last executing test programs: 2m3.511537889s ago: executing program 2 (id=1554): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0xfffffffd, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c67, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0x1002, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x40000000, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000209010100000000008cc89b49c90000000a0000040900010073797a"], 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe5e8, 0x40000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x2, 0xfffffffd, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m3.282724508s ago: executing program 2 (id=1556): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80103, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x37) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) lchown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xee01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x32) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000580)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x1, 0x0, 0x3, 0x2], 0x10000, 0x202}) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[@wr_crn={0x67, 0x20, {0x4, 0x1}}], 0x20}) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000000)) readahead(r1, 0x0, 0x8c5) 2m3.282350828s ago: executing program 2 (id=1557): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000580), 0x6, 0x200) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f00000005c0)={0x8, "95bfaf399ce66f19219a72e4596f0bcb77c6c1d3bea77195757c33164decfc9fb3b846022227336207cb0317959d9743773d2b98dba5674479cc0db8930ade33"}) r1 = syz_open_dev$usbfs(&(0x7f0000000640), 0x93, 0x800) r2 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, r3, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000540)={&(0x7f0000000000)=0x811d, 0x0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f00000004c0)}) 2m1.825815604s ago: executing program 2 (id=1564): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000000000008fe", 0x1e) r1 = socket$packet(0x11, 0x2, 0x300) setrlimit(0x7, &(0x7f0000000000)={0x9, 0x40000000006}) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0xc4400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setns(0xc9, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$tipc(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="e47f", 0x2}], 0x1, &(0x7f0000001680)="a8c229d1", 0x4, 0x20000000}, 0x44) sendmmsg$inet6(r3, &(0x7f0000004000)=[{{&(0x7f0000000840)={0xa, 0x4e21, 0x7ff, @empty, 0x5}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003880)="dce1c5dd", 0x4}, {&(0x7f00000038c0)="60290bc2418a0b0c860c1cf8f4cd22e9a8fbfe1bbfba1ec17ce96edc15eb6c5050ec5f560a3d86625bee295541ad98e86b80944097a2808cf41eef7d7f81642edc0e0a43bfe85ed2e30a0375c718d1b9d63f3f03e0", 0x55}, {&(0x7f0000003940)="6ee40ae6d51a58ae3c2e8fc7f051187e1e996333ee7a572ce7680a7521300d1a4391447eb65ed60fe7c0ce13226f0ae8a193466cf7f4c671ca94ba6de2bdd07af3ba40a164bb7475e08fc21459e586d4c92f45f8c05afd41df7415f6eeb948dd10846804dabc018f6ad8beb368ec9730df0515f6d4a54427e4a3b4ff3b07e1ce5e700cbc7e55fe401248d117b3f33da7610d6f4d9cf860119d970648e48a5427ea0723eeafbc", 0xa6}, {&(0x7f0000003a00)="030f97276aa1cc3ff664b7445c61133c2c6f1053079c97dc5d71", 0x1a}, {&(0x7f0000003a40)="566f4ce58eb78df5a323242e484ba616de7850bc7603eaffb39e7950f757a1623ff75cac6d158338573c7fafab1d81132e95e3804aca099aa7bdf6b77c2710e76afc00af72340f7ce8a9faea44b38bfd21987945e345824f54b301540bfb029a94fc7bb4a4c4437bd6f6b06bdb92a52f853671d478f28c99bd5263d32d3af93f7748af8c38cbbc565a08195b8738b341a165b1b5335f9a84b9417b9ebf519cf6ecc74be1a889fbb01639a2a6be744806ebba229ad60ebf53ad041e7abd8647477ed0b0356aefa490fe63723308e086d312e9d40aff096becff9cac31b6fbeb532514c58a5fec7ab9b18f7728c76f5e77e8c9", 0xf2}, {&(0x7f0000003b40)="c03c855435781ad2f3ec61dfa9e0ce3d205c226915305dc37baf372d01bbf10f01aca281c17b5e5b99b54d930346ed9b6ccc483fd1cc5df0415316689111db1da7192f9c5c18617489fda1698fbeee428b5514a72ec912af70f432d112f8ffcb31ee2e3e659368c7599ff74e7184d89bee8208b2afa12aa94da99a82007c0ff53b66c308cb15a0e95a130a5d62447b1737dbea6ca15c6749f452cbf84e88ee8f18f588fcc8ed23425c530cefde94417d24b1b303d7dbdfd2adccf423d3305556caba09cb59cae62575d31e16d37af0adf87eca3c4f9864e7b47a0eb849646ba34cac740af11db2d46c9c", 0xea}, {&(0x7f0000003c40)="79971e58eff2c0c9cbf1297656e8940589da804ea6c397c213e02da12c5f0752a1864853add3b5333a8e10a7993089c44d94cd78273ef1c8853d1a42d0ad783f4a8c08c2f4ea4ae2cfebabf892155e319a4c357ff6217029d9ef4ca0fd49bc829520724512bafcdc537d19b8e55fb5a5bb2eff9593f2ac838b3b5809634aa11ef886b6592692516393dbb46d707e709e2efadb85ee36a72b0099824bafe991deadea247874bdff887ac1be6a6d419f41e28e4621d282a86259d98e5adcbdc7f8fefa239e94de31f7b331d7cd5a74a469237886ff740667042be6dbd44760f19f87d519994690007cc5a578caa4585587a7f2", 0xf2}, {&(0x7f0000003d40)="3b1c9f23c59ee1f3f25767d59c365fa2077d244da5eb88ad3e61faa8adf7b9dda8333c678a43c66d42b0e0e632647cffbcfc3968d15575a8171a29ed789508a75ad8d4aef81558ef17013af9b784720825a163fb8e1ea115e3974d49499674aef486f61485e7974bb72a23bbf939b039a8b0e852a15faa17e612841780e1afca66ef75f62670051ac5089574f84e5bb8fd07", 0x92}, {&(0x7f0000003e00)="b70741904c5c0f088863fba753cdc1ee7469ba0482b68cc966a8ce2e077389f0dad561177aa3baca913ea8111a18e9ee4abb0cd7d05e2f241a9c3579b071740949828cadd0c0f8ca2c12cdd343c560", 0x4f}, {&(0x7f0000003e80)="c5a8e52941bf67090826b6092ed533846fca606daf7d107f5d4e5b151dafff8bd402ba9903bf2abd24fedd79066db9f1acec40e05665b52be79fcf6b4890023e949d1cf53b25d2a86ce07f0e1b3a370fbb9115e0353cfc1e86ca16c7208d462893beea941a9b7013d2e3aa703895ac9067a76065a59c04", 0x77}], 0xa, &(0x7f0000003fc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}], 0x18}}], 0x1, 0x40040) r6 = socket$inet6(0x10, 0x3, 0x0) read$FUSE(r3, &(0x7f0000001800)={0x2020}, 0x2020) sendto$inet6(r6, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000800)=[{&(0x7f0000003840)="46341d8347cd9211b04ccf62782e9c", 0xf}], 0x1) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000780)={'\x00', 0x4, 0xff, 0xa, 0x8000000000000000, 0x0, 0xffffffffffffffff}) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000004040)='trusted\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8, 0x900, 0x300}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4c) 2m1.566139104s ago: executing program 2 (id=1565): r0 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0xf44}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f, 0xf0ffff}) 2m1.218571377s ago: executing program 2 (id=1566): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x8000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x0, 0x2000000000903, 0x1, 0xb752, 0xb201}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000209010100000000000000000a0000040000010073797a3000000000040002000c00048008000140"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002000000240001801400018008000100ac1414aa08000200ac1414000c000500010000000000240002801400018008000c00028005000100000000000800074000000002"], 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000005000000002bbd7000fedbdf25000000000000000000000000000000000000004e2300004e2400000a0080205e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b5070000000000000000000000000000060000000000000009000000000000000000000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 2m1.210919447s ago: executing program 32 (id=1566): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0xb, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x40000006, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x8000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x200, 0x0, 0x2000000000903, 0x1, 0xb752, 0xb201}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000000209010100000000000000000a0000040000010073797a3000000000040002000c00048008000140"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002000000240001801400018008000100ac1414aa08000200ac1414000c000500010000000000240002801400018008000c00028005000100000000000800074000000002"], 0x64}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000005000000002bbd7000fedbdf25000000000000000000000000000000000000004e2300004e2400000a0080205e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b5070000000000000000000000000000060000000000000009000000000000000000000000000000ffffffff000000000300000000000000020000000000000003000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000000002060100000000000000080000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r8, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 45.529924456s ago: executing program 1 (id=2136): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003b000000", 0x30) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x38) 45.529851836s ago: executing program 1 (id=2137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, &(0x7f0000000040)=0x1, 0x4) r3 = fsmount(r1, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat2(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r4, @ANYRES8=r4], 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x1, 'veth1_to_team\x00', {}, 0x40}) 44.378467711s ago: executing program 1 (id=2143): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0x6f9, 0x0, 0x0, 0x1000, 0xb}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x125d, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700100800000340000000e0001006e657464657673696d000000fa0002006e657464657673696d300000d57c826bad2e14f5ea65f9062cc5be6ff8a1381cdddfdc505a97f0831c2939d6f06ab1283a53029482745e7f7d33776edfbb70ef03b27d25897e7738fa8bed620289da0146221142fa254e3528a7d5e01063ce50b4417b89a1fab164716baee3aa0347aafa84844a0d454f91859b43216d"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) socket(0x3, 0x80000, 0xb) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r8, &(0x7f0000000340)="04000000d907df5cfaf1fa1c70c1ec7059c4b6dde4d950c738f27318578273b8eacb07b246137544ec5489d33330adfedeb14d22615d14648b3170", 0x3b) 44.306201374s ago: executing program 1 (id=2144): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000080)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 43.854645111s ago: executing program 4 (id=2152): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x182902, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendfile(r1, r0, 0x0, 0x1fffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780100001a00330600000000fd4f58fca4a20b569aefffffffb89a5be14c1bf13336b70000000000000000000000000021370000000000000000000040004e248001000020000000000097e7cbaa6bee247910f94091aa", @ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="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"], 0x178}}, 0x0) 43.812859282s ago: executing program 4 (id=2153): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x80000) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000013740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000ff0c010200000000000000000c00000605000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) 43.802564482s ago: executing program 4 (id=2154): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xfeff, 0x8000000, 0x2, '\x00', 0x657}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.707389626s ago: executing program 4 (id=2155): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x500, 0x4000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) 43.634125849s ago: executing program 4 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4c20, 0x3002002, @mcast2, 0xff}, 0x2) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x110, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xa3, 0xc, "8bee0bc9644fe52e47b15ebfc9e24b1065f06f054b663edd9de4932e14b015af18995cecff434cc7c7980beeb1ba3674a8c5ac649f6ac4d9aa9c07d746c15b9f7d4cd908cac0968724d11dda138d6cf9902e9f49c7e2300ebe0662320e33f34cdd43e87fcb0fbfb1f57ddd6a6ac221530259640c0c8db4e6b2b740c68c54a2e7f889b50ec7ad87332c09492c92b4276f9d797fb20ce17a597bb33da4ac167b"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x399871ed}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xebd547b}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x880) r2 = socket$inet(0x2, 0x2, 0x8) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)={0x4, {{0x2, 0x4e21, @broadcast}}, 0x0, 0x2, [{{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x190) 43.633612569s ago: executing program 4 (id=2157): r0 = getpid() r1 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRES32=r4, @ANYRES64=r2, @ANYRESHEX=r3], 0x0) 43.418028557s ago: executing program 3 (id=2158): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 43.377298149s ago: executing program 3 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x201, 0x130) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x9, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x5, 0x8000000000000000, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.266654853s ago: executing program 3 (id=2160): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffd92) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x12, 0x40, 0x0, 0x4, 0x1, 0x1, 0xd, 'syz0\x00'}) 43.266363213s ago: executing program 3 (id=2161): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x48, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x0, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x58}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x8000000000000) 43.190609616s ago: executing program 3 (id=2162): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c215042200000000000109022400010000000009040000020304000009210000000122050009058103"], 0x0) r0 = socket(0x10, 0x803, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x80) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r10, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x81) r11 = syz_open_dev$evdev(&(0x7f0000000100), 0x8, 0x4000) ioctl$EVIOCSCLOCKID(r11, 0x400445a0, &(0x7f0000000140)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 42.354209708s ago: executing program 0 (id=2163): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xfeff, 0x8000000, 0x2, '\x00', 0x657}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42.238198342s ago: executing program 0 (id=2164): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002b80)=""/4065, 0xfe1}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="0bd5c823043c3a689ccee98bdf927763791ab8c6d5e23722c6ac81299c41286ef8a6d73169f2f918ba3f105607598c9de68d3c0a02754870400f58eb591dbff579cb210a37d8de817c505267099bbe8f27efdcd4fe6a019fa271cd4c8683f530bac1ec86032de785a61de1ece1804c5c337ddd77d256", 0x76, 0x10, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1c800000}, 0x1c) 42.058644509s ago: executing program 0 (id=2165): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000200)=0x1000, 0x4) sendto$packet(r3, &(0x7f00000006c0)="280320000a00140000007ef506be", 0xe, 0x400c010, &(0x7f0000000000)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4410}, 0x41) syz_usb_connect(0x2, 0xb3, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200000000000000000200000924030201016a4c"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 42.022392881s ago: executing program 3 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f00000003c0)) rt_sigqueueinfo(0x0, 0x13, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c0021ef000000000000000007000000160000000200fc000a0002", @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x400c850}, 0x44010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = socket(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x84e, &(0x7f0000002980)={0x0, 0xdd13, 0x0, 0x2, 0x30}, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) mmap$IORING_OFF_SQ_RING(0x0, 0xc40001, 0x300000b, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRES8=r3], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb0523675090003707e4ff0060", @ANYRESHEX], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f00000004c0)={0x9, 0x0, [{0xa06, 0x0, 0x2}, {0x922, 0x0, 0x3}, {0x210, 0x0, 0x3}, {0x3a9, 0x0, 0x8}, {0xc0010117, 0x0, 0x7}, {0x234, 0x0, 0x7fffffffffffffff}, {0xa07, 0x0, 0xffff}, {0x2c9, 0x0, 0x4}, {0x580, 0x0, 