last executing test programs: 3m11.83979375s ago: executing program 0 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x4000000, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0xc0000) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x12) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) fsopen(&(0x7f0000000180)='nsfs\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'bond_slave_0\x00', @random="9400000004a6"}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 3m11.568576026s ago: executing program 0 (id=166): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='.\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock n'], 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000002c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00010628c794d68abd4e6c0a0c963a21cf022abd"], 0x1c}], 0x1, 0x0, 0x0, 0x240400c5}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10001, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r8) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020600) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m11.314105532s ago: executing program 0 (id=172): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000001b40)={0x1, [{0x0, 0x158, 0x2, &(0x7f0000001480)="7bc6de26b7a8a72459e746350139e4cfc77ff8e4055428c227b39a6b7bfd23c6161b984264cd455eec2612"}, {0x1, 0x550, 0x0, &(0x7f0000000080)="abe414aa4d6c44400516488812fb05ad315ff80ee7e015bd40194b241bad2d27b892dcc6b11f8de00975cce32ca8fcd583db2824e4aec1de53160f37126d0136cdaa80a2998a5dc16e8108884eaeff604ccc7c13efbd32eaa6ffb47e94c80869c3cbf1b3c6781a5cc79cf340982259945324424db0e44238b5a967a71efa8cff0070531e472bef173a78e96139c4a6eb022ffb9e7bd0a1d762518811df9090a82584c2a5496421eb8e5e"}, {0x3, 0x770, 0xcb77, &(0x7f0000000180)="bab2b72dbcaf88b40ffa470d9771bd9a555cce1c13082d77284c099c01c1a9226fd61e964358286487db63daa717d3679bf3a8bb93da66b0c2edd0632d82855134bf3d4e4f9caad0800cd477a155da5bd235b3a49096579fdb4a381e00fc47752617d6a7222c7098ab3b63210ba1043acb9d8d8a0c4161dd16df2d085ca30851df15c1b413486762fe844ea0d939e26e2426a83123ae5426fa74df11883c2f56678f67fddb796b0912e39c15932cb9efbfe3765806b7b3cff880381e2493f9454fbcb78b55459d9da55c6bb24d138738554d14aa3bacf4aebcf71e5efd1df3c2a1af036fc68f833dc72eeee5a7ff"}, {0x2, 0x7f0, 0x10, &(0x7f0000000280)="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"}, {0x3, 0x8000, 0x6, &(0x7f0000000380)="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"}, {0x0, 0x780, 0x2, &(0x7f0000001380)="2a22f3c012d34c73e9f8d54269d3e9bae64c992028cb06b652e7afb00b845dc89c1984186830035cdf8b4b0dd8a6c8db43d6cce320784d8ac678b4e37555bb7faeee85f96a4b5e5fdae8b74e854b0c89c2c4a0ba047ca85d6ef97691d327251e5c560bb954cfacd3b63247428cf60ce3d74d2597e9f0703f3a6f2227811cc84d4f726b6760a1964d8cafeed8810939e3735dc16e37e14cbd494406d735fdb6cd70a965f7c8f8e295e7dcd30b20d0cf240dba99c55bdf33ea5e1198c43526a7c196d30991d2cddc4413c209573f99331c3165bf2f4981a41d1cdc12b22ff2c67a0673d6983bbdf02d3a49ce569dffe43d"}, {0x0, 0x0, 0xffffffa9, &(0x7f0000001480)}, {0x2, 0x3c0, 0x4b, &(0x7f00000014c0)="0b0cab6c95dbdce4087ed61f0d5620c2e279de177fbc2c576d87e73fe8adf5e1640827be4c36068998e3f5c13ab6178272bf608bb1b1591da083436d98fa23e0907b77e3b8f1715e45db381d69b3632178bbf008589392f381724634233c99d0462af23c17699080add07cf1f788d285a1ef352ac50e2385"}, {0x2, 0x7f8, 0x7, &(0x7f0000001540)="b9863621d6e5e78e27d1d9e3c4079badbf6d68ece486ecff4efc61e5cdae006ce6f6d995a7ea71f5a9bb9fd6ecfa8788e29920e77b8113100651de970fed6d2948e0eb8f7237f5a0ebd8bc98aadad8e7118c205d25fd0af1b73bf6b13c4fb3af7f4352eaf719dd65926489cfe61fae89b99d3a3cb2fcb2743683b774836b454d180ed4ad20ce96e277d439f2a316cacaf88aa137def852e040f7195ce557deb910f981555c7a47d74bd182e8a63a965447ab2e64ed4413fc3d09d98e483717a9b4c13bc8419633df2476b36ccefc0cacd8200e2502a9a02b9c62facb0c2f56d9aed658d0ad78f7ee65c8280214316a3f2ebf46c9c1bcabcb32edbaa89d27b5"}, {0x2, 0x298, 0x3e8, &(0x7f0000001640)="ea243559fa8f327a7a11944a9c98ef7225c8f94ac1bd3343318af84572bd2cd74c745b1a5aa18497b881e1635cedb9f1b7a08ecda9ccadbecafa4b7fc20d15123634cdc9a97cab8a74eeee9af069ccb990422e"}, {0x0, 0x610, 0x5, &(0x7f00000016c0)="317344b07120513b2a9f46c01459f858103a3a21efe8c74f9a59385a297b098cfa7443be677c3850a49834749b8e03c865cef449073898e84ca5130794adc39ed3880c5a58757e5bbf2531ff0eb8c98ac0b63b105adaefd82112586568456eca77a3b5a75915ef0b7ce43a540ee5b9a1b985174dc0f6d63226fbdec0cd6a0df031491731392aa9488268ab4682c965620e4fc241a4759c3d903296e0bb90681e17ff5184eab8421330d9bab05890348bf1273245263b9ee97b3d02f76b081c1c213a"}, {0x1, 0x608, 0x5, &(0x7f00000017c0)="9b8e813491d895412f266df9c336c9ebb74e2c2380db7b4cf90505f92eecf71dc3f59a83606f91109cae085955b03f7d427d6b12cb522756c652869cc71a2f2267c90ddb008b40479c3c9179f7b6bb34ffef182d326825c853c4e97889e67bb40767110d3d420e4d82a090e9c3f4f154f8efd3dffde162ba442c06f1be7f2638bd07e3e48e0c50ad977166c4fd6838c2cf1072909595c4abb55d7d9e24c3843d3b8dc4446e87501ed8dd4443f06310a0a136ce4b82e0369f867a067187a6917810"}, {0x7, 0x208, 0xecf6, &(0x7f00000018c0)="e8b8c9dcb9c69ca8b6bd0468549a1729dce551d800e44649324e44b7f274f2e8579f3ef3cf96493e38a9b770e5ffdf1985d18dcd7c3cdc2fff4bfc24ad048da696"}, {0x1, 0x6d0, 0x0, &(0x7f0000001940)="80255a3947f8cb7b7839c8033b9f55fddd1f9c3910b273138e8a3cc16b9172b90d22abf8294a6bae574902a9bbc6ecfc62714715d1fe8abf1b487db1e4bc97b231fce873095ca2543620c3a9d55857533cce4a065e79366ff14789f932822b4f20aaa5f081a1fe1e58218a1eabccc8f0bf40b44257f1e2e32b00758c325c78e322de22a14313373a6b49388982735e8975e462254e8f7ee2fe06f76c35a0fc6a1c9da661d1c6cd8398e14479d4b87084e413672ebdcd0f879afea7d5599d01f0b79c77a622dab164e9d2bc83fefcc307169d5b35e83c8b232182"}, {0x1, 0x5f0, 0x10001, &(0x7f0000001a40)="fa6ecb5dafd2bdea90b31a3bad5612904eba7f24802e3efdd9a7c80d0c40913f4bca6039c1cff5458841765a81d673cb0640354964a694741f45544e687c99d52919bef6fd6908fa3d4819f2ed8134990e982ecc3ca167485c764d0effea82ddde3d1834442c29c2ceabf1cc5f0de2d2789d2fbba0ab7faa0220d1a325946591581097d4320e6b97bce736697858b9525810a24cdd34eeb812049ebae1d75d973268879a6f9f8730a57fb28a0707288e63380c698055c143b91169160c0f"}, {0x1, 0x28, 0x8, &(0x7f0000001b00)="4667f1b709"}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)="b7"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) 3m11.247826144s ago: executing program 0 (id=173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000100000000000002"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000300)=@chain={'key_or_keyring:', r3}) keyctl$search(0xa, r2, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r2) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000001c0)={0x0, 0xb, 0xaa, {0xaa, 0x31, "8973066e12af89ee59dadb5f9448a47450c2042cc190010650544da89890f457e27ed755de194cbde441bb69a3fa54efd9acbab5c004205d17086413bb7ee093f7ab909890adbf3caeae8e1be524829931c61466387501089ce0e965f4927066549c6e8591426115e0252c70f42771512703bc260c8f6f1e6c2a622dbbb01cf65a7ce2fb67b39e1a17566710b567dc5a0532281a420380c4458983baf4f44e6b2b14abedaaed71df"}}, &(0x7f0000000280)={0x0, 0x3, 0x56, @string={0x56, 0x3, "b64ac4de7252d61239b3273adf6fca9f02eae12a22fc10c84962124fdf5ab5dcf168a50828cd5e08e8c64335c0c0d8937dfa0c749113ae6f868281a3def284f1050612b5df581e5143b607c8651bdf976cd27c9f"}}, &(0x7f0000000300)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x0, "3f32d514"}, @main=@item_012={0x2, 0x0, 0xb, 'd('}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0xab2}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x84, "6d00a548b1fa0a9262134499c600fd16c6142530800b519e2b665e9d3624995d9cb9e4bdce18547aefc7816907106b9f6ae66410e6a0f42a23494121e93aa930e0c0d7d7a4cf793d2951c702f13eb7b8bdcd712a64817dd2fe725770045d49f42cb12b5e6a3148cf00e95e3755bf3bafde1daeaef732e11db75ee941aa8f59651d08a67d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xac}, &(0x7f0000000500)={0x20, 0x1, 0x38, "870225150fa14edea24d9db3a2631324595435abaa396a7e54f1c24ade5953981262e13f569ca58070131ed4bc12d88b81cb5d1aebce54ec"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x81}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m9.086038806s ago: executing program 0 (id=190): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x83, 0x4) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/1024, 0xfdef) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="3300000000001a969dc61a5d520fff7b213ebaa07556fc6f0cdc53053932db551e218bf957f343d15966713b82eaefcb74dd202fd1b77080b032671fd5e59d264ba57ff9"], 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x4207, r3) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000300)=0xfffffffffffffd96) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r4, 0x0, 0x0, 0x800, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x22, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0xc}) 3m8.920844s ago: executing program 0 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48000) 2m53.719148846s ago: executing program 32 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48000) 58.621727078s ago: executing program 4 (id=1484): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x35, "917910751548be0cc33242a0873cd346c532bd52acddba6213491557acf61ddc4db505f14daaa37e1862128b20f58f564cf1663d79"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.547443578s ago: executing program 1 (id=1493): mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 56.518805968s ago: executing program 4 (id=1494): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) writev(r0, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$xdp(0x2c, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x20000, 0xf3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x7230c0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 56.487024349s ago: executing program 1 (id=1495): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x7, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x601, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0x80, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x53, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) mprotect(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x100000a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000001050500000000000000000a0000003c0002802c00018014000300ff0100dfffffff000000000000000001bc070000000000000000010c00028005000100"/84], 0x54}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0xb522f000) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000340)={0x0, 0x3a2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000002c0)="0f91b60c000000b9c40b0000b8b7450000ba000000000f30c4c20d90ac9a0000000066bad004ec66ba210066edc4e1fd2906c4e221a74a009a6bc7ffff5f000f01c5660f38807e8a", 0x48}], 0x1, 0x7f, 0x0, 0x0) 56.43789779s ago: executing program 1 (id=1497): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x4, 0xb7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000380)={0x20, 0xd, 0x4, "00cb6f26"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 55.862643744s ago: executing program 2 (id=1498): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e293610ef171e7206de90f60070090212000100000000090400000002"], 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x2, 0x8) 55.862315704s ago: executing program 1 (id=1499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 55.040854764s ago: executing program 4 (id=1503): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 53.918384521s ago: executing program 3 (id=1504): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x84, "6d00a548b1fa0a9262134499c600fd16c6142530800b519e2b665e9d3624995d9cb9e4bdce18547aefc7816907106b9f6ae66410e6a0f42a23494121e93aa930e0c0d7d7a4cf793d2951c702f13eb7b8bdcd712a64817dd2fe725770045d49f42cb12b5e6a3148cf00e95e3755bf3bafde1daeaef732e11db75ee941aa8f59651d08a67d"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xac}, &(0x7f0000000500)={0x20, 0x1, 0x38, "870225150fa14edea24d9db3a2631324595435abaa396a7e54f1c24ade5953981262e13f569ca58070131ed4bc12d88b81cb5d1aebce54ec"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x81}}) 53.117392931s ago: executing program 1 (id=1505): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x7, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x601, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0x80, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x53, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) mprotect(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x100000a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000001050500000000000000000a0000003c0002802c00018014000300ff0100dfffffff000000000000000001bc070000000000000000010c00028005000100"/84], 0x54}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0xb522f000) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000080)=0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000340)={0x0, 0x3a2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000002c0)="0f91b60c000000b9c40b0000b8b7450000ba000000000f30c4c20d90ac9a0000000066bad004ec66ba210066edc4e1fd2906c4e221a74a009a6bc7ffff5f000f01c5660f38807e8a", 0x48}], 0x1, 0x7f, 0x0, 0x0) 52.012643207s ago: executing program 2 (id=1506): syz_usb_connect$uac1(0x4, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x120, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x72, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x27}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x2, 0x6, [0x3, 0x1, 0x1, 0x3, 0x0, 0x3], 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe9, 0x1, 0xff, {0x7, 0x25, 0x1, 0xc, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x0, 0x80, {0x7, 0x25, 0x1, 0x4, 0xe6, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, 0x0) 49.209190674s ago: executing program 4 (id=1507): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x4, 0xb7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000380)={0x20, 0xd, 0x4, "00cb6f26"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.802328318s ago: executing program 3 (id=1508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) 45.330454918s ago: executing program 2 (id=1509): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x7, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x601, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0x80, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x53, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) mprotect(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x100000a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000001050500000000000000000a0000003c0002802c00018014000300ff0100dfffffff000000000000000001bc070000000000000000010c00028005000100"/84], 0x54}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0xb522f000) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000080)=0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.442300399s ago: executing program 1 (id=1510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x80106725, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 36.348796164s ago: executing program 2 (id=1511): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) writev(r0, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$xdp(0x2c, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20000, 0xf3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x7230c0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 35.163441403s ago: executing program 4 (id=1512): r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)="fc8a43", 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_on}]}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 32.240179703s ago: executing program 3 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x22020600) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 28.834048075s ago: executing