last executing test programs: 1m25.713531324s ago: executing program 3 (id=400): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x24000080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f00000007c0)={&(0x7f000066a000/0x3000)=nil, &(0x7f000071b000/0x2000)=nil, 0x3000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.633244696s ago: executing program 3 (id=401): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1}, 0x0) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008000f00fff3c00e1400", 0x26}], 0x1}, 0x0) (async) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x306}, 0x42, {0x2, 0x4e24, @remote}, 'netpci0\x00'}) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m25.225085935s ago: executing program 3 (id=404): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x50b6, &(0x7f0000000100)={0x0, 0x8116, 0x4, 0x1, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) syz_ublk_setup_io_uring(0x74dc, &(0x7f0000000240)={0x0, 0x2fd4, 0x1000, 0x0, 0xd, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0) 1m23.965336803s ago: executing program 3 (id=407): sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c", 0x11, 0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x4) setxattr$incfs_id(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x10000, 0x25000, 0x2, 0xffffffffffffffff, 0xbffa5ed60a7b9b18}) 1m23.951234354s ago: executing program 3 (id=408): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x20, 0xd, 0xefe, 0x537, 0x1f, 0x0, 0x0}) 1m23.847915346s ago: executing program 3 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) 1m23.831066447s ago: executing program 32 (id=409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe01000000000000", 0x1c) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x24, 0x21, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @typed={0x8, 0xa, 0x0, 0x0, @binary="283bb5ad"}]}, 0x24}], 0x1}, 0x0) 59.619753698s ago: executing program 4 (id=577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100033062cbd700000000000000000d7000000000000000000000000fc000000000000000000000000000001000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000010000000000000000030000000000000000000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003a00290200000000fdffffff0a00f800"], 0x14}, 0x1, 0x6000000}, 0x0) readv(r7, &(0x7f0000000840)=[{&(0x7f0000001880)=""/4084, 0xff4}], 0x1) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80140006"], 0x2c}}, 0x40) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 54.811623455s ago: executing program 4 (id=589): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="00160600"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="40fe02000000e805"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x99, {0x99, 0xc, "bf55c4b4c4fb61779b94fb65d2d1aaf5d466583bbcccccdcbc4244361b939681cfb290a1f230f2c0b68bbc999f197a17b1578fb42b78dddbe5e6421edab038248f96816c9ecc653349dfce36a6711aa8b833915390c9bbfc3d0bf22142cf127dc71a562b93181f7dea7230a527a934e2cb74f5effef15560b2e63f2e18f35ccd5c955f86098b2e9bd76dbcef70bcef32ba808fb0055f1a"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240f}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x20, 0xf, 0xca, "c6512407ff6622e1b6b27f977409ddae0488b70d5e6d1f720146fdd094f1cd46ae683c32fb3dedaef31a8bd0c417df7e20233591af8e5aaa222d3d1dc3358586d9441ab71a6df0c0f7531494805c50af7f76bea55678ce616755b77c9279daa2dce61ad8274881bd999a32bad9361832156ac9fe00d955242741107d9e3011f1512f97875da8272a995aa501d872f300613650bbba1217b6ae79f38f26dcb01a93d322024540a6af6282cc78ee58076343dce5b86f0a576c4b13febc1cf1ca1bb55fd351d33f6da7657c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0xc0, 0x5, 0x1, "ce"}, &(0x7f0000000640)={0x40, 0x5, 0x1, "fc"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20100200"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 54.741663607s ago: executing program 1 (id=590): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, 0x0) 54.642866649s ago: executing program 2 (id=592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7772}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008008}, 0x880) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000240)=@ethtool_gfeatures}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000001600)=ANY=[@ANYRES64=r2], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) close_range(r0, r0, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000013c0)=@ccm_128={{0x304}, "74d56ea8a04ad712", "06585cf38accf6c8599d5a6d787894de", "aa516841", "57536afe37413262"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xdea}], 0x5) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 54.642551909s ago: executing program 2 (id=593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0x7}, @window={0x3, 0x8, 0x71f2}, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="b999b50496a16b3c6954db64ca2fb00a10c47b29af012d54f008f17fc7a0bb75d00f1c507daf3501a960fc2232473830a96f1baca6a5eb0260e6af18e70ee8156039599c61b6afc6feb2afc88c2a2a5f212761eac3c69faa82d708fc97b23bc2a81ecf", 0x63}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="580000000000000029000000390000000008000000000000fc020000000000000000000000000001fc020000000000000000000000000001fc000000000000000000000000000001fe8000000000000000000000000000aae489ddf28ed24a320dd5b68569f169f74e2df2eb8961bbc9b0933ad46d18d65a1b751b5ab92e3c5f6524a2b352673e8f2110a2090abe1740759e9ad056bc647135bf956d9dc5b95b23f82399c1160c529b98c81f43ea2624ad010d083c47521a755bac56a96c970bf6b14a"], 0x58}}, {{0x0, 0x0, 0x0}}], 0x2, 0x11) (fail_nth: 5) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) 54.640250579s ago: executing program 1 (id=594): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d000000000000000000287fcf10538bb0ff00000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084000500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000100000000000000100000000320000000000000000000000000000c111"], 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c040010) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x20, 0xd, 0xefe, 0x537, 0x0, 0x40000, 0x0}) 54.563080431s ago: executing program 1 (id=595): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='[\x00', 0x101000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0xfffffffc]}, {0x9, 0x0, 0x4, 0x9}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x401}, {[0xf, 0x10000, 0x3]}, 0xc2, 0xe, &(0x7f0000000100)=""/14}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000400)={{0x80a0000, 0xfec00000, 0xe, 0xf, 0x2, 0x4, 0xbc, 0xb3, 0xf, 0x89, 0x7}, {0x58000, 0x6000, 0x4, 0xff, 0xbd, 0xf9, 0xfb, 0xb, 0x7, 0x0, 0xf9, 0x41}, {0x2000, 0xe000, 0x0, 0x1, 0x0, 0xf8, 0x2, 0x8, 0x1, 0x0, 0x4, 0x84}, {0x100000, 0xfec00000, 0x2f, 0x1, 0x5, 0x9, 0xdc, 0x1, 0x80, 0x5, 0x5, 0xf8}, {0x8080000, 0x50000, 0x8, 0x4, 0xb, 0x7, 0x40, 0x4, 0xf, 0x7, 0x2, 0xf0}, {0x41000, 0x26000, 0x2, 0x28, 0x1, 0xf2, 0x40, 0xa8, 0x1, 0x9, 0x8, 0x3}, {0x8000000, 0x100000, 0x3, 0xd, 0x0, 0x20, 0x8, 0x7f, 0x1, 0x9, 0x7, 0x9}, {0x200000, 0x25000, 0x4, 0x2, 0x1, 0x4, 0xa, 0x8, 0x8, 0x3, 0x7, 0x2}, {0xf000, 0x761a}, {0x60002, 0x1000}, 0x40001, 0x0, 0x8000000, 0x2000, 0x4, 0x9000, 0x54000, [0x8, 0x2, 0xfffffffffffffff7, 0xe]}) r1 = syz_clone(0x82250200, &(0x7f0000000540)="f227a98e2bc29dbc5e5b6abdacc8f0be9ac6b8b89bbf312447cb3da6f0e77b3183ff659f0c27e3b44b98", 0x2a, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="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") sched_getparam(r1, &(0x7f0000001600)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000001680)={'\x00', 0x8, 0x8ee, 0x2, 0x78da, 0x7f, r1}) sendmsg$nl_generic(r0, &(0x7f00000018c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000001700)={0x144, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfb, {0x8}, [@nested={0x18, 0x8, 0x0, 0x1, [@nested={0x4, 0xb9}, @typed={0x8, 0x2f, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r0}]}, @generic="2dd2b840a7a1d611453f86a1f34fba6a1787e4d987e231c98a185577b1db715b23f12dadee91e4e1325237e90d4e624b05b2a1840a601ee093657dd6f9b75b3aa97d18651890449f52d066096a03d05c93f52f8e3bc568eede81cff538921147e9cb39e847532c433e4ff98c8063509a20c6bfebc216857d460946ad81928b9210a429c436f23c06d6ab72e49793d9c64e210a0dd7b931309914d238a637918d806d9431e15b37a9659acb23996f120de6afeddcf0f116aa530f30ad7478b97ce25c6c67228917", @nested={0x18, 0x9f, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xc3, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x4f}]}, @generic="ca6d03d7664b66926d337983e7bcbc0397c5acf2ab", @nested={0x24, 0x1c, 0x0, 0x1, [@generic, @typed={0x8, 0x6c, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0x200}, @nested={0x4, 0xb3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) mount(&(0x7f0000001900)=@nullb, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)='pstore\x00', 0x40420, &(0x7f00000019c0)='\x00') getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001a00)=0x1, &(0x7f0000001a40)=0x4) rename(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='./file0\x00') capset(&(0x7f0000001b00)={0x20080522, r2}, &(0x7f0000001b40)={0x3, 0xfffffff7, 0x0, 0x8, 0x8001, 0xfffffff8}) r4 = open(&(0x7f0000001b80)='./file0/file0\x00', 0x4001, 0x140) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000001bc0)={0x2, 0x0, [{0x1, 0x1, 0x1, 0x2c, 0x6, 0x40, 0x7fffffff}, {0xc0000001, 0x3, 0x4, 0x1, 0x68, 0x4, 0x8}]}) r5 = dup2(r4, r0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000001c40)=@arm64={0x8, 0x1, 0x7, '\x00', 0x4800000000}) r6 = syz_usb_connect$uac1(0x4, 0xba, &(0x7f0000001c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x46d, 0x8f0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x3, 0xb0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3f}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0xfb, '\"'}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x1, 0x1, [0x3], 0x4f}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x2, "971ff75416"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x4, 0x4, 0x2d}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x6, 0x1, [0x1], 0x4}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x3, '@'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xaad, 0x2ab, 0xb, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x81, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x10, 0x7, "c4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x8, 0x8, {0x7, 0x25, 0x1, 0x4, 0xff, 0x6}}}}}}}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x201, 0x1, 0x3, 0x6, 0x20, 0xc}, 0x46, &(0x7f0000001d80)={0x5, 0xf, 0x46, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "9324301e9308ad46c39b2c4b4d636e0c"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x2c, 0x6, 0x1, 0xf00, 0x6, [0xc000, 0xc0, 0x3f00, 0x0, 0x3f0f, 0xff00c0]}]}, 0x1, [{0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000001f80)={0x14, &(0x7f0000001e80)={0x20, 0xa, 0x65, {0x65, 0x8, "699a8f9cac27932f97892c83044c0e7d771528a4bf420626e74530b1c6082e478a77e68fe207f2b1a0742a52a695f27aa16fcf7be5dd6e9e496c1ef7fdd349b9d8c6ba58d486a270af27babc27382229f15b0ec7bb79e4602d2807c87c73ebf92bc319"}}, &(0x7f0000001f00)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "7087bbf3d20aa18712d4eeb9a25af61272bb3aef0523509fe9f65b2cff49c430531ca037bff029834e5db2efa95c427a0c4241fe81d6ec515963"}}}, &(0x7f0000002280)={0x44, &(0x7f0000001fc0)={0x0, 0xf, 0xe3, "a18cc96fba71ca0971a3b822632d53a4cfe33416c74af78b82dfa0c93c615966232a5e111e0c2091a09058bbfc65a65a334cdbd277863d1b33dfa2bd4d7286ebf57a21b955860067f6a21b28df7e33efd89b3e49db7b1ed5d93e4f9f75b4171c5218b84eb85d8e14040bb4a72a094297b160f16acf3da7d483c58b95454e2a80fd01cbf226cb9111a742bdf0c3a1a7d8780f5525cced919f13eb4c8ffe7469ab33b67a3de7262810d4b55ad87bfd859f43b982f23706577ec00c46bf1d7e9345d8586ee3b9f6adf95059de76019712b9904ad86a25bb08b3a9f5231c2529410d96a198"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x29}, &(0x7f0000002140)={0x20, 0x81, 0x2, "2df1"}, &(0x7f0000002180)={0x20, 0x82, 0x3, "e9ea0a"}, &(0x7f00000021c0)={0x20, 0x83, 0x1, "fa"}, &(0x7f0000002200)={0x20, 0x84, 0x3, "daccc0"}, &(0x7f0000002240)={0x20, 0x85, 0x3, "4ea97a"}}) landlock_restrict_self(r0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000002300)={0x0, r0, 0x1}) faccessat2(r4, &(0x7f0000002340)='./file0\x00', 0x128, 0x200) ptrace$pokeuser(0x6, r2, 0x602, 0x204000000000000) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000002380), &(0x7f00000023c0)=0x30) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002440)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002480)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x7c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000901) syz_usb_control_io$uac1(r6, &(0x7f0000002680)={0x14, &(0x7f0000002600)={0x40, 0x21, 0x37, {0x37, 0x7, "dbf6f6e561762372f6346ea4d767dd096570a2886d004b0cd3d4bc1b0442fac3f023d918af0a443ae80603447eb770650945ffc124"}}, &(0x7f0000002640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f0000002980)={0x44, &(0x7f00000026c0)={0x0, 0xf, 0xd9, "7d1795797e98c991342ade71d99a2b1f3d312c1eb99ec48c8b410857bb66cd1cfe747722be635c040ce81f5fbd6308c3b163594e9043f19c8145b0a7aadb9b4265c958d290a157b548d2c46f029cb025e641e1a23d9349a5128e83a4a6b0609943175baeb0d01b04077d2a77620a4f4c74f3672596f459f95531f9c2651371a8cd27d8522fca1cbe9508d08e807a66b4984eefb8fba9c05cef1b2ce99226682645f18fd92a97adb36e5563ddd76254c36ae7a4362e884662d6eb4e144486fc2ee27ec6b979a829dc1d299f715be650671d52d59828656ac3c1"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000002840)={0x20, 0x81, 0x2, "d39f"}, &(0x7f0000002880)={0x20, 0x82, 0x1, "11"}, &(0x7f00000028c0)={0x20, 0x83, 0x2, 'Tz'}, &(0x7f0000002900)={0x20, 0x84, 0x1, '`'}, &(0x7f0000002940)={0x20, 0x85, 0x3, "dd5817"}}) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) read$FUSE(r10, &(0x7f0000002a40)={0x2020}, 0x2020) 54.448050093s ago: executing program 0 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) 54.379082745s ago: executing program 0 (id=599): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="ab6be23d8f5b68d0a941945990027a487bb0462d00c6810befc224669456e30742a378c10f1b514a17d934885e906d7035edd8337717afd972fd1df91eca8f1d288722a4de18895e20edf35cc73e826b81bc1fa82fbbf2963190d016830cdff59b9a3d2e6ce8f643713a6c949a0861507a853657dad3a8acb4c205af439714c3bd4707bd789d15624a27b5bc2c8c1bc1eedde670f731625fb557682e8c8b4b9b314b592dd4bc34738f06448911436370f39696c17ba4db84", @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1, 0x0, 0x2}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) fcntl$setpipe(r3, 0x407, 0x7ffffffe) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="201404000000fa0b97004ee7579b2d85a6c6dff2021918cd468730a97a48dc4702703283b49f1939c4ac222b46afbb0d2bf4567d513d7ff663183769cd2c9d6f5f3bc7093666f6a3f56b1f738b61e3e1dc2d47b5ac9d3c30e6147755a6b26bbb21faff3e6eb95163118f96ff8305e10c7f5ce8f5eeb5e1b7cc45cb05a0b06289fb78cf79432e57a4350aa4c4c40196a97fe6eba37439b33c43d2b84440582a9f8ffd160660d6b5f372a97f0cf7cc5c61cdebbd6d7fc915500d72c190483674613532d10d3cab23df0767f2f7793c883c35916cdfe68330857a0eb4b4aa00437c27b28683720aeac2fb7b8c4ac830"], 0x0, 0x0, 0x0, 0x0, 0x0}) 54.354746676s ago: executing program 2 (id=600): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 54.320503486s ago: executing program 2 (id=601): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x80) 54.251207678s ago: executing program 2 (id=602): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000400)) fremovexattr(r10, &(0x7f0000000080)=@known='system.posix_acl_default\x00') sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000006a0015012000"], 0x1c}], 0x1}, 0x4000080) ptrace(0x10, r8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000002100)={0x2020}, 0x2020) ppoll(&(0x7f0000000140)=[{r11, 0x80}], 0x1, &(0x7f0000000200), 0x0, 0x0) ptrace$peekuser(0x3, r8, 0x380) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x40000004, 0x800, 0x1, 0x20255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x10000002, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90b, 