0x100000000}]}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000da3245bc0b06f75e3db99dcc95dbdf252b9e4a0008000300", @ANYRES32=r11, @ANYBLOB="0400cc00040044000400cc0021007e002c2579e027e1601b019a154b99c048d4ea48e042353c524b4d9043f7f700000038002a003c04010128327e158606fc08021100000109000000090000000500000004061d66040008001001d3060201000406062622410f000a007e0001010101010100000a007e00020202020202000008006b000400000004003c000a007e000101010101010000"], 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 41.200530972s ago: executing program 1 (id=2167): socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 40.948886812s ago: executing program 1 (id=2168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xe2) 38.796052214s ago: executing program 0 (id=2169): open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x88) (async) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x2, 0x200000004, 0x40000000007, 0x7, 0x100000000, 0x4, 0x5, 0x9}, {0x5, 0x8, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in6=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3506, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x2832, 0x0, 0x2}, 0x30, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x2832, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) (async) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) (async) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x3, 0x8000, 0x7, 0x4, {{0x16, 0x4, 0x3, 0x6, 0x58, 0x68, 0x0, 0xf0, 0x29, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0x7, 0xca, [@multicast2]}, @timestamp_prespec={0x44, 0xc, 0x42, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1a}}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0x5c, 0x3, 0x2, [{@private=0xa010102, 0x7}, {@remote, 0x7fff}, {@remote, 0x101}, {@private=0xa010102, 0x1}, {@rand_addr=0x64010100, 0x4}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="607f1b4fbe2748b4ee142b33000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2504000000080003000100000008000300020000000800040000080000080004000e0000001400018008000700", @ANYRES32=r9, @ANYBLOB="0500020007000000080002000200000008000300050000000500050007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004814}, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) (async) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 37.33033947s ago: executing program 0 (id=2170): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300001000"}) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) stat(&(0x7f00000000c0)='./sys/bus/pnp/devices/00:03/resources\x00', &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r4) r5 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='oom_score\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x78) lseek(r7, 0x7fffdfff, 0x2) getdents64(r7, 0x0, 0xfb) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='di', 0x2) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000000240)={0x5, 0x5}) mmap$IORING_OFF_SQ_RING(0x0, 0x4c00000, 0x0, 0x14032, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="000e06000000060a"], 0x0}, 0x0) 33.432112859s ago: executing program 0 (id=2171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 27.93230415s ago: executing program 33 (id=2157): r0 = getpid() r1 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, 0xfffffffffffffffe) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRES32=r4, @ANYRES64=r2, @ANYRESHEX=r3], 0x0) 26.056517422s ago: executing program 34 (id=2166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f00000003c0)) rt_sigqueueinfo(0x0, 0x13, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c0021ef000000000000000007000000160000000200fc000a0002", @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x400c850}, 0x44010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x55b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = socket(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x84e, &(0x7f0000002980)={0x0, 0xdd13, 0x0, 0x2, 0x30}, &(0x7f0000002a00), &(0x7f0000002a40), &(0x7f0000002a80)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x40000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) mmap$IORING_OFF_SQ_RING(0x0, 0xc40001, 0x300000b, 0x12, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYRES8=r3], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb0523675090003707e4ff0060", @ANYRESHEX], 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r12 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f00000004c0)={0x9, 0x0, [{0xa06, 0x0, 0x2}, {0x922, 0x0, 0x3}, {0x210, 0x0, 0x3}, {0x3a9, 0x0, 0x8}, {0xc0010117, 0x0, 0x7}, {0x234, 0x0, 0x7fffffffffffffff}, {0xa07, 0x0, 0xffff}, {0x2c9, 0x0, 0x4}, {0x580, 0x0, 0x100000000}]}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000da3245bc0b06f75e3db99dcc95dbdf252b9e4a0008000300", @ANYRES32=r11, @ANYBLOB="0400cc00040044000400cc0021007e002c2579e027e1601b019a154b99c048d4ea48e042353c524b4d9043f7f700000038002a003c04010128327e158606fc08021100000109000000090000000500000004061d66040008001001d3060201000406062622410f000a007e0001010101010100000a007e00020202020202000008006b000400000004003c000a007e000101010101010000"], 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x40) 25.478416664s ago: executing program 35 (id=2168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xe2) 0s ago: executing program 36 (id=2171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) kernel console output (not intermixed with test programs): l+0x10/0x10 [ 231.037720][ T5291] __se_sys_ioctl+0x123/0x1b0 [ 231.037735][ T5291] __x64_sys_ioctl+0x7f/0xa0 [ 231.037750][ T5291] x64_sys_call+0x1878/0x2ee0 [ 231.037761][ T5291] do_syscall_64+0x57/0xf0 [ 231.037779][ T5291] ? clear_bhb_loop+0x50/0xa0 [ 231.037793][ T5291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 231.037806][ T5291] RIP: 0033:0x7fdfbc19e0d9 [ 231.037818][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.037837][ T5291] RSP: 002b:00007fdfbd11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.037852][ T5291] RAX: ffffffffffffffda RBX: 00007fdfbc425fa0 RCX: 00007fdfbc19e0d9 [ 231.037861][ T5291] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 231.037870][ T5291] RBP: 00007fdfbd11f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.037878][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.037885][ T5291] R13: 00007fdfbc426038 R14: 00007fdfbc425fa0 R15: 00007ffd9d590118 [ 231.037895][ T5291] [ 231.249883][ T5292] loop9: detected capacity change from 3 to 0 [ 231.269255][ T9] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 231.300353][ T9] usb 4-1: device descriptor read/8, error -71 [ 231.440268][ T9] usb 4-1: device descriptor read/8, error -71 [ 231.551516][ T36] audit: type=1400 audit(1787889793.337:631): avc: denied { append } for pid=5305 comm="syz.4.1810" name="pfkey" dev="proc" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 231.574446][ T9] usb usb4-port1: unable to enumerate USB device [ 231.586223][ T36] audit: type=1400 audit(1787889793.367:632): avc: denied { ioctl } for pid=5308 comm="syz.4.1811" path="cgroup:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 231.686481][ T5316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1814'. [ 231.959339][ T470] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 232.029382][ T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 232.119362][ T470] usb 2-1: Using ep0 maxpacket: 8 [ 232.125956][ T470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.140401][ T470] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 232.152202][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.159387][ T9] usb 5-1: device descriptor read/64, error -71 [ 232.165142][ T470] usb 2-1: Product: syz [ 232.171500][ T470] usb 2-1: Manufacturer: syz [ 232.176304][ T470] usb 2-1: SerialNumber: syz [ 232.230508][ T5342] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 232.245007][ T5342] overlayfs: overlapping lowerdir path [ 232.395085][ T470] usb 2-1: Unsupported UAC3 BADD profile [ 232.403721][ T470] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 232.409387][ T9] usb 5-1: device descriptor read/64, error -71 [ 232.415572][ T470] usb 2-1: USB disconnect, device number 50 [ 232.429702][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 232.669417][ T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 232.799430][ T9] usb 5-1: device descriptor read/64, error -71 [ 232.896644][ T5347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=5347 comm=syz.0.1826 [ 233.039473][ T9] usb 5-1: device descriptor read/64, error -71 [ 233.149603][ T9] usb usb5-port1: attempt power cycle [ 233.249483][ T330] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 233.400493][ T330] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 233.408854][ T330] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 233.419157][ T330] usb 2-1: config 220 has no interface number 2 [ 233.425450][ T330] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 233.438601][ T330] usb 2-1: config 220 interface 0 has no altsetting 0 [ 233.445394][ T330] usb 2-1: config 220 interface 76 has no altsetting 0 [ 233.452706][ T330] usb 2-1: config 220 interface 1 has no altsetting 0 [ 233.460821][ T330] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 233.469973][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.477947][ T330] usb 2-1: Product: syz [ 233.482124][ T330] usb 2-1: Manufacturer: syz [ 233.486812][ T330] usb 2-1: SerialNumber: syz [ 233.499510][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 233.520700][ T9] usb 5-1: device descriptor read/8, error -71 [ 233.650620][ T9] usb 5-1: device descriptor read/8, error -71 [ 233.696171][ T330] usb 2-1: selecting invalid altsetting 0 [ 233.702054][ T330] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 233.708399][ T330] usb 2-1: No valid video chain found. [ 233.716023][ T330] usb 2-1: USB disconnect, device number 51 [ 233.889630][ T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 233.910713][ T9] usb 5-1: device descriptor read/8, error -71 [ 234.040642][ T9] usb 5-1: device descriptor read/8, error -71 [ 234.150286][ T9] usb usb5-port1: unable to enumerate USB device [ 234.180308][ T36] audit: type=1400 audit(1787889795.966:633): avc: denied { mounton } for pid=5378 comm="syz.3.1836" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 234.308182][ T5391] fuse: Unknown parameter 'scŠµ;Tbˆ«ö' [ 234.569642][ T330] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 234.720656][ T330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.730420][ T330] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.740092][ T330] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.754173][ T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.763245][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.771266][ T330] usb 2-1: Product: syz [ 234.775441][ T330] usb 2-1: Manufacturer: syz [ 234.780060][ T330] usb 2-1: SerialNumber: syz [ 234.786030][ T330] hub 2-1:1.0: bad descriptor, ignoring hub [ 234.796510][ T330] hub 2-1:1.0: probe with driver hub failed with error -5 [ 234.817158][ T5398] SELinux: failed to load policy [ 234.994445][ T330] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 235.049221][ T36] audit: type=1400 audit(1787889796.826:634): avc: denied { mount } for pid=5405 comm="syz.3.1848" name="/" dev="ramfs" ino=56984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 235.198791][ T36] audit: type=1400 audit(1787889796.976:635): avc: denied { read } for pid=5395 comm="syz.1.1843" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.221615][ T470] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 235.223369][ T36] audit: type=1400 audit(1787889796.976:636): avc: denied { open } for pid=5395 comm="syz.1.1843" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 235.289746][ T330] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 235.289910][ T496] usb 2-1: USB disconnect, device number 52 [ 235.303844][ T496] usblp0: removed [ 235.370810][ T470] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 235.379169][ T470] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 235.389471][ T470] usb 5-1: config 220 has no interface number 2 [ 235.395753][ T470] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 235.408953][ T470] usb 5-1: config 220 interface 0 has no altsetting 0 [ 235.415789][ T470] usb 5-1: config 220 interface 76 has no altsetting 0 [ 235.422753][ T330] usb 4-1: device descriptor read/64, error -71 [ 235.429035][ T470] usb 5-1: config 220 interface 1 has no altsetting 0 [ 235.437230][ T470] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.446334][ T470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.454346][ T470] usb 5-1: Product: syz [ 235.458523][ T470] usb 5-1: Manufacturer: syz [ 235.463229][ T470] usb 5-1: SerialNumber: syz [ 235.659781][ T330] usb 4-1: device descriptor read/64, error -71 [ 235.672385][ T470] usb 5-1: selecting invalid altsetting 0 [ 235.678283][ T470] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 235.684795][ T470] usb 5-1: No valid video chain found. [ 235.692416][ T470] usb 5-1: USB disconnect, device number 20 [ 235.899803][ T330] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 236.029823][ T330] usb 4-1: device descriptor read/64, error -71 [ 236.201503][ T5424] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1856'. [ 236.289850][ T330] usb 4-1: device descriptor read/64, error -71 [ 236.403548][ T330] usb usb4-port1: attempt power cycle [ 236.450821][ T310] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.589885][ T310] usb 5-1: device descriptor read/64, error -71 [ 236.739931][ T330] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 236.760857][ T330] usb 4-1: device descriptor read/8, error -71 [ 236.839922][ T310] usb 5-1: device descriptor read/64, error -71 [ 236.890953][ T330] usb 4-1: device descriptor read/8, error -71 [ 236.989935][ T9] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 237.089984][ T310] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 237.130018][ T330] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 237.141225][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.150998][ T330] usb 4-1: device descriptor read/8, error -71 [ 237.151426][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.167799][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.176906][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.184944][ T9] usb 2-1: Product: syz [ 237.189124][ T9] usb 2-1: Manufacturer: syz [ 237.193752][ T9] usb 2-1: SerialNumber: syz [ 237.219950][ T310] usb 5-1: device descriptor read/64, error -71 [ 237.281051][ T330] usb 4-1: device descriptor read/8, error -71 [ 237.390074][ T330] usb usb4-port1: unable to enumerate USB device [ 237.401402][ T9] usb 2-1: 0:2 : does not exist [ 237.408995][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 237.419891][ T9] usb 2-1: USB disconnect, device number 53 [ 237.470012][ T310] usb 5-1: device descriptor read/64, error -71 [ 237.580095][ T310] usb usb5-port1: attempt power cycle [ 237.920040][ T310] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 237.941187][ T310] usb 5-1: device descriptor read/8, error -71 [ 238.067193][ T36] audit: type=1400 audit(1787889799.846:637): avc: denied { getopt } for pid=5466 comm="syz.1.