.347737][ T36] audit: type=1400 audit(1774347361.163:1057): avc: denied { execute } for pid=2911 comm="syz.2.770" name="file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.382665][ T36] audit: type=1400 audit(1774347361.193:1058): avc: denied { execute_no_trans } for pid=2911 comm="syz.2.770" path="/157/file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.551811][ T36] audit: type=1400 audit(1774347361.363:1059): avc: denied { mount } for pid=2913 comm="syz.2.771" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.585878][ T45] usb 2-1: USB disconnect, device number 60 [ 122.614019][ T36] audit: type=1400 audit(1774347361.393:1060): avc: denied { remount } for pid=2913 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.636566][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 122.643015][ T2918] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2918 comm=syz.3.772 [ 122.696751][ T2920] netlink: 44 bytes leftover after parsing attributes in process `syz.3.773'. [ 122.754699][ T2933] tmpfs: Bad value for 'nr_blocks' [ 122.760025][ T2932] tmpfs: Bad value for 'nr_blocks' [ 122.766182][ T2933] netlink: 176 bytes leftover after parsing attributes in process `syz.3.776'. [ 122.775851][ T2932] netlink: 176 bytes leftover after parsing attributes in process `syz.3.776'. [ 122.785970][ T2933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 122.832338][ T2937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.840808][ T307] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 122.858612][ T2937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.004614][ T307] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.030179][ T307] usb 3-1: config index 0 descriptor too short (expected 198, got 134) [ 123.043547][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.055216][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.075561][ T45] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 123.084978][ T307] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 123.094565][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.103050][ T307] usb 3-1: Product: syz [ 123.107365][ T307] usb 3-1: Manufacturer: syz [ 123.113582][ T307] usb 3-1: SerialNumber: syz [ 123.184011][ T2959] overlayfs: failed to resolve './file1': -2 [ 123.209881][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.261102][ T724] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 123.286530][ T2961] cgroup: Need name or subsystem set [ 123.382921][ T307] usb 3-1: 0:1 : does not exist [ 123.387856][ T307] usb 3-1: unit 0 not found! [ 123.399962][ T724] usb 1-1: device descriptor read/64, error -71 [ 123.412288][ T307] usb 3-1: USB disconnect, device number 50 [ 123.430187][ T36] audit: type=1400 audit(1774347362.243:1061): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 123.457975][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.639908][ T724] usb 1-1: device descriptor read/64, error -71 [ 123.699874][ T45] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 123.839873][ T45] usb 2-1: device descriptor read/64, error -71 [ 123.879877][ T724] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 124.009893][ T724] usb 1-1: device descriptor read/64, error -71 [ 124.056385][ T2973] x_tables: duplicate underflow at hook 1 [ 124.079899][ T45] usb 2-1: device descriptor read/64, error -71 [ 124.190762][ T45] usb usb2-port1: attempt power cycle [ 124.249887][ T724] usb 1-1: device descriptor read/64, error -71 [ 124.362384][ T724] usb usb1-port1: attempt power cycle [ 124.529909][ T45] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 124.562183][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.639846][ C0] net_ratelimit: 137600 callbacks suppressed [ 124.639869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.658052][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 124.670158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 124.682187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 124.694298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 124.706316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.710830][ T45] usb 2-1: device descriptor read/8, error -71 [ 124.718336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.729856][ T724] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 124.736531][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.755968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.768160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 124.790845][ T724] usb 1-1: device descriptor read/8, error -71 [ 124.933268][ T724] usb 1-1: device descriptor read/8, error -71 [ 124.990011][ T45] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 125.031968][ T45] usb 2-1: device descriptor read/8, error -71 [ 125.160840][ T45] usb 2-1: device descriptor read/8, error -71 [ 125.199995][ T724] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 125.260864][ T724] usb 1-1: device descriptor read/8, error -71 [ 125.280005][ T45] usb usb2-port1: unable to enumerate USB device [ 125.400851][ T724] usb 1-1: device descriptor read/8, error -71 [ 125.470084][ T2989] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 125.529571][ T724] usb usb1-port1: unable to enumerate USB device [ 126.283832][ T36] audit: type=1400 audit(1774347365.103:1062): avc: denied { setattr } for pid=3015 comm="syz.1.803" name="NETLINK" dev="sockfs" ino=22204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.364035][ T36] audit: type=1404 audit(1774347365.163:1063): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 126.409204][ T36] audit: type=1404 audit(1774347365.163:1064): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 126.460089][ T45] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 126.599874][ T307] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 126.629896][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 126.639531][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.648301][ T45] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.659523][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.683296][ T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 126.692831][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.713222][ T45] usb 1-1: Product: syz [ 126.723254][ T45] usb 1-1: Manufacturer: syz [ 126.744104][ T45] usb 1-1: SerialNumber: syz [ 126.779880][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 126.799102][ T307] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 126.824560][ T3018] netlink: 'syz.1.804': attribute type 2 has an invalid length. [ 126.851466][ T3018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.880036][ T3018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.897640][ T307] usb 2-1: string descriptor 0 read error: -71 [ 126.904047][ T307] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 126.925974][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.960257][ T307] r8152-cfgselector 2-1: Unknown version 0x0000 [ 126.975498][ T45] usb 1-1: unit 6: unexpected type 0x0d [ 126.989874][ T45] usb 1-1: unit 0 not found! [ 126.998922][ T307] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 127.025513][ T45] usb 1-1: USB disconnect, device number 66 [ 127.040280][ T307] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 127.062202][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.089189][ T307] r8152-cfgselector 2-1: USB disconnect, device number 65 [ 127.562775][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 127.562792][ T36] audit: type=1400 audit(1774347366.383:1078): avc: denied { mounton } for pid=3031 comm="syz.0.809" path="/162/file0" dev="tmpfs" ino=901 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.651001][ T36] audit: type=1400 audit(1774347366.473:1079): avc: denied { create } for pid=3034 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.672573][ T3035] netlink: 182 bytes leftover after parsing attributes in process `syz.3.810'. [ 127.718296][ T36] audit: type=1400 audit(1774347366.493:1080): avc: denied { write } for pid=3034 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.762408][ T36] audit: type=1400 audit(1774347366.493:1081): avc: denied { nlmsg_write } for pid=3034 comm="syz.3.