0x1, 0x2, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b18, 0x200, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x6, 0x101, 0x40, @empty, @mcast2, 0x20, 0x7800, 0x3, 0x5}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 54.001696904s ago: executing program 1 (id=603): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x4040, 0x0) 53.894623446s ago: executing program 1 (id=604): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000014c0)={0x7, 0xbbf, &(0x7f0000000440)="d3e62c037051dd9f80bd65da4cea2c5947c111a4e2cff361cf832fda5c7219e9a7aa98063f43b2d2016fffed15721a3c276e5fbb105dca3d6b846def021a839038ad1008928a6ad99c366f70256b33c62a652de574bf640d7f24cf0f429885be707911d22c3be613b68918c366584c5b71df528256d53c4cb767cb6f53b8b9cb9f7db9ac3a526e14076130e2b520457683778197b97a86b3f6027fbdb332999527fba8c268b9d335686bf5cbbfe6adcba691e9f2830cf32467f2b157e04d8bf973f6885891553cf27ea6e514b0b5773e4bec88dd9e13b2e5d4ffac2769c80a869ae0cd0876", 0x0, 0xe5}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs$pagemap(r4, &(0x7f0000000180)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x20, 0xd, 0xefe, 0x537, 0x1f, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x7, 0xdb7}) 52.934256117s ago: executing program 1 (id=605): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) unshare(0x60000600) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @ioapic={0x10000, 0x9, 0xc, 0x2, 0x0, [{0x32, 0x8, 0xf8, '\x00', 0x5}, {0x0, 0x5, 0xb7}, {0x8, 0x97, 0xd6, '\x00', 0x4}, {0x8, 0x5, 0x3, '\x00', 0x4}, {0x9, 0x0, 0xc, '\x00', 0x1}, {0x7, 0x3, 0x5}, {0x9, 0x80, 0x26}, {0x1, 0x1, 0x13, '\x00', 0xc}, {0x3, 0x1, 0xf, '\x00', 0x3}, {0x9, 0x3, 0x5, '\x00', 0x7}, {0x5, 0x0, 0x9}, {0x4, 0x2, 0x40, '\x00', 0x5}, {0x9, 0x8, 0xff, '\x00', 0xbc}, {0x7f, 0xb8, 0xb}, {0xfe, 0x3, 0xe, '\x00', 0x1}, {0x1, 0x2, 0x9}, {0x3, 0xfe, 0x22, '\x00', 0x3}, {0x3, 0x3, 0x59, '\x00', 0x4}, {0x9, 0x0, 0x7, '\x00', 0x1}, {0x5b, 0x7, 0x4, '\x00', 0x7f}, {0x7, 0x8, 0x5, '\x00', 0xe}, {0x6, 0x3, 0xb, '\x00', 0x1}, {0x1, 0x2, 0x3, '\x00', 0x6}, {0x0, 0x5, 0x2, '\x00', 0xa}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x6e, 0x0, 0x100000000005, 0x20, 0x9, 0x2, 0x80002000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x7ffe], 0x1, 0x394610}) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x5, 0x3}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) pidfd_send_signal(r1, 0x21, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = pidfd_getfd(r1, r7, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0xa, 0x0, [{0xc0010064, 0x0, 0x7}, {0x2b9, 0x0, 0x7}, {0x8a, 0x0, 0xcdb}, {0xb98, 0x0, 0x5}, {0x40a, 0x0, 0x8001}, {0xc0011032, 0x0, 0x9}, {0x329, 0x0, 0xe8}, {0x40000020, 0x0, 0x5}, {0x88, 0x0, 0x1051}, {0x89b, 0x0, 0x8}]}) 52.752728772s ago: executing program 2 (id=606): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x24000080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.323253993s ago: executing program 4 (id=607): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000ffffffffffffffff00000000000000001d0000000000000000000000000000000000000000006c000000000000000000dd0200000000000000000000000000000200010000000000c4000500e0000001000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff0000000000fcffffff00000000fc020000000000000000000000000001000000003200000000000000000000000000000000000000023500"], 0x17c}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = memfd_create(0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, r2, 0xff64000) read$FUSE(r1, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e1, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x5) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) 50.878252463s ago: executing program 0 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045439, 0x40bea7b87a0000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010328bd7000fcdbdf2529"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004814) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TCFLSH(r2, 0x80045439, 0x40bea7b87a0000) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010328bd7000fcdbdf2529"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20004814) (async) 45.837682436s ago: executing program 4 (id=609): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 44.961758095s ago: executing program 0 (id=610): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x80) 42.942447351s ago: executing program 4 (id=611): r0 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') (fail_nth: 1) 42.056559961s ago: executing program 0 (id=612): r0 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 40.253161051s ago: executing program 0 (id=613): r0 = socket(0x15, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) 40.074520175s ago: executing program 4 (id=614): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e", 0x3e}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dd", 0x87}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000967000/0x1000)=nil, &(0x7f0000a30000/0x2000)=nil, 0x1000, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$input_event(r4, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x5, 0x0, 0xf0}) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 34.988305579s ago: executing program 33 (id=605): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) unshare(0x60000600) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000540)={0x1, 0x0, @ioapic={0x10000, 0x9, 0xc, 0x2, 0x0, [{0x32, 0x8, 0xf8, '\x00', 0x5}, {0x0, 0x5, 0xb7}, {0x8, 0x97, 0xd6, '\x00', 0x4}, {0x8, 0x5, 0x3, '\x00', 0x4}, {0x9, 0x0, 0xc, '\x00', 0x1}, {0x7, 0x3, 0x5}, {0x9, 0x80, 0x26}, {0x1, 0x1, 0x13, '\x00', 0xc}, {0x3, 0x1, 0xf, '\x00', 0x3}, {0x9, 0x3, 0x5, '\x00', 0x7}, {0x5, 0x0, 0x9}, {0x4, 0x2, 0x40, '\x00', 0x5}, {0x9, 0x8, 0xff, '\x00', 0xbc}, {0x7f, 0xb8, 0xb}, {0xfe, 0x3, 0xe, '\x00', 0x1}, {0x1, 0x2, 0x9}, {0x3, 0xfe, 0x22, '\x00', 0x3}, {0x3, 0x3, 0x59, '\x00', 0x4}, {0x9, 0x0, 0x7, '\x00', 0x1}, {0x5b, 0x7, 0x4, '\x00', 0x7f}, {0x7, 0x8, 0x5, '\x00', 0xe}, {0x6, 0x3, 0xb, '\x00', 0x1}, {0x1, 0x2, 0x3, '\x00', 0x6}, {0x0, 0x5, 0x2, '\x00', 0xa}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x6e, 0x0, 0x100000000005, 0x20, 0x9, 0x2, 0x80002000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x7ffe], 0x1, 0x394610}) ioctl$KVM_CAP_SYNC_REGS(r4, 0x4068aea3, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x73622a85, 0x0, 0x0, 0x0, 0x5, 0x3}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) pidfd_send_signal(r1, 0x21, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = pidfd_getfd(r1, r7, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0xa, 0x0, [{0xc0010064, 0x0, 0x7}, {0x2b9, 0x0, 0x7}, {0x8a, 0x0, 0xcdb}, {0xb98, 0x0, 0x5}, {0x40a, 0x0, 0x8001}, {0xc0011032, 0x0, 0x9}, {0x329, 0x0, 0xe8}, {0x40000020, 0x0, 0x5}, {0x88, 0x0, 0x1051}, {0x89b, 0x0, 0x8}]}) 27.113500015s ago: executing program 34 (id=606): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x24000080) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.359507281s ago: executing program 35 (id=613): r0 = socket(0x15, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) 0s ago: executing program 36 (id=614): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e", 0x3e}, {&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dd", 0x87}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000967000/0x1000)=nil, &(0x7f0000a30000/0x2000)=nil, 0x1000, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$input_event(r4, &(0x7f0000000000)={{}, 0x15}, 0x18) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x5, 0x0, 0xf0}) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') kernel console output (not intermixed with test programs): 81.164307][ T63] usb 2-1: config 0 descriptor?? [ 81.170725][ T63] smsc75xx v1.0.0 [ 81.223269][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.231485][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 81.242532][ T45] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 81.251808][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.259952][ T45] usb 3-1: Product: syz [ 81.264122][ T45] usb 3-1: Manufacturer: syz [ 81.268744][ T45] usb 3-1: SerialNumber: syz [ 81.460182][ T314] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 81.504283][ T45] usb 3-1: MIDIStreaming interface descriptor not found [ 81.513732][ T45] usb 3-1: USB disconnect, device number 33 [ 81.524437][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.624844][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 81.632746][ T314] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.641294][ T314] usb 4-1: config 16 has an invalid interface number: 82 but max is 0 [ 81.649736][ T314] usb 4-1: config 16 has no interface number 0 [ 81.656332][ T314] usb 4-1: config 16 interface 82 has no altsetting 0 [ 81.665411][ T314] usb 4-1: string descriptor 0 read error: -22 [ 81.671808][ T314] usb 4-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=3a.dc [ 81.680891][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.690686][ T314] uvcvideo 4-1:16.82: Found Unit with invalid ID 0 [ 81.713798][ T1630] x_tables: duplicate underflow at hook 4 [ 81.909557][ T10] usb 4-1: USB disconnect, device number 27 [ 82.002224][ T45] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 82.061316][ T36] audit: type=1400 audit(1783400666.480:30673): avc: denied { ioctl } for pid=1633 comm="syz.2.392" path="socket:[14080]" dev="sockfs" ino=14080 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.087115][ T36] audit: type=1400 audit(1783400666.480:30674): avc: denied { getopt } for pid=1633 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.107229][ T36] audit: type=1400 audit(1783400666.480:30675): avc: denied { ioctl } for pid=1633 comm="syz.2.392" path="socket:[14088]" dev="sockfs" ino=14088 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.165750][ T45] usb 1-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 82.176600][ T45] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.189755][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.196494][ T45] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 82.205618][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.217842][ T45] usb 1-1: config 0 descriptor?? [ 82.226902][ T45] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 82.235791][ T36] audit: type=1326 audit(1783400666.646:30676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1645 comm="syz.2.397" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249939de59 code=0x0 [ 82.717329][ T680] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 82.823495][ T36] audit: type=1400 audit(1783400667.181:30677): avc: denied { setopt } for pid=1631 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.881313][ T680] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.889470][ T680] usb 4-1: not running at top speed; connect to a high speed hub [ 82.902596][ T680] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 82.916900][ T680] usb 4-1: New USB device found, idVendor=0499, idProduct=1005, bcdDevice= 0.40 [ 82.926772][ T680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.935338][ T680] usb 4-1: Product: syz [ 82.940358][ T680] usb 4-1: Manufacturer: syz [ 82.945374][ T680] usb 4-1: SerialNumber: syz [ 82.951694][ T1655] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.179088][ T1655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 83.200632][ T680] usb 4-1: USB disconnect, device number 28 [ 83.205573][ T1657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.221440][ T1657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.288500][ T1660] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 83.288533][ T1660] rust_binder: 1631:1660 transaction to 1631 failed: BR_DEAD_REPLY [ 83.486788][ T421] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 83.661672][ T421] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.670796][ T421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.683695][ T421] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.694284][ T421] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 83.704542][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.712539][ T421] usb 3-1: Product: syz [ 83.716893][ T421] usb 3-1: Manufacturer: syz [ 83.721581][ T421] usb 3-1: SerialNumber: syz [ 83.729096][ T421] usb 3-1: selecting invalid altsetting 1 [ 83.739495][ T421] usb 3-1: unit 6 not found! [ 84.019035][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 84.039463][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 84.049666][ T63] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 84.060302][ T63] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 84.071580][ T63] usb 2-1: USB disconnect, device number 41 [ 84.163400][ T421] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 84.174037][ T421] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 84.190506][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.494687][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 84.657264][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 84.663917][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.674075][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.684438][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.694261][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.702590][ T10] usb 4-1: Product: syz [ 84.707216][ T10] usb 4-1: Manufacturer: syz [ 84.711843][ T10] usb 4-1: SerialNumber: syz [ 84.936433][ T10] usb 4-1: 0:2 : does not exist [ 84.943687][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 84.955293][ T10] usb 4-1: USB disconnect, device number 29 [ 85.028219][ T45] usb 1-1: USB disconnect, device number 38 [ 85.275008][ T421] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 85.394217][ T45] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 85.439279][ T421] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.447585][ T421] usb 2-1: not running at top speed; connect to a high speed hub [ 85.457907][ T421] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 85.467842][ T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.476317][ T421] usb 2-1: Product: syz [ 85.480636][ T421] usb 2-1: Manufacturer: syz [ 85.485751][ T421] usb 2-1: SerialNumber: syz [ 85.556802][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 85.568683][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 85.578237][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.586408][ T45] usb 1-1: Product: syz [ 85.590721][ T45] usb 1-1: Manufacturer: syz [ 85.595394][ T45] usb 1-1: SerialNumber: syz [ 85.690609][ T36] audit: type=1400 audit(1783400669.830:30678): avc: denied { mounton } for pid=1694 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.734066][ T1694] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.742201][ T1694] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.749776][ T1694] bridge_slave_0: entered allmulticast mode [ 85.756319][ T1694] bridge_slave_0: entered promiscuous mode [ 85.763250][ T1694] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.771184][ T1694] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.778607][ T1694] bridge_slave_1: entered allmulticast mode [ 85.785088][ T1694] bridge_slave_1: entered promiscuous mode [ 85.821009][ T45] usb 1-1: 1:1: invalid format type 0x9978 is detected, processed as PCM [ 85.831113][ T45] usb 1-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes [ 85.837980][ T1694] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.841726][ T45] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 85.845684][ T1694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.859885][ T1694] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.861137][ T45] usb 1-1: USB disconnect, device number 39 [ 85.867064][ T1694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.900745][ T536] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.909031][ T536] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.919502][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.927162][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.938130][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.945572][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.975807][ T1694] veth0_vlan: entered promiscuous mode [ 85.987168][ T1694] veth1_macvtap: entered promiscuous mode [ 86.007898][ T36] audit: type=1400 audit(1783400670.125:30679): avc: denied { mount } for pid=1694 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.219601][ T421] usb 2-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 86.228437][ T421] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 86.243204][ T421] usb 2-1: USB disconnect, device number 42 [ 86.253492][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 86.304776][ T680] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.382389][ T36] audit: type=1400 audit(1783400670.475:30680): avc: denied { connect } for pid=1700 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.410201][ T1703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 86.459921][ T1705] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 86.467741][ T680] usb 5-1: Using ep0 maxpacket: 32 [ 86.468088][ T1705] bpf: Bad value for 'mode' [ 86.482043][ T10] usb 3-1: USB disconnect, device number 34 [ 86.488041][ T680] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.498155][ T680] usb 5-1: config 0 has no interface number 0 [ 86.504827][ T680] usb 5-1: config 0 interface 184 has no altsetting 0 [ 86.516902][ T680] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.527306][ T680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.535567][ T680] usb 5-1: Product: syz [ 86.541433][ T680] usb 5-1: Manufacturer: syz [ 86.549641][ T680] usb 5-1: SerialNumber: syz [ 86.555234][ T680] usb 5-1: config 0 descriptor?? [ 86.563257][ T680] smsc75xx v1.0.0 [ 86.577494][ T1723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 86.607371][ T36] audit: type=1400 audit(1783400670.669:30681): avc: denied { watch } for pid=1724 comm="syz.2.419" path="/111" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.633907][ T36] audit: type=1400 audit(1783400670.678:30682): avc: denied { read } for pid=1724 comm="syz.2.419" name="file0" dev="tmpfs" ino=603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.795169][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.803792][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.812043][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.820798][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.837107][ T1735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1735 comm=syz.1.423 [ 86.965805][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 87.041558][ T421] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 87.106574][ T329] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 87.128235][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 87.134603][ T10] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 87.144632][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 87.153732][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.161931][ T10] usb 1-1: Product: syz [ 87.166135][ T10] usb 1-1: Manufacturer: syz [ 87.170842][ T10] usb 1-1: SerialNumber: syz [ 87.178907][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 87.185340][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 87.216208][ T421] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.227580][ T421] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 87.236694][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.244817][ T421] usb 3-1: Product: syz [ 87.249149][ T421] usb 3-1: Manufacturer: syz [ 87.253896][ T421] usb 3-1: SerialNumber: syz [ 87.269107][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 87.275589][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.286203][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.297263][ T329] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.306502][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.314758][ T329] usb 2-1: Product: syz [ 87.318982][ T329] usb 2-1: Manufacturer: syz [ 87.325047][ T329] usb 2-1: SerialNumber: syz [ 87.549181][ T329] usb 2-1: 0:2 : does not exist [ 87.560744][ T329] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 87.572441][ T329] usb 2-1: USB disconnect, device number 43 [ 87.572472][ T421] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.595185][ T421] usb 3-1: USB disconnect, device number 35 [ 87.607169][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 87.607488][ T1741] udevd[1741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.643076][ T10] r8152-cfgselector 1-1: Needed 2 retries to read version [ 87.651349][ T10] r8152-cfgselector 1-1: Unknown version 0x1c60 [ 87.657865][ T10] r8152-cfgselector 1-1: bad CDC descriptors [ 87.861614][ T421] r8152-cfgselector 1-1: USB disconnect, device number 40 [ 88.065888][ T1751] input: syz1 as /devices/virtual/input/input12 [ 88.334774][ T36] audit: type=1400 audit(1783400672.275:30683): avc: denied { accept } for pid=1758 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.355224][ T329] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 88.360556][ T36] audit: type=1400 audit(1783400672.275:30684): avc: denied { read } for pid=1758 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.471116][ T1779] syzkaller1: entered promiscuous mode [ 88.476978][ T1779] syzkaller1: entered allmulticast mode [ 88.486371][ T36] audit: type=1400 audit(1783400672.413:30685): avc: denied { bind } for pid=1780 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.511791][ T36] audit: type=1400 audit(1783400672.432:30686): avc: denied { read } for pid=1780 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.560242][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.569622][ T329] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 88.582688][ T329] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 88.591876][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.599913][ T329] usb 3-1: Product: syz [ 88.604276][ T329] usb 3-1: Manufacturer: syz [ 88.610754][ T329] usb 3-1: SerialNumber: syz [ 88.627862][ T1786] tipc: Enabling of bearer rejected, failed to enable media [ 88.837383][ T329] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 88.848051][ T329] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 88.859694][ T329] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 88.870628][ T329] usb 3-1: USB disconnect, device number 36 [ 88.881456][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.014140][ T63] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 89.176576][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 89.183064][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 89.194295][ T63] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 89.211319][ T63] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 89.222202][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.230229][ T63] usb 2-1: Product: syz [ 89.234465][ T63] usb 2-1: Manufacturer: syz [ 89.239096][ T63] usb 2-1: SerialNumber: syz [ 89.245717][ T1800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.361413][ T680] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 89.372439][ T680] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 89.376445][ T36] audit: type=1400 audit(1783400673.234:30687): avc: denied { listen } for pid=1801 comm="syz.4.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.382777][ T680] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 89.413397][ T680] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 89.425222][ T680] usb 5-1: USB disconnect, device number 2 [ 89.473086][ T1800] rust_binder: 1799:1800 transaction to 0 failed: ENOENT [ 89.476487][ T63] usb 2-1: MIDIStreaming interface descriptor not found [ 89.507222][ T63] usb 2-1: USB disconnect, device number 44 [ 89.531696][ T1741] udevd[1741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.827136][ T31] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 89.967827][ T421] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 89.990494][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 90.002048][ T31] usb 3-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 90.015196][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.021866][ T31] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 90.030928][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.043843][ T31] usb 3-1: config 0 descriptor?? [ 90.130283][ T421] usb 1-1: Using ep0 maxpacket: 32 [ 90.136979][ T421] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 90.145641][ T421] usb 1-1: config 0 has no interface number 0 [ 90.151740][ T421] usb 1-1: config 0 interface 184 has no altsetting 0 [ 90.160329][ T421] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.169793][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.177805][ T421] usb 1-1: Product: syz [ 90.181996][ T421] usb 1-1: Manufacturer: syz [ 90.186814][ T421] usb 1-1: SerialNumber: syz [ 90.192219][ T421] usb 1-1: config 0 descriptor?? [ 90.198149][ T421] smsc75xx v1.0.0 [ 90.308293][ T329] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 90.487059][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 90.493508][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.506448][ T329] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.517432][ T329] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 90.528009][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.536673][ T329] usb 2-1: Product: syz [ 90.541025][ T329] usb 2-1: Manufacturer: syz [ 90.545917][ T329] usb 2-1: SerialNumber: syz [ 90.830838][ T329] usb 2-1: unit 0 not found! [ 90.837398][ T329] usb 2-1: USB disconnect, device number 45 [ 90.847352][ T1741] udevd[1741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.422361][ T1852] mmap: syz.1.460 (1852): VmData 29073408 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 91.459361][ T1859] netlink: 140 bytes leftover after parsing attributes in process `syz.1.462'. [ 91.701777][ T63] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 91.842753][ T63] usb 5-1: device descriptor read/64, error -71 [ 91.875139][ T329] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 92.016056][ T329] usb 2-1: device descriptor read/64, error -71 [ 92.102732][ T63] usb 5-1: device descriptor read/64, error -71 [ 92.276215][ T329] usb 2-1: device descriptor read/64, error -71 [ 92.362839][ T63] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 92.503754][ T63] usb 5-1: device descriptor read/64, error -71 [ 92.536278][ T329] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 92.688002][ T329] usb 2-1: device descriptor read/64, error -71 [ 92.766792][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 92.772859][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.779463][ T63] usb 5-1: device descriptor read/64, error -71 [ 92.781836][ T31] usb 3-1: USB disconnect, device number 37 [ 92.815667][ T1870] can0: slcan on ttyS3. [ 92.822276][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 92.822291][ T36] audit: type=1326 audit(1783400676.418:30702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1869 comm="syz.2.466" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249939de59 code=0x0 [ 92.916517][ T63] usb usb5-port1: attempt power cycle [ 92.948082][ T329] usb 2-1: device descriptor read/64, error -71 [ 93.058513][ T421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 93.069739][ T421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 93.078503][ T329] usb usb2-port1: attempt power cycle [ 93.080488][ T36] audit: type=1326 audit(1783400676.648:30703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.0.467" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64999de59 code=0x0 [ 93.111255][ T421] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 93.121606][ T421] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 93.130964][ T421] usb 1-1: USB disconnect, device number 41 [ 93.294924][ T63] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 93.317720][ T63] usb 5-1: device descriptor read/8, error -71 [ 93.446637][ T329] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 93.458794][ T63] usb 5-1: device descriptor read/8, error -71 [ 93.469564][ T329] usb 2-1: device descriptor read/8, error -71 [ 93.610360][ T329] usb 2-1: device descriptor read/8, error -71 [ 93.717579][ T63] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 93.740432][ T63] usb 5-1: device descriptor read/8, error -71 [ 93.869432][ T329] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 93.881782][ T63] usb 5-1: device descriptor read/8, error -71 [ 93.892336][ T329] usb 2-1: device descriptor read/8, error -71 [ 93.966877][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 94.000056][ T63] usb usb5-port1: unable to enumerate USB device [ 94.055605][ T329] usb 2-1: device descriptor read/8, error -71 [ 94.129422][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 94.135838][ T31] usb 3-1: unable to get BOS descriptor set [ 94.144502][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.157152][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.167055][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.175802][ T31] usb 3-1: Product: syz [ 94.180723][ T31] usb 3-1: Manufacturer: syz [ 94.183692][ T329] usb usb2-port1: unable to enumerate USB device [ 94.186000][ T31] usb 3-1: SerialNumber: syz [ 94.416189][ T1903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.425230][ T1903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.469935][ T31] usb 3-1: bad CDC descriptors [ 94.478969][ T31] usb 3-1: USB disconnect, device number 38 [ 94.574647][ T1913] can0 (unregistered): slcan off ttyS3. [ 94.693224][ T1942] netlink: 'syz.2.473': attribute type 19 has an invalid length. [ 94.741675][ T1945] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 94.743045][ T36] audit: type=1400 audit(1783400678.180:30704): avc: denied { getopt } for pid=1944 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.752712][ T1945] SELinux: failed to load policy [ 94.822636][ T1955] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.849766][ T1955] kvm: kvm [1954]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 95.037542][ T1970] x_tables: unsorted underflow at hook 4 [ 95.148272][ T63] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.213263][ T329] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 95.267646][ T421] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 95.310720][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 95.317324][ T63] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.327505][ T63] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.338335][ T63] usb 5-1: New USB device found, idVendor=1235, idProduct=820c, bcdDevice= 0.40 [ 95.347525][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.355627][ T63] usb 5-1: Product: syz [ 95.359847][ T63] usb 5-1: Manufacturer: syz [ 95.364558][ T63] usb 5-1: SerialNumber: syz [ 95.375761][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 95.382772][ T329] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 95.391053][ T329] usb 2-1: config 0 has no interface number 0 [ 95.397166][ T329] usb 2-1: config 0 interface 184 has no altsetting 0 [ 95.405780][ T329] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 95.415876][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.424252][ T329] usb 2-1: Product: syz [ 95.429000][ T329] usb 2-1: Manufacturer: syz [ 95.433660][ T329] usb 2-1: SerialNumber: syz [ 95.439164][ T329] usb 2-1: config 0 descriptor?? [ 95.446950][ T329] smsc75xx v1.0.0 [ 95.451980][ T421] usb 3-1: Using