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 238.097289][ T310] usb 5-1: device descriptor read/8, error -71 [ 238.340126][ T310] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 238.361686][ T310] usb 5-1: device descriptor read/8, error -71 [ 238.390159][ T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 238.450117][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 238.491131][ T310] usb 5-1: device descriptor read/8, error -71 [ 238.541158][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 238.549448][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 238.559770][ T31] usb 2-1: config 220 has no interface number 2 [ 238.566071][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 238.579207][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 238.586014][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 238.592890][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 238.600105][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 238.600243][ T310] usb usb5-port1: unable to enumerate USB device [ 238.606448][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 238.612724][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.620139][ T9] usb 4-1: config 0 has no interface number 0 [ 238.628848][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.635148][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 238.643047][ T31] usb 2-1: Product: syz [ 238.643066][ T31] usb 2-1: Manufacturer: syz [ 238.643082][ T31] usb 2-1: SerialNumber: syz [ 238.653464][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 238.677932][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 238.687017][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.695047][ T9] usb 4-1: Product: syz [ 238.699222][ T9] usb 4-1: Manufacturer: syz [ 238.703836][ T9] usb 4-1: SerialNumber: syz [ 238.709322][ T9] usb 4-1: config 0 descriptor?? [ 238.714662][ T5473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.722062][ T5473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.862603][ T31] usb 2-1: selecting invalid altsetting 0 [ 238.868527][ T31] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 238.875104][ T31] usb 2-1: No valid video chain found. [ 238.885416][ T31] usb 2-1: USB disconnect, device number 54 [ 238.948465][ T5473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.955669][ T5473] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 239.163496][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 239.173640][ T9] asix 4-1:0.34: probe with driver asix failed with error -32 [ 239.459330][ T36] audit: type=1400 audit(1787889801.236:638): avc: denied { sys_module } for pid=5482 comm="syz.1.1884" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 239.620239][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 239.676073][ T31] usb 4-1: USB disconnect, device number 103 [ 239.747317][ T36] audit: type=1400 audit(1787889801.526:639): avc: denied { setattr } for pid=5495 comm="syz.3.1890" path="socket:[57487]" dev="sockfs" ino=57487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.772518][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.782942][ T497] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 239.790583][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.801171][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.810243][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.818257][ T9] usb 5-1: Product: syz [ 239.822471][ T9] usb 5-1: Manufacturer: syz [ 239.827084][ T9] usb 5-1: SerialNumber: syz [ 239.941644][ T497] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.950113][ T497] usb 2-1: config 1 has an invalid interface number: 66 but max is 2 [ 239.958245][ T497] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 239.967726][ T497] usb 2-1: config 1 has no interface number 3 [ 239.973866][ T497] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 103, changing to 7 [ 239.984853][ T497] usb 2-1: config 1 interface 66 has no altsetting 0 [ 240.001084][ T497] usb 2-1: New USB device found, idVendor=0582, idProduct=0064, bcdDevice= 0.40 [ 240.010256][ T497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.018299][ T497] usb 2-1: Product: syz [ 240.022724][ T497] usb 2-1: Manufacturer: syz [ 240.027378][ T497] usb 2-1: SerialNumber: syz [ 240.034193][ T9] usb 5-1: 0:2 : does not exist [ 240.044761][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 240.056166][ T9] usb 5-1: USB disconnect, device number 25 [ 240.100302][ T31] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 240.245485][ T497] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 240.251555][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 240.261471][ T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 240.262465][ T497] usb 2-1: USB disconnect, device number 55 [ 240.273555][ T31] usb 4-1: config 220 has no interface number 2 [ 240.287311][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.300566][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 240.308518][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 240.315536][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 240.323664][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 240.332757][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.340810][ T31] usb 4-1: Product: syz [ 240.345057][ T31] usb 4-1: Manufacturer: syz [ 240.349658][ T31] usb 4-1: SerialNumber: syz [ 240.558597][ T31] usb 4-1: selecting invalid altsetting 0 [ 240.564514][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 240.570911][ T31] usb 4-1: No valid video chain found. [ 240.578531][ T31] usb 4-1: USB disconnect, device number 104 [ 240.758242][ T5517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1900'. [ 240.891581][ T310] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 241.000443][ T497] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 241.043660][ T310] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 241.051436][ T310] usb 5-1: can't read configurations, error -71 [ 241.160407][ T497] usb 2-1: Using ep0 maxpacket: 8 [ 241.166987][ T497] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 241.176097][ T497] usb 2-1: can't read configurations, error -61 [ 241.310442][ T497] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 241.460413][ T497] usb 2-1: Using ep0 maxpacket: 8 [ 241.466825][ T497] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 241.474551][ T497] usb 2-1: can't read configurations, error -61 [ 241.481266][ T497] usb usb2-port1: attempt power cycle [ 241.540449][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 241.576859][ T5526] FAULT_INJECTION: forcing a failure. [ 241.576859][ T5526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.590814][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.4.1903 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 241.590850][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.590862][ T5526] Call Trace: [ 241.590872][ T5526] [ 241.590882][ T5526] __dump_stack+0x21/0x30 [ 241.590910][ T5526] dump_stack_lvl+0x140/0x1c0 [ 241.590928][ T5526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 241.590945][ T5526] ? vsnprintf+0x7b4/0x1ad0 [ 241.590963][ T5526] ? check_stack_object+0x10f/0x150 [ 241.590978][ T5526] dump_stack+0x19/0x20 [ 241.590994][ T5526] should_fail_ex+0x3c2/0x510 [ 241.591009][ T5526] should_fail+0xf/0x20 [ 241.591022][ T5526] should_fail_usercopy+0x1e/0x30 [ 241.591037][ T5526] _copy_from_user+0x20/0xa0 [ 241.591054][ T5526] kstrtouint_from_user+0xde/0x170 [ 241.591068][ T5526] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 241.591082][ T5526] ? selinux_file_permission+0x318/0xb60 [ 241.591095][ T5526] ? __cfi_selinux_file_permission+0x10/0x10 [ 241.591108][ T5526] proc_fail_nth_write+0x8f/0x220 [ 241.591126][ T5526] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 241.591144][ T5526] ? bpf_lsm_file_permission+0xd/0x20 [ 241.591160][ T5526] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 241.591178][ T5526] vfs_write+0x3c1/0xfd0 [ 241.591191][ T5526] ? __cfi_vfs_write+0x10/0x10 [ 241.591204][ T5526] ? __kasan_check_write+0x18/0x20 [ 241.591216][ T5526] ? mutex_lock+0x97/0x1d0 [ 241.591229][ T5526] ? __cfi_mutex_lock+0x10/0x10 [ 241.591243][ T5526] ksys_write+0x145/0x260 [ 241.591256][ T5526] ? __cfi_ksys_write+0x10/0x10 [ 241.591268][ T5526] ? __kasan_check_write+0x18/0x20 [ 241.591288][ T5526] ? fput+0x1a4/0x230 [ 241.591304][ T5526] ? __kasan_check_read+0x15/0x20 [ 241.591316][ T5526] __x64_sys_write+0x7f/0x90 [ 241.591330][ T5526] x64_sys_call+0x271c/0x2ee0 [ 241.591341][ T5526] do_syscall_64+0x57/0xf0 [ 241.591358][ T5526] ? clear_bhb_loop+0x50/0xa0 [ 241.591373][ T5526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 241.591387][ T5526] RIP: 0033:0x7fdfbc15e90e [ 241.591399][ T5526] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.591409][ T5526] RSP: 002b:00007fdfbd11efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.591425][ T5526] RAX: ffffffffffffffda RBX: 00007fdfbd11f6c0 RCX: 00007fdfbc15e90e [ 241.591434][ T5526] RDX: 0000000000000001 RSI: 00007fdfbd11f0a0 RDI: 0000000000000006 [ 241.591443][ T5526] RBP: 00007fdfbd11f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.591451][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.591459][ T5526] R13: 00007fdfbc426038 R14: 00007fdfbc425fa0 R15: 00007ffd9d590118 [ 241.591469][ T5526] [ 241.912777][ T5528] sd 0:0:1:0: PR command failed: 1026 [ 241.918258][ T5528] sd 0:0:1:0: Sense Key : 0x5 [current] [ 241.924056][ T5528] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 241.930460][ T497] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 241.960850][ T497] usb 2-1: Using ep0 maxpacket: 8 [ 241.966300][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 241.974882][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.985020][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 241.994085][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.002887][ T497] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 242.010530][ T497] usb 2-1: can't read configurations, error -61 [ 242.017677][ T9] usb 4-1: Found UVC 1.00 device (046d:0825) [ 242.024649][ T9] usb 4-1: No streaming interface found for terminal 2. [ 242.160406][ T497] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 242.180827][ T497] usb 2-1: Using ep0 maxpacket: 8 [ 242.187302][ T497] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 242.194903][ T497] usb 2-1: can't read configurations, error -61 [ 242.201291][ T497] usb usb2-port1: unable to enumerate USB device [ 242.222555][ T470] usb 4-1: USB disconnect, device number 105 [ 242.240411][ T310] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 242.390437][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 242.396013][ T310] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 242.404905][ T310] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 242.412503][ T310] usb 5-1: can't read configurations, error -61 [ 242.540442][ T310] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 242.690400][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 242.695948][ T310] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 242.704903][ T310] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 242.712524][ T310] usb 5-1: can't read configurations, error -61 [ 242.718895][ T310] usb usb5-port1: attempt power cycle [ 242.990426][ T470] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 243.062024][ T5534] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1907'. [ 243.071176][ T310] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.100796][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 243.106378][ T310] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 243.115232][ T310] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.122850][ T310] usb 5-1: can't read configurations, error -61 [ 243.151482][ T470] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.161627][ T470] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.171904][ T470] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.180971][ T470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.188943][ T470] usb 4-1: Product: syz [ 243.193203][ T470] usb 4-1: Manufacturer: syz [ 243.197801][ T470] usb 4-1: SerialNumber: syz [ 243.260424][ T310] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 243.280728][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 243.286250][ T310] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 243.295170][ T310] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.302803][ T310] usb 5-1: can't read configurations, error -61 [ 243.309156][ T310] usb usb5-port1: unable to enumerate USB device [ 243.408552][ T470] usb 4-1: 0:2 : does not exist [ 243.415328][ T470] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 243.425964][ T470] usb 4-1: USB disconnect, device number 106 [ 243.640723][ T5544] fuse: Bad value for 'fd' [ 244.170437][ T496] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 244.300411][ T496] usb 2-1: device descriptor read/64, error -71 [ 244.486625][ T5561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1920'. [ 244.496429][ T5561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1920'. [ 244.514692][ T5565] fuse: Bad value for 'fd' [ 244.529178][ T5567] futex_wake_op: syz.3.1922 tries to shift op by 144; fix this program [ 244.540411][ T496] usb 2-1: device descriptor read/64, error -71 [ 244.780406][ T496] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 244.910849][ T496] usb 2-1: device descriptor read/64, error -71 [ 244.970435][ T310] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 245.120432][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 245.126812][ T310] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 245.135042][ T310] usb 4-1: config 0 has no interface number 0 [ 245.141316][ T310] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 245.151350][ T310] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 245.162696][ T310] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 245.170415][ T496] usb 2-1: device descriptor read/64, error -71 [ 245.173967][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.188038][ T310] usb 4-1: Product: syz [ 245.192246][ T310] usb 4-1: Manufacturer: syz [ 245.196849][ T310] usb 4-1: SerialNumber: syz [ 245.202465][ T310] usb 4-1: config 0 descriptor?? [ 245.207727][ T5575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.215012][ T5575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.280546][ T496] usb usb2-port1: attempt power cycle [ 245.310403][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 245.422861][ T5575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.430096][ T5575] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 245.461456][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.471205][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.480897][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.495141][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.504237][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.512363][ T31] usb 5-1: Product: syz [ 245.516537][ T31] usb 5-1: Manufacturer: syz [ 245.521605][ T31] usb 5-1: SerialNumber: syz [ 245.527668][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 245.533832][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 245.620410][ T496] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 245.638054][ T310] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 245.641445][ T496] usb 2-1: device descriptor read/8, error -71 [ 245.729918][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.781481][ T496] usb 2-1: device descriptor read/8, error -71 [ 245.838402][ T310] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 245.848495][ T310] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 245.859227][ T310] asix 4-1:0.34: probe with driver asix failed with error -61 [ 246.020530][ T9] usb 5-1: USB disconnect, device number 32 [ 246.027047][ T9] usblp0: removed [ 246.030752][ T496] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 246.051562][ T496] usb 2-1: device descriptor read/8, error -71 [ 246.181365][ T496] usb 2-1: device descriptor read/8, error -71 [ 246.290580][ T496] usb usb2-port1: unable to enumerate USB device [ 246.670754][ T5585] fuse: Bad value for 'fd' [ 247.370507][ T496] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 247.521610][ T496] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 247.532718][ T496] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 42492, setting to 1024 [ 247.546003][ T496] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 247.555391][ T496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.563592][ T496] usb 5-1: Product: syz [ 247.567904][ T496] usb 5-1: Manufacturer: syz [ 247.572746][ T496] usb 5-1: SerialNumber: syz [ 247.578506][ T5619] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.590454][ T496] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 247.612790][ T496] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 247.622760][ T496] scsi host1: usb-storage 5-1:1.0 [ 247.678774][ T496] usb 4-1: USB disconnect, device number 107 [ 247.720416][ T36] audit: type=1400 audit(1787890065.496:640): avc: denied { setopt } for pid=5626 comm="syz.3.