program 2 (id=1514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) 28.073150473s ago: executing program 33 (id=1510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x80106725, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 26.54713544s ago: executing program 4 (id=1516): lsm_set_self_attr(0x69, &(0x7f0000000000)={0x6d, 0x5, 0x20}, 0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4}, 0x6) read(r1, &(0x7f0000000080)=""/122, 0x7a) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) r3 = inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) 26.290166387s ago: executing program 3 (id=1517): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe84e000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2d000, 0x1000, 0xb9}, 0x20) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26.13516402s ago: executing program 2 (id=1518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000340)={0x0, 0x3a2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000002c0)="0f91b60c000000b9c40b0000b8b7450000ba000000000f30c4c20d90ac9a0000000066bad004ec66ba210066edc4e1fd2906c4e221a74a009a6bc7ffff5f000f01c5660f38807e8a", 0x48}], 0x1, 0x7f, 0x0, 0x0) 23.413102406s ago: executing program 3 (id=1519): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000840)=""/96, 0x60}, 0x4}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x20, &(0x7f00000078c0)={0x0, 0x989680}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)) 16.813171425s ago: executing program 3 (id=1520): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x4, 0xb7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000380)={0x20, 0xd, 0x4, "00cb6f26"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.96342922s ago: executing program 34 (id=1516): lsm_set_self_attr(0x69, &(0x7f0000000000)={0x6d, 0x5, 0x20}, 0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002140)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002180)={0x2020}, 0x2020) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4}, 0x6) read(r1, &(0x7f0000000080)=""/122, 0x7a) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) r3 = inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) 1.882942384s ago: executing program 35 (id=1518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000340)={0x0, 0x3a2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000002c0)="0f91b60c000000b9c40b0000b8b7450000ba000000000f30c4c20d90ac9a0000000066bad004ec66ba210066edc4e1fd2906c4e221a74a009a6bc7ffff5f000f01c5660f38807e8a", 0x48}], 0x1, 0x7f, 0x0, 0x0) 0s ago: executing program 36 (id=1520): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x4, 0xb7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e7cc94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000380)={0x20, 0xd, 0x4, "00cb6f26"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T396] usb 3-1: device descriptor read/64, error -71 [ 123.929119][ T2919] overlayfs: failed to clone upperpath [ 124.081836][ T396] usb 3-1: device descriptor read/64, error -71 [ 124.318631][ T396] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 124.446862][ T396] usb 3-1: device descriptor read/64, error -71 [ 124.594925][ T335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.594939][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 124.647824][ T2928] syzkaller0: entered promiscuous mode [ 124.653376][ T2928] syzkaller0: entered allmulticast mode [ 124.693791][ T396] usb 3-1: device descriptor read/64, error -71 [ 124.810042][ T36] audit: type=1400 audit(1785220021.275:363): avc: denied { accept } for pid=2932 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.812892][ T396] usb usb3-port1: attempt power cycle [ 124.832860][ T2933] overlayfs: workdir and upperdir must reside under the same mount [ 124.837314][ T36] audit: type=1400 audit(1785220021.306:364): avc: denied { getattr } for pid=2932 comm="syz.4.1037" name="/" dev="incremental-fs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.098552][ T310] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 125.167757][ T396] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 125.188658][ T396] usb 3-1: device descriptor read/8, error -71 [ 125.246629][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 125.253011][ T310] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.265438][ T310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.274606][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.282694][ T310] usb 5-1: Product: syz [ 125.286913][ T310] usb 5-1: Manufacturer: syz [ 125.291534][ T310] usb 5-1: SerialNumber: syz [ 125.326771][ T396] usb 3-1: device descriptor read/8, error -71 [ 125.500322][ T310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.508360][ T310] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 125.520105][ T310] usb 5-1: USB disconnect, device number 29 [ 125.535747][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.572595][ T396] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 125.593468][ T396] usb 3-1: device descriptor read/8, error -71 [ 125.721954][ T396] usb 3-1: device descriptor read/8, error -71 [ 125.829617][ T396] usb usb3-port1: unable to enumerate USB device [ 126.254557][ T310] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 126.382696][ T36] audit: type=1400 audit(1785220022.865:365): avc: denied { create } for pid=2950 comm="syz.1.1045" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.385560][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 126.413752][ T36] audit: type=1400 audit(1785220022.905:366): avc: denied { append } for pid=2950 comm="syz.1.1045" name="file0" dev="tmpfs" ino=2137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.415062][ T2951] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=2951 comm=syz.1.1045 [ 126.436273][ T36] audit: type=1400 audit(1785220022.905:367): avc: denied { open } for pid=2950 comm="syz.1.1045" path="/392/file0" dev="tmpfs" ino=2137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.455478][ T2951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1045'. [ 126.481309][ T310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.493333][ T36] audit: type=1400 audit(1785220022.986:368): avc: denied { create } for pid=2950 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.509410][ T310] usb 5-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.516119][ T36] audit: type=1400 audit(1785220022.986:369): avc: denied { ioctl } for pid=2950 comm="syz.1.1045" path="/392/file0" dev="tmpfs" ino=2137 ioctlcmd=0xae81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.542038][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.557346][ T310] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 126.566660][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.584460][ T36] audit: type=1400 audit(1785220023.047:370): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=2137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 126.609550][ T310] usb 5-1: config 0 descriptor?? [ 127.013357][ T36] audit: type=1400 audit(1785220023.502:371): avc: denied { lock } for pid=2942 comm="syz.4.1042" path="socket:[27024]" dev="sockfs" ino=27024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 127.014580][ T2943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.044880][ T396] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 127.049794][ T2943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.061852][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 127.072018][ T310] usb 5-1: string descriptor 0 read error: -71 [ 127.078632][ T310] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 127.086958][ T310] usb 5-1: USB disconnect, device number 30 [ 127.123820][ T2969] overlayfs: failed to clone upperpath [ 127.195263][ T396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.203716][ T396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.213880][ T396] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.222940][ T396] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 127.233902][ T396] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 127.247090][ T396] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 127.257931][ T396] usb 3-1: config 1 interface 1 has no altsetting 0 [ 127.266284][ T396] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 127.275392][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.283625][ T396] usb 3-1: Product: syz [ 127.287803][ T396] usb 3-1: Manufacturer: syz [ 127.292399][ T396] usb 3-1: SerialNumber: syz [ 127.502483][ T396] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 127.512226][ T396] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 127.524135][ T396] usb 3-1: USB disconnect, device number 38 [ 127.536657][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.640289][ T2975] EXT4-fs: Conflicting test_dummy_encryption options [ 127.827086][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 127.976938][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.987123][ T45] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.996236][ T45] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 128.005330][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.014145][ T45] usb 5-1: config 0 descriptor?? [ 128.047052][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 128.056867][ T2982] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 128.172387][ T2992] overlayfs: failed to clone upperpath [ 128.341664][ T2707] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 128.496257][ T2990] kvm: kvm [2989]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7 [ 128.525990][ T2707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.534410][ T2707] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 128.542157][ T2707] usb 3-1: can't read configurations, error -71 [ 129.609387][ T3043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 129.906463][ T2707] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 130.055102][ T2707] usb 3-1: device descriptor read/64, error -71 [ 130.322639][ T2707] usb 3-1: device descriptor read/64, error -71 [ 130.560524][ T396] usb 5-1: USB disconnect, device number 31 [ 130.567671][ T3074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1089'. [ 130.575222][ T2707] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 130.719203][ T2707] usb 3-1: device descriptor read/64, error -71 [ 130.877810][ T396] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 130.957219][ T2707] usb 3-1: device descriptor read/64, error -71 [ 131.011080][ T3082] netlink: 679 bytes leftover after parsing attributes in process `syz.3.1093'. [ 131.030269][ T396] usb 5-1: Using ep0 maxpacket: 32 [ 131.037896][ T396] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 131.046182][ T396] usb 5-1: config 0 has no interface number 0 [ 131.052580][ T396] usb 5-1: config 0 interface 184 has no altsetting 0 [ 131.061129][ T396] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 131.070600][ T2707] usb usb3-port1: attempt power cycle [ 131.076279][ T396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.084720][ T396] usb 5-1: Product: syz [ 131.089218][ T396] usb 5-1: Manufacturer: syz [ 131.093889][ T396] usb 5-1: SerialNumber: syz [ 131.100063][ T396] usb 5-1: config 0 descriptor?? [ 131.106874][ T396] smsc75xx v1.0.0 [ 131.423111][ T2707] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 131.444015][ T2707] usb 3-1: device descriptor read/8, error -71 [ 131.572839][ T2707] usb 3-1: device descriptor read/8, error -71 [ 131.819916][ T2707] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 131.840698][ T2707] usb 3-1: device descriptor read/8, error -71 [ 131.902671][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 131.913686][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 131.923135][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.933968][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.943663][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 131.953975][ T396] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.963457][ T396] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.973229][ T396] usb 5-1: USB disconnect, device number 32 [ 131.979301][ T2707] usb 3-1: device descriptor read/8, error -71 [ 132.087922][ T2707] usb usb3-port1: unable to enumerate USB device [ 132.431303][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.784122][ T3123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1111'. [ 132.795119][ T36] audit: type=1400 audit(1785220029.345:372): avc: denied { bind } for pid=3122 comm="syz.2.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 133.007779][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 133.238871][ T310] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 133.387759][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 133.394283][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.406326][ T310] usb 3-1: config 80 has an invalid interface number: 232 but max is 0 [ 133.414798][ T310] usb 3-1: config 80 has an invalid descriptor of length 108, skipping remainder of the config [ 133.425227][ T310] usb 3-1: config 80 has no interface number 0 [ 133.431482][ T310] usb 3-1: config 80 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.442554][ T310] usb 3-1: config 80 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.453568][ T310] usb 3-1: config 80 interface 232 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 133.468159][ T310] usb 3-1: New USB device found, idVendor=067b, idProduct=aaa2, bcdDevice= 9.ed [ 133.477252][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.485247][ T310] usb 3-1: Product: ࠇ [ 133.489496][ T310] usb 3-1: Manufacturer: ⦫某İ穔꾳Ჩ⺲콸督촢Μ烩Ǧ䗞渚쇍螦ᷤ꧃徘Ӑϴ봖刼纙婶 [ 133.501276][ T310] usb 3-1: SerialNumber: syz [ 134.420389][ T335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.420389][ T3138] Bluetooth: hci0: command 0x1003 tx timeout [ 134.688603][ T430] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 134.837626][ T430] usb 5-1: Using ep0 maxpacket: 32 [ 134.844002][ T430] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 134.852266][ T430] usb 5-1: config 0 has no interface number 0 [ 134.858429][ T430] usb 5-1: config 0 interface 184 has no altsetting 0 [ 134.866727][ T430] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 134.875903][ T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.883959][ T430] usb 5-1: Product: syz [ 134.888294][ T430] usb 5-1: Manufacturer: syz [ 134.892924][ T430] usb 5-1: SerialNumber: syz [ 134.898497][ T430] usb 5-1: config 0 descriptor?? [ 134.904450][ T430] smsc75xx v1.0.0 [ 135.056137][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 135.056933][ T335] Bluetooth: hci1: command 0x1003 tx timeout [ 135.702543][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 135.714588][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 135.724309][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 135.735321][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 135.745149][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 135.755734][ T430] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 135.765380][ T430] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 135.775540][ T430] usb 5-1: USB disconnect, device number 33 [ 135.934128][ T310] pl2303 3-1:80.232: required endpoints missing [ 135.944419][ T310] usb 3-1: USB disconnect, device number 45 [ 136.143391][ T3178] incfs_lookup_dentry err:-13 [ 136.148192][ T3178] incfs: Can't find or create .index dir in ./file0 [ 136.154982][ T3178] incfs: mount