ep0 maxpacket: 16 [ 95.459419][ T421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.469858][ T421] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.483854][ T421] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.493711][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.502272][ T421] usb 3-1: Product: syz [ 95.506837][ T421] usb 3-1: Manufacturer: syz [ 95.511469][ T421] usb 3-1: SerialNumber: syz [ 95.735463][ T36] audit: type=1326 audit(1783400679.103:30705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1965 comm="syz.2.481" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249939de59 code=0x0 [ 95.874280][ T328] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 96.036828][ T328] usb 1-1: Using ep0 maxpacket: 8 [ 96.043593][ T328] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.053570][ T328] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 96.062770][ T328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.070796][ T328] usb 1-1: Product: syz [ 96.075271][ T328] usb 1-1: Manufacturer: syz [ 96.081334][ T328] usb 1-1: SerialNumber: syz [ 96.134348][ C1] bridge0: port 3(syz_tun) entered learning state [ 96.182948][ T1983] FAULT_INJECTION: forcing a failure. [ 96.182948][ T1983] name failslab, interval 1, probability 0, space 0, times 1 [ 96.196029][ T1983] CPU: 0 UID: 0 PID: 1983 Comm: syz.4.487 Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 96.196061][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.196072][ T1983] Call Trace: [ 96.196077][ T1983] [ 96.196085][ T1983] __dump_stack+0x21/0x30 [ 96.196118][ T1983] dump_stack_lvl+0x140/0x1c0 [ 96.196142][ T1983] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.196165][ T1983] dump_stack+0x19/0x20 [ 96.196186][ T1983] should_fail_ex+0x3c2/0x510 [ 96.196206][ T1983] should_failslab+0xac/0x100 [ 96.196227][ T1983] __kmalloc_cache_noprof+0x41/0x470 [ 96.196241][ T1983] ? do_proc_control+0x24b/0xfd0 [ 96.196252][ T1983] ? __kasan_check_write+0x18/0x20 [ 96.196262][ T1983] ? usb_alloc_urb+0x9b/0x1f0 [ 96.196272][ T1983] do_proc_control+0x24b/0xfd0 [ 96.196282][ T1983] proc_control_compat+0x127/0x190 [ 96.196292][ T1983] ? proc_submiturb+0x1c0/0x1c0 [ 96.196306][ T1983] ? mutex_lock+0x97/0x1d0 [ 96.196329][ T1983] ? __kasan_check_write+0x18/0x20 [ 96.196345][ T1983] ? mutex_unlock+0x90/0x240 [ 96.196366][ T1983] usbdev_ioctl+0x13d8/0x2120 [ 96.196385][ T1983] ? __cfi_usbdev_ioctl+0x10/0x10 [ 96.196399][ T1983] ? bpf_lsm_file_ioctl+0xd/0x20 [ 96.196412][ T1983] ? security_file_ioctl+0x3e/0x110 [ 96.196427][ T1983] ? __cfi_usbdev_ioctl+0x10/0x10 [ 96.196443][ T1983] __se_sys_ioctl+0x132/0x1b0 [ 96.196463][ T1983] __x64_sys_ioctl+0x7f/0xa0 [ 96.196483][ T1983] x64_sys_call+0x1878/0x2ee0 [ 96.196500][ T1983] do_syscall_64+0x57/0xf0 [ 96.196517][ T1983] ? clear_bhb_loop+0x50/0xa0 [ 96.196532][ T1983] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.196545][ T1983] RIP: 0033:0x7f655579de59 [ 96.196556][ T1983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.196564][ T1983] RSP: 002b:00007f6556730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.196577][ T1983] RAX: ffffffffffffffda RBX: 00007f6555a25fa0 RCX: 00007f655579de59 [ 96.196585][ T1983] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000003 [ 96.196597][ T1983] RBP: 00007f6556730090 R08: 0000000000000000 R09: 0000000000000000 [ 96.196608][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.196620][ T1983] R13: 00007f6555a26038 R14: 00007f6555a25fa0 R15: 00007ffebe332cd8 [ 96.196637][ T1983] [ 96.451800][ T1975] bridge0: port 3(veth0_to_bridge) entered blocking state [ 96.460320][ T1975] bridge0: port 3(veth0_to_bridge) entered disabled state [ 96.468671][ T1975] veth0_to_bridge: entered allmulticast mode [ 96.476942][ T1975] veth0_to_bridge: entered promiscuous mode [ 96.485684][ T1975] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.498043][ T1975] bridge0: port 3(veth0_to_bridge) entered blocking state [ 96.505659][ T1975] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 96.646434][ T36] audit: type=1400 audit(1783400679.942:30706): avc: denied { setattr } for pid=1989 comm="syz.4.490" name="secretmem" dev="secretmem" ino=18602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 97.090938][ T1998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 97.269089][ T36] audit: type=1400 audit(1783400680.514:30707): avc: denied { getopt } for pid=2004 comm="syz.0.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.360797][ T36] audit: type=1326 audit(1783400680.607:30708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.4.497" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655579de59 code=0x0 [ 98.059768][ T36] audit: type=1326 audit(1783400681.243:30709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.0.496" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64999de59 code=0x7fc00000 [ 98.085907][ T36] audit: type=1326 audit(1783400681.243:30710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.0.496" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb64999de59 code=0x7fc00000 [ 98.112212][ T36] audit: type=1326 audit(1783400681.243:30711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2004 comm="syz.0.496" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb64999de59 code=0x7fc00000 [ 98.227244][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.240736][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 98.251102][ T329] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 98.261933][ T329] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 98.272340][ T329] usb 2-1: USB disconnect, device number 50 [ 98.281433][ T421] usb 3-1: 0:2 : does not exist [ 98.299400][ T421] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 98.311587][ T2019] bridge0: port 4(veth0_to_bridge) entered blocking state [ 98.322540][ T421] usb 3-1: USB disconnect, device number 39 [ 98.337569][ T2019] bridge0: port 4(veth0_to_bridge) entered disabled state [ 98.340961][ T63] usb 5-1: USB disconnect, device number 7 [ 98.345584][ T2019] veth0_to_bridge: entered allmulticast mode [ 98.359071][ T328] usb 1-1: Unsupported UAC3 BADD profile [ 98.362207][ T2019] veth0_to_bridge: entered promiscuous mode [ 98.374073][ T328] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 98.379699][ T2019] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.399715][ T2019] bridge0: port 4(veth0_to_bridge) entered blocking state [ 98.402574][ T328] usb 1-1: USB disconnect, device number 42 [ 98.407004][ T2019] bridge0: port 4(veth0_to_bridge) entered listening state [ 98.428205][ T2024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'. [ 98.438434][ T1741] udevd[1741]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 98.647791][ T36] kauditd_printk_skb: 547 callbacks suppressed [ 98.647809][ T36] audit: type=1400 audit(1783400681.779:31259): avc: denied { map } for pid=2042 comm="syz.2.509" path="pipe:[1563]" dev="pipefs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 98.746292][ T63] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 98.775752][ T36] audit: type=1400 audit(1783400681.899:31260): avc: denied { read } for pid=2050 comm="syz.2.511" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 98.832992][ T31] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 98.844682][ T36] audit: type=1400 audit(1783400681.972:31261): avc: denied { setattr } for pid=2050 comm="syz.2.511" name="NETLINK" dev="sockfs" ino=19070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.883676][ T36] audit: type=1400 audit(1783400682.000:31262): avc: denied { ioctl } for pid=2050 comm="syz.2.511" path="socket:[19561]" dev="sockfs" ino=19561 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.927050][ T36] audit: type=1400 audit(1783400682.046:31263): avc: denied { create } for pid=2052 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 98.955622][ T63] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.967781][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.979929][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.990033][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.005169][ T63] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.014622][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.017406][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 99.030168][ T63] usb 5-1: config 0 descriptor?? [ 99.035590][ T31] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.053087][ T31] usb 2-1: config 0 has no interface number 0 [ 99.059590][ T31] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.068711][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.080874][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.097251][ T31] usb 2-1: Product: syz [ 99.107220][ T31] usb 2-1: Manufacturer: syz [ 99.112039][ T31] usb 2-1: SerialNumber: syz [ 99.119437][ T31] usb 2-1: config 0 descriptor?? [ 99.125750][ T31] smsc75xx v1.0.0 [ 99.482963][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.491288][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.499431][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.506892][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.514800][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.523246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.535597][ C0] bridge0: port 4(veth0_to_bridge) entered blocking state [ 99.544275][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.551919][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.560885][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.568597][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.577103][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.586656][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.594456][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.604612][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.612224][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.621861][ T63] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 99.632039][ T63] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 99.641639][ T63] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 99.743384][ T329] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 99.905931][ T329] usb 1-1: Using ep0 maxpacket: 8 [ 99.914028][ T329] usb 1-1: config 3 has an invalid interface number: 219 but max is 0 [ 99.922899][ T329] usb 1-1: config 3 has no interface number 0 [ 99.929318][ T329] usb 1-1: config 3 interface 219 has no altsetting 0 [ 99.943387][ T329] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=90.15 [ 99.953062][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.961744][ T329] usb 1-1: Product: syz [ 99.966138][ T329] usb 1-1: Manufacturer: syz [ 99.971144][ T329] usb 1-1: SerialNumber: syz [ 100.195183][ T2080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.205457][ T2080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.432494][ T329] ftdi_sio 1-1:3.219: FTDI USB Serial Device converter detected [ 100.442334][ T329] ftdi_sio ttyUSB0: unknown device type: 0x9015 [ 100.449991][ T329] usb 1-1: USB disconnect, device number 43 [ 100.456780][ T329] ftdi_sio 1-1:3.219: device disconnected [ 100.864208][ T328] usb 5-1: USB disconnect, device number 8 [ 100.876326][ T2089] bridge0: port 3(veth0_to_bridge) entered blocking state [ 100.883620][ T2089] bridge0: port 3(veth0_to_bridge) entered disabled state [ 100.890864][ T2089] veth0_to_bridge: entered allmulticast mode [ 100.897358][ T2089] veth0_to_bridge: entered promiscuous mode [ 100.903390][ T2089] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.915757][ T2089] bridge0: port 3(veth0_to_bridge) entered blocking state [ 100.922946][ T2089] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 100.989872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.002363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.014664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.026901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.039376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.055246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.067352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.079505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.091590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.274269][ T328] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.455819][ T328] usb 5-1: Using ep0 maxpacket: 8 [ 101.462852][ T328] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.477611][ T328] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 101.489505][ T328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.497976][ T328] usb 5-1: Product: syz [ 101.502655][ T328] usb 5-1: Manufacturer: syz [ 101.507686][ T328] usb 5-1: SerialNumber: syz [ 101.553263][ T421] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 101.673929][ T329] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 101.718240][ T421] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.727122][ T421] usb 1-1: not running at top speed; connect to a high speed hub [ 101.738662][ T421] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 101.770369][ T328] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.779842][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.789109][ T328] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.796345][ T421] usb 1-1: Product: syz [ 101.812674][ T421] usb 1-1: Manufacturer: syz [ 101.820968][ T421] usb 1-1: SerialNumber: syz [ 101.840426][ T328] usb 5-1: USB disconnect, device number 9 [ 101.934095][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 101.953848][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.988006][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.016686][ T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 102.056577][ T2096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'. [ 102.071182][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.095605][ T329] usb 3-1: SerialNumber: syz [ 102.117426][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 102.140862][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 102.154876][ T31] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 102.166640][ T31] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.178709][ T31] usb 2-1: USB disconnect, device number 51 [ 102.510231][ T421] usb 1-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 102.526257][ T421] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 102.527688][ T329] usb 3-1: 0:2 : does not exist [ 102.546807][ T421] usb 1-1: USB disconnect, device number 44 [ 102.566239][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.593945][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 102.745495][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.754999][ T31] usb 2-1: device descriptor read/64, error -71 [ 102.918810][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 102.927467][ T45] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 102.937581][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.947128][ T45] usb 5-1: Product: syz [ 102.952887][ T45] usb 5-1: Manufacturer: syz [ 102.957789][ T45] usb 5-1: SerialNumber: syz [ 103.027209][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.186324][ T2107] tipc: Enabling of bearer rejected, media not registered [ 103.287293][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 103.310720][ T329] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 103.364306][ T329] usb 3-1: 5:0: failed to get current value for ch 2 (-22) [ 103.414355][ T329] usb 3-1: 5:0: failed to get current value for ch 3 (-22) [ 103.439052][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.480805][ T36] audit: type=1326 audit(1783400686.244:31264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2116 comm="syz.0.534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64999de59 code=0x0 [ 103.532408][ T329] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 