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.792125][ T36] audit: type=1400 audit(1774347366.533:1082): avc: denied { read } for pid=3036 comm="syz.0.811" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.814945][ T36] audit: type=1400 audit(1774347366.533:1083): avc: denied { open } for pid=3036 comm="syz.0.811" path="net:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.840432][ T36] audit: type=1400 audit(1774347366.533:1084): avc: denied { create } for pid=3036 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.869645][ T36] audit: type=1400 audit(1774347366.533:1085): avc: denied { create } for pid=3036 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.890544][ T36] audit: type=1400 audit(1774347366.563:1086): avc: denied { ioctl } for pid=3036 comm="syz.0.811" path="socket:[22270]" dev="sockfs" ino=22270 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.915811][ T36] audit: type=1400 audit(1774347366.573:1087): avc: denied { bind } for pid=3036 comm="syz.0.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.949722][ T3052] netlink: 9 bytes leftover after parsing attributes in process `syz.1.815'. [ 127.958942][ T3052] z00ªX¹¦: renamed from gretap0 [ 127.965974][ T3052] z00ªX¹¦: entered allmulticast mode [ 127.989977][ T724] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 128.149874][ T724] usb 1-1: Using ep0 maxpacket: 8 [ 128.156403][ T724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.165457][ T724] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 128.188075][ T724] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 128.198409][ T724] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 128.209811][ T724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.219127][ T724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.231247][ T724] usb 1-1: Product: syz [ 128.235436][ T724] usb 1-1: Manufacturer: syz [ 128.240342][ T724] usb 1-1: SerialNumber: syz [ 128.469910][ T307] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 128.659877][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 128.667704][ T3074] fuse: Unknown parameter '00000000000000000000' [ 128.675465][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.684905][ T307] usb 2-1: not running at top speed; connect to a high speed hub [ 128.693593][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 128.707971][ T307] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 128.717363][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.725563][ T307] usb 2-1: Product: syz [ 128.730004][ T307] usb 2-1: Manufacturer: syz [ 128.734691][ T307] usb 2-1: SerialNumber: syz [ 128.829903][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 128.838469][ T45] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 128.848029][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.857660][ T45] usb 3-1: Product: syz [ 128.862183][ T45] usb 3-1: Manufacturer: syz [ 128.866847][ T45] usb 3-1: SerialNumber: syz [ 128.952497][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.961214][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.976639][ T307] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 128.985282][ T307] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 128.993532][ T307] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 129.003616][ T307] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 129.012611][ T307] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 129.041824][ T307] usb 2-1: USB disconnect, device number 66 [ 129.276934][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 129.294546][ T45] usb 3-1: USB disconnect, device number 51 [ 129.317138][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.649871][ C0] net_ratelimit: 127669 callbacks suppressed [ 129.649890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.667902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.680086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 129.692295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.704308][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 129.716433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.728470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.740653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.749919][ T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 129.752858][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.772246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.931287][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 129.938014][ T31] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 129.947344][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.959643][ T31] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 129.969049][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.977286][ T31] usb 2-1: Product: syz [ 129.981785][ T31] usb 2-1: Manufacturer: syz [ 129.986437][ T31] usb 2-1: SerialNumber: syz [ 130.070758][ T45] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 130.144150][ T3091] netlink: 108 bytes leftover after parsing attributes in process `syz.3.830'. [ 130.153670][ T3091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 130.209936][ T45] usb 3-1: device descriptor read/64, error -71 [ 130.220903][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 130.237817][ T31] usb 2-1: USB disconnect, device number 67 [ 130.449900][ T45] usb 3-1: device descriptor read/64, error -71 [ 130.699902][ T45] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 130.725726][ T724] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 130.741028][ T724] cdc_ncm 1-1:1.0: bind() failure [ 130.748481][ T724] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 130.755865][ T724] cdc_ncm 1-1:1.1: bind() failure [ 130.764699][ T724] usb 1-1: USB disconnect, device number 67 [ 130.800312][ T3098] overlayfs: workdir and upperdir must reside under the same mount [ 130.851748][ T45] usb 3-1: device descriptor read/64, error -71 [ 131.089924][ T45] usb 3-1: device descriptor read/64, error -71 [ 131.219992][ T45] usb usb3-port1: attempt power cycle [ 131.450116][ T724] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 131.569878][ T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 131.580022][ T308] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 131.590956][ T45] usb 3-1: device descriptor read/8, error -71 [ 131.612854][ T724] usb 1-1: config 9 has an invalid interface number: 235 but max is 0 [ 131.621204][ T724] usb 1-1: config 9 has no interface number 0 [ 131.627291][ T724] usb 1-1: config 9 interface 235 has no altsetting 0 [ 131.635833][ T724] usb 1-1: New USB device found, idVendor=0c52, idProduct=2872, bcdDevice=c6.b8 [ 131.645028][ T724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.654348][ T724] usb 1-1: Product: syz [ 131.658992][ T724] usb 1-1: Manufacturer: syz [ 131.663738][ T724] usb 1-1: SerialNumber: syz [ 131.720893][ T45] usb 3-1: device descriptor read/8, error -71 [ 131.732268][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.743592][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.753525][ T308] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 131.762963][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.772311][ T308] usb 2-1: config 0 descriptor?? [ 131.871512][ T724] ftdi_sio 1-1:9.235: FTDI USB Serial Device converter detected [ 131.880109][ T724] ftdi_sio ttyUSB0: unknown device type: 0xc6b8 [ 131.969906][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 132.002401][ T45] usb 3-1: device descriptor read/8, error -71 [ 132.081158][ T3126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.090764][ T3126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.131025][ T45] usb 3-1: device descriptor read/8, error -71 [ 132.142700][ T724] usb 1-1: USB disconnect, device number 68 [ 132.154534][ T724] ftdi_sio 1-1:9.235: device disconnected [ 132.188167][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.199514][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.206576][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.213673][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.220614][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.227532][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.234530][ T308] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 132.242829][ T45] usb usb3-port1: unable to enumerate USB device [ 132.254286][ T308] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 132.472075][ T308] isku 0003:1E7D:319C.0014: couldn't init struct isku_device [ 132.479503][ T308] isku 0003:1E7D:319C.0014: couldn't install keyboard [ 132.492009][ T308] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -71 [ 132.513432][ T308] usb 2-1: USB disconnect, device number 68 [ 132.562451][ T3152] netlink: 'syz.3.850': attribute type 8 has an invalid length. [ 132.585408][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 132.585424][ T36] audit: type=1400 audit(1774347371.403:1141): avc: denied { create } for pid=3153 comm="syz.3.851" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.616258][ T36] audit: type=1400 audit(1774347371.433:1142): avc: denied { write } for pid=3153 comm="syz.3.851" name="file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.641862][ T36] audit: type=1400 audit(1774347371.433:1143): avc: denied { open } for pid=3153 comm="syz.3.851" path="/315/file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.672506][ T36] audit: type=1400 audit(1774347371.433:1144): avc: denied { ioctl } for pid=3153 comm="syz.3.851" path="/315/file0" dev="tmpfs" ino=1709 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.698084][ T36] audit: type=1400 audit(1774347371.463:1145): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=1709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.950763][ T36] audit: type=1400 audit(1774347371.773:1146): avc: denied { accept } for pid=3167 comm="syz.2.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.311750][ T308] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 133.341480][ T724] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 133.374359][ T36] audit: type=1400 audit(1774347372.193:1147): avc: denied { create } for pid=3187 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.401790][ T31] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 133.430217][ T36] audit: type=1400 audit(1774347372.233:1148): avc: denied { listen } for pid=3187 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.490481][ T308] usb 3-1: Using ep0 maxpacket: 32 [ 133.501370][ T308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.509877][ T724] usb 2-1: Using ep0 maxpacket: 16 [ 133.516149][ T724] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.527440][ T724] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.539049][ T308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.579953][ T36] audit: type=1400 audit(1774347372.383:1149): avc: denied { read } for pid=3187 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.609579][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.618656][ T724] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 133.641083][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.649403][ T308] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 133.658599][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.667069][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 133.674928][ T724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.682054][ T308] usb 3-1: Product: syz [ 133.686352][ T724] usb 2-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 133.697020][ T308] usb 3-1: Manufacturer: syz [ 133.701757][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.712091][ T308] usb 3-1: SerialNumber: syz [ 133.717150][ T724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.725500][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 133.740572][ T724] usb 2-1: config 0 descriptor?? [ 133.750932][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 288, setting to 64 [ 133.764942][ T31] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 133.774260][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.789883][ T31] usb 1-1: Product: syz [ 133.794147][ T31] usb 1-1: Manufacturer: syz [ 133.809058][ T31] usb 1-1: SerialNumber: syz [ 133.820172][ T3181] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 133.947963][ T308] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 133.979616][ T308] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 134.001662][ T308] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 134.029862][ T3181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.040123][ T308] usb 3-1: USB disconnect, device number 56 [ 134.059736][ T3181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.074541][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.118396][ T31] usb 1-1: USB disconnect, device number 69 [ 134.151637][ T36] audit: type=1400 audit(1774347372.963:1150): avc: denied { write } for pid=3174 comm="syz.1.858" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.176631][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.207993][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.228761][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.237896][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.255115][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.270005][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.287188][ T724] acrux 0003:1A34:F705.0015: unknown main item tag 0x0 [ 134.297299][ T724] acrux 0003:1A34:F705.0015: item fetching failed at offset 14/41 [ 134.315571][ T724] acrux 0003:1A34:F705.0015: parse failed [ 134.329917][ T724] acrux 0003:1A34:F705.0015: probe with driver acrux failed with error -22 [ 134.417416][ T45] usb 2-1: USB disconnect, device number 69 [ 134.659863][ C0] net_ratelimit: 126407 callbacks suppressed [ 134.659882][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.678135][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 134.690230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 134.702274][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 134.714382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 134.726398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.738385][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.750517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.762560][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.775255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 