failed -13 [ 136.392993][ T3197] x_tables: duplicate underflow at hook 1 [ 136.399311][ T3197] fuse: Bad value for 'group_id' [ 136.404266][ T3197] fuse: Bad value for 'group_id' [ 136.874871][ T310] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 137.024033][ T310] usb 5-1: Using ep0 maxpacket: 32 [ 137.030271][ T310] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.038551][ T310] usb 5-1: config 0 has no interface number 0 [ 137.044814][ T310] usb 5-1: config 0 interface 184 has no altsetting 0 [ 137.053238][ T310] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.062367][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.070429][ T310] usb 5-1: Product: syz [ 137.074631][ T310] usb 5-1: Manufacturer: syz [ 137.079253][ T310] usb 5-1: SerialNumber: syz [ 137.084673][ T310] usb 5-1: config 0 descriptor?? [ 137.090517][ T310] smsc75xx v1.0.0 [ 137.354669][ T3213] rust_binder: 3212:3213 transaction to 0 failed: ENOENT [ 137.552405][ T3217] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 137.567531][ T3217] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1153'. [ 137.584623][ T3217] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 137.593225][ T3217] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 137.602425][ T3217] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 137.889959][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 137.901016][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 137.909119][ T396] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 137.910724][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 137.928635][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 137.938337][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 137.948643][ T310] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 137.958182][ T310] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 137.967613][ T310] usb 5-1: USB disconnect, device number 34 [ 138.069504][ T396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.077981][ T396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.088355][ T396] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 138.097411][ T396] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 138.108423][ T396] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 138.121656][ T396] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 138.132488][ T396] usb 3-1: config 1 interface 1 has no altsetting 0 [ 138.141618][ T396] usb 3-1: string descriptor 0 read error: -22 [ 138.147953][ T396] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 138.157196][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.367291][ T396] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 138.773869][ T396] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 138.781918][ T396] usb 3-1: Warning! Unlikely big volume range (=18453), cval->res is probably wrong. [ 138.791622][ T396] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/18453/1 [ 138.809289][ T396] usb 3-1: USB disconnect, device number 46 [ 138.927205][ T3260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 138.952463][ T36] audit: type=1400 audit(1785220035.534:373): avc: denied { sqpoll } for pid=3261 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.001706][ T3269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3269 comm=syz.1.1175 [ 139.023751][ T3274] FAULT_INJECTION: forcing a failure. [ 139.023751][ T3274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.045446][ T3274] CPU: 0 UID: 0 PID: 3274 Comm: syz.4.1176 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 139.045486][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.045500][ T3274] Call Trace: [ 139.045507][ T3274] [ 139.045516][ T3274] __dump_stack+0x21/0x30 [ 139.045555][ T3274] dump_stack_lvl+0x140/0x1c0 [ 139.045587][ T3274] ? __cfi_dump_stack_lvl+0x10/0x10 [ 139.045621][ T3274] dump_stack+0x19/0x20 [ 139.045651][ T3274] should_fail_ex+0x3c2/0x510 [ 139.045678][ T3274] should_fail+0xf/0x20 [ 139.045702][ T3274] should_fail_usercopy+0x1e/0x30 [ 139.045730][ T3274] _copy_from_iter+0x1a6/0x1520 [ 139.045761][ T3274] ? __virt_addr_valid+0x2a1/0x370 [ 139.045789][ T3274] ? __cfi__copy_from_iter+0x10/0x10 [ 139.045819][ T3274] ? __check_object_size+0x54c/0x870 [ 139.045843][ T3274] ? __cfi___check_object_size+0x10/0x10 [ 139.045867][ T3274] ? __kmalloc_noprof+0x261/0x510 [ 139.045891][ T3274] ? proc_fail_nth_write+0x184/0x220 [ 139.045926][ T3274] kernfs_fop_write_iter+0x1a4/0x510 [ 139.045960][ T3274] vfs_write+0x762/0xfd0 [ 139.045985][ T3274] ? __cfi_vfs_write+0x10/0x10 [ 139.046009][ T3274] ? __cfi_mutex_lock+0x10/0x10 [ 139.046043][ T3274] ksys_write+0x145/0x260 [ 139.046066][ T3274] ? __cfi_ksys_write+0x10/0x10 [ 139.046091][ T3274] ? __kasan_check_read+0x15/0x20 [ 139.046122][ T3274] __x64_sys_write+0x7f/0x90 [ 139.046146][ T3274] x64_sys_call+0x271c/0x2ee0 [ 139.046167][ T3274] do_syscall_64+0x57/0xf0 [ 139.046192][ T3274] ? clear_bhb_loop+0x50/0xa0 [ 139.046223][ T3274] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 139.046253][ T3274] RIP: 0033:0x7fbdfe19de99 [ 139.046272][ T3274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.046293][ T3274] RSP: 002b:00007fbdff060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.046319][ T3274] RAX: ffffffffffffffda RBX: 00007fbdfe425fa0 RCX: 00007fbdfe19de99 [ 139.046337][ T3274] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 139.046353][ T3274] RBP: 00007fbdff060090 R08: 0000000000000000 R09: 0000000000000000 [ 139.046368][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.046382][ T3274] R13: 00007fbdfe426038 R14: 00007fbdfe425fa0 R15: 00007ffd12040bf8 [ 139.046402][ T3274] [ 139.373197][ T3293] incfs: Can't find or create .index dir in ./cgroup/../file0 [ 139.380936][ T3293] incfs: mount failed -22 [ 139.429639][ T3301] overlayfs: workdir and upperdir must reside under the same mount [ 140.000433][ T36] audit: type=1400 audit(1785220036.599:374): avc: denied { map } for pid=3320 comm="syz.4.1197" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.057750][ T3321] netlink: 'syz.4.1197': attribute type 12 has an invalid length. [ 140.106543][ T3323] overlayfs: failed to resolve './bus': -2 [ 140.475544][ T36] audit: type=1400 audit(1785220037.062:375): avc: denied { setopt } for pid=3326 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.662386][ T3339] incfs_lookup_dentry err:-13 [ 140.704897][ T3348] overlayfs: failed to resolve './bus': -2 [ 140.731563][ T3352] FAULT_INJECTION: forcing a failure. [ 140.731563][ T3352] name failslab, interval 1, probability 0, space 0, times 0 [ 140.744407][ T3352] CPU: 0 UID: 0 PID: 3352 Comm: syz.4.1209 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 140.744444][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.744458][ T3352] Call Trace: [ 140.744465][ T3352] [ 140.744475][ T3352] __dump_stack+0x21/0x30 [ 140.744513][ T3352] dump_stack_lvl+0x140/0x1c0 [ 140.744545][ T3352] ? __cfi_dump_stack_lvl+0x10/0x10 [ 140.744580][ T3352] dump_stack+0x19/0x20 [ 140.744611][ T3352] should_fail_ex+0x3c2/0x510 [ 140.744637][ T3352] should_failslab+0xac/0x100 [ 140.744666][ T3352] kmem_cache_alloc_noprof+0x42/0x410 [ 140.744689][ T3352] ? security_file_alloc+0x49/0x220 [ 140.744723][ T3352] ? kasan_save_alloc_info+0x3a/0x50 [ 140.744762][ T3352] security_file_alloc+0x49/0x220 [ 140.744960][ T3352] init_file+0x9e/0x210 [ 140.745001][ T3352] alloc_empty_file+0xd9/0x270 [ 140.745032][ T3352] path_openat+0xf4/0x35a0 [ 140.745062][ T3352] ? stack_depot_save_flags+0x38/0x800 [ 140.745094][ T3352] ? kasan_save_track+0x4f/0x80 [ 140.745120][ T3352] ? kasan_save_track+0x3e/0x80 [ 140.745145][ T3352] ? kasan_save_alloc_info+0x3a/0x50 [ 140.745179][ T3352] ? __kasan_slab_alloc+0x73/0x90 [ 140.745206][ T3352] ? getname+0x1b/0x30 [ 140.745230][ T3352] ? do_sys_openat2+0xda/0x1d0 [ 140.745262][ T3352] ? __x64_sys_openat+0x13a/0x170 [ 140.745295][ T3352] ? x64_sys_call+0xe69/0x2ee0 [ 140.745318][ T3352] ? do_syscall_64+0x57/0xf0 [ 140.745346][ T3352] ? do_filp_open+0x440/0x440 [ 140.745378][ T3352] do_filp_open+0x1f2/0x440 [ 140.745410][ T3352] ? __cfi_do_filp_open+0x10/0x10 [ 140.745445][ T3352] ? alloc_fd+0x4c1/0x570 [ 140.745473][ T3352] do_sys_openat2+0x134/0x1d0 [ 140.745506][ T3352] ? fput+0x1a4/0x230 [ 140.745533][ T3352] ? do_sys_open+0x100/0x100 [ 140.745563][ T3352] ? ksys_write+0x1f3/0x260 [ 140.745585][ T3352] ? __cfi_ksys_write+0x10/0x10 [ 140.745608][ T3352] __x64_sys_openat+0x13a/0x170 [ 140.745642][ T3352] x64_sys_call+0xe69/0x2ee0 [ 140.745661][ T3352] do_syscall_64+0x57/0xf0 [ 140.745686][ T3352] ? clear_bhb_loop+0x50/0xa0 [ 140.745708][ T3352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 140.745729][ T3352] RIP: 0033:0x7fbdfe15e6ce [ 140.745744][ T3352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.745759][ T3352] RSP: 002b:00007fbdff05fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.745776][ T3352] RAX: ffffffffffffffda RBX: 00007fbdff0606c0 RCX: 00007fbdfe15e6ce [ 140.745789][ T3352] RDX: 0000000000000002 RSI: 00007fbdff05ff90 RDI: ffffffffffffff9c [ 140.745801][ T3352] RBP: 00007fbdff060090 R08: 0000000000000000 R09: 0000000000000000 [ 140.745812][ T3352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.745822][ T3352] R13: 00007fbdfe426038 R14: 00007fbdfe425fa0 R15: 00007ffd12040bf8 [ 140.745837][ T3352] [ 141.040138][ T3355] FAULT_INJECTION: forcing a failure. [ 141.040138][ T3355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.053298][ T3355] CPU: 1 UID: 0 PID: 3355 Comm: syz.4.1210 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 141.053335][ T3355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 141.053354][ T3355] Call Trace: [ 141.053362][ T3355] [ 141.053371][ T3355] __dump_stack+0x21/0x30 [ 141.053408][ T3355] dump_stack_lvl+0x140/0x1c0 [ 141.053436][ T3355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.053465][ T3355] ? __asan_memcpy+0x5a/0x80 [ 141.053485][ T3355] dump_stack+0x19/0x20 [ 141.053512][ T3355] should_fail_ex+0x3c2/0x510 [ 141.053535][ T3355] should_fail+0xf/0x20 [ 141.053555][ T3355] should_fail_usercopy+0x1e/0x30 [ 141.053579][ T3355] _copy_to_user+0x24/0xa0 [ 141.053606][ T3355] scsi_ioctl+0x1456/0x1f90 [ 141.053635][ T3355] ? __cfi_scsi_ioctl+0x10/0x10 [ 141.053661][ T3355] ? _parse_integer+0x2e/0x40 [ 141.053682][ T3355] ? __asan_set_shadow_00+0x12/0x20 [ 141.053711][ T3355] ? blkdev_common_ioctl+0x11e7/0x2740 [ 141.053731][ T3355] ? avc_has_perm_noaudit+0x26b/0x360 [ 141.053756][ T3355] ? __asan_memcpy+0x5a/0x80 [ 141.053782][ T3355] ? avc_has_perm_noaudit+0x289/0x360 [ 141.053808][ T3355] ? selinux_perf_event_alloc+0x110/0x110 [ 141.053829][ T3355] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 141.053859][ T3355] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 141.053889][ T3355] ? selinux_capable+0x38/0x50 [ 141.053914][ T3355] ? bpf_lsm_capable+0xd/0x20 [ 141.053943][ T3355] ? security_capable+0x44/0x130 [ 141.053966][ T3355] sd_ioctl+0x14a/0x190 [ 141.053984][ T3355] ? __cfi_sd_ioctl+0x10/0x10 [ 141.054001][ T3355] blkdev_ioctl+0x548/0x690 [ 141.054031][ T3355] ? __cfi_blkdev_ioctl+0x10/0x10 [ 141.054061][ T3355] ? bpf_lsm_file_ioctl+0xd/0x20 [ 141.054086][ T3355] ? security_file_ioctl+0x3e/0x110 [ 141.054115][ T3355] ? __cfi_blkdev_ioctl+0x10/0x10 [ 141.054144][ T3355] __se_sys_ioctl+0x132/0x1b0 [ 141.054170][ T3355] __x64_sys_ioctl+0x7f/0xa0 [ 141.054194][ T3355] x64_sys_call+0x1878/0x2ee0 [ 141.054212][ T3355] do_syscall_64+0x57/0xf0 [ 141.054234][ T3355] ? clear_bhb_loop+0x50/0xa0 [ 141.054260][ T3355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 141.054288][ T3355] RIP: 0033:0x7fbdfe19de99 [ 141.054306][ T3355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.054323][ T3355] RSP: 002b:00007fbdff060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.054345][ T3355] RAX: ffffffffffffffda RBX: 00007fbdfe425fa0 RCX: 00007fbdfe19de99 [ 141.054360][ T3355] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000005 [ 141.054374][ T3355] RBP: 00007fbdff060090 R08: 0000000000000000 R09: 0000000000000000 [ 141.054387][ T3355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.054399][ T3355] R13: 00007fbdfe426038 R14: 00007fbdfe425fa0 R15: 00007ffd12040bf8 [ 141.054417][ T3355] [ 141.232854][ T310] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 141.492884][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.501715][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.512009][ T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.521011][ T310] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 141.532091][ T310] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 141.545351][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 141.556210][ T310] usb 3-1: config 1 interface 1 has no altsetting 0 [ 141.565133][ T310] usb 3-1: string descriptor 0 read error: -22 [ 141.571494][ T310] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 141.580622][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.603251][ T3368] netlink: 'syz.3.1215': attribute type 29 has an invalid length. [ 141.867552][ T3383] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1222'. [ 141.990457][ T310] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 142.008270][ T310] usb 3-1: USB disconnect, device number 47 [ 142.016219][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.055407][ T36] audit: type=1400 audit(1785220038.658:376): avc: denied { accept } for pid=3386 comm="syz.4.