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.130418][ T496] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 248.281540][ T496] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 248.289997][ T496] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 248.300525][ T496] usb 4-1: config 220 has no interface number 2 [ 248.306768][ T310] usb 5-1: USB disconnect, device number 33 [ 248.306897][ C0] input input67: can't resubmit intr, dummy_hcd.4-1/input0, retval -19 [ 248.321350][ T496] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 248.335067][ T496] usb 4-1: config 220 interface 0 has no altsetting 0 [ 248.342879][ T496] usb 4-1: config 220 interface 76 has no altsetting 0 [ 248.349848][ T496] usb 4-1: config 220 interface 1 has no altsetting 0 [ 248.365279][ T496] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 248.378288][ T496] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.400380][ T496] usb 4-1: Product: syz [ 248.404813][ T496] usb 4-1: Manufacturer: syz [ 248.409535][ T496] usb 4-1: SerialNumber: syz [ 248.628398][ T496] usb 4-1: selecting invalid altsetting 0 [ 248.634296][ T496] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 248.640816][ T496] usb 4-1: No valid video chain found. [ 248.648228][ T496] usb 4-1: USB disconnect, device number 108 [ 248.652378][ T31] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 248.770454][ T310] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 248.821535][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 248.832796][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 248.841980][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.850757][ T31] usb 2-1: config 0 descriptor?? [ 248.940394][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 248.946604][ T310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.957589][ T310] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.967379][ T310] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.974036][ T310] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 248.983097][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.991903][ T310] usb 5-1: config 0 descriptor?? [ 249.258891][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.267271][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.275666][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.283972][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.292351][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.300645][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.308896][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.317196][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.325478][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.333765][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.342087][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.350407][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.358695][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.367177][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.375478][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.383786][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.392095][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.400491][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.408760][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.420410][ T496] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 249.423336][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.436412][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.444705][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.452998][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.461299][ T31] logitech-hidpp-device 0003:046D:C262.0050: unknown main item tag 0x0 [ 249.470071][ T31] logitech-hidpp-device 0003:046D:C262.0050: hidraw0: USB HID v0.03 Device [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 249.484613][ T31] usb 2-1: USB disconnect, device number 64 [ 249.580887][ T496] usb 4-1: no configurations [ 249.585754][ T496] usb 4-1: can't read configurations, error -22 [ 249.602956][ T310] usb 5-1: USB disconnect, device number 34 [ 249.720480][ T496] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 249.880783][ T496] usb 4-1: no configurations [ 249.885432][ T496] usb 4-1: can't read configurations, error -22 [ 249.891911][ T496] usb usb4-port1: attempt power cycle [ 250.132035][ T36] audit: type=1400 audit(1787890067.916:641): avc: denied { ioctl } for pid=5674 comm="syz.4.1966" path="/119/file2" dev="tmpfs" ino=677 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.230419][ T496] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 250.251205][ T496] usb 4-1: no configurations [ 250.255851][ T496] usb 4-1: can't read configurations, error -22 [ 250.370433][ T310] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 250.390429][ T496] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 250.411325][ T496] usb 4-1: no configurations [ 250.415960][ T496] usb 4-1: can't read configurations, error -22 [ 250.422410][ T496] usb usb4-port1: unable to enumerate USB device [ 250.521518][ T310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.531714][ T310] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.540695][ T310] usb 5-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 250.549877][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.558452][ T310] usb 5-1: config 0 descriptor?? [ 250.765252][ T5675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 250.822947][ T496] usb 5-1: USB disconnect, device number 35 [ 251.650405][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 251.729828][ T36] audit: type=1400 audit(1787890069.506:642): avc: denied { write } for pid=5740 comm="syz.0.1972" name="/" dev="configfs" ino=1677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.776832][ T5747] fuse: Unknown parameter '0x00000000000000040x0000000000000003' [ 251.809772][ T5758] FAULT_INJECTION: forcing a failure. [ 251.809772][ T5758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.822966][ T5758] CPU: 0 UID: 0 PID: 5758 Comm: syz.1.1978 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 251.823001][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.823014][ T5758] Call Trace: [ 251.823022][ T5758] [ 251.823029][ T5758] __dump_stack+0x21/0x30 [ 251.823052][ T5758] dump_stack_lvl+0x140/0x1c0 [ 251.823070][ T5758] ? __cfi_dump_stack_lvl+0x10/0x10 [ 251.823087][ T5758] ? kasan_save_alloc_info+0x3a/0x50 [ 251.823100][ T5758] dump_stack+0x19/0x20 [ 251.823116][ T5758] should_fail_ex+0x3c2/0x510 [ 251.823131][ T5758] should_fail+0xf/0x20 [ 251.823144][ T5758] should_fail_usercopy+0x1e/0x30 [ 251.823162][ T5758] _copy_to_user+0x24/0xa0 [ 251.823179][ T5758] io_uring_create+0xb9e/0x13f0 [ 251.823192][ T5758] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 251.823213][ T5758] ? __kasan_check_write+0x18/0x20 [ 251.823226][ T5758] ? __x64_sys_io_uring_setup+0x80/0x80 [ 251.823245][ T5758] ? __kasan_check_read+0x15/0x20 [ 251.823257][ T5758] __x64_sys_io_uring_setup+0x5f/0x80 [ 251.823274][ T5758] x64_sys_call+0x22c0/0x2ee0 [ 251.823285][ T5758] do_syscall_64+0x57/0xf0 [ 251.823303][ T5758] ? clear_bhb_loop+0x50/0xa0 [ 251.823317][ T5758] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 251.823330][ T5758] RIP: 0033:0x7f259659e0d9 [ 251.823342][ T5758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.823352][ T5758] RSP: 002b:00007f25973d3fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 251.823367][ T5758] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f259659e0d9 [ 251.823377][ T5758] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000020 [ 251.823385][ T5758] RBP: 00007f25973d4090 R08: 0000000000000000 R09: 0000000000000101 [ 251.823394][ T5758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.823402][ T5758] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc09172d58 [ 251.823411][ T5758] [ 251.831519][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 252.035486][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 252.045891][ T31] usb 5-1: config 220 has no interface number 2 [ 252.052178][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 252.065399][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 252.072211][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 252.079059][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 252.087474][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 252.096559][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.104581][ T31] usb 5-1: Product: syz [ 252.108753][ T31] usb 5-1: Manufacturer: syz [ 252.110392][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 252.113378][ T31] usb 5-1: SerialNumber: syz [ 252.234252][ T5765] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 252.242484][ T5765] overlayfs: overlapping lowerdir path [ 252.250513][ T9] usb 2-1: device descriptor read/64, error -71 [ 252.329847][ T31] usb 5-1: selecting invalid altsetting 0 [ 252.335852][ T31] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 252.342362][ T31] usb 5-1: No valid video chain found. [ 252.350862][ T31] usb 5-1: USB disconnect, device number 36 [ 252.500432][ T9] usb 2-1: device descriptor read/64, error -71 [ 252.740419][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 252.870466][ T9] usb 2-1: device descriptor read/64, error -71 [ 253.110423][ T9] usb 2-1: device descriptor read/64, error -71 [ 253.135480][ T5777] kvm: pic: non byte write [ 253.230510][ T9] usb usb2-port1: attempt power cycle [ 253.440408][ T496] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 253.570410][ T496] usb 4-1: device descriptor read/64, error -71 [ 253.576737][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 253.601558][ T9] usb 2-1: device descriptor read/8, error -71 [ 253.731560][ T9] usb 2-1: device descriptor read/8, error -71 [ 253.820427][ T496] usb 4-1: device descriptor read/64, error -71 [ 253.970428][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 253.991534][ T9] usb 2-1: device descriptor read/8, error -71 [ 254.060432][ T496] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 254.121544][ T9] usb 2-1: device descriptor read/8, error -71 [ 254.190486][ T496] usb 4-1: device descriptor read/64, error -71 [ 254.230537][ T9] usb usb2-port1: unable to enumerate USB device [ 254.440400][ T496] usb 4-1: device descriptor read/64, error -71 [ 254.550607][ T496] usb usb4-port1: attempt power cycle [ 254.877644][ T36] audit: type=1400 audit(1787890072.656:643): avc: denied { remount } for pid=5784 comm="syz.1.1987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.900384][ T496] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 254.931553][ T496] usb 4-1: device descriptor read/8, error -71 [ 255.061550][ T496] usb 4-1: device descriptor read/8, error -71 [ 255.270401][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 255.300399][ T496] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 255.321543][ T496] usb 4-1: device descriptor read/8, error -71 [ 255.431924][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 255.440551][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.451084][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 255.458521][ T496] usb 4-1: device descriptor read/8, error -71 [ 255.465924][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.475429][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.483795][ T9] usb 2-1: Product: syz [ 255.488129][ T9] usb 2-1: Manufacturer: syz [ 255.493011][ T9] usb 2-1: SerialNumber: syz [ 255.570563][ T496] usb usb4-port1: unable to enumerate USB device [ 255.703503][ T9] usb 2-1: selecting invalid altsetting 1 [ 255.712287][ T9] usb 2-1: selecting invalid altsetting 0 [ 255.718122][ T9] usb 2-1: selecting invalid altsetting 0 [ 255.724364][ T9] cdc_ncm 2-1:1.0: bind() failure [ 255.733011][ T9] usb 2-1: USB disconnect, device number 69 [ 256.270388][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 256.421499][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 256.430086][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 256.440673][ T9] usb 5-1: config 220 has no interface number 2 [ 256.446957][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 256.460379][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 256.468043][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 256.475064][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 256.483315][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 256.492510][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.500607][ T9] usb 5-1: Product: syz [ 256.504922][ T9] usb 5-1: Manufacturer: syz [ 256.509657][ T9] usb 5-1: SerialNumber: syz [ 256.718694][ T9] usb 5-1: selecting invalid altsetting 0 [ 256.724765][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 256.731315][ T9] usb 5-1: No valid video chain found. [ 256.741316][ T9] usb 5-1: USB disconnect, device number 37 [ 257.490387][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 257.562695][ T5834] fuse: Unknown parameter 'use00000000000000000000' [ 257.660432][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 257.666800][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.686728][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.702696][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.711678][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 257.722586][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.736125][ T9] usb 5-1: config 0 descriptor?? [ 257.893067][ T36] audit: type=1400 audit(1787890075.676:644): avc: denied { watch } for pid=5857 comm="syz.0.2010" path="/376/file0" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.916352][ T36] audit: type=1400 audit(1787890075.686:645): avc: denied { watch_reads } for pid=5857 comm="syz.0.2010" path="/376/file0" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.970392][ T310] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 257.984114][ T5865] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 257.992670][ T5865] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 258.001142][ T5865] kvm: requested 20114 ns i8254 timer period limited to 200000 ns [ 258.012997][ T5865] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 258.021094][ T5865] kvm: requested 127390 ns i8254 timer period limited to 200000 ns [ 258.029213][ T5865] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 258.041190][ T5865] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 258.121497][ T310] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 258.129789][ T310] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 258.140121][ T310] usb 2-1: config 220 has no interface number 2 [ 258.146432][ T310] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 258.159613][ T310] usb 2-1: config 220 interface 0 has no altsetting 0 [ 258.166423][ T310] usb 2-1: config 220 interface 76 has no altsetting 0 [ 258.173342][ T310] usb 2-1: config 220 interface 1 has no altsetting 0 [ 258.181541][ T310] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 258.190612][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.198596][ T310] usb 2-1: Product: syz [ 258.202794][ T310] usb 2-1: Manufacturer: syz [ 258.207439][ T310] usb 2-1: SerialNumber: syz [ 258.304617][ T5872] futex_wake_op: syz.3.2014 tries to shift op by 144; fix this program [ 258.348516][ T330] usb 5-1: USB disconnect, device number 38 [ 258.365645][ T31] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 258.383240][ T31] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.419009][ T310] usb 2-1: selecting invalid altsetting 0 [ 258.425910][ T310] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 258.432452][ T310] usb 2-1: No valid video chain found. [ 258.441046][ T310] usb 2-1: USB disconnect, device number 70 [ 258.475289][ T36] audit: type=1400 audit(1787890076.256:646): avc: denied { nlmsg_write } for pid=5879 comm="syz.3.