135.876276][ T45] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 135.922243][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 136.201496][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 136.313521][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 136.340261][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.361857][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 137.652197][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.687843][ T45] usb 1-1: string descriptor 0 read error: -71 [ 137.696991][ T45] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.712031][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.792424][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 137.792443][ T36] audit: type=1400 audit(1774347376.563:1157): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.880350][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.901142][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 137.926597][ T9] usb 3-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 138.120096][ T45] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.384593][ T45] usb 1-1: config 0 descriptor?? [ 138.394360][ T45] usb 1-1: can't set config #0, error -71 [ 138.583468][ T9] usb 3-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 138.703744][ T45] usb 1-1: USB disconnect, device number 70 [ 139.186252][ T9] usb 3-1: config 1 interface 1 has no altsetting 1 [ 139.651902][ T9] usb 3-1: string descriptor 0 read error: -71 [ 139.669864][ C1] net_ratelimit: 231855 callbacks suppressed [ 139.669886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.669906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.676319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.688367][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 139.700248][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.712232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 139.724169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.736054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 139.747911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.759805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 139.797370][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 141.350191][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.413135][ T9] usb 3-1: can't set config #1, error -71 [ 141.445671][ T3220] fuse: Unknown parameter '00000000000000000000004ÕØ’ƒÍg÷9ÎÊÖÈ:ž<¥Ïóüüt¼¼_m‰ñÁàb²…#QŸô¿ÁÏØ¨É´ûªþYfûo' [ 141.493609][ T36] audit: type=1400 audit(1774347380.263:1158): avc: denied { append } for pid=3219 comm="syz.2.874" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.055210][ T9] usb 3-1: USB disconnect, device number 57 [ 142.575886][ T36] audit: type=1400 audit(1774347381.103:1159): avc: denied { ioctl } for pid=3219 comm="syz.2.874" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 142.732452][ T3220] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 142.971874][ T3220] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 143.475616][ T3220] overlayfs: missing 'lowerdir' [ 144.679839][ C0] net_ratelimit: 238697 callbacks suppressed [ 144.679862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.679882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.686160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 144.698034][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.710002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 144.722026][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.733966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 144.745857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.757761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 144.769684][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.807674][ T45] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 146.809841][ C1] sched: DL replenish lagged too much [ 149.689846][ C1] net_ratelimit: 241355 callbacks suppressed [ 149.689870][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.689934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.695934][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.707932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.719797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.731952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 149.743728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.755681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 149.767480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.779388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.699853][ C0] net_ratelimit: 246029 callbacks suppressed [ 154.699877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.699895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.705984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.717852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.729921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.741786][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.753768][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 154.765612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.777679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.789589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.017468][ T3231] netlink: 'syz.0.878': attribute type 3 has an invalid length. [ 159.709870][ C1] net_ratelimit: 234131 callbacks suppressed [ 159.709894][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.709902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.709946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.715939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.727947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.739845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 159.751841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.763741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.775784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 159.787688][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.793405][ T36] audit: type=1400 audit(1774347399.613:1160): avc: denied { listen } for pid=3237 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.853714][ T36] audit: type=1400 audit(1774347399.943:1161): avc: denied { mounton } for pid=3239 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 163.751329][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 164.719859][ C1] net_ratelimit: 212128 callbacks suppressed [ 164.719890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.719898][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.719964][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.725950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 164.738050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 164.749864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.761865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 164.773768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.785659][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 164.797635][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.729859][ C1] net_ratelimit: 204433 callbacks suppressed [ 169.729883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 169.729890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.729944][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 