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.076406][ T36] audit: type=1400 audit(1785220038.679:377): avc: denied { read write } for pid=3386 comm="syz.4.1224" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 142.103402][ T36] audit: type=1400 audit(1785220038.679:378): avc: denied { open } for pid=3386 comm="syz.4.1224" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 142.127838][ T36] audit: type=1400 audit(1785220038.679:379): avc: denied { ioctl } for pid=3386 comm="syz.4.1224" path="/dev/mapper/control" dev="devtmpfs" ino=198 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 142.232784][ T3397] overlayfs: failed to resolve './bus': -2 [ 142.329638][ T36] audit: type=1400 audit(1785220038.940:380): avc: denied { execute } for pid=3406 comm="syz.4.1233" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 142.517375][ T3414] syzkaller1: entered promiscuous mode [ 142.522973][ T3414] syzkaller1: entered allmulticast mode [ 142.825954][ T310] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 142.945420][ T36] audit: type=1326 audit(1785220039.542:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3423 comm="syz.3.1241" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6605d9de99 code=0x0 [ 142.986450][ T310] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.995163][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.005438][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.014453][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.030021][ T310] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.039285][ T310] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.047400][ T310] usb 3-1: Product: syz [ 143.051677][ T310] usb 3-1: Manufacturer: syz [ 143.058778][ T310] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 143.130802][ T3454] 9pnet_fd: Insufficient options for proto=fd [ 143.159226][ T3456] macsec0: entered promiscuous mode [ 143.164740][ T3456] macsec0: entered allmulticast mode [ 143.170152][ T3456] veth1_macvtap: entered allmulticast mode [ 143.258448][ T3416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.267069][ T3416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.275418][ T310] usb 3-1: USB disconnect, device number 48 [ 143.423587][ T396] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 143.572994][ T396] usb 5-1: Using ep0 maxpacket: 32 [ 143.579274][ T396] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 143.587423][ T396] usb 5-1: config 0 has no interface number 0 [ 143.595164][ T396] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 143.604355][ T396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.612380][ T396] usb 5-1: Product: syz [ 143.616649][ T396] usb 5-1: Manufacturer: syz [ 143.621276][ T396] usb 5-1: SerialNumber: syz [ 143.626703][ T396] usb 5-1: config 0 descriptor?? [ 143.632581][ T396] smsc95xx v2.0.0 [ 143.832409][ T3458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.841156][ T3458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.031376][ T310] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 144.049159][ T396] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 144.060043][ T396] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.180759][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 144.188825][ T310] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 144.197962][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.206003][ T310] usb 3-1: Product: syz [ 144.210184][ T310] usb 3-1: Manufacturer: syz [ 144.214944][ T310] usb 3-1: SerialNumber: syz [ 144.249781][ T396] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 144.260753][ T396] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 144.270049][ T396] usb 5-1: USB disconnect, device number 35 [ 144.422538][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.429625][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 144.439704][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.446747][ T310] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 144.457278][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 144.467283][ T310] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 144.479616][ T310] usb 3-1: USB disconnect, device number 49 [ 144.491062][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.811161][ T36] audit: type=1400 audit(1785220041.429:382): avc: denied { mounton } for pid=3472 comm="syz.4.1252" path="/168/file0" dev="tmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.871440][ T36] audit: type=1400 audit(1785220041.489:383): avc: denied { create } for pid=3472 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.356708][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 145.506125][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 145.512428][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 145.520708][ T45] usb 3-1: config 0 has no interface number 0 [ 145.526832][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 145.535113][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 145.544239][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.552272][ T45] usb 3-1: Product: syz [ 145.556505][ T45] usb 3-1: Manufacturer: syz [ 145.561127][ T45] usb 3-1: SerialNumber: syz [ 145.566704][ T45] usb 3-1: config 0 descriptor?? [ 145.572528][ T45] smsc75xx v1.0.0 [ 145.801812][ T3501] netlink: 'syz.4.1262': attribute type 27 has an invalid length. [ 145.810130][ T3501] veth1_macvtap: left allmulticast mode [ 145.816047][ T3501] macsec0: left promiscuous mode [ 145.821122][ T3501] macsec0: left allmulticast mode [ 146.069322][ T36] audit: type=1400 audit(1785220042.683:384): avc: denied { map } for pid=3508 comm="syz.1.1265" path="pipe:[3035]" dev="pipefs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 146.105936][ T3511] futex_wake_op: syz.1.1266 tries to shift op by 32; fix this program [ 146.115060][ T3511] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1266'. [ 146.174019][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 146.185395][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 146.195473][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 146.206043][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 146.215609][ T45] usb 3-1: USB disconnect, device number 50 [ 146.253171][ T36] audit: type=1400 audit(1785220042.864:385): avc: denied { mounton } for pid=3517 comm="syz.3.1269" path="/328/file0" dev="tmpfs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.539531][ T36] audit: type=1326 audit(1785220043.155:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.4.1272" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdfe19de99 code=0x0 [ 146.649767][ T36] audit: type=1400 audit(1785220043.265:387): avc: denied { execute } for pid=3529 comm="syz.1.1274" name="file1" dev="tmpfs" ino=2590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.672198][ T36] audit: type=1400 audit(1785220043.265:388): avc: denied { execute_no_trans } for pid=3529 comm="syz.1.1274" path="/473/file1" dev="tmpfs" ino=2590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.704688][ T3533] netlink: '^#!': attribute type 1 has an invalid length. [ 146.738992][ T36] audit: type=1326 audit(1785220043.355:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.2.1276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949619de99 code=0x7ffc0000 [ 146.764585][ T36] audit: type=1326 audit(1785220043.375:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.2.1276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949619de99 code=0x7ffc0000 [ 146.790079][ T36] audit: type=1326 audit(1785220043.375:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.2.1276" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949619de99 code=0x7ffc0000 [ 146.941609][ T396] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 146.975505][ T3563] overlayfs: failed to resolve './bus': -2 [ 147.091263][ T396] usb 5-1: Using ep0 maxpacket: 16 [ 147.096943][ T396] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 147.111787][ T396] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 147.120901][ T396] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 147.129402][ T396] usb 5-1: Product: syz [ 147.133622][ T396] usb 5-1: Manufacturer: syz [ 147.140206][ T396] r8152-cfgselector 5-1: Unknown version 0x0000 [ 147.146562][ T396] r8152-cfgselector 5-1: config 0 descriptor?? [ 147.190887][ T310] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 147.340336][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 147.346662][ T310] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.356894][ T310] usb 3-1: config 0 has no interface number 0 [ 147.363245][ T310] usb 3-1: config 0 interface 184 has no altsetting 0 [ 147.371796][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 147.380998][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.389082][ T310] usb 3-1: Product: syz [ 147.393547][ T310] usb 3-1: Manufacturer: syz [ 147.398229][ T310] usb 3-1: SerialNumber: syz [ 147.404284][ T310] usb 3-1: config 0 descriptor?? [ 147.412361][ T310] smsc75xx v1.0.0 [ 147.554714][ T3579] netlink: 'syz.3.1294': attribute type 27 has an invalid length. [ 147.579023][ T3581] overlayfs: failed to resolve './bus': -2 [ 148.012050][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 148.023126][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 148.032862][ T310] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 148.043176][ T310] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 148.054465][ T310] usb 3-1: USB disconnect, device number 51 [ 148.545628][ T3601] overlayfs: failed to resolve './bus': -2 [ 148.836135][ T310] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 148.987183][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 148.995709][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.006134][ T310] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 149.015108][ T310] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 149.026142][ T310] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 149.039387][ T310] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 149.050252][ T310] usb 3-1: config 1 interface 1 has no altsetting 0 [ 149.059068][ T310] usb 3-1: string descriptor 0 read error: -22 [ 149.065324][ T310] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 149.074418][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.147263][ T3619] overlayfs: failed to resolve './bus': -2 [ 149.407613][ T3642] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.414883][ T3642] bridge0: port 3(veth0_to_bridge) entered disabled state [ 149.422076][ T3642] veth0_to_bridge: entered allmulticast mode [ 149.428746][ T3642] veth0_to_bridge: entered promiscuous mode [ 149.434805][ T3642] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.447131][ T3642] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.454285][ T3642] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 149.462599][ T3642] netlink: 'syz.1.1323': attribute type 12 has an invalid length. [ 149.487115][ T310] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 149.687902][ T45] r8152-cfgselector 5-1: USB disconnect, device number 36 [ 149.746268][ T3647] overlayfs: failed to resolve './bus': -2 [ 149.797368][ T3654] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 150.023066][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 150.182630][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 150.189176][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.200571][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.211454][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.220768][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.228890][ T45] usb 5-1: Product: syz [ 150.233397][ T45] usb 5-1: Manufacturer: syz [ 150.238106][ T45] usb 5-1: SerialNumber: syz [ 150.442195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.454441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.466630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.478781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.490945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.503112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.515284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.527398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.539552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.551693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.595793][ T45] usb 5-1: 0:2 : does not exist [ 150.708961][ T45] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 150.797376][ T45] usb 5-1: USB disconnect, device number 37 [ 151.196787][ T3669] FAULT_INJECTION: forcing a failure. [ 151.196787][ T3669] name failslab, interval 1, probability 0, space 0, times 0 [ 151.209734][ T3669] CPU: 0 UID: 0 PID: 3669 Comm: syz.4.1334 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 151.209772][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.209788][ T3669] Call Trace: [ 151.209796][ T3669] [ 151.209806][ T3669] __dump_stack+0x21/0x30 [ 151.209843][ T3669] dump_stack_lvl+0x140/0x1c0 [ 151.209876][ T3669] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.209911][ T3669] dump_stack+0x19/0x20 [ 151.209942][ T3669] should_fail_ex+0x3c2/0x510 [ 151.209969][ T3669] ? user_preparse+0xaf/0x230 [ 151.210001][ T3669] should_failslab+0xac/0x100 [ 151.210030][ T3669] __kmalloc_noprof+0x69/0x510 [ 151.210055][ T3669] ? user_preparse+0xaf/0x230 [ 151.210086][ T3669] ? down_read+0x7f/0xe0 [ 151.210125][ T3669] user_preparse+0xaf/0x230 [ 151.210156][ T3669] __key_create_or_update+0x433/0xa90 [ 151.210190][ T3669] ? security_key_permission+0x3d/0x100 [ 151.210255][ T3669] ? key_create_or_update+0x70/0x70 [ 151.210288][ T3669] ? __kasan_kmalloc+0x96/0xb0 [ 151.210320][ T3669] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 151.210351][ T3669] ? __cfi_keyring_search_iterator+0x10/0x10 [ 151.210388][ T3669] key_create_or_update+0x47/0x70 [ 151.210421][ T3669] __se_sys_add_key+0x355/0x4b0 [ 151.210446][ T3669] ? __x64_sys_add_key+0xf0/0xf0 [ 151.210481][ T3669] __x64_sys_add_key+0xc3/0xf0 [ 151.210505][ T3669] x64_sys_call+0x195f/0x2ee0 [ 151.210527][ T3669] do_syscall_64+0x57/0xf0 [ 151.210554][ T3669] ? clear_bhb_loop+0x50/0xa0 [ 151.210581][ T3669] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.210612][ T3669] RIP: 0033:0x7fbdfe19de99 [ 151.210632][ T3669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.210652][ T3669] RSP: 002b:00007fbdff060028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 151.210679][ T3669] RAX: ffffffffffffffda RBX: 00007fbdfe425fa0 RCX: 00007fbdfe19de99 [ 151.210698][ T3669] RDX: 0000200000000100 RSI: 0000200000000540 RDI: 0000200000000080 [ 151.210717][ T3669] RBP: 00007fbdff060090 R08: 00000000266e290e R09: 0000000000000000 [ 151.210734][ T3669] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 151.210750][ T3669] R13: 00007fbdfe426038 R14: 00007fbdfe425fa0 R15: 00007ffd12040bf8 [ 151.210771][ T3669] [ 151.616109][ T45] usb 3-1: USB disconnect, device number 52 [ 151.647344][ T3679] raw_sendmsg: syz.2.1339 forgot to set AF_INET. Fix it! [ 151.778632][ T3683] netlink: 'syz.2.1341': attribute type 27 has an invalid length. [ 151.828785][ T430] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 151.988458][ T430] usb 5-1: Using ep0 maxpacket: 8 [ 151.995270][ T430] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 160, changing to 7 [ 152.008425][ T430] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 152.025584][ T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.034057][ T430] usb 5-1: Product: syz [ 152.038481][ T430] usb 5-1: Manufacturer: syz [ 152.043148][ T430] usb 5-1: SerialNumber: syz [ 152.119702][ T45] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 152.311925][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 152.348186][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.378345][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.439415][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.459718][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.489278][ T45] usb 3-1: Product: syz [ 152.493509][ T45] usb 3-1: Manufacturer: syz [ 152.507336][ T45] usb 3-1: SerialNumber: syz [ 152.731393][ T3706] mmap: syz.1.1351 (3706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.798528][ T45] usb 3-1: 0:2 : does not exist [ 152.869123][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 152.947778][ T45] usb 3-1: USB disconnect, device number 53 [ 152.953290][ T430] usb 5-1: unit 4 not found! [ 152.963122][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 152.963141][ T36] audit: type=1400 audit(1785220049.601:420): avc: denied { create } for pid=3716 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 153.009018][ T36] audit: type=1400 audit(1785220049.641:421): avc: denied { associate } for pid=3718 comm="syz.1.1362" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 153.051713][ T378] udevd[378]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.069293][ T430] usb 5-1: USB disconnect, device number 38 [ 153.774177][ T3735] netlink: 'syz.1.1361': attribute type 4 has an invalid length. [ 153.796132][ T3735] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1361'. [ 154.173950][ T430] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 154.325477][ T430] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.339437][ T430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.360643][ T430] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 154.372086][ T430] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 