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 259.120403][ T310] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 259.160419][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 259.271505][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.281714][ T310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.292280][ T310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.301386][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.309457][ T310] usb 5-1: Product: syz [ 259.313642][ T310] usb 5-1: Manufacturer: syz [ 259.318239][ T310] usb 5-1: SerialNumber: syz [ 259.320384][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 259.329339][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.339681][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 259.348724][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 259.357908][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.368218][ T9] usb 2-1: config 0 descriptor?? [ 259.473936][ T5897] futex_wake_op: syz.3.2023 tries to shift op by 144; fix this program [ 259.532446][ T310] usb 5-1: 0:2 : does not exist [ 259.541182][ T310] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 259.559079][ T310] usb 5-1: USB disconnect, device number 39 [ 259.571451][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.900487][ T31] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 260.050397][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 260.056564][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.067467][ T31] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.077293][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.083970][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 260.093612][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.102731][ T31] usb 4-1: config 0 descriptor?? [ 260.410400][ T330] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 260.571673][ T330] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 260.579995][ T330] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 260.590313][ T330] usb 5-1: config 220 has no interface number 2 [ 260.596643][ T330] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 260.609806][ T330] usb 5-1: config 220 interface 0 has no altsetting 0 [ 260.616611][ T330] usb 5-1: config 220 interface 76 has no altsetting 0 [ 260.623518][ T330] usb 5-1: config 220 interface 1 has no altsetting 0 [ 260.631713][ T330] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 260.640792][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.648794][ T330] usb 5-1: Product: syz [ 260.653235][ T330] usb 5-1: Manufacturer: syz [ 260.657840][ T330] usb 5-1: SerialNumber: syz [ 260.717204][ T9] usb 4-1: USB disconnect, device number 117 [ 260.867386][ T330] usb 5-1: selecting invalid altsetting 0 [ 260.873242][ T330] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 260.879702][ T330] usb 5-1: No valid video chain found. [ 260.887288][ T330] usb 5-1: USB disconnect, device number 40 [ 261.612217][ T5922] futex_wake_op: syz.4.2032 tries to shift op by 144; fix this program [ 261.670497][ T330] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 261.831446][ T330] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 261.841409][ T330] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 261.850479][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.936243][ T310] usb 2-1: USB disconnect, device number 71 [ 262.061240][ T330] usb 4-1: string descriptor 0 read error: -71 [ 262.067688][ T330] hub 4-1:32.0: bad descriptor, ignoring hub [ 262.073820][ T330] hub 4-1:32.0: probe with driver hub failed with error -5 [ 262.100736][ T330] usb 4-1: USB disconnect, device number 118 [ 262.390409][ T310] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 262.420466][ T31] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 262.540443][ T310] usb 2-1: device descriptor read/64, error -71 [ 262.582441][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.592667][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.604235][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.614137][ T31] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 262.623228][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.632986][ T31] hub 5-1:1.0: bad descriptor, ignoring hub [ 262.638930][ T31] hub 5-1:1.0: probe with driver hub failed with error -5 [ 262.646243][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 262.651606][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 262.656927][ T31] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 262.810402][ T310] usb 2-1: device descriptor read/64, error -71 [ 262.940479][ T9] usb 5-1: USB disconnect, device number 41 [ 263.070400][ T310] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 263.100396][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 263.200526][ T310] usb 2-1: device descriptor read/64, error -71 [ 263.250382][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 263.256613][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.267661][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.277525][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.284168][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 263.293423][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.302066][ T10] usb 4-1: config 0 descriptor?? [ 263.440427][ T310] usb 2-1: device descriptor read/64, error -71 [ 263.550555][ T310] usb usb2-port1: attempt power cycle [ 263.900388][ T310] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 263.911027][ T31] usb 4-1: USB disconnect, device number 119 [ 263.921544][ T310] usb 2-1: device descriptor read/8, error -71 [ 264.061454][ T310] usb 2-1: device descriptor read/8, error -71 [ 264.140398][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 264.290398][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 264.296761][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.306927][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.315922][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 264.320389][ T310] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 264.325065][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.341126][ T10] usb 5-1: config 0 descriptor?? [ 264.351499][ T310] usb 2-1: device descriptor read/8, error -71 [ 264.483839][ T310] usb 2-1: device descriptor read/8, error -71 [ 264.579948][ T5971] FAULT_INJECTION: forcing a failure. [ 264.579948][ T5971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.593184][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: syz.0.2054 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 264.593230][ T5971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.593242][ T5971] Call Trace: [ 264.593249][ T5971] [ 264.593256][ T5971] __dump_stack+0x21/0x30 [ 264.593298][ T5971] dump_stack_lvl+0x140/0x1c0 [ 264.593337][ T5971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 264.593362][ T5971] dump_stack+0x19/0x20 [ 264.593384][ T5971] should_fail_ex+0x3c2/0x510 [ 264.593406][ T5971] should_fail+0xf/0x20 [ 264.593425][ T5971] should_fail_usercopy+0x1e/0x30 [ 264.593449][ T5971] strncpy_from_user+0x29/0x280 [ 264.593473][ T5971] getname_flags+0x106/0x6b0 [ 264.593498][ T5971] getname+0x1b/0x30 [ 264.593518][ T5971] do_sys_openat2+0xda/0x1d0 [ 264.593562][ T5971] ? fput+0x1a4/0x230 [ 264.593583][ T5971] ? do_sys_open+0x100/0x100 [ 264.593624][ T5971] ? ksys_write+0x1f3/0x260 [ 264.593646][ T5971] ? __cfi_ksys_write+0x10/0x10 [ 264.593668][ T5971] __x64_sys_openat+0x13a/0x170 [ 264.593706][ T5971] x64_sys_call+0xe69/0x2ee0 [ 264.593725][ T5971] do_syscall_64+0x57/0xf0 [ 264.593752][ T5971] ? clear_bhb_loop+0x50/0xa0 [ 264.593776][ T5971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 264.593798][ T5971] RIP: 0033:0x7f90db55e90e [ 264.593816][ T5971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.593842][ T5971] RSP: 002b:00007f90dc38fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.593884][ T5971] RAX: ffffffffffffffda RBX: 00007f90dc3906c0 RCX: 00007f90db55e90e [ 264.593900][ T5971] RDX: 0000000000000002 RSI: 00007f90dc38fc00 RDI: ffffffffffffff9c [ 264.593914][ T5971] RBP: 00007f90dc390090 R08: 0000000000000000 R09: 0000000000000000 [ 264.593928][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.593941][ T5971] R13: 00007f90db826038 R14: 00007f90db825fa0 R15: 00007ffc1463b8e8 [ 264.593968][ T5971] [ 264.610540][ T310] usb usb2-port1: unable to enumerate USB device [ 264.930408][ T45] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 265.080401][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 265.086661][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.097645][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.107429][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.114133][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 265.123195][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.132128][ T45] usb 4-1: config 0 descriptor?? [ 265.360395][ T310] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 265.511447][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.521629][ T310] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.535619][ T310] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 0.09 [ 265.544826][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.558655][ T310] usb 2-1: SerialNumber: syz [ 265.565842][ T310] usb-storage 2-1:1.0: USB Mass Storage device detected [ 265.746642][ T310] usb 4-1: USB disconnect, device number 120 [ 265.770069][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.778791][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.831611][ T9] usb 2-1: USB disconnect, device number 76 [ 266.530433][ T9] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 266.630409][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 266.681656][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.691905][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.702376][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.711519][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.719554][ T9] usb 4-1: Product: syz [ 266.723776][ T9] usb 4-1: Manufacturer: syz [ 266.728406][ T9] usb 4-1: SerialNumber: syz [ 266.780383][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 266.786642][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.797762][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.807549][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.814205][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 266.823288][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.832968][ T10] usb 2-1: config 0 descriptor?? [ 266.912902][ T497] usb 5-1: USB disconnect, device number 42 [ 266.941160][ T9] usb 4-1: 0:2 : does not exist [ 266.945371][ T6009] batadv_slave_0: entered promiscuous mode [ 266.949844][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 266.966826][ T9] usb 4-1: USB disconnect, device number 121 [ 266.979784][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.242814][ T10] hid (null): unknown global tag 0xd [ 267.290436][ T497] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 267.420399][ T497] usb 5-1: device descriptor read/64, error -71 [ 267.441051][ T10] usb 2-1: USB disconnect, device number 77 [ 267.670418][ T497] usb 5-1: device descriptor read/64, error -71 [ 267.730397][ T330] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 267.860437][ T330] usb 4-1: device descriptor read/64, error -71 [ 267.901562][ T6015] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 267.920447][ T497] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 268.050427][ T497] usb 5-1: device descriptor read/64, error -71 [ 268.100474][ T330] usb 4-1: device descriptor read/64, error -71 [ 268.290455][ T497] usb 5-1: device descriptor read/64, error -71 [ 268.330494][ T45] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 268.340495][ T330] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 268.400515][ T497] usb usb5-port1: attempt power cycle [ 268.470400][ T330] usb 4-1: device descriptor read/64, error -71 [ 268.481649][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.491861][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.502337][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.511431][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.519617][ T45] usb 2-1: Product: syz [ 268.523876][ T45] usb 2-1: Manufacturer: syz [ 268.528485][ T45] usb 2-1: SerialNumber: syz [ 268.710426][ T330] usb 4-1: device descriptor read/64, error -71 [ 268.736244][ T45] usb 2-1: 0:2 : does not exist [ 268.741676][ T497] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 268.743694][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 268.761157][ T45] usb 2-1: USB disconnect, device number 78 [ 268.771833][ T497] usb 5-1: device descriptor read/8, error -71 [ 268.779289][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.820533][ T330] usb usb4-port1: attempt power cycle [ 268.901503][ T497] usb 5-1: device descriptor read/8, error -71 [ 269.140394][ T497] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 269.160412][ T330] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 269.161508][ T497] usb 5-1: device descriptor read/8, error -71 [ 269.191419][ T330] usb 4-1: device descriptor read/8, error -71 [ 269.301435][ T497] usb 5-1: device descriptor read/8, error -71 [ 269.331569][ T330] usb 4-1: device descriptor read/8, error -71 [ 269.410723][ T497] usb usb5-port1: unable to enumerate USB device [ 269.580394][ T330] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 269.601541][ T330] usb 4-1: device descriptor read/8, error -71 [ 269.751470][ T330] usb 4-1: device descriptor read/8, error -71 [ 269.870481][ T330] usb usb4-port1: unable to enumerate USB device [ 269.951487][ T6009] batadv_slave_0: left promiscuous mode [ 270.350496][ T361] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 270.501335][ T361] usb 5-1: Using ep0 maxpacket: 16 [ 270.510586][ T361] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.521591][ T361] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.531604][ T361] usb 5-1: config 0 interface 0 has no altsetting 0 [ 270.538223][ T361] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 270.547269][ T361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.555854][ T361] usb 5-1: config 0 descriptor?? [ 270.730593][ T330] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 270.860396][ T330] usb 2-1: device descriptor read/64, error -71 [ 270.910411][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 270.983750][ T6054] futex_wake_op: syz.0.2089 tries to shift op by 144; fix this program [ 271.040479][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.100405][ T330] usb 2-1: device descriptor read/64, error -71 [ 271.163790][ T45] usb 5-1: USB disconnect, device number 47 [ 271.290464][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.340397][ T330] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 271.470446][ T330] usb 2-1: device descriptor read/64, error -71 [ 271.530465][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 271.670382][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.710463][ T330] usb 2-1: device descriptor read/64, error -71 [ 271.820512][ T330] usb usb2-port1: attempt power cycle [ 271.940606][ T9] usb 4-1: device descriptor read/64, error -71 [ 271.950513][ T497] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 272.050608][ T9] usb usb4-port1: attempt power cycle [ 272.111609][ T497] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.122227][ T497] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.132914][ T497] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.142302][ T497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.150478][ T497] usb 5-1: Product: syz [ 272.154804][ T497] usb 5-1: Manufacturer: syz [ 