169.735958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.747982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.759866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.771814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 169.783746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.795637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.807567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.739856][ C1] net_ratelimit: 210122 callbacks suppressed [ 174.739880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.739907][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.745972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 174.757955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.770053][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.781813][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 174.793700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.805647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.817629][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 174.829576][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 179.749854][ C1] net_ratelimit: 209921 callbacks suppressed [ 179.749875][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 179.749904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.755948][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.767943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.779830][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.791796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.803740][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.815784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.827565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.839545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.759853][ C0] net_ratelimit: 200044 callbacks suppressed [ 184.759879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 184.759886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 184.759941][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.765950][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.777914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.789917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.801865][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.813732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 184.825669][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.837575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.769908][ C1] net_ratelimit: 202059 callbacks suppressed [ 189.769930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.769965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 189.775998][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.787972][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 189.799949][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 189.811913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 189.823809][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.835744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 189.847690][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.859681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.779850][ C1] net_ratelimit: 205516 callbacks suppressed [ 194.779872][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 194.779909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.785962][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.797932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.809837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.821779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.833734][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.845717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.857561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.869572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 199.789849][ C0] net_ratelimit: 209300 callbacks suppressed [ 199.789873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.789901][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.795932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 199.807827][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.819812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.831666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.843697][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.855575][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.867450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.879301][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.799855][ C0] net_ratelimit: 203402 callbacks suppressed [ 204.799878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.799902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.805932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.817841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.829732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.841580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.853464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.865319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.877259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.889145][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 209.809852][ C1] net_ratelimit: 202067 callbacks suppressed [ 209.809874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.809912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.815937][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.827861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 209.839721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 209.851584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.863726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.875505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 209.887363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.899332][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.819859][ C1] net_ratelimit: 197038 callbacks suppressed [ 214.819882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 214.819899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.825959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.837947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.849913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.861905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.873726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.885827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.897638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.909551][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 219.829852][ C1] net_ratelimit: 200692 callbacks suppressed [ 219.829874][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.829948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.835938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.847977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 219.859840][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 219.871805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.883763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.895701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 219.907559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.919518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.839869][ C1] net_ratelimit: 203570 callbacks suppressed [ 224.839899][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.839926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.845957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.857974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 224.869863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 