154.383401][ T430] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 154.398542][ T430] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.409690][ T430] usb 3-1: config 1 interface 1 has no altsetting 0 [ 154.422432][ T430] usb 3-1: string descriptor 0 read error: -22 [ 154.428875][ T430] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 154.458381][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.603360][ T3765] netlink: 964 bytes leftover after parsing attributes in process `syz.1.1368'. [ 154.862838][ T3777] GUP no longer grows the stack in syz.1.1372 (3777): 200000005000-200000008000 (200000004000) [ 154.879126][ T430] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 154.888422][ T3777] CPU: 1 UID: 0 PID: 3777 Comm: syz.1.1372 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 154.888472][ T3777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.888490][ T3777] Call Trace: [ 154.888498][ T3777] [ 154.888510][ T3777] __dump_stack+0x21/0x30 [ 154.888558][ T3777] dump_stack_lvl+0x140/0x1c0 [ 154.888594][ T3777] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.888627][ T3777] ? find_vma+0xd3/0x120 [ 154.888654][ T3777] dump_stack+0x19/0x20 [ 154.888690][ T3777] fixup_user_fault+0x616/0x6a0 [ 154.888725][ T3777] fault_in_user_writeable+0x75/0xe0 [ 154.888760][ T3777] futex_lock_pi+0x2ed/0xa70 [ 154.888797][ T3777] ? futex_unqueue+0x136/0x160 [ 154.888833][ T3777] ? __cfi_futex_lock_pi+0x10/0x10 [ 154.888874][ T3777] ? __cfi_futex_wake_mark+0x10/0x10 [ 154.888916][ T3777] ? futex_setup_timer+0xb4/0xd0 [ 154.888949][ T3777] ? __cfi_futex_wake_mark+0x10/0x10 [ 154.888993][ T3777] do_futex+0x270/0x510 [ 154.889028][ T3777] ? __cfi_do_futex+0x10/0x10 [ 154.889061][ T3777] ? __vm_munmap+0x30d/0x3d0 [ 154.889090][ T3777] __se_sys_futex+0x13c/0x320 [ 154.889128][ T3777] ? __x64_sys_futex+0x110/0x110 [ 154.889164][ T3777] ? __kasan_check_write+0x18/0x20 [ 154.889203][ T3777] __x64_sys_futex+0xe9/0x110 [ 154.889237][ T3777] x64_sys_call+0x227f/0x2ee0 [ 154.889261][ T3777] do_syscall_64+0x57/0xf0 [ 154.889288][ T3777] ? clear_bhb_loop+0x50/0xa0 [ 154.889322][ T3777] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.889355][ T3777] RIP: 0033:0x7f462699de99 [ 154.889376][ T3777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.889418][ T3777] RSP: 002b:00007f462792c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 154.889446][ T3777] RAX: ffffffffffffffda RBX: 00007f4626c25fa0 RCX: 00007f462699de99 [ 154.889467][ T3777] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 154.889485][ T3777] RBP: 00007f4626a33eaf R08: 0000000000000000 R09: 0000000000000001 [ 154.889502][ T3777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.889521][ T3777] R13: 00007f4626c26038 R14: 00007f4626c25fa0 R15: 00007fff1a2f8308 [ 154.889597][ T3777] [ 155.131582][ T36] audit: type=1400 audit(1785220051.765:422): avc: denied { ioctl } for pid=3776 comm="syz.1.1372" path="/511/file0" dev="tmpfs" ino=2797 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.441574][ C1] net_ratelimit: 46259 callbacks suppressed [ 155.441598][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.459732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.471884][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.484092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.496260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.508465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.520646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.532815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.544962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.557149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.637681][ T36] audit: type=1326 audit(1785220052.276:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3784 comm="syz.1.1374" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462699de99 code=0x0 [ 155.708388][ T36] audit: type=1400 audit(1785220052.346:424): avc: denied { write } for pid=3784 comm="syz.1.1374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.860892][ T430] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 156.011716][ T430] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 156.020095][ T430] usb 5-1: config 0 has no interface number 0 [ 156.031787][ T430] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.067754][ T430] usb 5-1: config 0 interface 15 altsetting 8 endpoint 0x81 has invalid maxpacket 247, setting to 64 [ 156.102497][ T430] usb 5-1: config 0 interface 15 has no altsetting 0 [ 156.121253][ T430] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 156.140450][ T430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.149453][ T430] usb 5-1: config 0 descriptor?? [ 156.160273][ T3791] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 156.169865][ T430] usbhid 5-1:0.15: fixing wrong optional hid class descriptors count [ 156.572447][ T430] kye 0003:0458:501B.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 156.589319][ T430] kye 0003:0458:501B.000E: unknown main item tag 0x3 [ 156.596586][ T430] kye 0003:0458:501B.000E: item 0 0 0 8 parsing failed [ 156.603953][ T430] kye 0003:0458:501B.000E: parse failed [ 156.609927][ T430] kye 0003:0458:501B.000E: probe with driver kye failed with error -22 [ 156.802066][ T430] usb 5-1: USB disconnect, device number 39 [ 156.907046][ T3798] incfs: Backing dir is not set, filesystem can't be mounted. [ 156.924733][ T3798] incfs: mount failed -2 [ 156.931457][ T10] usb 3-1: USB disconnect, device number 54 [ 156.950680][ T3798] overlayfs: failed to resolve './bus': -2 [ 157.428386][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 157.590146][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.618204][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 157.627427][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.636782][ T10] usb 3-1: config 0 descriptor?? [ 157.655959][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 158.358810][ T36] audit: type=1400 audit(1785220054.991:425): avc: denied { getopt } for pid=3819 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.788712][ T3847] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.967477][ T3852] FAULT_INJECTION: forcing a failure. [ 158.967477][ T3852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.980820][ T3852] CPU: 0 UID: 0 PID: 3852 Comm: syz.4.1403 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 158.980858][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.980874][ T3852] Call Trace: [ 158.980882][ T3852] [ 158.980892][ T3852] __dump_stack+0x21/0x30 [ 158.980931][ T3852] dump_stack_lvl+0x140/0x1c0 [ 158.980964][ T3852] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.981000][ T3852] dump_stack+0x19/0x20 [ 158.981031][ T3852] should_fail_ex+0x3c2/0x510 [ 158.981058][ T3852] should_fail+0xf/0x20 [ 158.981082][ T3852] should_fail_usercopy+0x1e/0x30 [ 158.981111][ T3852] _copy_from_user+0x20/0xa0 [ 158.981142][ T3852] scsi_ioctl+0x475/0x1f90 [ 158.981174][ T3852] ? __cfi_scsi_ioctl+0x10/0x10 [ 158.981205][ T3852] ? _parse_integer+0x2e/0x40 [ 158.981230][ T3852] ? __asan_set_shadow_00+0x12/0x20 [ 158.981264][ T3852] ? blkdev_common_ioctl+0x11e7/0x2740 [ 158.981287][ T3852] ? avc_has_perm_noaudit+0x26b/0x360 [ 158.981316][ T3852] ? __asan_memcpy+0x5a/0x80 [ 158.981339][ T3852] ? avc_has_perm_noaudit+0x289/0x360 [ 158.981369][ T3852] ? selinux_perf_event_alloc+0x110/0x110 [ 158.981394][ T3852] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 158.981430][ T3852] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 158.981465][ T3852] ? selinux_capable+0x38/0x50 [ 158.981494][ T3852] ? bpf_lsm_capable+0xd/0x20 [ 158.981528][ T3852] ? security_capable+0x44/0x130 [ 158.981555][ T3852] sd_ioctl+0x14a/0x190 [ 158.981577][ T3852] ? __cfi_sd_ioctl+0x10/0x10 [ 158.981598][ T3852] blkdev_ioctl+0x548/0x690 [ 158.981633][ T3852] ? __cfi_blkdev_ioctl+0x10/0x10 [ 158.981676][ T3852] ? bpf_lsm_file_ioctl+0xd/0x20 [ 158.981705][ T3852] ? security_file_ioctl+0x3e/0x110 [ 158.981740][ T3852] ? __cfi_blkdev_ioctl+0x10/0x10 [ 158.981774][ T3852] __se_sys_ioctl+0x132/0x1b0 [ 158.981804][ T3852] __x64_sys_ioctl+0x7f/0xa0 [ 158.981832][ T3852] x64_sys_call+0x1878/0x2ee0 [ 158.981854][ T3852] do_syscall_64+0x57/0xf0 [ 158.981880][ T3852] ? clear_bhb_loop+0x50/0xa0 [ 158.981913][ T3852] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.981942][ T3852] RIP: 0033:0x7fbdfe19de99 [ 158.981963][ T3852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.981983][ T3852] RSP: 002b:00007fbdff060028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.982010][ T3852] RAX: ffffffffffffffda RBX: 00007fbdfe425fa0 RCX: 00007fbdfe19de99 [ 158.982028][ T3852] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000005 [ 158.982044][ T3852] RBP: 00007fbdff060090 R08: 0000000000000000 R09: 0000000000000000 [ 158.982060][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.982075][ T3852] R13: 00007fbdfe426038 R14: 00007fbdfe425fa0 R15: 00007ffd12040bf8 [ 158.982097][ T3852] [ 159.315698][ T3859] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.576489][ T3862] incfs: Backing dir is not set, filesystem can't be mounted. [ 159.595356][ T3862] incfs: mount failed -2 [ 159.605197][ T3862] overlayfs: failed to resolve './bus': -2 [ 159.656545][ T3868] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 159.667286][ T3868] fuse: Bad value for 'group_id' [ 159.672354][ T3868] fuse: Bad value for 'group_id' [ 160.204407][ T430] usb 3-1: USB disconnect, device number 55 [ 160.214495][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 160.257344][ T3881] FAULT_INJECTION: forcing a failure. [ 160.257344][ T3881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.270832][ T3881] CPU: 0 UID: 0 PID: 3881 Comm: syz.2.1415 Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 160.270870][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 160.270886][ T3881] Call Trace: [ 160.270894][ T3881] [ 160.270904][ T3881] __dump_stack+0x21/0x30 [ 160.270942][ T3881] dump_stack_lvl+0x140/0x1c0 [ 160.270975][ T3881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.271010][ T3881] dump_stack+0x19/0x20 [ 160.271041][ T3881] should_fail_ex+0x3c2/0x510 [ 160.271068][ T3881] should_fail+0xf/0x20 [ 160.271092][ T3881] should_fail_usercopy+0x1e/0x30 [ 160.271120][ T3881] _copy_from_user+0x20/0xa0 [ 160.271153][ T3881] scsi_ioctl+0x475/0x1f90 [ 160.271183][ T3881] ? __cfi_scsi_ioctl+0x10/0x10 [ 160.271213][ T3881] ? _parse_integer+0x2e/0x40 [ 160.271238][ T3881] ? __asan_set_shadow_00+0x12/0x20 [ 160.271272][ T3881] ? blkdev_common_ioctl+0x11e7/0x2740 [ 160.271295][ T3881] ? avc_has_perm_noaudit+0x26b/0x360 [ 160.271323][ T3881] ? __asan_memcpy+0x5a/0x80 [ 160.271347][ T3881] ? avc_has_perm_noaudit+0x289/0x360 [ 160.271376][ T3881] ? selinux_perf_event_alloc+0x110/0x110 [ 160.271401][ T3881] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 160.271436][ T3881] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 160.271484][ T3881] ? selinux_capable+0x38/0x50 [ 160.271512][ T3881] ? bpf_lsm_capable+0xd/0x20 [ 160.271552][ T3881] ? security_capable+0x44/0x130 [ 160.271578][ T3881] sd_ioctl+0x14a/0x190 [ 160.271598][ T3881] ? __cfi_sd_ioctl+0x10/0x10 [ 160.271619][ T3881] blkdev_ioctl+0x548/0x690 [ 160.271656][ T3881] ? __cfi_blkdev_ioctl+0x10/0x10 [ 160.271691][ T3881] ? bpf_lsm_file_ioctl+0xd/0x20 [ 160.271719][ T3881] ? security_file_ioctl+0x3e/0x110 [ 160.271753][ T3881] ? __cfi_blkdev_ioctl+0x10/0x10 [ 160.271786][ T3881] __se_sys_ioctl+0x132/0x1b0 [ 160.271814][ T3881] __x64_sys_ioctl+0x7f/0xa0 [ 160.271841][ T3881] x64_sys_call+0x1878/0x2ee0 [ 160.271862][ T3881] do_syscall_64+0x57/0xf0 [ 160.271888][ T3881] ? clear_bhb_loop+0x50/0xa0 [ 160.271918][ T3881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 160.271947][ T3881] RIP: 0033:0x7f949619de99 [ 160.271966][ T3881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.271986][ T3881] RSP: 002b:00007f9496f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.272011][ T3881] RAX: ffffffffffffffda RBX: 00007f9496425fa0 RCX: 00007f949619de99 [ 160.272030][ T3881] RDX: 0000200000000100 RSI: 0000000000005393 RDI: 0000000000000005 [ 160.272046][ T3881] RBP: 00007f9496f92090 R08: 0000000000000000 R09: 0000000000000000 [ 160.272061][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.272076][ T3881] R13: 00007f9496426038 R14: 00007f9496425fa0 R15: 00007ffe11b5af58 [ 160.272096][ T3881] [ 160.474154][ C1] net_ratelimit: 56870 callbacks suppressed [ 160.474205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.568503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.574375][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 160.580902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.597688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.609764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.621974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.634103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.646223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.654302][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.658539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.666448][ T10] usb 5-1: config 0 has no interface number 0 [ 160.678672][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.687531][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 160.734664][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.754035][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.783876][ T10] usb 5-1: Product: syz [ 160.792625][ T10] usb 5-1: Manufacturer: syz [ 160.806118][ T10] usb 5-1: SerialNumber: syz [ 160.820756][ T10] usb 5-1: config 0 descriptor?? [ 160.836440][ T10] smsc75xx v1.0.0 [ 161.136114][ T36] audit: type=1400 audit(1785220057.784:426): avc: denied { append } for pid=3884 comm="syz.2.1417" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.304045][ T3893] tipc: Enabling of bearer rejected, failed to enable media [ 161.462829][ T430] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 161.613384][ T430] usb 3-1: not running at top speed; connect to a high speed hub [ 161.624331][ T430] usb 3-1: config 0 has an invalid interface number: 62 but max is 0 [ 161.637919][ T430] usb 3-1: config 0 has no interface number 0 [ 161.645192][ T430] usb 3-1: config 0 interface 62 has no altsetting 0 [ 161.653882][ T430] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1ab5, bcdDevice= 2.00 [ 161.666029][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 161.682575][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.695245][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 161.705267][ T430] usb 3-1: Product: syz [ 161.709521][ T430] usb 3-1: Manufacturer: syz [ 161.714495][ T430] usb 3-1: SerialNumber: syz [ 161.719335][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 161.733560][ T430] usb 3-1: config 0 descriptor?? [ 161.741810][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 161.751918][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 161.764358][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 161.774301][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 161.787879][ T10] usb 5-1: USB disconnect, device number 40 [ 161.997445][ T430] usb-storage 3-1:0.62: USB Mass Storage device detected [ 162.029183][ T430] usb-storage 3-1:0.62: Quirks match for vid 1b1c pid 1ab5: 100000 [ 162.096389][ T36] audit: type=1400 audit(1785220058.746:427): avc: denied { map } for pid=3904 comm="syz.2.1425" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.196558][ T430] usb 3-1: USB disconnect, device number 56 [ 162.381458][ T36] audit: type=1400 audit(1785220059.026:428): avc: denied { map } for pid=3913 comm="syz.4.1427" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 162.665090][ T36] audit: type=1400 audit(1785220059.316:429): avc: denied { write } for pid=3916 comm="syz.3.1428" name="file0" dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 162.918224][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.092030][ T36] audit: type=1400 audit(1785220059.737:430): avc: denied { connect } for pid=3928 comm="syz.2.1434" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 163.149955][ T36] audit: type=1400 audit(1785220059.777:431): avc: denied { watch } for pid=3928 comm="syz.2.1434" path="/298/file1" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.508877][ T36] audit: type=1400 audit(1785220061.158:432): avc: denied { watch watch_reads } for pid=3972 comm="syz.3.1451" path="/381/file0" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.970219][ T3138] Bluetooth: hci0: command 0x1003 tx timeout [ 165.350127][ T3985] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 165.398546][ T3985] SELinux: failed to load policy [ 165.478565][ C1] net_ratelimit: 52238 callbacks suppressed [ 165.478588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.496671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.508771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.520941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.529528][ T3987] SELinux: policydb magic number 0xece246c7 does not match expected magic number 0xf97cff8c [ 165.533334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.555174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.567300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.579448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.591574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.592111][ T3987] SELinux: failed to load policy [ 165.603871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.241098][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.577654][ T430] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 166.705861][ T3986] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 166.718998][ T430] usb 5-1: device descriptor read/64, error -71 [ 166.730590][ T3985] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 166.957320][ T430] usb 5-1: device descriptor read/64, error -71 [ 166.973889][ T4022] futex_wake_op: syz.2.1462 tries to shift op by 144; fix this program [ 167.207415][ T430] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 167.357000][ T430] usb 5-1: device descriptor read/64, error -71 [ 167.399702][ T4024] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 167.459710][ T36] audit: type=1326 audit(1785220064.121:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4025 comm="syz.1.1471" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f462699de99 code=0x0 [ 167.626801][ T430] usb 5-1: device descriptor read/64, error -71 [ 167.756367][ T430] usb usb5-port1: attempt power cycle [ 167.818448][ T4042] netlink: 'syz.2.1474': attribute type 4 has an invalid length. [ 167.879173][ T4042] netlink: 'syz.2.1474': attribute type 2 has an invalid length. [ 168.116839][ T430] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 168.168510][ T430] usb 5-1: device descriptor read/8, error -71 [ 168.307229][ T430] usb 5-1: device descriptor read/8, error -71 [ 168.396484][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 168.556054][ T430] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 168.573899][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 168.593581][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.608940][ T430] usb 5-1: device descriptor read/8, error -71 [ 168.622885][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.652656][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.674662][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.700645][ T10] usb 3-1: Product: syz [ 168.715096][ T10] usb 3-1: Manufacturer: syz [ 168.730779][ T10] usb 3-1: SerialNumber: syz [ 168.747831][ T430] usb 5-1: device descriptor read/8, error -71 [ 168.875810][ T430] usb usb5-port1: unable to enumerate USB device [ 168.960014][ T10] usb 3-1: 0:2 : does not exist [ 168.982072][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 169.014038][ T10] usb 3-1: USB disconnect, device number 57 [ 169.047297][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 169.621277][ T36] audit: type=1400 audit(1785220066.272:434): avc: denied { map } for pid=4085 comm="syz.2.1487" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.660726][ T4086] rust_binder: Failure in copy_transaction_data: EINVAL [ 169.660776][ T4086] rust_binder: 4085:4086 transaction to 4085 failed: EINVAL [ 169.735225][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 169.941727][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 169.950349][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.973675][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.010967][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 170.042329][ T430] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 170.068311][ T10] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 170.129626][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 170.174885][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 170.202190][ T10] usb 5-1: string descriptor 0 read error: -22 [ 170.208583][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 170.219923][ T430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.241072][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.254795][ T430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.297400][ T430] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 170.333530][ T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.379544][ T430] usb 3-1: config 0 descriptor?? [ 170.484655][ C1] net_ratelimit: 51520 callbacks suppressed [ 170.484679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.502765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.514890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.527090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.539299][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.551486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.563623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.576011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.588177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.600354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.832859][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 170.856825][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 170.874037][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 170.881350][ T430] usbhid 3-1:0.0: can't add hid device: -32 [ 170.887383][ T430] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 170.922080][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 170.938477][ T430] usb 3-1: USB disconnect, device number 58 [ 170.954394][ T10] usb 5-1: Warning! Unlikely big volume range (=18453), cval->res is probably wrong. [ 170.999534][ T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/18453/1 [ 171.045556][ T10] usb 5-1: USB disconnect, device number 45 [ 171.733881][ T430] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 171.903792][ T430] usb 5-1: Using ep0 maxpacket: 16 [ 171.918158][ T430] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.934865][ T430] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.960378][ T430] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.969842][ T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.985930][ T430] usb 5-1: Product: syz [ 171.990614][ T430] usb 5-1: Manufacturer: syz [ 171.996906][ T430] usb 5-1: SerialNumber: syz [ 172.076750][ T36] audit: type=1326 audit(1785220068.734:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.2.1498" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f949619de99 code=0x0 [ 172.208446][ T430] usb 5-1: 0:2 : does not exist [ 172.227849][ T430] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 172.261509][ T430] usb 5-1: USB disconnect, device number 46 [ 172.284989][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 172.473430][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 172.752599][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 172.812783][ T10] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 174.055258][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 174.694183][ T10] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 174.905607][ T10] usb 3-1: Product: syz [ 174.909852][ T10] usb 3-1: Manufacturer: syz [ 175.491798][ C1] net_ratelimit: 52474 callbacks suppressed [ 175.491823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.509889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.522001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.534105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.546210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.558321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.570402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.582506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.594571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.606678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.075703][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 176.663853][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 177.590688][ T10] r8152-cfgselector 3-1: can't set config #0, error -71 [ 177.614511][ T10] r8152-cfgselector 3-1: USB disconnect, device number 59 [ 180.499769][ C1] net_ratelimit: 51921 callbacks suppressed [ 180.499793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.517869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.529993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.542061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.554160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.566272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.578398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.590506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.602618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.614686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.508305][ C1] net_ratelimit: 67043 callbacks suppressed [ 185.508329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.508359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.514680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.526561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.538443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.550961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.562562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.574416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.586185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.598739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.517127][ C1] net_ratelimit: 79408 callbacks suppressed [ 190.517416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.523170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.536741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.547376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.559911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.571139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.583229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.595187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.608137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.619178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 191.294108][ T430] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 195.526495][ C0] net_ratelimit: 78668 callbacks suppressed [ 195.526520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.526608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.532815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.544781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.557092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.568643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 195.580699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.592604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.605064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.616751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.535912][ C1] net_ratelimit: 80760 callbacks suppressed [ 200.535943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.536052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.542253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 200.554204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.566010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.578708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.590386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.602109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.614048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.626168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.545434][ C1] net_ratelimit: 82811 callbacks suppressed [ 205.545466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.545668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.551773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.563928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.575918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.587804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.599677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 205.612104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.623585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.635625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.555084][ C1] net_ratelimit: 83091 callbacks suppressed [ 210.555108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.555562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.561263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.573655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.585640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.597491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.609398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 210.621864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.633296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.645392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.564885][ C0] net_ratelimit: 85858 callbacks suppressed [ 215.564909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.565127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.571215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.583165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 215.595116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.606885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.619467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.631035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.642858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.654728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.574695][ C1] net_ratelimit: 83919 callbacks suppressed [ 220.574736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.574851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.580934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.592991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.605071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.616852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.628726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 