272.159439][ T497] usb 5-1: SerialNumber: syz [ 272.160381][ T330] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 272.211540][ T330] usb 2-1: device descriptor read/8, error -71 [ 272.351106][ T330] usb 2-1: device descriptor read/8, error -71 [ 272.369158][ T497] usb 5-1: 0:2 : does not exist [ 272.379147][ T497] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 272.394405][ T497] usb 5-1: USB disconnect, device number 48 [ 272.403165][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.421902][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.451516][ T9] usb 4-1: device descriptor read/8, error -71 [ 272.581468][ T9] usb 4-1: device descriptor read/8, error -71 [ 272.600415][ T330] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 272.651288][ T330] usb 2-1: device descriptor read/8, error -71 [ 272.782606][ T330] usb 2-1: device descriptor read/8, error -71 [ 272.840417][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 272.871471][ T9] usb 4-1: device descriptor read/8, error -71 [ 272.890987][ T330] usb usb2-port1: unable to enumerate USB device [ 273.011550][ T9] usb 4-1: device descriptor read/8, error -71 [ 273.120616][ T9] usb usb4-port1: unable to enumerate USB device [ 273.170458][ T330] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 273.320390][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 273.326683][ T330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.334812][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.345113][ T330] usb 5-1: config 0 has no interface number 0 [ 273.351308][ T330] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.364276][ T330] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 273.373357][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.382069][ T330] usb 5-1: config 0 descriptor?? [ 273.387931][ T330] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 273.536623][ T6080] netlink: 'syz.3.2100': attribute type 11 has an invalid length. [ 273.544898][ T6080] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 273.552723][ T6080] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.2100'. [ 273.700449][ T470] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 273.850558][ T470] usb 2-1: Using ep0 maxpacket: 16 [ 273.856864][ T470] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.867881][ T470] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.877644][ T470] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.884270][ T470] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 273.893338][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.902147][ T470] usb 2-1: config 0 descriptor?? [ 273.960386][ T310] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 274.112334][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.122523][ T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.132839][ T310] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.141946][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.149941][ T310] usb 4-1: Product: syz [ 274.154128][ T310] usb 4-1: Manufacturer: syz [ 274.158816][ T310] usb 4-1: SerialNumber: syz [ 274.368828][ T310] usb 4-1: 0:2 : does not exist [ 274.375480][ T310] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 274.387744][ T310] usb 4-1: USB disconnect, device number 4 [ 274.396983][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.511969][ T361] usb 2-1: USB disconnect, device number 83 [ 275.023164][ T36] audit: type=1400 audit(1787890092.806:647): avc: denied { add_name } for pid=6104 comm="syz.1.2109" name="uvc.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.043917][ T36] audit: type=1400 audit(1787890092.806:648): avc: denied { read } for pid=6104 comm="syz.1.2109" name="bmaControls" dev="configfs" ino=63734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 275.170393][ T361] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 275.270399][ T310] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 275.300415][ T361] usb 4-1: device descriptor read/64, error -71 [ 275.420398][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 275.426730][ T310] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 275.437792][ T310] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.451165][ T310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.457792][ T310] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 275.466856][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.475472][ T310] usb 2-1: config 0 descriptor?? [ 275.550444][ T361] usb 4-1: device descriptor read/64, error -71 [ 275.790494][ T361] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 275.884833][ T310] usbhid 2-1:0.0: can't add hid device: -71 [ 275.891827][ T310] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 275.900628][ T310] usb 2-1: USB disconnect, device number 84 [ 275.920410][ T361] usb 4-1: device descriptor read/64, error -71 [ 275.933595][ T330] usb 5-1: USB disconnect, device number 49 [ 275.951514][ T36] audit: type=1400 audit(1787890093.736:649): avc: denied { shutdown } for pid=6107 comm="syz.4.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.067835][ T720] tipc: Subscription rejected, illegal request [ 276.170411][ T361] usb 4-1: device descriptor read/64, error -71 [ 276.280497][ T361] usb usb4-port1: attempt power cycle [ 276.620414][ T361] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 276.641500][ T361] usb 4-1: device descriptor read/8, error -71 [ 276.720398][ T330] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 276.771436][ T361] usb 4-1: device descriptor read/8, error -71 [ 276.874148][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.875272][ T6129] futex_wake_op: syz.4.2119 tries to shift op by 144; fix this program [ 276.884426][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.903359][ T330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.912624][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.920700][ T330] usb 2-1: Product: syz [ 276.923502][ T6131] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2120'. [ 276.925066][ T330] usb 2-1: Manufacturer: syz [ 276.938633][ T330] usb 2-1: SerialNumber: syz [ 277.020402][ T361] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.041565][ T361] usb 4-1: device descriptor read/8, error -71 [ 277.147024][ T330] usb 2-1: 0:2 : does not exist [ 277.155622][ T330] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 277.172775][ T361] usb 4-1: device descriptor read/8, error -71 [ 277.179044][ T330] usb 2-1: USB disconnect, device number 85 [ 277.290967][ T361] usb usb4-port1: unable to enumerate USB device [ 277.570403][ T470] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 277.650750][ T36] audit: type=1400 audit(1787890095.436:650): avc: denied { setopt } for pid=6152 comm="syz.0.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.742180][ T470] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 277.751303][ T470] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 277.759418][ T470] usb 5-1: Product: syz [ 277.764729][ T470] usb 5-1: config 0 descriptor?? [ 277.773547][ T470] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 277.781535][ T470] usb 5-1: Detected FT232H [ 277.839547][ T36] audit: type=1400 audit(1787890095.616:651): avc: denied { map } for pid=6161 comm="syz.1.2131" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.970764][ T470] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 278.178226][ T470] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 278.185292][ T470] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 278.200415][ T361] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 278.340389][ T330] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 278.351515][ T361] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 278.359513][ T361] usb 2-1: config 0 has no interface number 0 [ 278.365698][ T361] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 278.374784][ T361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.383457][ T361] usb 2-1: config 0 descriptor?? [ 278.491420][ T330] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 278.499821][ T330] usb 4-1: config 127 has no interface number 0 [ 278.506186][ T330] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 278.518593][ T330] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 278.527703][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.535747][ T330] usb 4-1: Product: syz [ 278.539981][ T330] usb 4-1: Manufacturer: syz [ 278.544649][ T330] usb 4-1: SerialNumber: syz [ 278.550082][ T6175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 278.590435][ T361] usb 2-1: USB disconnect, device number 86 [ 278.887204][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.895851][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.908159][ T361] usb 5-1: USB disconnect, device number 50 [ 278.914885][ T361] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 278.925381][ T361] ftdi_sio 5-1:0.0: device disconnected [ 278.959884][ T6175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.159827][ T6194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2143'. [ 279.171368][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.189767][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.207401][ T330] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 279.353138][ T6208] FAULT_INJECTION: forcing a failure. [ 279.353138][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.366351][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.4.2149 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 279.366387][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.366399][ T6208] Call Trace: [ 279.366406][ T6208] [ 279.366418][ T6208] __dump_stack+0x21/0x30 [ 279.366441][ T6208] dump_stack_lvl+0x140/0x1c0 [ 279.366458][ T6208] ? __cfi_dump_stack_lvl+0x10/0x10 [ 279.366476][ T6208] dump_stack+0x19/0x20 [ 279.366492][ T6208] should_fail_ex+0x3c2/0x510 [ 279.366506][ T6208] should_fail+0xf/0x20 [ 279.366520][ T6208] should_fail_usercopy+0x1e/0x30 [ 279.366535][ T6208] strncpy_from_user+0x29/0x280 [ 279.366550][ T6208] getname_flags+0x106/0x6b0 [ 279.366564][ T6208] user_path_at+0x2b/0x60 [ 279.366579][ T6208] __x64_sys_umount+0xfa/0x180 [ 279.366591][ T6208] ? __cfi___x64_sys_umount+0x10/0x10 [ 279.366602][ T6208] ? __kasan_check_read+0x15/0x20 [ 279.366616][ T6208] x64_sys_call+0x2ab8/0x2ee0 [ 279.366627][ T6208] do_syscall_64+0x57/0xf0 [ 279.366646][ T6208] ? clear_bhb_loop+0x50/0xa0 [ 279.366660][ T6208] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 279.366673][ T6208] RIP: 0033:0x7fdfbc19e0d9 [ 279.366685][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.366696][ T6208] RSP: 002b:00007fdfbd11f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 279.366711][ T6208] RAX: ffffffffffffffda RBX: 00007fdfbc425fa0 RCX: 00007fdfbc19e0d9 [ 279.366721][ T6208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 279.366729][ T6208] RBP: 00007fdfbd11f090 R08: 0000000000000000 R09: 0000000000000000 [ 279.366737][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.366745][ T6208] R13: 00007fdfbc426038 R14: 00007fdfbc425fa0 R15: 00007ffd9d590118 [ 279.366755][ T6208] [ 279.557257][ T330] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 279.567521][ T330] asix 4-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 279.578048][ T330] asix 4-1:127.57: probe with driver asix failed with error -71 [ 279.586796][ T330] usb 4-1: USB disconnect, device number 9 [ 279.610593][ T310] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 279.642457][ T36] audit: type=1400 audit(1787890097.426:652): avc: denied { write } for pid=6213 comm="syz.4.2152" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 279.645286][ T6214] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2152'. [ 279.740392][ T310] usb 2-1: device descriptor read/64, error -71 [ 279.980484][ T310] usb 2-1: device descriptor read/64, error -71 [ 280.080448][ T330] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 280.083986][ T6228] futex_wake_op: syz.3.2158 tries to shift op by 144; fix this program [ 280.123514][ T36] audit: type=1400 audit(1787890097.906:653): avc: denied { write } for pid=6229 comm="syz.3.2159" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.220442][ T330] usb 5-1: device descriptor read/64, error -71 [ 280.226830][ T310] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 280.360423][ T310] usb 2-1: device descriptor read/64, error -71 [ 280.460391][ T330] usb 5-1: device descriptor read/64, error -71 [ 280.540508][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 280.600431][ T310] usb 2-1: device descriptor read/64, error -71 [ 280.691612][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.702590][ T330] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 280.710206][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.720184][ T310] usb usb2-port1: attempt power cycle [ 280.725649][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.738889][ T31] usb 4-1: New USB device found, idVendor=15c2, idProduct=2204, bcdDevice= 0.00 [ 280.748022][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.756827][ T31] usb 4-1: config 0 descriptor?? [ 280.880433][ T330] usb 5-1: device descriptor read/64, error -71 [ 280.968228][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 280.974277][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.983032][ T31] usb 4-1: USB disconnect, device number 10 [ 281.070496][ T310] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 281.091534][ T310] usb 2-1: device descriptor read/8, error -71 [ 281.120394][ T330] usb 5-1: device descriptor read/64, error -71 [ 281.221443][ T310] usb 2-1: device descriptor read/8, error -71 [ 281.230696][ T330] usb usb5-port1: attempt power cycle [ 281.279687][ T36] audit: type=1400 audit(1787890099.056:654): avc: denied { read } for pid=6242 comm="syz.0.2164" path="socket:[64805]" dev="sockfs" ino=64805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.460408][ T310] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 281.478409][ T6248] bridge0: port 3(veth0_to_bridge) entered blocking state [ 281.485688][ T6248] bridge0: port 3(veth0_to_bridge) entered disabled state [ 281.491456][ T310] usb 2-1: device descriptor read/8, error -71 [ 281.493075][ T6248] veth0_to_bridge: entered allmulticast mode [ 281.505345][ T6248] veth0_to_bridge: entered promiscuous mode [ 281.511476][ T6248] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.523814][ T6248] bridge0: port 3(veth0_to_bridge) entered blocking state [ 281.530999][ T6248] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 281.570412][ T330] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 281.591534][ T330] usb 5-1: device descriptor read/8, error -71 [ 281.621345][ T310] usb 2-1: device descriptor read/8, error -71 [ 281.721496][ T330] usb 5-1: device descriptor read/8, error -71 [ 281.730526][ T310] usb usb2-port1: unable to enumerate USB device [ 281.780431][ T45] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 281.910466][ T45] usb 4-1: device descriptor read/64, error -71 [ 281.960414][ T330] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 281.981411][ T330] usb 5-1: device descriptor read/8, error -71 [ 282.111426][ T330] usb 5-1: device descriptor read/8, error -71 [ 282.150466][ T45] usb 4-1: device descriptor read/64, error -71 [ 282.170585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.182813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.194959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.207063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.216699][ T6251] futex_wake_op: syz.1.2167 tries to shift op by 144; fix this program [ 282.219221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.229518][ T330] usb usb5-port1: unable to enumerate USB device [ 282.239435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.257772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.261527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.269853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.281729][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.535414][ T45] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 282.997432][ T45] usb 4-1: device descriptor read/64, error -71 [ 283.323780][ T45] usb 4-1: device descriptor read/64, error -71 [ 283.449376][ T45] usb usb4-port1: attempt power cycle [ 283.884134][ T45] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 284.056144][ T45] usb 4-1: device descriptor read/8, error -71 [ 284.632878][ T45] usb 4-1: device descriptor read/8, error -71 [ 287.180337][ C1] net_ratelimit: 95102 callbacks suppressed [ 287.180362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.180412][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.186446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.198444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.210292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.222273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.234295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.246194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.258033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.270007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.190389][ C0] net_ratelimit: 99193 callbacks suppressed [ 292.190440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.190492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.196451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.208460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.220493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.232359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.244222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.256184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.268203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.280106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.200391][ C0] net_ratelimit: 96334 callbacks suppressed [ 297.200415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.200429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.200515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.206475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.218381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.230399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.242334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.254297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.266260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.278160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.210389][ C1] net_ratelimit: 92011 callbacks suppressed [ 302.210411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.210412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.210501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.216431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.228503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.240481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.252361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.264245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.276285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.288240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.470336][ C0] sched: DL replenish lagged too much [ 307.220409][ C0] net_ratelimit: 102402 callbacks suppressed [ 307.220433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.220475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.226524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.238546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.250474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.262454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.274319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.286340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.298362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.310290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.230392][ C0] net_ratelimit: 103080 callbacks suppressed [ 312.230418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.230442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.236525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.248431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.260426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.272340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.284220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.296083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 312.308189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.320137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.240403][ C0] net_ratelimit: 103077 callbacks suppressed [ 317.240428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.240479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.246533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.258443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.270382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.282275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.294148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.306113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.318107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.330708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.250332][ C1] net_ratelimit: 102522 callbacks suppressed [ 322.250356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.250367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.250560][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.256465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.268495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.280411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.292339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.304327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.316270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.328195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.260358][ C0] net_ratelimit: 91975 callbacks suppressed [ 327.260381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.260386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.260495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.266399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.278428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.290322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.302264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.314210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.326166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.338020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.270349][ C0] net_ratelimit: 89941 callbacks suppressed [ 332.270373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.270389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.276457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.288577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 332.300565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.312446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.324390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.336373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.348383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.360345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.280358][ C0] net_ratelimit: 98263 callbacks suppressed [ 337.280382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.280400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.286383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.298416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.310350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.322208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.334078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.346206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.358152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.370088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.290332][ C0] net_ratelimit: 97093 callbacks suppressed [ 342.290383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.290418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 342.296429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.308353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.320389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.332203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.344265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.356251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.368164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.380048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.300371][ C0] net_ratelimit: 105007 callbacks suppressed [ 347.300395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.300436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.306456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.318565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.330647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.342570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 347.354591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.366476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.378513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.390582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.310359][ C0] net_ratelimit: 132745 callbacks suppressed [ 352.310382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.310426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.316458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.328497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.340390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.352278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 352.364315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.376203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.388156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.400130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.320328][ C0] net_ratelimit: 134216 callbacks suppressed [ 357.320353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.320394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.326418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.338477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.350374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.362242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 357.374194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.386176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.398153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.410018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.330312][ C0] net_ratelimit: 129194 callbacks suppressed [ 362.330336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.330380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.336438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.348330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 362.360380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.372315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.384334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.396278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.408181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.420432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.340343][ C1] net_ratelimit: 132106 callbacks suppressed [ 367.340368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.340381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.340477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.346569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.358468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.370378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.382638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.394570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.406461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.418450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.350322][ C0] net_ratelimit: 129211 callbacks suppressed [ 372.350345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.350349][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.350426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 372.356491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.368475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.380781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.393078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.405100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.417038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.429111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.360362][ C0] net_ratelimit: 132332 callbacks suppressed [ 377.360385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.360431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.366565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.378765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.390774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.402646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.414613][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.426627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.438702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.450546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.370314][ C0] net_ratelimit: 132224 callbacks suppressed [ 382.370337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.370362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.376432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.388428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.400356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.412202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.424176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.436170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.448054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.459932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.380307][ C1] net_ratelimit: 135396 callbacks suppressed [ 387.380331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.380414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.386458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.398322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.410363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 387.422335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.434213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.446198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.458143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.470147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.096961][ T6274] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 392.390308][ C1] net_ratelimit: 130864 callbacks suppressed [ 392.390333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.390361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.399301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.405330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.417244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.429092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.441006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.452979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.464929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.476869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.400293][ C1] net_ratelimit: 127366 callbacks suppressed [ 397.400318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.400320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.400416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.406407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.418443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.430297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.442172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.454158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.466156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.478030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.410340][ C0] net_ratelimit: 129711 callbacks suppressed [ 