224.881810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.893776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.905714][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 224.917587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.929556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.849861][ C1] net_ratelimit: 203099 callbacks suppressed [ 229.849883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.849935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.855940][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.867959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 229.879838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 229.891793][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.903746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.915685][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 229.927554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.939500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 231.892238][ T3253] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.909898][ T3253] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.917014][ T3253] bridge_slave_0: entered allmulticast mode [ 231.951907][ T3253] bridge_slave_0: entered promiscuous mode [ 232.442504][ T3253] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.449581][ T3253] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.481590][ T3253] bridge_slave_1: entered allmulticast mode [ 232.511239][ T3253] bridge_slave_1: entered promiscuous mode [ 234.859856][ C1] net_ratelimit: 202929 callbacks suppressed [ 234.859882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.859928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.865947][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.877871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.889729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 234.901595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.913740][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.925518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.937396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.949675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.869856][ C1] net_ratelimit: 207672 callbacks suppressed [ 239.869877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 239.869896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.876051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.887926][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.899797][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.911778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.923741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 239.935731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.947643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.959640][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.879895][ C0] net_ratelimit: 202940 callbacks suppressed [ 244.879916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.879947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.885974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.897879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.909862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.921843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 244.933804][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.945658][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.957692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.969576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.360695][ T3254] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.367763][ T3254] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.396096][ T3254] bridge_slave_0: entered allmulticast mode [ 245.501332][ T3254] bridge_slave_0: entered promiscuous mode [ 245.903906][ T3254] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.961393][ T3254] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.968510][ T3254] bridge_slave_1: entered allmulticast mode [ 246.001568][ T3254] bridge_slave_1: entered promiscuous mode [ 248.096336][ T3256] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.420655][ T3256] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.427769][ T3256] bridge_slave_0: entered allmulticast mode [ 248.537128][ T3256] bridge_slave_0: entered promiscuous mode [ 248.670861][ T3256] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.677935][ T3256] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.700298][ T3256] bridge_slave_1: entered allmulticast mode [ 248.741183][ T3256] bridge_slave_1: entered promiscuous mode [ 248.871759][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.878828][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.950494][ T3258] bridge_slave_0: entered allmulticast mode [ 248.975908][ T3258] bridge_slave_0: entered promiscuous mode [ 249.346104][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.373879][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.390974][ T3258] bridge_slave_1: entered allmulticast mode [ 249.415849][ T3258] bridge_slave_1: entered promiscuous mode [ 249.889859][ C0] net_ratelimit: 193274 callbacks suppressed [ 249.889881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.889889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.889938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 249.895932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 249.907873][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.919904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.931842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.943827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.955760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.967643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.899886][ C0] net_ratelimit: 200484 callbacks suppressed [ 254.899908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.899963][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.906035][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.917968][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.929993][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 254.941850][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 254.953818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.965798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.977709][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 254.989587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.909867][ C0] net_ratelimit: 202541 callbacks suppressed [ 259.909888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.909911][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.915938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.927853][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 259.939846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.951804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.963740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.975593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.987650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.999505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.919848][ C0] net_ratelimit: 206663 callbacks suppressed [ 264.919870][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 264.919897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 264.925924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.938066][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.949886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.961734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.973696][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.985587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 