103.574270][ T45] usb 5-1: unit 0 not found! [ 103.575332][ T329] usb 3-1: USB disconnect, device number 40 [ 103.606089][ T45] usb 5-1: USB disconnect, device number 10 [ 103.699142][ T31] usb 2-1: device descriptor read/64, error -71 [ 103.829853][ T31] usb usb2-port1: attempt power cycle [ 104.198353][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 104.242557][ T31] usb 2-1: device descriptor read/8, error -71 [ 104.393853][ T31] usb 2-1: device descriptor read/8, error -71 [ 104.574699][ T2153] tap0: tun_chr_ioctl cmd 1074025678 [ 104.584758][ T2153] tap0: group set to 0 [ 104.598667][ T421] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 104.674620][ T31] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 104.708761][ T31] usb 2-1: device descriptor read/8, error -71 [ 104.773797][ T421] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 104.788146][ T36] audit: type=1400 audit(1783400687.453:31265): avc: denied { bind } for pid=2162 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.815839][ T421] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 104.832228][ T421] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.845673][ T36] audit: type=1400 audit(1783400687.453:31266): avc: denied { connect } for pid=2162 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.877247][ T421] usb 5-1: string descriptor 0 read error: -22 [ 104.886017][ T421] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 104.909360][ T31] usb 2-1: device descriptor read/8, error -71 [ 104.933100][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.945451][ C0] net_ratelimit: 84816 callbacks suppressed [ 104.945660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 104.953580][ T421] usb 5-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 104.967877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.990755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 104.998783][ T421] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 105.003903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.030980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 105.045416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.054062][ T31] usb usb2-port1: unable to enumerate USB device [ 105.062589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 105.088350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.103230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 105.119376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 105.172135][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.183494][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.207213][ T421] usb 5-1: USB disconnect, device number 11 [ 105.812488][ T421] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 105.870601][ T2185] FAULT_INJECTION: forcing a failure. [ 105.870601][ T2185] name failslab, interval 1, probability 0, space 0, times 0 [ 105.889634][ T2185] CPU: 1 UID: 0 PID: 2185 Comm: syz.1.558 Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 105.889668][ T2185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.889680][ T2185] Call Trace: [ 105.889687][ T2185] [ 105.889696][ T2185] __dump_stack+0x21/0x30 [ 105.889725][ T2185] dump_stack_lvl+0x140/0x1c0 [ 105.889746][ T2185] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.889770][ T2185] ? __enqueue_entity+0x58a/0x630 [ 105.889791][ T2185] dump_stack+0x19/0x20 [ 105.889814][ T2185] should_fail_ex+0x3c2/0x510 [ 105.889833][ T2185] ? sock_kmalloc+0xde/0x1e0 [ 105.889865][ T2185] should_failslab+0xac/0x100 [ 105.889891][ T2185] __kmalloc_noprof+0x69/0x510 [ 105.889910][ T2185] ? sock_kmalloc+0xde/0x1e0 [ 105.889939][ T2185] sock_kmalloc+0xde/0x1e0 [ 105.889962][ T2185] ____sys_sendmsg+0x1c3/0xa00 [ 105.889979][ T2185] ? __import_iovec+0x5b9/0x7d0 [ 105.890003][ T2185] ? __sys_sendmsg_sock+0x50/0x50 [ 105.890025][ T2185] ? import_iovec+0x80/0xb0 [ 105.890049][ T2185] ___sys_sendmsg+0x2a6/0x370 [ 105.890067][ T2185] ? __sys_sendmsg+0x2a0/0x2a0 [ 105.890083][ T2185] ? kstrtouint+0x78/0xf0 [ 105.890104][ T2185] ? __fget_files+0x2bc/0x330 [ 105.890126][ T2185] __sys_sendmmsg+0x2b4/0x4e0 [ 105.890145][ T2185] ? __cfi___sys_sendmmsg+0x10/0x10 [ 105.890166][ T2185] ? __cfi_ksys_write+0x10/0x10 [ 105.890185][ T2185] __x64_sys_sendmmsg+0xa4/0xc0 [ 105.890203][ T2185] x64_sys_call+0xfec/0x2ee0 [ 105.890220][ T2185] do_syscall_64+0x57/0xf0 [ 105.890238][ T2185] ? clear_bhb_loop+0x50/0xa0 [ 105.890259][ T2185] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.890280][ T2185] RIP: 0033:0x7f8aedd9de59 [ 105.890297][ T2185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.890313][ T2185] RSP: 002b:00007f8aeebdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.890334][ T2185] RAX: ffffffffffffffda RBX: 00007f8aee025fa0 RCX: 00007f8aedd9de59 [ 105.890349][ T2185] RDX: 0000000000000002 RSI: 0000200000007800 RDI: 0000000000000003 [ 105.890361][ T2185] RBP: 00007f8aeebdf090 R08: 0000000000000000 R09: 0000000000000000 [ 105.890373][ T2185] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 105.890385][ T2185] R13: 00007f8aee026038 R14: 00007f8aee025fa0 R15: 00007ffef5830b98 [ 105.890400][ T2185] [ 106.213237][ T2188] bridge0: port 3(veth0_to_bridge) entered blocking state [ 106.224438][ T2188] bridge0: port 3(veth0_to_bridge) entered disabled state [ 106.233588][ T2188] veth0_to_bridge: entered allmulticast mode [ 106.241818][ T2188] veth0_to_bridge: entered promiscuous mode [ 106.249940][ T2188] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 106.268264][ T421] usb 1-1: device descriptor read/64, error -71 [ 106.276568][ T2188] bridge0: port 3(veth0_to_bridge) entered blocking state [ 106.287183][ T2188] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 106.527786][ T421] usb 1-1: device descriptor read/64, error -71 [ 106.540368][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 106.820433][ T421] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 106.843332][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 106.972315][ T421] usb 1-1: device descriptor read/64, error -71 [ 106.972452][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.135504][ T63] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 107.146793][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.243078][ T421] usb 1-1: device descriptor read/64, error -71 [ 107.275585][ T36] audit: type=1400 audit(1783400689.741:31267): avc: denied { setopt } for pid=2206 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.362816][ T421] usb usb1-port1: attempt power cycle [ 107.455804][ T63] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 107.467042][ T63] usb 2-1: config 0 has no interface number 0 [ 107.656939][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.721469][ T63] usb 2-1: config 0 interface 172 altsetting 4 endpoint 0x81 has invalid maxpacket 51520, setting to 64 [ 107.741635][ T421] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 107.775351][ T421] usb 1-1: device descriptor read/8, error -71 [ 107.917202][ T421] usb 1-1: device descriptor read/8, error -71 [ 107.947542][ T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 108.111925][ T31] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 108.125605][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.137836][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 108.155057][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.171140][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.182997][ T421] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 108.192853][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 108.204760][ T31] usb 5-1: SerialNumber: syz [ 108.217212][ T2217] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 108.229400][ T31] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 108.240001][ T421] usb 1-1: device descriptor read/8, error -71 [ 108.384175][ T421] usb 1-1: device descriptor read/8, error -71 [ 108.392655][ T63] usb 2-1: config 0 interface 172 has no altsetting 0 [ 108.403379][ T63] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 108.452804][ T31] usb 5-1: USB disconnect, device number 12 [ 108.500445][ T421] usb usb1-port1: unable to enumerate USB device [ 108.719133][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.874312][ T2223] FAULT_INJECTION: forcing a failure. [ 108.874312][ T2223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.879628][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.891940][ T2223] CPU: 1 UID: 0 PID: 2223 Comm: syz.0.570 Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 108.891969][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.891980][ T2223] Call Trace: [ 108.891986][ T2223] [ 108.891993][ T2223] __dump_stack+0x21/0x30 [ 108.892022][ T2223] dump_stack_lvl+0x140/0x1c0 [ 108.892045][ T2223] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.892068][ T2223] ? kasan_save_alloc_info+0x3a/0x50 [ 108.892093][ T2223] ? check_stack_object+0x81/0x150 [ 108.892111][ T2223] ? __virt_addr_valid+0x2a1/0x370 [ 108.892133][ T2223] dump_stack+0x19/0x20 [ 108.892155][ T2223] should_fail_ex+0x3c2/0x510 [ 108.892327][ T2223] should_fail+0xf/0x20 [ 108.892357][ T2223] should_fail_usercopy+0x1e/0x30 [ 108.892374][ T2223] _copy_from_user+0x20/0xa0 [ 108.892395][ T2223] ____sys_sendmsg+0x314/0xa00 [ 108.892411][ T2223] ? __sys_sendmsg_sock+0x50/0x50 [ 108.892424][ T2223] ? unwind_get_return_address+0x51/0x90 [ 108.892447][ T2223] ? import_iovec+0x80/0xb0 [ 108.892466][ T2223] ___sys_sendmsg+0x2a6/0x370 [ 108.892488][ T2223] ? __sys_sendmsg+0x2a0/0x2a0 [ 108.892501][ T2223] ? kstrtouint+0x78/0xf0 [ 108.892521][ T2223] ? __fget_files+0x2bc/0x330 [ 108.892543][ T2223] __sys_sendmmsg+0x2b4/0x4e0 [ 108.892558][ T2223] ? __cfi___sys_sendmmsg+0x10/0x10 [ 108.892579][ T2223] ? __cfi_ksys_write+0x10/0x10 [ 108.892599][ T2223] __x64_sys_sendmmsg+0xa4/0xc0 [ 108.892616][ T2223] x64_sys_call+0xfec/0x2ee0 [ 108.892634][ T2223] do_syscall_64+0x57/0xf0 [ 108.892653][ T2223] ? clear_bhb_loop+0x50/0xa0 [ 108.892691][ T2223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.892708][ T2223] RIP: 0033:0x7fb64999de59 [ 108.892726][ T2223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.892742][ T2223] RSP: 002b:00007fb64a878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.892764][ T2223] RAX: ffffffffffffffda RBX: 00007fb649c25fa0 RCX: 00007fb64999de59 [ 108.892778][ T2223] RDX: 0000000000000002 RSI: 0000200000007800 RDI: 0000000000000003 [ 108.892791][ T2223] RBP: 00007fb64a878090 R08: 0000000000000000 R09: 0000000000000000 [ 108.892956][ T2223] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 108.892970][ T2223] R13: 00007fb649c26038 R14: 00007fb649c25fa0 R15: 00007ffec035c138 [ 108.892984][ T2223] [ 109.367637][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.627370][ T421] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 109.779186][ T421] usb 1-1: device descriptor read/64, error -71 [ 109.994545][ T2245] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 110.039222][ T421] usb 1-1: device descriptor read/64, error -71 [ 110.084770][ T63] usb 2-1: config 0 descriptor?? [ 110.299335][ T421] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 110.375368][ C0] net_ratelimit: 128219 callbacks suppressed [ 110.375387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.397715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 110.416352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.434223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 110.449527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.466130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 110.473440][ T421] usb 1-1: device descriptor read/64, error -71 [ 110.481408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.506594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 110.526597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 110.542590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 110.743723][ T421] usb 1-1: device descriptor read/64, error -71 [ 110.867063][ T421] usb usb1-port1: attempt power cycle [ 111.253066][ T421] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 111.286649][ T421] usb 1-1: device descriptor read/8, error -71 [ 111.431388][ T421] usb 1-1: device descriptor read/8, error -71 [ 111.697416][ T421] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 111.730987][ T421] usb 1-1: device descriptor read/8, error -71 [ 111.886598][ T421] usb 1-1: device descriptor read/8, error -71 [ 112.014844][ T421] usb usb1-port1: unable to enumerate USB device [ 112.781183][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 112.788190][ C1] bridge0: topology change detected, propagating [ 113.073841][ T421] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 113.248324][ T421] usb 1-1: config index 0 descriptor too short (expected 64575, got 68) [ 113.257149][ T421] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 113.269309][ T421] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.284382][ T421] usb 1-1: config index 1 descriptor too short (expected 64575, got 68) [ 113.293745][ T421] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 113.307598][ T421] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.347534][ T421] usb 1-1: string descriptor 0 read error: -71 [ 113.354595][ T421] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.366823][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.380166][ T421] usb 1-1: can't set config #1, error -71 [ 113.391300][ T421] usb 1-1: USB disconnect, device number 53 [ 113.954633][ T2251] FAULT_INJECTION: forcing a failure. [ 113.954633][ T2251] name failslab, interval 1, probability 0, space 0, times 0 [ 113.968533][ T2251] CPU: 1 UID: 0 PID: 2251 Comm: syz.0.583 Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 113.968565][ T2251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.968585][ T2251] Call Trace: [ 113.968592][ T2251] [ 113.968601][ T2251] __dump_stack+0x21/0x30 [ 113.968632][ T2251] dump_stack_lvl+0x140/0x1c0 [ 113.968655][ T2251] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.968679][ T2251] ? is_bpf_text_address+0x17b/0x1a0 [ 113.968704][ T2251] dump_stack+0x19/0x20 [ 113.968725][ T2251] should_fail_ex+0x3c2/0x510 [ 113.968746][ T2251] should_failslab+0xac/0x100 [ 113.968768][ T2251] kmem_cache_alloc_node_noprof+0x45/0x420 [ 113.968787][ T2251] ? __alloc_skb+0x10c/0x360 [ 113.968811][ T2251] __alloc_skb+0x10c/0x360 [ 113.968831][ T2251] ? tcp_current_mss+0x539/0x8b0 [ 113.968857][ T2251] tcp_stream_alloc_skb+0x43/0x370 [ 113.968882][ T2251] tcp_sendmsg_locked+0xcbc/0x4ac0 [ 113.968906][ T2251] ? __kmalloc_noprof+0x261/0x510 [ 113.968925][ T2251] ? avc_has_perm_noaudit+0x289/0x360 [ 113.968947][ T2251] ? __kasan_check_write+0x18/0x20 [ 113.968964][ T2251] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 113.968986][ T2251] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 113.969011][ T2251] ? kasan_save_alloc_info+0x3a/0x50 [ 113.969036][ T2251] ? check_stack_object+0x81/0x150 [ 113.969054][ T2251] ? __check_object_size+0x54c/0x870 [ 113.969072][ T2251] ? __cfi_tcp_sendmsg+0x10/0x10 [ 113.969096][ T2251] tcp_sendmsg+0x3e/0xd0 [ 113.969119][ T2251] ? __cfi_tcp_sendmsg+0x10/0x10 [ 113.969143][ T2251] inet_sendmsg+0xb7/0x120 [ 113.969163][ T2251] ____sys_sendmsg+0x822/0xa00 [ 113.969181][ T2251] ? __sys_sendmsg_sock+0x50/0x50 [ 113.969196][ T2251] ? unwind_get_return_address+0x51/0x90 [ 113.969224][ T2251] ? import_iovec+0x80/0xb0 [ 113.969249][ T2251] ___sys_sendmsg+0x2a6/0x370 [ 113.969267][ T2251] ? __sys_sendmsg+0x2a0/0x2a0 [ 113.969283][ T2251] ? kstrtouint+0x78/0xf0 [ 113.969305][ T2251] ? __fget_files+0x2bc/0x330 [ 113.969327][ T2251] __sys_sendmmsg+0x2b4/0x4e0 [ 113.969344][ T2251] ? __cfi___sys_sendmmsg+0x10/0x10 [ 113.969365][ T2251] ? __cfi_ksys_write+0x10/0x10 [ 113.969385][ T2251] __x64_sys_sendmmsg+0xa4/0xc0 [ 113.969403][ T2251] x64_sys_call+0xfec/0x2ee0 [ 113.969421][ T2251] do_syscall_64+0x57/0xf0 [ 113.969439][ T2251] ? clear_bhb_loop+0x50/0xa0 [ 113.969463][ T2251] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.969485][ T2251] RIP: 0033:0x7fb64999de59 [ 113.969501][ T2251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.969517][ T2251] RSP: 002b:00007fb64a878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.969537][ T2251] RAX: ffffffffffffffda RBX: 00007fb649c25fa0 RCX: 00007fb64999de59 [ 113.969551][ T2251] RDX: 0000000000000002 RSI: 0000200000007800 RDI: 0000000000000003 [ 113.969563][ T2251] RBP: 00007fb64a878090 R08: 0000000000000000 R09: 0000000000000000 [ 113.969575][ T2251] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 113.969593][ T2251] R13: 00007fb649c26038 R14: 00007fb649c25fa0 R15: 00007ffec035c138 [ 113.969609][ T2251] [ 114.624704][ T63] usb 2-1: can't set config #0, error -71 [ 114.714358][ T2261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.746617][ T2269] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 114.758491][ T2261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.781767][ T63] usb 2-1: USB disconnect, device number 56 [ 114.790177][ T2261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.948764][ T421] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.007257][ T10] usb 3-1: Product: syz [ 115.046574][ T10] usb 3-1: Manufacturer: syz [ 115.052325][ T10] usb 3-1: SerialNumber: syz [ 115.063505][ T10] usb 3-1: can't set config #1, error -71 [ 115.084764][ T10] usb 3-1: USB disconnect, device number 41 [ 115.111276][ T421] usb 5-1: device descriptor read/64, error -71 [ 115.182336][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 115.199449][ T36] audit: type=1400 audit(1783400697.058:31268): avc: denied { cmd } for pid=2300 comm="iou-wrk-2301" path="socket:[22682]" dev="sockfs" ino=22682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.371400][ T328] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 115.382252][ T421] usb 5-1: device descriptor read/64, error -71 [ 115.484366][ T2307] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 115.523104][ T328] usb 1-1: device descriptor read/64, error -71 [ 115.804885][ C0] net_ratelimit: 169009 callbacks suppressed [ 115.804906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.804911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.804993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.812046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 115.826400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.842747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 115.856290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.869545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 115.882177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.895125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.014063][ T421] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.065167][ T328] usb 1-1: device descriptor read/64, error -71 [ 117.544470][ T421] usb 5-1: device descriptor read/64, error -71 [ 117.757405][ T328] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 118.018454][ T421] usb 5-1: device descriptor read/64, error -71 [ 118.623099][ T421] usb usb5-port1: attempt power cycle [ 121.234618][ C0] net_ratelimit: 150891 callbacks suppressed [ 121.234640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 121.234645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.234706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.240907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.253080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.265391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 121.278058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.290453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.305348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.318023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 122.123272][ C0] sched: DL replenish lagged too much [ 126.664311][ C1] net_ratelimit: 165329 callbacks suppressed [ 126.664331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.664363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.670757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.683324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 126.695748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.708131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.720671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.733052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 126.745506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.759444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.281414][ T2332] FAULT_INJECTION: forcing a failure. [ 128.281414][ T2332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.467583][ T2332] CPU: 0 UID: 0 PID: 2332 Comm: syz.4.611 Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 128.467619][ T2332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.467631][ T2332] Call Trace: [ 128.467638][ T2332] [ 128.467645][ T2332] __dump_stack+0x21/0x30 [ 128.467675][ T2332] dump_stack_lvl+0x140/0x1c0 [ 128.467698][ T2332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 128.467724][ T2332] dump_stack+0x19/0x20 [ 128.467746][ T2332] should_fail_ex+0x3c2/0x510 [ 128.467766][ T2332] should_fail+0xf/0x20 [ 128.467784][ T2332] should_fail_usercopy+0x1e/0x30 [ 128.467814][ T2332] _copy_from_user+0x20/0xa0 [ 128.467837][ T2332] get_user_ifreq+0x70/0x180 [ 128.467857][ T2332] br_ioctl_stub+0x16f/0xcd0 [ 128.467877][ T2332] ? proc_fail_nth_write+0x184/0x220 [ 128.467902][ T2332] ? __cfi_br_ioctl_stub+0x10/0x10 [ 128.467921][ T2332] ? selinux_file_ioctl+0x732/0x1480 [ 128.467948][ T2332] ? vfs_write+0xbcf/0xfd0 [ 128.467967][ T2332] ? __kasan_check_write+0x18/0x20 [ 128.467986][ T2332] ? mutex_lock+0x97/0x1d0 [ 128.468007][ T2332] ? __cfi_mutex_lock+0x10/0x10 [ 128.468029][ T2332] ? __kasan_check_write+0x18/0x20 [ 128.468046][ T2332] ? mutex_unlock+0x90/0x240 [ 128.468067][ T2332] ? __cfi_br_ioctl_stub+0x10/0x10 [ 128.468085][ T2332] sock_ioctl+0x4dd/0x7e0 [ 128.468104][ T2332] ? __cfi_sock_ioctl+0x10/0x10 [ 128.468123][ T2332] ? bpf_lsm_file_ioctl+0xd/0x20 [ 128.468145][ T2332] ? security_file_ioctl+0x3e/0x110 [ 128.468169][ T2332] ? __cfi_sock_ioctl+0x10/0x10 [ 128.468187][ T2332] __se_sys_ioctl+0x132/0x1b0 [ 128.468208][ T2332] __x64_sys_ioctl+0x7f/0xa0 [ 128.468228][ T2332] x64_sys_call+0x1878/0x2ee0 [ 128.468245][ T2332] do_syscall_64+0x57/0xf0 [ 128.468263][ T2332] ? clear_bhb_loop+0x50/0xa0 [ 128.468284][ T2332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.468305][ T2332] RIP: 0033:0x7f655579de59 [ 128.468321][ T2332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.468336][ T2332] RSP: 002b:00007f6556730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.468358][ T2332] RAX: ffffffffffffffda RBX: 00007f6555a25fa0 RCX: 00007f655579de59 [ 128.468373][ T2332] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 128.468386][ T2332] RBP: 00007f6556730090 R08: 0000000000000000 R09: 0000000000000000 [ 128.468398][ T2332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.468410][ T2332] R13: 00007f6555a26038 R14: 00007f6555a25fa0 R15: 00007ffebe332cd8 [ 128.468425][ T2332] [ 130.710582][ T2337] bridge0: port 4(erspan0) entered blocking state [ 130.990397][ T2337] bridge0: port 4(erspan0) entered disabled state [ 131.769581][ T2337] erspan0: entered allmulticast mode [ 132.094011][ C0] net_ratelimit: 157313 callbacks suppressed [ 132.094032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 132.094045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.094092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.100527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.114202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.126500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 132.138563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.150897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.162967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.175317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 137.523783][ C0] net_ratelimit: 172476 callbacks suppressed [ 137.523804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 137.523975][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.530309][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.543504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.556491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 137.570018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.582023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.595150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.607414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 137.619546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.074154][ T2337] erspan0: entered promiscuous mode [ 142.128055][ T2337] bridge0: port 4(erspan0) entered blocking state [ 142.137904][ T2337] bridge0: port 4(erspan0) entered forwarding state [ 142.240774][ T36] audit: type=1400 audit(1783400721.934:31269): avc: denied { create } for pid=2339 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.953440][ C1] net_ratelimit: 154317 callbacks suppressed [ 142.953461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.953464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.953705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 142.960452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.974070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.987629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.002804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 143.015418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.028192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.041286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.383191][ C1] net_ratelimit: 119940 callbacks suppressed [ 148.383213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.383317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 148.389705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.403801][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.416301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.430520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 148.442764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.457830][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.470378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.483985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.812893][ C1] net_ratelimit: 111456 callbacks suppressed [ 153.812913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.812952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.819285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.831982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.846086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.860526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 153.873862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.887066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.902171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 153.914384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.242666][ C0] net_ratelimit: 105232 callbacks suppressed [ 159.242688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 159.242711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.249782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 159.262540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.275484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.287648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.300866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.313192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.325400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.338359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 164.672334][ C1] net_ratelimit: 119414 callbacks suppressed [ 164.672356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 164.672418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.680414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 164.698393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.717078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.732743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 164.752135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.770552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.788365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.805432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.102150][ C0] net_ratelimit: 117248 callbacks suppressed [ 170.102172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.102183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.102253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.111537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 170.124195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.140721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 170.154262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 170.166923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.179709][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 170.195292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.531851][ C0] net_ratelimit: 102951 callbacks suppressed [ 175.531871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.531974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.541647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.555696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.569603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.582478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.597273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.612520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.625624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.639871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.961462][ C1] net_ratelimit: 112430 callbacks suppressed [ 180.961496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.961599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 180.971944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.992906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 181.009277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 181.025789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.040460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 181.054738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.069063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.088259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.391192][ C0] net_ratelimit: 111535 callbacks suppressed [ 186.391213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.391280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.397360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.409577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.421957][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.435165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.448748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 186.460704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.472940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 186.486230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.820917][ C1] net_ratelimit: 114646 callbacks suppressed [ 191.820943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.820995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.827941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.843045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.858389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.872839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.888771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.901793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.916025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.935134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.250627][ C0] net_ratelimit: 115313 callbacks suppressed [ 197.250648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 197.250776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.257480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 197.269615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.282564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.295298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.308698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.323598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.336824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.349410][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 202.680327][ C0] net_ratelimit: 110119 callbacks suppressed [ 202.680349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.680468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.686540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.698643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.710677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.722834][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.735288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.747758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.762008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.774114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.731485][ T2313] bridge0: port 3(syz_tun) entered disabled state [ 208.110135][ C0] net_ratelimit: 110337 callbacks suppressed [ 208.110157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.110250][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.117562][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.131621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.146962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.159061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.171275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.185106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.197947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 208.213518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.989436][ T2313] syz_tun (unregistering): left allmulticast mode [ 213.259047][ T2313] syz_tun (unregistering): left promiscuous mode [ 213.333994][ T2313] bridge0: port 3(syz_tun) entered disabled state [ 213.539738][ C1] net_ratelimit: 104388 callbacks suppressed [ 213.539758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.539807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 213.546123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.559324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.571783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.585429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.597825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.613173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.625326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.637897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.969534][ C0] net_ratelimit: 104908 callbacks suppressed [ 218.969613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.969651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.977483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.990666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.002840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.016636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.029922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.044544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.058121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.073886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 224.399205][ C0] net_ratelimit: 104413 callbacks suppressed [ 224.399225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.399235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.399336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.406860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.421525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.435693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.448226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.460354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.475194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.500791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.828895][ C1] net_ratelimit: 92366 callbacks suppressed [ 229.828929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 229.828935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.829540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.839017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 229.857654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.875452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.889311][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.901961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.914897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.927777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.258624][ C1] net_ratelimit: 100034 callbacks suppressed [ 235.258647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.258864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.265092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.277926][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.290919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.302971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.315665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.328037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.340222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 235.352762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.688327][ C1] net_ratelimit: 99674 callbacks suppressed [ 240.688350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.688457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 240.696337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.717569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.733761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.748361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 240.765526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.782059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.796950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.810734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.118042][ C0] net_ratelimit: 103638 callbacks suppressed [ 246.118063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 246.118070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.118184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.124175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.136990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.149697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.162073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.174416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 246.187576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 246.201053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.270846][ T2352] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.332001][ T2352] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.340258][ T2352] bridge_slave_0: entered allmulticast mode [ 251.505280][ T2352] bridge_slave_0: entered promiscuous mode [ 251.547754][ C1] net_ratelimit: 106662 callbacks suppressed [ 251.547776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.548935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.553941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.566556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 251.578471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.590637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.602639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.614622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.627203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 251.639427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.426317][ T2352] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.449151][ T2352] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.480844][ T2352] bridge_slave_1: entered allmulticast mode [ 252.513842][ T2352] bridge_slave_1: entered promiscuous mode [ 256.017691][ T2353] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.136729][ T2353] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.166447][ T2353] bridge_slave_0: entered allmulticast mode [ 256.189400][ T2353] bridge_slave_0: entered promiscuous mode [ 256.361666][ T2353] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.369431][ T2353] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.448808][ T2353] bridge_slave_1: entered allmulticast mode [ 256.574000][ T2353] bridge_slave_1: entered promiscuous mode [ 256.977506][ C1] net_ratelimit: 105839 callbacks suppressed [ 256.977525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.977573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.984450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.997314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.009682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 257.024249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.036765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 257.049090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.063047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.075786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.407161][ C0] net_ratelimit: 113455 callbacks suppressed [ 262.407183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 262.407190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.407271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 262.413461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.425553][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 262.437608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 262.449625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.461558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.473842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.485718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.897543][ T2359] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.904617][ T2359] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.938608][ T2359] bridge_slave_0: entered allmulticast mode [ 262.972281][ T2359] bridge_slave_0: entered promiscuous mode [ 263.546844][ T2359] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.554832][ T2359] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.579335][ T2359] bridge_slave_1: entered allmulticast mode [ 263.613288][ T2359] bridge_slave_1: entered promiscuous mode [ 264.186238][ T2358] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.217701][ T2358] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.224930][ T2358] bridge_slave_0: entered allmulticast mode [ 264.282663][ T2358] bridge_slave_0: entered promiscuous mode [ 264.728785][ T2358] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.735941][ T2358] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.760179][ T2358] bridge_slave_1: entered allmulticast mode [ 264.794114][ T2358] bridge_slave_1: entered promiscuous mode [ 267.836900][ C0] net_ratelimit: 111241 callbacks suppressed [ 267.836920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 267.836976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.843078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.855281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.867653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.879634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.891634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.903608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.915725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.927680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.266606][ C1] net_ratelimit: 111634 callbacks suppressed [ 273.267034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.267096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.280013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.297355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.314194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 273.329148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.343075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 273.356474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.371341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 273.388958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 278.696320][ C1] net_ratelimit: 108496 callbacks suppressed [ 278.696348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.696402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.705364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.719221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.733734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.747127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.759310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.773200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.786923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.801134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.126032][ C0] net_ratelimit: 113590 callbacks suppressed [ 284.126053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.126108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 284.134577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 284.147702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 284.161408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 284.173821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 284.188969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.201928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.215173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 284.232236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.555858][ C0] net_ratelimit: 104858 callbacks suppressed [ 289.555879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.555911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.562158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.574660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.588880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.603218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.621501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.634510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.648067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.662228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.985477][ C1] net_ratelimit: 113734 callbacks suppressed [ 294.985498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.985622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.994149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.006521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.021262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.033367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.045854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.058320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.071242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.084193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.415165][ C1] net_ratelimit: 109412 callbacks suppressed [ 300.415185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 300.415234][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.421354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.433539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.447022][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.458977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.472297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.484972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.497198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.509097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.844911][ C0] net_ratelimit: 108546 callbacks