402.410362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.410436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.416436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.428538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.440548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.452384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.464373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.476446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.488361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.500330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.420319][ C0] net_ratelimit: 135172 callbacks suppressed [ 407.420343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.420352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.420432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.426518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.438397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.450431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.462367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.474325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.486208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.498088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.430301][ C1] net_ratelimit: 135049 callbacks suppressed [ 412.430326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.430388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.436436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.448346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.460317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.472276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.484290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.496190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.508084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 412.520019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.440314][ C1] net_ratelimit: 134077 callbacks suppressed [ 417.440340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.440364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.446428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.458415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.470443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.482364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.494395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 417.506359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.518352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.530395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.023995][ T37] INFO: task syz.3.2166:6248 blocked for more than 128 seconds. [ 422.450316][ C0] net_ratelimit: 133804 callbacks suppressed [ 422.450341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.450381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.456536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.468504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 422.480650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.492813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.504694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.516600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.528584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.540736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.613318][ T37] Not tainted syzkaller #0 [ 422.618310][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.576694][ T37] task:syz.3.2166 state:D stack:0 pid:6248 tgid:6247 ppid:295 flags:0x00004006 [ 423.586947][ T37] Call Trace: [ 423.590281][ T37] [ 423.593240][ T37] __schedule+0x1496/0x20b0 [ 423.597776][ T37] ? __sched_text_start+0x10/0x10 [ 423.602881][ T37] ? __kasan_check_write+0x18/0x20 [ 423.608017][ T37] ? _raw_spin_lock+0x92/0x120 [ 423.612831][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 423.618056][ T37] schedule+0xc5/0x240 [ 423.622170][ T37] schedule_preempt_disabled+0x14/0x30 [ 423.627653][ T37] __mutex_lock+0x902/0x1b90 [ 423.632303][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 423.639103][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 423.644367][ T37] ? wait_for_common+0x56d/0x650 [ 423.649344][ T37] ? xas_start+0x31e/0x3e0 [ 423.653809][ T37] __mutex_lock_slowpath+0xe/0x20 [ 423.658856][ T37] mutex_lock+0x113/0x1d0 [ 423.663250][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 423.668130][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 423.674682][ T37] ? xa_find+0x145/0x170 [ 423.678957][ T37] rcu_barrier+0x4d/0x580 [ 423.683340][ T37] ? __kasan_check_write+0x18/0x20 [ 423.688472][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 423.693699][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 423.699103][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 423.703927][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 423.709068][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 423.714760][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 423.720445][ T37] kvm_put_kvm+0xadf/0x12d0 [ 423.724991][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 423.730135][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 423.735388][ T37] kvm_vm_release+0x47/0x70 [ 423.739923][ T37] __fput+0x20b/0xa30 [ 423.743961][ T37] ____fput+0x20/0x30 [ 423.747981][ T37] task_work_run+0x1e5/0x260 [ 423.752650][ T37] ? __cfi_task_work_run+0x10/0x10 [ 423.757831][ T37] ? __kasan_check_write+0x18/0x20 [ 423.762998][ T37] do_exit+0xa46/0x2850 [ 423.767192][ T37] ? __cfi_do_exit+0x10/0x10 [ 423.771888][ T37] ? __kasan_check_write+0x18/0x20 [ 423.777027][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 423.782202][ T37] do_group_exit+0x21f/0x2f0 [ 423.786915][ T37] ? __kasan_check_write+0x18/0x20 [ 423.792159][ T37] ? recalc_sigpending+0x184/0x1d0 [ 423.797298][ T37] get_signal+0x134c/0x1490 [ 423.801866][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 423.807438][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 423.814090][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 423.819602][ T37] do_syscall_64+0x63/0xf0 [ 423.824090][ T37] ? clear_bhb_loop+0x50/0xa0 [ 423.828800][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 423.834751][ T37] RIP: 0033:0x7f783299dd6b [ 423.839193][ T37] RSP: 002b:00007f78338b9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.847662][ T37] RAX: 0000000000000000 RBX: 000000000000000c RCX: 00007f783299dd6b [ 423.855670][ T37] RDX: 00007f78338bafd0 RSI: 0000000080085502 RDI: 000000000000000c [ 423.863688][ T37] RBP: 00007f78338bafd0 R08: 0000000000000008 R09: 00007f78338b9fc8 [ 423.871716][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 423.879711][ T37] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f7832a538e2 [ 423.887734][ T37] [ 424.371278][ T37] NMI backtrace for cpu 0 [ 424.371298][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 424.371327][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.371340][ T37] Call Trace: [ 424.371347][ T37] [ 424.371355][ T37] __dump_stack+0x21/0x30 [ 424.371388][ T37] dump_stack_lvl+0x140/0x1c0 [ 424.371416][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 424.371444][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 424.371476][ T37] dump_stack+0x19/0x20 [ 424.371502][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 424.371531][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 424.371558][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 424.371587][ T37] ? sched_show_task+0x371/0x530 [ 424.371613][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 424.371641][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.371668][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 424.371695][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 424.371734][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 424.371760][ T37] watchdog+0xe45/0xf90 [ 424.371782][ T37] ? __kasan_check_write+0x18/0x20 [ 424.371806][ T37] ? __cfi_watchdog+0x10/0x10 [ 424.371827][ T37] ? __kasan_check_read+0x15/0x20 [ 424.371847][ T37] ? __kthread_parkme+0x12f/0x180 [ 424.371868][ T37] ? schedule+0xc5/0x240 [ 424.371896][ T37] kthread+0x2c4/0x360 [ 424.371918][ T37] ? __cfi_watchdog+0x10/0x10 [ 424.371939][ T37] ? __cfi_kthread+0x10/0x10 [ 424.371962][ T37] ret_from_fork+0x64/0xa0 [ 424.371990][ T37] ? __cfi_kthread+0x10/0x10 [ 424.372013][ T37] ret_from_fork_asm+0x1a/0x30 [ 424.372035][ T37] [ 424.372043][ T37] Sending NMI from CPU 0 to CPUs 1: [ 424.598572][ C1] NMI backtrace for cpu 1 [ 424.598588][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 202cfcd855bf6dc28f2fc6dc994ef8a0c7c58666 [ 424.598611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.598621][ C1] RIP: 0010:stack_trace_consume_entry+0x2e/0x2a0 [ 424.598650][ C1] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 20 48 ba 00 00 00 00 00 fc ff df 4c 8d 47 10 4c 89 c3 48 c1 eb 03 0f b6 04 13 <84> c0 0f 85 14 01 00 00 44 8b 57 10 4c 8d 4f 08 4d 89 cd 49 c1 ed [ 424.598663][ C1] RSP: 0018:ffffc9000022fa70 EFLAGS: 00000a06 [ 424.598680][ C1] RAX: 0000000000000000 RBX: 1ffff92000045f72 RCX: 0000000000045f00 [ 424.598693][ C1] RDX: dffffc0000000000 RSI: ffffffff8485b8b3 RDI: ffffc9000022fb80 [ 424.598706][ C1] RBP: ffffc9000022fab8 R08: ffffc9000022fb90 R09: ffffc9000022fb88 [ 424.598718][ C1] R10: 0000000000000000 R11: ffffffff81759fc0 R12: ffff888103660000 [ 424.598731][ C1] R13: 0000000000000020 R14: ffffffff81759fc0 R15: ffffc9000022fac8 [ 424.598743][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 424.598759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.598771][ C1] CR2: 00007f81b0c53ff8 CR3: 0000000112d38000 CR4: 00000000003526b0 [ 424.598788][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.598799][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 424.598811][ C1] Call Trace: [ 424.598817][ C1] [ 424.598825][ C1] ? __kernel_text_address+0x11/0x40 [ 424.598847][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 424.598866][ C1] arch_stack_walk+0x129/0x170 [ 424.598883][ C1] ? dst_alloc+0x163/0x240 [ 424.598905][ C1] stack_trace_save+0xaa/0x100 [ 424.598923][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 424.598941][ C1] kasan_save_track+0x3e/0x80 [ 424.598959][ C1] ? kasan_save_track+0x3e/0x80 [ 424.598977][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 424.598992][ C1] ? __kasan_kmalloc+0x96/0xb0 [ 424.599011][ C1] ? __kmalloc_cache_noprof+0x23c/0x470 [ 424.599028][ C1] ? ref_tracker_alloc+0x181/0x5b0 [ 424.599048][ C1] ? dst_init+0xbf/0x430 [ 424.599072][ C1] ? __netif_receive_skb_core+0xfc4/0x3a70 [ 424.599091][ C1] ? process_backlog+0x40b/0xaf0 [ 424.599109][ C1] kasan_save_alloc_info+0x3a/0x50 [ 424.599125][ C1] __kasan_kmalloc+0x96/0xb0 [ 424.599143][ C1] __kmalloc_cache_noprof+0x23c/0x470 [ 424.599161][ C1] ? ref_tracker_alloc+0x181/0x5b0 [ 424.599181][ C1] ref_tracker_alloc+0x181/0x5b0 [ 424.599200][ C1] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 424.599220][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 424.599236][ C1] dst_init+0xbf/0x430 [ 424.599264][ C1] dst_alloc+0x163/0x240 [ 424.599284][ C1] ip_route_input_rcu+0x18d4/0x26b0 [ 424.599307][ C1] ? ip_route_input_noref+0x150/0x150 [ 424.599329][ C1] ? __kasan_check_read+0x15/0x20 [ 424.599345][ C1] ? dev_hard_start_xmit+0x6ba/0x730 [ 424.599362][ C1] ? arpt_do_table+0x785/0x1d60 [ 424.599379][ C1] ? __asan_memcpy+0x5a/0x80 [ 424.599396][ C1] ip_route_input_noref+0xd4/0x150 [ 424.599417][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 424.599439][ C1] ? __asan_memcpy+0x5a/0x80 [ 424.599455][ C1] arp_process+0x905/0x1810 [ 424.599473][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599491][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599507][ C1] NF_HOOK+0x181/0x1e0 [ 424.599523][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599539][ C1] ? arp_xmit+0x200/0x200 [ 424.599555][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599572][ C1] ? br_dev_queue_push_xmit+0x571/0x710 [ 424.599595][ C1] arp_rcv+0x2f8/0x490 [ 424.599611][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 424.599628][ C1] netif_receive_skb+0x22b/0x7b0 [ 424.599647][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 424.599665][ C1] ? br_flood+0x66d/0x720 [ 424.599685][ C1] br_pass_frame_up+0x126/0x1b0 [ 424.599708][ C1] br_handle_frame_finish+0x1178/0x1620 [ 424.599732][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 424.599757][ C1] br_handle_frame+0x5a5/0xba0 [ 424.599779][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 424.599801][ C1] __netif_receive_skb_core+0xfc4/0x3a70 [ 424.599820][ C1] ? ip6_mc_input+0x433/0x680 [ 424.599838][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599855][ C1] ? qdisc_run_end+0x120/0x120 [ 424.599872][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599888][ C1] ? NF_HOOK+0x181/0x1e0 [ 424.599903][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599920][ C1] ? arp_xmit+0x200/0x200 [ 424.599935][ C1] ? __cfi_arp_process+0x10/0x10 [ 424.599952][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 424.599971][ C1] process_backlog+0x40b/0xaf0 [ 424.599990][ C1] ? __mod_timer+0x881/0xd20 [ 424.600008][ C1] __napi_poll+0xcd/0x600 [ 424.600025][ C1] net_rx_action+0x5dc/0xd70 [ 424.600045][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 424.600062][ C1] ? sched_clock+0x44/0x60 [ 424.600083][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 424.600106][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 424.600128][ C1] handle_softirqs+0x1aa/0x620 [ 424.600145][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 424.600166][ C1] __do_softirq+0xf/0x16 [ 424.600183][ C1] do_softirq+0xb8/0x110 [ 424.600198][ C1] [ 424.600204][ C1] [ 424.600210][ C1] ? __cfi_do_softirq+0x10/0x10 [ 424.600225][ C1] ? dst_destroy+0x376/0x460 [ 424.600246][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 424.600278][ C1] __local_bh_enable_ip+0x74/0x80 [ 424.600298][ C1] rcu_do_batch+0x590/0xcb0 [ 424.600321][ C1] ? rcu_core+0xcc0/0xcc0 [ 424.600339][ C1] ? __kasan_check_write+0x18/0x20 [ 424.600360][ C1] ? _raw_spin_lock+0x92/0x120 [ 424.600389][ C1] ? __kasan_check_read+0x15/0x20 [ 424.600409][ C1] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 424.600430][ C1] rcu_nocb_cb_kthread+0x533/0xb60 [ 424.600452][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 424.600472][ C1] ? __kasan_check_write+0x18/0x20 [ 424.600492][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 424.600519][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 424.600548][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 424.600576][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 424.600597][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 424.600620][ C1] ? __kasan_check_read+0x15/0x20 [ 424.600640][ C1] ? __kthread_parkme+0x12f/0x180 [ 424.600660][ C1] ? schedule+0xc5/0x240 [ 424.600679][ C1] kthread+0x2c4/0x360 [ 424.600700][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 424.600721][ C1] ? __cfi_kthread+0x10/0x10 [ 424.600743][ C1] ret_from_fork+0x64/0xa0 [ 424.600768][ C1] ? __cfi_kthread+0x10/0x10 [ 424.600790][ C1] ret_from_fork_asm+0x1a/0x30 [ 424.600811][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.721316][ T36] audit: type=1400 audit(1787890244.156:655): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2386]" dev="pipefs" ino=2386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 427.460318][ C1] net_ratelimit: 119413 callbacks suppressed [ 427.460344][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.460476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.466551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.478568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.490569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.502454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.514494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c1:49:2f:e2:9f, vlan:0) [ 427.526493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.538405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.550324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)