264.997537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.009489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.929861][ C1] net_ratelimit: 211174 callbacks suppressed [ 269.929885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 269.929889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.929945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 269.936063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.947966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.959844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.971796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 269.983789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:76:27:98:2c:79, vlan:0) [ 269.995641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.007625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.622623][ T37] INFO: task syz.1.872:3212 blocked for more than 122 seconds. [ 270.632324][ T37] Not tainted syzkaller #0 [ 270.637310][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.704331][ T37] task:syz.1.872 state:D stack:0 pid:3212 tgid:3210 ppid:292 flags:0x00004004 [ 270.714607][ T37] Call Trace: [ 270.717959][ T37] [ 270.720933][ T37] __schedule+0x134f/0x1ea0 [ 270.725479][ T37] ? __sched_text_start+0x10/0x10 [ 270.730551][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 270.735936][ T37] ? __kasan_check_write+0x18/0x20 [ 270.741093][ T37] ? llist_add_batch+0x10f/0x1f0 [ 270.746040][ T37] schedule+0xc5/0x240 [ 270.750225][ T37] schedule_timeout+0xc7/0x3b0 [ 270.755000][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 270.760403][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 270.765962][ T37] ? generic_exec_single+0x1fd/0x500 [ 270.771277][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 270.776918][ T37] wait_for_common+0x369/0x650 [ 270.781727][ T37] ? wait_for_completion+0x40/0x40 [ 270.786851][ T37] ? flush_work+0x40/0x40 [ 270.791210][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 270.796678][ T37] ? mod_delayed_work_on+0x140/0x140 [ 270.798406][ T36] audit: type=1400 audit(1774347509.523:1162): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[2960]" dev="pipefs" ino=2960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 270.802001][ T37] wait_for_completion+0x1c/0x40 [ 270.802031][ T37] rcu_barrier+0x415/0x540 [ 270.802051][ T37] flush_rcu_work+0x71/0x90 [ 270.802074][ T37] kvfree_rcu_barrier+0x23c/0x2f0 [ 270.802093][ T37] ? p9_client_destroy+0x436/0x480 [ 270.802112][ T37] kmem_cache_destroy+0x32/0x170 [ 270.802141][ T37] p9_client_destroy+0x436/0x480 [ 270.802162][ T37] ? __cfi_p9_client_destroy+0x10/0x10 [ 270.802183][ T37] ? bdi_put+0x12f/0x190 [ 270.802207][ T37] v9fs_session_close+0x52/0x1d0 [ 270.802236][ T37] v9fs_kill_super+0x60/0x90 [ 270.802255][ T37] deactivate_locked_super+0xd5/0x2a0 [ 270.802280][ T37] v9fs_mount+0x76c/0x9f0 [ 270.802309][ T37] ? __cfi_v9fs_mount+0x10/0x10 [ 270.802336][ T37] ? selinux_capable+0x38/0x50 [ 270.802355][ T37] legacy_get_tree+0x106/0x1b0 [ 270.802374][ T37] ? __cfi_v9fs_mount+0x10/0x10 [ 270.802402][ T37] vfs_get_tree+0x9e/0x290 [ 270.802427][ T37] do_new_mount+0x251/0xb30 [ 270.802455][ T37] ? security_capable+0x44/0x130 [ 270.802482][ T37] path_mount+0x682/0x1010 [ 270.802517][ T37] __se_sys_mount+0x2bf/0x480 [ 270.802544][ T37] ? __x64_sys_mount+0xf0/0xf0 [ 270.802572][ T37] ? __kasan_check_write+0x18/0x20 [ 270.802597][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 270.802622][ T37] __x64_sys_mount+0xc3/0xf0 [ 270.802649][ T37] x64_sys_call+0x2021/0x2ee0 [ 270.802680][ T37] do_syscall_64+0x57/0xf0 [ 270.802705][ T37] ? clear_bhb_loop+0x50/0xa0 [ 270.802733][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 270.802760][ T37] RIP: 0033:0x7fec5659c799 [ 270.802778][ T37] RSP: 002b:00007fec57370028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.802803][ T37] RAX: ffffffffffffffda RBX: 00007fec56816090 RCX: 00007fec5659c799 [ 270.802820][ T37] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 270.802836][ T37] RBP: 00007fec56632c99 R08: 0000200000000200 R09: 0000000000000000 [ 270.802851][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.802865][ T37] R13: 00007fec56816128 R14: 00007fec56816090 R15: 00007ffdc031f228 [ 270.802884][ T37] [ 270.862114][ T37] NMI backtrace for cpu 0 [ 270.862132][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 270.862160][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.862173][ T37] Call Trace: [ 270.862180][ T37] [ 270.862188][ T37] __dump_stack+0x21/0x30 [ 270.862219][ T37] dump_stack_lvl+0x140/0x1c0 [ 270.862243][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 270.862270][ T37] dump_stack+0x19/0x20 [ 270.862293][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 270.862319][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 270.862344][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 270.862368][ T37] ? sched_show_task+0x371/0x530 [ 270.862393][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 270.862415][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.862440][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.862463][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.862489][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 270.862521][ T37] watchdog+0xdad/0xf00 [ 270.862538][ T37] ? __kasan_check_write+0x18/0x20 [ 270.862564][ T37] ? __cfi_watchdog+0x10/0x10 [ 270.862580][ T37] ? __kasan_check_read+0x15/0x20 [ 270.862604][ T37] ? __kthread_parkme+0x137/0x180 [ 270.862632][ T37] ? schedule+0xc5/0x240 [ 270.862656][ T37] kthread+0x2c6/0x370 [ 270.862674][ T37] ? __cfi_watchdog+0x10/0x10 [ 270.862691][ T37] ? __cfi_kthread+0x10/0x10 [ 270.862709][ T37] ret_from_fork+0x67/0xa0 [ 270.862733][ T37] ? __cfi_kthread+0x10/0x10 [ 270.862751][ T37] ret_from_fork_asm+0x1a/0x30 [ 270.862778][ T37] [ 270.862786][ T37] Sending NMI from CPU 0 to CPUs 1: [ 271.295547][ C1] NMI backtrace for cpu 1 [ 271.295569][ C1] CPU: 1 UID: 0 PID: 281 Comm: sshd-session Not tainted syzkaller #0 1aa8ac0f99ca3a11aee7c3a781bea815a9b193fa [ 271.295591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.295601][ C1] RIP: 0010:__update_page_owner_handle+0xcf/0x370 [ 271.295629][ C1] Code: c4 44 89 ee e8 82 97 a1 ff 45 39 e5 0f 84 5c 02 00 00 4c 8b 2d d2 23 86 05 4a 8d 7c 2b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 9e 01 00 00 49 01 dd 8b 45 d0 41 89 45 08 4c 89 e8 48 [ 271.295643][ C1] RSP: 0018:ffffc9000022f838 EFLAGS: 00000a02 [ 271.295658][ C1] RAX: 0000000000000000 RBX: ffff8881094fa980 RCX: 0000000000000100 [ 271.295670][ C1] RDX: ffff88810f64a600 RSI: 0000000000000001 RDI: ffff8881094fa990 [ 271.295681][ C1] RBP: ffffc9000022f898 R08: 00000000ffffffff R09: 0000003f2a793228 [ 271.295698][ C1] R10: ffff88810f64ae50 R11: ffffffff8175d5f0 R12: 0000000000000000 [ 271.295709][ C1] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000000 [ 271.295720][ C1] FS: 00007f3ce4341300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 271.295734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.295745][ C1] CR2: 00007ffbb66b0bd0 CR3: 000000010c250000 CR4: 00000000003526b0 [ 271.295759][ C1] Call Trace: [ 271.295765][ C1] [ 271.295771][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 271.295796][ C1] __set_page_owner+0x128/0x600 [ 271.295812][ C1] ? __cfi___set_page_owner+0x10/0x10 [ 271.295827][ C1] ? kasan_unpoison+0x4a/0x70 [ 271.295848][ C1] post_alloc_hook+0x3b8/0x3f0 [ 