suppressed [ 305.844931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.844966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.850986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.863113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 305.875435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.887218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:e3:29:ec:f3:93, vlan:0) [ 305.899476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 305.911353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.923544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 305.935579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.077573][ T37] INFO: task syz.1.605:2311 blocked for more than 123 seconds. [ 309.119159][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.152296][ T36] audit: type=1400 audit(1783400876.025:31270): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1533]" dev="pipefs" ino=1533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 309.221601][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.230352][ T37] task:syz.1.605 state:D stack:0 pid:2311 tgid:2310 ppid:295 flags:0x00004006 [ 309.240613][ T37] Call Trace: [ 309.243908][ T37] [ 309.246854][ T37] __schedule+0x1496/0x20b0 [ 309.251745][ T37] ? __sched_text_start+0x10/0x10 [ 309.256791][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 309.261882][ T37] ? __kasan_check_write+0x18/0x20 [ 309.267113][ T37] ? rcu_segcblist_entrain+0x69/0x2f0 [ 309.272641][ T37] ? _raw_spin_unlock+0x45/0x60 [ 309.277737][ T37] ? rcu_barrier_entrain+0x375/0x530 [ 309.283135][ T37] schedule+0xc5/0x240 [ 309.287402][ T37] schedule_timeout+0xc7/0x3b0 [ 309.292207][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 309.297764][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 309.303358][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 309.308492][ T37] ? generic_exec_single+0x206/0x500 [ 309.313908][ T37] wait_for_common+0x368/0x650 [ 309.318693][ T37] ? wait_for_completion+0x40/0x40 [ 309.323842][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 309.329315][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 309.335919][ T37] wait_for_completion+0x1c/0x40 [ 309.340979][ T37] rcu_barrier+0x45a/0x580 [ 309.345435][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 309.350848][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 309.355739][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 309.360951][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 309.366603][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 309.372386][ T37] kvm_put_kvm+0xadf/0x12d0 [ 309.376922][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 309.382174][ T37] kvm_vm_release+0x47/0x70 [ 309.386705][ T37] __fput+0x208/0xa30 [ 309.390828][ T37] ____fput+0x20/0x30 [ 309.394828][ T37] task_work_run+0x1e8/0x260 [ 309.399664][ T37] ? __cfi_task_work_run+0x10/0x10 [ 309.404797][ T37] get_signal+0x12b3/0x1490 [ 309.409447][ T37] ? __kasan_slab_free+0x6a/0x80 [ 309.414541][ T37] ? kmem_cache_free+0x1bd/0x4f0 [ 309.419567][ T37] ? free_fs_struct+0x59/0x70 [ 309.424425][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 309.430000][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 309.436222][ T37] ? __kasan_check_write+0x18/0x20 [ 309.441354][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 309.446940][ T37] do_syscall_64+0x63/0xf0 [ 309.451374][ T37] ? clear_bhb_loop+0x50/0xa0 [ 309.456187][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.462097][ T37] RIP: 0033:0x7f8aedd9de59 [ 309.466550][ T37] RSP: 002b:00007f8aeebdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.474994][ T37] RAX: 0000000000000000 RBX: 00007f8aee025fa0 RCX: 00007f8aedd9de59 [ 309.483100][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 309.491116][ T37] RBP: 00007f8aede33e6f R08: 0000000000000000 R09: 0000000000000000 [ 309.499134][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.507125][ T37] R13: 00007f8aee026038 R14: 00007f8aee025fa0 R15: 00007ffef5830b98 [ 309.515254][ T37] [ 309.578116][ T37] NMI backtrace for cpu 0 [ 309.578136][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 309.578162][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.578181][ T37] Call Trace: [ 309.578187][ T37] [ 309.578194][ T37] __dump_stack+0x21/0x30 [ 309.578246][ T37] dump_stack_lvl+0x140/0x1c0 [ 309.578273][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 309.578305][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 309.578336][ T37] dump_stack+0x19/0x20 [ 309.578359][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 309.578448][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 309.578471][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 309.578489][ T37] ? sched_show_task+0x371/0x530 [ 309.578591][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 309.578613][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.578701][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 309.578725][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 309.578741][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 309.578763][ T37] watchdog+0xe45/0xf90 [ 309.578835][ T37] ? __kasan_check_write+0x18/0x20 [ 309.578856][ T37] ? __cfi_watchdog+0x10/0x10 [ 309.578874][ T37] ? __kasan_check_read+0x15/0x20 [ 309.578892][ T37] ? __kthread_parkme+0x12f/0x180 [ 309.578910][ T37] ? schedule+0xc5/0x240 [ 309.578929][ T37] kthread+0x2c7/0x360 [ 309.578949][ T37] ? __cfi_watchdog+0x10/0x10 [ 309.578966][ T37] ? __cfi_kthread+0x10/0x10 [ 309.578985][ T37] ret_from_fork+0x67/0xa0 [ 309.579009][ T37] ? __cfi_kthread+0x10/0x10 [ 309.579028][ T37] ret_from_fork_asm+0x1a/0x30 [ 309.579048][ T37] [ 309.579055][ T37] Sending NMI from CPU 0 to CPUs 1: [ 309.816402][ C1] NMI backtrace for cpu 1 [ 309.816419][ C1] CPU: 1 UID: 0 PID: 2358 Comm: syz-executor Not tainted syzkaller #0 a5ccdbd4bb62a03afa0f731d4ae3beae8d805b16 [ 309.816440][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.816449][ C1] RIP: 0010:find_match+0xed/0x10d0 [ 309.816563][ C1] Code: e4 fc 48 8b 1b 48 85 db 0f 84 d9 0b 00 00 48 81 c3 84 03 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 0f 85 08 0c 00 00 8b 1b 31 ff 89 de e8 60 a4 8b fc 85 db 74 [ 309.816575][ C1] RSP: 0018:ffffc9000022fc50 EFLAGS: 00000a03 [ 309.816589][ C1] RAX: 0000000000000000 RBX: ffff888130ece384 RCX: dffffc0000000000 [ 309.816599][ C1] RDX: ffff888107755f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.816608][ C1] RBP: ffffc9000022fd10 R08: ffffc9000022ff80 R09: ffffc9000022ff90 [ 309.816619][ C1] R10: ffffc900002300f0 R11: fffff52000046022 R12: 0000000000000001 [ 309.816629][ C1] R13: 1ffff11023493098 R14: 0000000000000003 R15: 0000000000000000 [ 309.816638][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 309.816650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.816660][ C1] CR2: 00007eff33b55000 CR3: 000000010c7be000 CR4: 00000000003526b0 [ 309.816673][ C1] Call Trace: [ 309.816678][ C1] [ 309.816685][ C1] ? stack_depot_save_flags+0x38/0x800 [ 309.816771][ C1] __find_rr_leaf+0x249/0x840 [ 309.816786][ C1] ? rt6_check_expired+0x250/0x250 [ 309.816800][ C1] ? __flow_hash_from_keys+0x440/0x6e0 [ 309.816855][ C1] ? fib6_node_lookup+0x4ee/0x520 [ 309.816872][ C1] fib6_table_lookup+0x2d0/0x980 [ 309.816913][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 309.816929][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 309.816944][ C1] ? enqueue_to_backlog+0x77b/0xb80 [ 309.817003][ C1] ip6_pol_route+0x17a/0x1370 [ 309.817020][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 309.817036][ C1] ? skb_scrub_packet+0x26a/0x3d0 [ 309.817079][ C1] ? __dev_forward_skb2+0x4aa/0x770 [ 309.817094][ C1] ? veth_xmit+0x794/0xb30 [ 309.817155][ C1] ip6_pol_route_input+0x5a/0x80 [ 309.817172][ C1] fib6_rule_lookup+0x4f1/0x6d0 [ 309.817211][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 309.817227][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 309.817243][ C1] ? ip6t_do_table+0x1d2/0x1510 [ 309.817283][ C1] ip6_route_input+0x60d/0x8d0 [ 309.817301][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 309.817319][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 309.817337][ C1] ? __asan_memset+0x39/0x50 [ 309.817352][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 309.817366][ C1] ip6_rcv_finish+0x15a/0x3c0 [ 309.817406][ C1] ipv6_rcv+0xf1/0x240 [ 309.817422][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 309.817437][ C1] ? br_dev_queue_push_xmit+0x571/0x710 [ 309.817475][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 309.817492][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 309.817505][ C1] ? __kasan_check_write+0x18/0x20 [ 309.817518][ C1] ? __skb_clone+0x453/0x6d0 [ 309.817561][ C1] netif_receive_skb+0x146/0x7b0 [ 309.817578][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 309.817595][ C1] ? br_flood+0x66d/0x720 [ 309.817608][ C1] br_pass_frame_up+0x126/0x1b0 [ 309.817654][ C1] br_handle_frame_finish+0x1178/0x1620 [ 309.817668][ C1] ? raw_notifier_call_chain+0x31/0x40 [ 309.817712][ C1] ? dev_close_many+0x332/0x4f0 [ 309.817727][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 309.817743][ C1] br_handle_frame+0x5a5/0xba0 [ 309.817762][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 309.817776][ C1] __netif_receive_skb_core+0xfc1/0x3a70 [ 309.817816][ C1] ? __kfree_skb+0x18f/0x210 [ 309.817833][ C1] ? ip6_mc_input+0x433/0x680 [ 309.817850][ C1] ? ip6_mc_input+0x433/0x680 [ 309.817866][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 309.817881][ C1] ? __asan_memset+0x39/0x50 [ 309.817894][ C1] ? qdisc_run_end+0x120/0x120 [ 309.817911][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 309.817927][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 309.817943][ C1] ? ipv6_rcv+0xf1/0x240 [ 309.817958][ C1] ? __kasan_check_write+0x18/0x20 [ 309.817971][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 309.817993][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 309.818009][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 309.818023][ C1] ? ttwu_do_activate+0x620/0x620 [ 309.818039][ C1] process_backlog+0x40b/0xaf0 [ 309.818057][ C1] ? try_to_wake_up+0x111a/0x1fd0 [ 309.818073][ C1] __napi_poll+0xcd/0x600 [ 309.818089][ C1] net_rx_action+0x5dc/0xd70 [ 309.818107][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 309.818124][ C1] ? sched_clock+0x44/0x60 [ 309.818142][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 309.818196][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 309.818239][ C1] handle_softirqs+0x1aa/0x620 [ 309.818278][ C1] __do_softirq+0xf/0x16 [ 309.818292][ C1] do_softirq+0xb8/0x110 [ 309.818305][ C1] [ 309.818310][ C1] [ 309.818315][ C1] ? __cfi_do_softirq+0x10/0x10 [ 309.818328][ C1] ? _raw_spin_lock_bh+0x96/0x130 [ 309.818341][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 309.818354][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 309.818370][ C1] __local_bh_enable_ip+0x74/0x80 [ 309.818383][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 309.818397][ C1] addrconf_ifdown+0x60d/0x1970 [ 309.818411][ C1] ? addrconf_cleanup+0x150/0x150 [ 309.818423][ C1] ? __kasan_check_write+0x18/0x20 [ 309.818436][ C1] ? mutex_unlock+0x90/0x240 [ 309.818452][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 309.818469][ C1] ? __cfi_device_cmp+0x10/0x10 [ 309.818532][ C1] ? masq_device_event+0xe0/0xe0 [ 309.818547][ C1] addrconf_notify+0x17a/0xeb0 [ 309.818561][ C1] ? ip6mr_device_event+0x1ed/0x230 [ 309.818603][ C1] ? __cfi_addrconf_notify+0x10/0x10 [ 309.818616][ C1] notifier_call_chain+0x106/0x2b0 [ 309.818630][ C1] raw_notifier_call_chain+0x31/0x40 [ 309.818643][ C1] dev_close_many+0x332/0x4f0 [ 309.818656][ C1] ? __cfi_dev_close_many+0x10/0x10 [ 309.818669][ C1] ? __kasan_check_read+0x15/0x20 [ 309.818682][ C1] unregister_netdevice_many_notify+0x4bd/0x1be0 [ 309.818701][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 309.818715][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 309.818731][ C1] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 309.818749][ C1] ? add_timer_global+0x84/0xb0 [ 309.818809][ C1] ? __queue_delayed_work+0x1b0/0x240 [ 309.818850][ C1] ? queue_delayed_work_on+0x16f/0x1f0 [ 309.818868][ C1] ? __kasan_check_read+0x15/0x20 [ 309.818881][ C1] unregister_netdevice_queue+0x302/0x350 [ 309.818898][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 309.818914][ C1] ? linkwatch_fire_event+0x212/0x260 [ 309.818984][ C1] __tun_detach+0xc98/0x1450 [ 309.818998][ C1] ? __cfi_tun_chr_close+0x10/0x10 [ 309.819042][ C1] tun_chr_close+0x93/0x150 [ 309.819060][ C1] __fput+0x208/0xa30 [ 309.819078][ C1] ____fput+0x20/0x30 [ 309.819094][ C1] task_work_run+0x1e8/0x260 [ 309.819111][ C1] ? __cfi_task_work_run+0x10/0x10 [ 309.819128][ C1] ? free_nsproxy+0x223/0x290 [ 309.819169][ C1] do_exit+0xa46/0x2850 [ 309.819186][ C1] ? __kasan_check_write+0x18/0x20 [ 309.819199][ C1] ? netlink_unicast+0x91a/0xa70 [ 309.819254][ C1] ? __kasan_check_write+0x18/0x20 [ 309.819267][ C1] ? __cfi_do_exit+0x10/0x10 [ 309.819283][ C1] ? netlink_sendmsg+0x80d/0xad0 [ 309.819297][ C1] ? __kasan_check_write+0x18/0x20 [ 309.819310][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 309.819324][ C1] do_group_exit+0x21f/0x2f0 [ 309.819340][ C1] ? __kasan_check_write+0x18/0x20 [ 309.819353][ C1] ? recalc_sigpending+0x184/0x1d0 [ 309.819369][ C1] get_signal+0x134c/0x1490 [ 309.819387][ C1] ? __cfi___sys_sendto+0x10/0x10 [ 309.819429][ C1] arch_do_signal_or_restart+0xbc/0x700 [ 309.819452][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 309.819472][ C1] ? __kasan_check_write+0x18/0x20 [ 309.819487][ C1] syscall_exit_to_user_mode+0x57/0xb0 [ 309.819506][ C1] do_syscall_64+0x63/0xf0 [ 309.819520][ C1] ? clear_bhb_loop+0x50/0xa0 [ 309.819537][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 309.819553][ C1] RIP: 0033:0x7f26b6d58fd7 [ 309.819566][ C1] Code: Unable to access opcode bytes at 0x7f26b6d58fad. [ 309.819574][ C1] RSP: 002b:00007ffe84735f30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 309.819590][ C1] RAX: 0000000000000060 RBX: 000055558151c500 RCX: 00007f26b6d58fd7 [ 309.819601][ C1] RDX: 0000000000000060 RSI: 00007f26b7b54670 RDI: 0000000000000003 [ 309.819610][ C1] RBP: 0000000000000001 R08: 00007ffe84735f94 R09: 000000000000000c [ 309.819620][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 309.819630][ C1] R13: 0000000000000000 R14: 00007f26b7b54670 R15: 0000000000000000 [ 309.819641][ C1] [ 311.274610][ C0] net_ratelimit: 111991 callbacks suppressed [ 311.274632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.274664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 311.280741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.292721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.304789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.317091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.328833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.340961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.353012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.364852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.704306][ C0] net_ratelimit: 126589 callbacks suppressed [ 316.704327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.704361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a2:d6:b2:07:d6:c5, vlan:0) [ 316.710490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.722616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.734874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.747000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.758936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 316.770752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.782882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:62:d0:d7:60:10:53, vlan:0) [ 316.795440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)