220.641186][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.652599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.664664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.584591][ C1] net_ratelimit: 85030 callbacks suppressed [ 225.584614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.585034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.590869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 225.602859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.614751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.626860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.638758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.651171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.662539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.674809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.594529][ C1] net_ratelimit: 93811 callbacks suppressed [ 230.594554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.595033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.600797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.612670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.624587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.636642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.648543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.660826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.672439][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 230.684401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.604490][ C1] net_ratelimit: 108660 callbacks suppressed [ 235.604515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.604629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.610811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.622815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.634783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.646947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.658597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 235.670587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.682376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.694525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.154412][ C0] sched: DL replenish lagged too much [ 240.614412][ C1] net_ratelimit: 114248 callbacks suppressed [ 240.614438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 240.614567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.620676][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.632809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.644820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.656673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.668450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.680926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.692656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.704709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.624392][ C1] net_ratelimit: 107927 callbacks suppressed [ 245.624415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.624708][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.630704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 245.642659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.654547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.666677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.678664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.690920][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.702668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.714720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.634360][ C1] net_ratelimit: 108339 callbacks suppressed [ 250.634386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.634412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.640970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.652695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.664729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 250.676683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.688571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.701053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.712797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.724636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.644369][ C1] net_ratelimit: 103128 callbacks suppressed [ 255.644393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.644417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.650716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.662725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.674819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.686698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.698581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 255.710860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.722378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.734412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.654312][ C1] net_ratelimit: 108599 callbacks suppressed [ 260.654336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.654381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.660533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.672759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.684758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.696945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.708489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 260.720459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.732277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.744400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.664318][ C0] net_ratelimit: 113738 callbacks suppressed [ 265.664342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.664431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 265.670684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.682556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.695030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.706852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.718674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.730623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.742876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.754701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.674290][ C0] net_ratelimit: 120014 callbacks suppressed [ 270.674316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.674479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.681002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.692598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.704779][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.716865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.728825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.740659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 270.753093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.764721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.684335][ C1] net_ratelimit: 119444 callbacks suppressed [ 275.684359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 275.684392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.690526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.702689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.714658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.727023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.738519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.750574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.762583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.774521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.694282][ C0] net_ratelimit: 119657 callbacks suppressed [ 280.694307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.694331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.701336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.712789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.724662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.736575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 280.748525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.760398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.772858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.784611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.704297][ C1] net_ratelimit: 119281 callbacks suppressed [ 285.704320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.704355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.710771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.722615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.734554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 285.746563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.758374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.770837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.782595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.794467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.714353][ C1] net_ratelimit: 107716 callbacks suppressed [ 290.714378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.714398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.720864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 290.732833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.744656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.756855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.768748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.780996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.792584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.804643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.724279][ C1] net_ratelimit: 116927 callbacks suppressed [ 295.724304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.724339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.730623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 295.742675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.754440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.766899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.778631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.790847][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.802378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.814550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.734294][ C1] net_ratelimit: 108934 callbacks suppressed [ 300.734319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.734649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.740771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.752661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.764711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 300.777006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.788637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.801177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.812713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.824693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.744265][ C0] net_ratelimit: 108198 callbacks suppressed [ 305.744289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.744331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.750902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.762641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.774751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.786491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 305.798795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.810359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.822808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.834548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.754292][ C1] net_ratelimit: 108070 callbacks suppressed [ 310.754316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.754465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.760741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.772728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.784532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 310.796851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.808487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.821804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.832540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.844432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.798185][ T4176] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 315.764291][ C0] net_ratelimit: 106882 callbacks suppressed [ 315.764316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.764343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.773665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.779580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.791550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.803293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.815555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.827324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.839370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.851195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 320.774264][ C0] net_ratelimit: 103477 callbacks suppressed [ 320.774289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.774500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.780601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.792445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.804940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.816656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.828640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.840410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 320.852640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.864271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.784278][ C1] net_ratelimit: 109988 callbacks suppressed [ 325.784304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 325.784481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.790520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.802697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.814824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 325.826516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.838465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.850567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.862432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.874564][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.357501][ T37] INFO: task syz.2.1518:4159 blocked for more than 123 seconds. [ 329.367433][ T37] Not tainted syzkaller #0 [ 329.372422][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.505869][ T36] audit: type=1400 audit(1785220226.113:436): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3008]" dev="pipefs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 329.537149][ T37] task:syz.2.1518 state:D stack:0 pid:4159 tgid:4159 ppid:296 flags:0x00004004 [ 329.547458][ T37] Call Trace: [ 329.550769][ T37] [ 329.553749][ T37] __schedule+0x1496/0x20b0 [ 329.558320][ T37] ? __sched_text_start+0x10/0x10 [ 329.563408][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 329.568509][ T37] ? __kasan_check_write+0x18/0x20 [ 329.573655][ T37] ? rcu_segcblist_entrain+0x69/0x2f0 [ 329.579069][ T37] ? _raw_spin_unlock+0x45/0x60 [ 329.583949][ T37] ? rcu_barrier_entrain+0x375/0x530 [ 329.589274][ T37] schedule+0xc5/0x240 [ 329.593377][ T37] schedule_timeout+0xc7/0x3b0 [ 329.598192][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 329.603596][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 329.609180][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 