271.295864][ C1] ? __cfi_post_alloc_hook+0x10/0x10 [ 271.295880][ C1] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 271.295901][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 271.295920][ C1] ? __cfi__raw_spin_trylock+0x10/0x10 [ 271.295939][ C1] prep_new_page+0x20/0x120 [ 271.295955][ C1] get_page_from_freelist+0x496e/0x4a20 [ 271.295976][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 271.295995][ C1] ? net_rx_action+0x5ea/0xd80 [ 271.296013][ C1] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 271.296030][ C1] ? static_key_count+0x45/0x70 [ 271.296046][ C1] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 271.296067][ C1] ? lruvec_init+0x261/0x280 [ 271.296090][ C1] __alloc_pages_noprof+0x35f/0x7e0 [ 271.296107][ C1] ? fib_table_lookup+0x1979/0x1ac0 [ 271.296135][ C1] ? __alloc_pages_noprof+0x35f/0x7e0 [ 271.296151][ C1] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 271.296169][ C1] ? __kasan_check_write+0x18/0x20 [ 271.296190][ C1] ? fib_get_table+0xb9/0xe0 [ 271.296207][ C1] alloc_slab_page+0x6b/0x1e0 [ 271.296222][ C1] allocate_slab+0x69/0x420 [ 271.296237][ C1] ___slab_alloc+0x5a2/0x8d0 [ 271.296258][ C1] ? dst_alloc+0x13c/0x250 [ 271.296279][ C1] kmem_cache_alloc_noprof+0x290/0x410 [ 271.296299][ C1] ? __cfi___fib_lookup+0x10/0x10 [ 271.296315][ C1] ? dst_alloc+0x13c/0x250 [ 271.296334][ C1] dst_alloc+0x13c/0x250 [ 271.296353][ C1] ip_route_input_rcu+0x1a0e/0x2700 [ 271.296373][ C1] ? ip_route_input_noref+0x150/0x150 [ 271.296394][ C1] ? __asan_memcpy+0x5a/0x80 [ 271.296413][ C1] ? arpt_do_table+0x1ba7/0x1d80 [ 271.296437][ C1] ip_route_input_noref+0xd4/0x150 [ 271.296456][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 271.296476][ C1] ? __asan_memcpy+0x5a/0x80 [ 271.296495][ C1] arp_process+0x908/0x1790 [ 271.296511][ C1] ? __cfi_arp_process+0x10/0x10 [ 271.296525][ C1] ? __cfi_arp_process+0x10/0x10 [ 271.296538][ C1] NF_HOOK+0x17e/0x1e0 [ 271.296560][ C1] ? __cfi_arp_process+0x10/0x10 [ 271.296574][ C1] ? arp_xmit+0x210/0x210 [ 271.296594][ C1] ? __cfi_arp_process+0x10/0x10 [ 271.296608][ C1] ? br_dev_queue_push_xmit+0x55c/0x700 [ 271.296627][ C1] arp_rcv+0x2f8/0x490 [ 271.296641][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 271.296654][ C1] netif_receive_skb+0x22a/0x7b0 [ 271.296672][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 271.296691][ C1] ? br_flood+0x67e/0x730 [ 271.296709][ C1] br_pass_frame_up+0x126/0x1b0 [ 271.296729][ C1] br_handle_frame_finish+0x1317/0x1760 [ 271.296748][ C1] ? __x64_sys_read+0x7f/0x90 [ 271.296768][ C1] ? x64_sys_call+0x2638/0x2ee0 [ 271.296792][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 271.296815][ C1] br_handle_frame+0x5a6/0xba0 [ 271.296834][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 271.296853][ C1] __netif_receive_skb_core+0xfae/0x3ab0 [ 271.296869][ C1] ? ip6_mc_input+0x516/0x6c0 [ 271.296885][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 271.296903][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 271.296918][ C1] ? qdisc_run_end+0x120/0x120 [ 271.296934][ C1] ? ip6_rcv_finish+0x363/0x3e0 [ 271.296948][ C1] ? ipv6_rcv+0xf1/0x240 [ 271.296962][ C1] ? __kasan_check_write+0x18/0x20 [ 271.296981][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 271.297000][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 271.297020][ C1] process_backlog+0x3e5/0xad0 [ 271.297039][ C1] __napi_poll+0xd3/0x610 [ 271.297053][ C1] net_rx_action+0x5ea/0xd80 [ 271.297071][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 271.297086][ C1] ? sched_clock+0x44/0x60 [ 271.297105][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 271.297126][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 271.297145][ C1] handle_softirqs+0x1ad/0x630 [ 271.297170][ C1] __do_softirq+0xf/0x16 [ 271.297190][ C1] do_softirq+0xb8/0x110 [ 271.297211][ C1] [ 271.297216][ C1] [ 271.297221][ C1] ? __cfi_do_softirq+0x10/0x10 [ 271.297242][ C1] ? _raw_spin_lock_bh+0x96/0x130 [ 271.297261][ C1] ? __cfi_tcp_release_cb+0x10/0x10 [ 271.297278][ C1] ? avc_has_perm_noaudit+0x28a/0x360 [ 271.297301][ C1] __local_bh_enable_ip+0x74/0x80 [ 271.297322][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 271.297341][ C1] release_sock+0x171/0x1f0 [ 271.297356][ C1] tcp_recvmsg+0x21b/0x8d0 [ 271.297375][ C1] ? __cfi_tcp_recvmsg+0x10/0x10 [ 271.297394][ C1] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 271.297418][ C1] ? __cfi_tcp_recvmsg+0x10/0x10 [ 271.297436][ C1] inet_recvmsg+0x13f/0x4f0 [ 271.297457][ C1] ? avc_has_perm+0x155/0x240 [ 271.297477][ C1] ? __cfi_inet_recvmsg+0x10/0x10 [ 271.297497][ C1] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 271.297521][ C1] ? security_socket_recvmsg+0x44/0x130 [ 271.297536][ C1] sock_recvmsg+0x190/0x270 [ 271.297550][ C1] sock_read_iter+0x252/0x320 [ 271.297571][ C1] ? __cfi_sock_read_iter+0x10/0x10 [ 271.297593][ C1] ? put_timespec64+0xd9/0x130 [ 271.297610][ C1] ? __cfi_put_timespec64+0x10/0x10 [ 271.297629][ C1] vfs_read+0x657/0xcb0 [ 271.297649][ C1] ? __cfi_vfs_read+0x10/0x10 [ 271.297668][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 271.297693][ C1] ? __kasan_check_read+0x15/0x20 [ 271.297712][ C1] ksys_read+0x145/0x260 [ 271.297732][ C1] ? __cfi_ksys_read+0x10/0x10 [ 271.297752][ C1] ? __kasan_check_read+0x15/0x20 [ 271.297771][ C1] __x64_sys_read+0x7f/0x90 [ 271.297791][ C1] x64_sys_call+0x2638/0x2ee0 [ 271.297812][ C1] do_syscall_64+0x57/0xf0 [ 271.297830][ C1] ? clear_bhb_loop+0x50/0xa0 [ 271.297851][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 271.297869][ C1] RIP: 0033:0x7f3ce3c77407 [ 271.297882][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 271.297895][ C1] RSP: 002b:00007ffc9cdebca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 271.297910][ C1] RAX: ffffffffffffffda RBX: 00007f3ce4341300 RCX: 00007f3ce3c77407 [ 271.297921][ C1] RDX: 0000000000040000 RSI: 00007f3ce3b2c010 RDI: 0000000000000004 [ 271.297931][ C1] RBP: 00007ffc9cdebd50 R08: 0000000000000000 R09: 0000000000000000 [ 271.297941][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 271.297951][ C1] R13: 0000000000000004 R14: 0000564f73673200 R15: 0000000000000004 [ 271.297963][ C1] [ 274.939869][ C1] net_ratelimit: 187798 callbacks suppressed [ 274.939892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.939962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.945951][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.957891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.969744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.981616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.993464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.005431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0) [ 275.017403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.029288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.949850][ C0] net_ratelimit: 210712 callbacks suppressed [ 279.949872][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.949893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.955927][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.967820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.979800][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.991762][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.003688][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.015502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.027582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.039408][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:7e:63:cf:5a:84, vlan:0)