329.614337][ T37] ? generic_exec_single+0x206/0x500 [ 329.619642][ T37] wait_for_common+0x368/0x650 [ 329.624450][ T37] ? wait_for_completion+0x40/0x40 [ 329.629589][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 329.635079][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 329.641605][ T37] wait_for_completion+0x1c/0x40 [ 329.646584][ T37] rcu_barrier+0x45a/0x580 [ 329.651061][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 329.656493][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 329.661287][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 329.666451][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 329.672138][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 329.677808][ T37] kvm_put_kvm+0xadf/0x12d0 [ 329.682345][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 329.687520][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 329.692744][ T37] kvm_vm_release+0x47/0x70 [ 329.697290][ T37] __fput+0x20b/0xa30 [ 329.701300][ T37] ____fput+0x20/0x30 [ 329.705319][ T37] task_work_run+0x1e8/0x260 [ 329.709939][ T37] ? __cfi_task_work_run+0x10/0x10 [ 329.715096][ T37] ? __kasan_check_read+0x15/0x20 [ 329.720158][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 329.726292][ T37] resume_user_mode_work+0x35/0x50 [ 329.731450][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 329.736985][ T37] do_syscall_64+0x63/0xf0 [ 329.741425][ T37] ? clear_bhb_loop+0x50/0xa0 [ 329.746146][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 329.752070][ T37] RIP: 0033:0x7f949619de99 [ 329.756543][ T37] RSP: 002b:00007ffe11b5b0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 329.764995][ T37] RAX: 0000000000000000 RBX: 00007ffe11b5b1a0 RCX: 00007f949619de99 [ 329.772993][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 329.781005][ T37] RBP: 0000000000031a3b R08: 0000000000000001 R09: 0000000000000000 [ 329.789010][ T37] R10: 0000001b2e320000 R11: 0000000000000246 R12: 00007ffe11b5b1e0 [ 329.797012][ T37] R13: 00007f9496425fac R14: 0000000000031cfa R15: 00007f9496425fa0 [ 329.805016][ T37] [ 329.849501][ T37] NMI backtrace for cpu 0 [ 329.849523][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 329.849556][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 329.849571][ T37] Call Trace: [ 329.849579][ T37] [ 329.849589][ T37] __dump_stack+0x21/0x30 [ 329.849627][ T37] dump_stack_lvl+0x140/0x1c0 [ 329.849660][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 329.849693][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 329.849731][ T37] dump_stack+0x19/0x20 [ 329.849763][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 329.849789][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 329.849822][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 329.849848][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 329.849880][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.849913][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.849952][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 329.849979][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 329.850011][ T37] watchdog+0xe45/0xf90 [ 329.850036][ T37] ? __kasan_check_write+0x18/0x20 [ 329.850063][ T37] ? __cfi_watchdog+0x10/0x10 [ 329.850087][ T37] ? __kasan_check_read+0x15/0x20 [ 329.850110][ T37] ? __kthread_parkme+0x12f/0x180 [ 329.850134][ T37] ? schedule+0xc5/0x240 [ 329.850163][ T37] kthread+0x2c7/0x360 [ 329.850189][ T37] ? __cfi_watchdog+0x10/0x10 [ 329.850214][ T37] ? __cfi_kthread+0x10/0x10 [ 329.850241][ T37] ret_from_fork+0x67/0xa0 [ 329.850275][ T37] ? __cfi_kthread+0x10/0x10 [ 329.850302][ T37] ret_from_fork_asm+0x1a/0x30 [ 329.850327][ T37] [ 329.850337][ T37] Sending NMI from CPU 0 to CPUs 1: [ 330.061374][ C1] NMI backtrace for cpu 1 [ 330.061390][ C1] CPU: 1 UID: 0 PID: 4174 Comm: syz-executor Not tainted syzkaller #0 9c722142e1cda5d0ace938c6e5c03d461fe7a5ab [ 330.061414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 330.061431][ C1] RIP: 0010:0xffffffffa0000cec [ 330.061448][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc <41> ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc 41 ff e3 cc cc cc [ 330.061464][ C1] RSP: 0018:ffffc9000022ff40 EFLAGS: 00000257 [ 330.061480][ C1] RAX: ffffffff85c0012f RBX: ffffc90000230000 RCX: 0000000000045f00 [ 330.061493][ C1] RDX: ffffc9000f277f01 RSI: ffffffff85c0012f RDI: ffffc90000230000 [ 330.061507][ C1] RBP: ffffc9000022ffd0 R08: ffffc90000230010 R09: ffffc90000230008 [ 330.061521][ C1] R10: 0000000000000000 R11: ffffffff81759ed0 R12: ffff88810e365f00 [ 330.061534][ C1] R13: 0000000000000000 R14: ffffffff81759ed0 R15: ffffc9000022ff48 [ 330.061547][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 330.061562][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.061574][ C1] CR2: 00007f6f1ea75110 CR3: 000000010c764000 CR4: 00000000003526b0 [ 330.061592][ C1] DR0: 000000000000000a DR1: 0000000000000006 DR2: 0000000000000003 [ 330.061602][ C1] DR3: 000000000000eda9 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 330.061614][ C1] Call Trace: [ 330.061620][ C1] [ 330.061626][ C1] ? arch_stack_walk+0x12c/0x170 [ 330.061647][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.061670][ C1] stack_trace_save+0xaa/0x100 [ 330.061691][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 330.061709][ C1] ? __do_softirq+0xf/0x16 [ 330.061732][ C1] kasan_save_track+0x3e/0x80 [ 330.061751][ C1] ? kasan_save_track+0x3e/0x80 [ 330.061769][ C1] ? kasan_save_free_info+0x44/0x50 [ 330.061793][ C1] ? __kasan_slab_free+0x5f/0x80 [ 330.061813][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 330.061830][ C1] ? __kfree_skb+0x18f/0x210 [ 330.061854][ C1] ? consume_skb+0x65/0x1a0 [ 330.061876][ C1] ? arp_process+0xe3e/0x1810 [ 330.061899][ C1] ? NF_HOOK+0x17e/0x1e0 [ 330.061919][ C1] ? arp_rcv+0x2f8/0x490 [ 330.061941][ C1] ? netif_receive_skb+0x228/0x7b0 [ 330.061966][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 330.061985][ C1] ? br_handle_frame_finish+0x1178/0x1620 [ 330.062005][ C1] ? br_handle_frame+0x5a5/0xba0 [ 330.062023][ C1] ? __netif_receive_skb_core+0xfc4/0x3a70 [ 330.062047][ C1] ? process_backlog+0x40b/0xaf0 [ 330.062070][ C1] ? __napi_poll+0xd0/0x600 [ 330.062093][ C1] ? net_rx_action+0x5dc/0xd70 [ 330.062116][ C1] ? handle_softirqs+0x1aa/0x620 [ 330.062133][ C1] ? __do_softirq+0xf/0x16 [ 330.062153][ C1] ? do_softirq+0xb8/0x110 [ 330.062169][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 330.062185][ C1] ? _raw_spin_unlock_bh+0x54/0x60 [ 330.062204][ C1] ? __fib6_clean_all+0x39d/0x440 [ 330.062227][ C1] ? fib6_clean_all+0x2e/0x50 [ 330.062248][ C1] ? rt6_disable_ip+0x124/0x810 [ 330.062265][ C1] ? addrconf_ifdown+0x161/0x1970 [ 330.062281][ C1] ? addrconf_notify+0x17a/0xeb0 [ 330.062300][ C1] ? notifier_call_chain+0x106/0x2b0 [ 330.062316][ C1] ? raw_notifier_call_chain+0x31/0x40 [ 330.062333][ C1] ? unregister_netdevice_many_notify+0xde1/0x1be0 [ 330.062356][ C1] ? unregister_netdevice_queue+0x302/0x350 [ 330.062378][ C1] ? __tun_detach+0xc98/0x1450 [ 330.062394][ C1] ? tun_chr_close+0x93/0x150 [ 330.062408][ C1] ? __fput+0x20b/0xa30 [ 330.062436][ C1] ? ____fput+0x20/0x30 [ 330.062457][ C1] ? task_work_run+0x1e8/0x260 [ 330.062479][ C1] ? do_exit+0xa46/0x2850 [ 330.062501][ C1] ? do_group_exit+0x21f/0x2f0 [ 330.062523][ C1] ? get_signal+0x134c/0x1490 [ 330.062545][ C1] ? arch_do_signal_or_restart+0xbc/0x700 [ 330.062562][ C1] ? syscall_exit_to_user_mode+0x57/0xb0 [ 330.062588][ C1] ? do_syscall_64+0x63/0xf0 [ 330.062609][ C1] kasan_save_free_info+0x44/0x50 [ 330.062634][ C1] __kasan_slab_free+0x5f/0x80 [ 330.062654][ C1] kmem_cache_free+0x1bd/0x4f0 [ 330.062671][ C1] ? __kfree_skb+0x18f/0x210 [ 330.062695][ C1] __kfree_skb+0x18f/0x210 [ 330.062718][ C1] ? arp_process+0xe3e/0x1810 [ 330.062740][ C1] consume_skb+0x65/0x1a0 [ 330.062763][ C1] arp_process+0xe3e/0x1810 [ 330.062786][ C1] ? tun_chr_close+0x93/0x150 [ 330.062801][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.062823][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.062845][ C1] NF_HOOK+0x17e/0x1e0 [ 330.062865][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.062887][ C1] ? arp_xmit+0x200/0x200 [ 330.062908][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.062932][ C1] ? br_dev_queue_push_xmit+0x571/0x710 [ 330.062951][ C1] arp_rcv+0x2f8/0x490 [ 330.062973][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 330.062995][ C1] netif_receive_skb+0x228/0x7b0 [ 330.063020][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 330.063043][ C1] ? br_flood+0x66d/0x720 [ 330.063061][ C1] br_pass_frame_up+0x126/0x1b0 [ 330.063079][ C1] br_handle_frame_finish+0x1178/0x1620 [ 330.063099][ C1] ? do_syscall_64+0x63/0xf0 [ 330.063117][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.063140][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 330.063162][ C1] br_handle_frame+0x5a5/0xba0 [ 330.063182][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 330.063201][ C1] __netif_receive_skb_core+0xfc4/0x3a70 [ 330.063227][ C1] ? ip6_mc_input+0x433/0x680 [ 330.063250][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.063272][ C1] ? qdisc_run_end+0x120/0x120 [ 330.063295][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.063316][ C1] ? NF_HOOK+0x17e/0x1e0 [ 330.063336][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.063358][ C1] ? arp_xmit+0x200/0x200 [ 330.063379][ C1] ? __cfi_arp_process+0x10/0x10 [ 330.063401][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 330.063431][ C1] process_backlog+0x40b/0xaf0 [ 330.063458][ C1] __napi_poll+0xd0/0x600 [ 330.063481][ C1] net_rx_action+0x5dc/0xd70 [ 330.063506][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 330.063530][ C1] ? sched_clock+0x44/0x60 [ 330.063553][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 330.063578][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 330.063602][ C1] handle_softirqs+0x1aa/0x620 [ 330.063620][ C1] __do_softirq+0xf/0x16 [ 330.063640][ C1] do_softirq+0xb8/0x110 [ 330.063656][ C1] [ 330.063661][ C1] [ 330.063667][ C1] ? __cfi_do_softirq+0x10/0x10 [ 330.063683][ C1] ? _raw_write_lock_bh+0x96/0xf0 [ 330.063703][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 330.063724][ C1] __local_bh_enable_ip+0x74/0x80 [ 330.063740][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 330.063758][ C1] __fib6_clean_all+0x39d/0x440 [ 330.063782][ C1] ? __cfi_fib6_ifdown+0x10/0x10 [ 330.063799][ C1] ? fib6_clean_all+0x50/0x50 [ 330.063821][ C1] ? __cfi_fib6_clean_node+0x10/0x10 [ 330.063845][ C1] ? __cfi_fib6_ifdown+0x10/0x10 [ 330.063861][ C1] ? __sched_text_start+0x10/0x10 [ 330.063883][ C1] ? __cfi_fib6_ifdown+0x10/0x10 [ 330.063898][ C1] fib6_clean_all+0x2e/0x50 [ 330.063920][ C1] rt6_disable_ip+0x124/0x810 [ 330.063938][ C1] ? radix_tree_lookup+0x250/0x2a0 [ 330.063958][ C1] ? __cfi_rt6_disable_ip+0x10/0x10 [ 330.063974][ C1] ? __flush_work+0x6cd/0xaa0 [ 330.063997][ C1] ? __kasan_check_read+0x15/0x20 [ 330.064014][ C1] addrconf_ifdown+0x161/0x1970 [ 330.064031][ C1] ? __cfi_do_softirq+0x10/0x10 [ 330.064047][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 330.064066][ C1] ? addrconf_cleanup+0x150/0x150 [ 330.064100][ C1] ? __kasan_check_write+0x18/0x20 [ 330.064116][ C1] ? mutex_unlock+0x90/0x240 [ 330.064138][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 330.064160][ C1] ? macsec_notify+0x111/0x4f0 [ 330.064182][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 330.064205][ C1] addrconf_notify+0x17a/0xeb0 [ 330.064228][ C1] ? ip6mr_device_event+0x1f4/0x230 [ 330.064249][ C1] ? __cfi_addrconf_notify+0x10/0x10 [ 330.064273][ C1] notifier_call_chain+0x106/0x2b0 [ 330.064295][ C1] raw_notifier_call_chain+0x31/0x40 [ 330.064317][ C1] unregister_netdevice_many_notify+0xde1/0x1be0 [ 330.064349][ C1] ? __queue_work+0xb67/0x1130 [ 330.064377][ C1] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 330.064410][ C1] ? __queue_delayed_work+0x18e/0x240 [ 330.064448][ C1] ? __kasan_check_read+0x15/0x20 [ 330.064470][ C1] unregister_netdevice_queue+0x302/0x350 [ 330.064498][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 330.064527][ C1] ? linkwatch_fire_event+0x212/0x260 [ 330.064560][ C1] __tun_detach+0xc98/0x1450 [ 330.064584][ C1] ? __cfi_tun_chr_close+0x10/0x10 [ 330.064604][ C1] tun_chr_close+0x93/0x150 [ 330.064624][ C1] __fput+0x20b/0xa30 [ 330.064655][ C1] ____fput+0x20/0x30 [ 330.064683][ C1] task_work_run+0x1e8/0x260 [ 330.064711][ C1] ? __cfi_task_work_run+0x10/0x10 [ 330.064739][ C1] ? free_nsproxy+0x223/0x290 [ 330.064772][ C1] do_exit+0xa46/0x2850 [ 330.064800][ C1] ? __kasan_check_write+0x18/0x20 [ 330.064822][ C1] ? netlink_unicast+0x91a/0xa70 [ 330.064854][ C1] ? __kasan_check_write+0x18/0x20 [ 330.064876][ C1] ? __cfi_do_exit+0x10/0x10 [ 330.064904][ C1] ? netlink_sendmsg+0x80d/0xad0 [ 330.064927][ C1] ? __kasan_check_write+0x18/0x20 [ 330.064949][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 330.064975][ C1] do_group_exit+0x21f/0x2f0 [ 330.065003][ C1] ? __kasan_check_write+0x18/0x20 [ 330.065025][ C1] ? recalc_sigpending+0x184/0x1d0 [ 330.065050][ C1] get_signal+0x134c/0x1490 [ 330.065080][ C1] ? __cfi___sys_sendto+0x10/0x10 [ 330.065114][ C1] arch_do_signal_or_restart+0xbc/0x700 [ 330.065137][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 330.065163][ C1] syscall_exit_to_user_mode+0x57/0xb0 [ 330.065197][ C1] do_syscall_64+0x63/0xf0 [ 330.065221][ C1] ? clear_bhb_loop+0x50/0xa0 [ 330.065251][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.065278][ C1] RIP: 0033:0x7fb43e959017 [ 330.065295][ C1] Code: Unable to access opcode bytes at 0x7fb43e958fed. [ 330.065307][ C1] RSP: 002b:00007ffc696e1840 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 330.065330][ C1] RAX: 0000000000000048 RBX: 000055556aea4500 RCX: 00007fb43e959017 [ 330.065347][ C1] RDX: 0000000000000048 RSI: 00007fb43f754670 RDI: 0000000000000003 [ 330.065362][ C1] RBP: 0000000000000001 R08: 00007ffc696e18a4 R09: 000000000000000c [ 330.065376][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 330.065390][ C1] R13: 0000000000000000 R14: 00007fb43f754670 R15: 0000000000000000 [ 330.065409][ C1] [ 330.794684][ C0] net_ratelimit: 87550 callbacks suppressed [ 330.794743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.797442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.802324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.807394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.811984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.817076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 330.821951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.826960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.832357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.837600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 335.804250][ C1] net_ratelimit: 107813 callbacks suppressed [ 335.804274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 335.804296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.810594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.822726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.834462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.846577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.858544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.870607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.882379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:4a:a3:05:fa:76, vlan:0) [ 335.894452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)