last executing test programs: 39.768568461s ago: executing program 0 (id=1093): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) splice(r1, 0x0, r4, 0x0, 0x80, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4010d00, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents(r9, &(0x7f0000000180)=""/134, 0x86) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r6, 0x0) inotify_add_watch(r9, &(0x7f0000000000)='./file0\x00', 0xdc80543dbe7f59a4) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) ptrace$pokeuser(0x6, r0, 0x6, 0x2) syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582030002000000b9d7fb71cf43018c6c229f002fa6519dc281bec21f63dd35fbd950da2612506b7b7c7cc53cf580bf87f54ff0"], 0x0) 39.345438686s ago: executing program 3 (id=1102): r0 = socket$packet(0x11, 0x3, 0x300) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) unlinkat(r4, &(0x7f0000000380)='./file1\x00', 0x0) llistxattr(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x0) (async) llistxattr(&(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x3, 0x10}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)=@secondary) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r7, 0x1, 0x0, 0x6, @random="42b106616fdb"}, 0x14) 38.527173229s ago: executing program 3 (id=1103): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x400, @loopback, 0x5}, 0x1c) (async) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000801}, 0xd0) (async) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (rerun: 64) unlinkat(r4, &(0x7f0000000380)='./file1\x00', 0x0) r5 = socket(0x27, 0x1, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x6000000}, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x40000b, 0xfffffeff, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf25070000001800ca80160006"], 0x2c}}, 0x40) 38.492491703s ago: executing program 3 (id=1104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22a180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x9, 0xd34c, 0x40}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222006d49b17f0009040000000e010000082403010102100708"], 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x725e65a6, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)='q', 0x1, 0x40000, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) setrlimit(0xb, &(0x7f0000000100)={0xde, 0xe}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="a41579f317d3821900c8dbb173456681f88eb25c24f2fc3b31eb481534e6a90083c4645bab007ac03940cc31b60466e91516f6843c2aec25240d1995341cc3014559c3bcfbadf9c9a4a699d402f91f1f61f1e24a55fe8d59bbc5a1619d86114118398ee5ef91f0bfc6c3dc39002cdfebb5d917973f3090ec25b654284d9b4108fb2082964b928dd93a10765878484b6ec0a8702d227c00901f68e48549025815f369d463cdc32567109b5e50d264f0d5184ff4782232807cc66c514aa99cf2ca9e425e7d7aae71202914549ed83030e85bd2167fb5335548f165bed94769f502", 0xe0, 0x40000, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @private2, 0x1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 38.08100096s ago: executing program 2 (id=1106): mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) 38.005285686s ago: executing program 2 (id=1107): r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) writev(r1, &(0x7f0000001400)=[{&(0x7f0000000000)="5977c833", 0x4}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_pidfd_open(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setreuid(r5, 0x0) setns(r4, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) 37.897257527s ago: executing program 2 (id=1108): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00001000000000140005"], 0x40}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8b, 0x0, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6fd3", @ANYRESHEX=r4, @ANYBLOB=',\x00']) 37.785576707s ago: executing program 2 (id=1109): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x50800, 0x2, 0x4}, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}], [{@fsmagic={'fsmagic', 0x3d, 0x1000}}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}], [{@fsmagic={'fsmagic', 0x3d, 0x1000}}]}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"1f782cd2df988535c6b88de27d6e12e2", 0x0, 0x0, {0x9, 0xa}, {0x8000000000000001, 0x7}, 0x40, [0x741, 0x3e4, 0x0, 0x702, 0x2, 0x8000000000000001, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x1, 0x5, 0xb, 0x9]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"1f782cd2df988535c6b88de27d6e12e2", 0x0, 0x0, {0x9, 0xa}, {0x8000000000000001, 0x7}, 0x40, [0x741, 0x3e4, 0x0, 0x702, 0x2, 0x8000000000000001, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x1, 0x5, 0xb, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, r2, 0x12, @unused=[0x6b7c, 0x7, 0x1, 0xfffffffffffffffc], @name="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"}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000300)={{r1}, r2, 0x12, @unused=[0x6b7c, 0x7, 0x1, 0xfffffffffffffffc], @name="c1fc6840fdcfa7c1fd07575b180aaf32c79c53071ab5b30afba414a21807746c905ed07ff2e4d796a6d94a7081547880c77ec90aa46fd7de3dbc305daeb56dd62519d8f5d2f10b64a07b70218a3b4bea618f84321b55436957173f1dc358ae811c76b41e7756bfc206379c90e27f142038d24cfd94b8496536175bea18752c9b455d7981f5745fe2b0dee557f702cecbe05c8df9bb4d4a2f19be6ae83ffefe2c9e7764a60ee41d0acf7c44a03c111789ba238dbb94a1c9967220de00e2eddafe22fdcc9c03ab902f580d0681b76b7edbecd36670db3d72eda4ad6608ef62f24243e7fb85534e0b36e931fc2f6aaddaf3856c30a3e2a4d91450e7e5e6fec48a98cc2aa0f8b9330b804e22ebb2dc9276e5c19005d86e9be1de768e05fbef09b3164b0923e7592e48b2375aefea958e1b963d08fd2b46c10bd5876f48b92deda1e1ed46776792ba30992aedd549e0b212c9d8611b50b162fe66592618da77a50f3969e0fa9f49e89a8f4e8b76954dce1818944adeef99822f8a02fdb71504dc0d5092149dfc664dcf447cadfda1e8a56998d0b1d25bc128ddb035374b7ec45c4db5d7e84b7f7b9244c03a180683e467befad85c5058c68711f0e968017a67f49efa062835705739ae91f8f5d1af760526e0af5f12c77ef56be6a55510ef5631749ba2e69336204befe4c754a114a43b3aa2c4a1904955c024db933d4aecd4e582b1b2b6f93b3f79becd68f8c67f15f4730ae85092d4b994a8e16b2b615ae7dd5d76a86b563fdbb400415705ea6f2ff807fd82016687859110750d6fa48998741a260ca0feaedd9210e38502214ac7b2b5ff455d789a35042187950e5c72a5f4d2d4c640a1181f5824fc6eb08230e426d8d7d5bde81554fdf29534632d8e9dc23ba97664c9d0d47119d6634c6d386a7c5cd4ce5c1f426b3d2b0c00ad0bab56557b8fb1a8a6a44ccd8d7d2ba659d5b91047ae455b1b66d5bffb9bd77a36c9dc93e8db708d7bc8af854a172785f8e3fa7c15d7cc5325c928a09fe4a954e0e925a2a06b3d28e0083bded81cc58aad08f225fd54f72fe04e846b7a08a2313de112a368d91928489f2e73caf358d8dd86fdeb6e3cd43f718ddc081030ee46f9a86cf0f29607b5ed958049c301ef72ac19c565b8494a0fdb327d4da2a4efbe0ed9d2223b4be47d87b9d590c8f9a60a9e0e3772689f923c44e053b6a760ca6ae91f0f524b8229e65531ce41846faa81c038051cda9464cb1810b300379a8b73ac723a983c23e0f8a441449daf2aef234dc21cb85878b174901092df46a045ac069b260b5e4a1b46c3b2fc9bd756fad5f7ec5e691f54f0cdf858074a34e6a44480d07bc949b18f3ffa654f6f4f4a274d108398f4ab7d254e7c144adf0f4c15df9bfdbf07cca7ec6a4f8c17f8e41c92a6f5c88f8f3b701d1083a231198e0e53100872653fdad43d43ae5be0c92bb421a8b52148d09d41366a810f274063b35c5a53447b9ce575650ab0c9c78a9a0926bff670ae93d0a2f61a7c6b8beb306857ff61034b3a015a30dd46fb7d6c3269f990d2b3150dc4ffed75c7dc79fa6c5c36f1f672f3b9241a558b78845a1184105990e9fe14835c34d3bcba0fc57622f09b0cdba71662938300bb0bf4c4b4418fa075e3dc6a4195bf2547802ad35412bd9994ade63736df6519b0236da3a2c2cca367f7ce4edc0ba4a793e1f9b61d236c6457489ce0313de59492e617b12b46a297277564f653a01e6f77554f62420583ad54dcad46d39e22e1ef1f508663b573998217057a1cdc9b030bacbaca4305e4c99d524b1e0a1eed19c4b4d070be97bab4ace5c282acee1f2f59aa831bdc65032f577292b531ac0dceb132309471588b39543d4dc09074b2c88bd4d869666f435d06a91c124ffe0dcad723b84a6407f5f204075428488ef98a102bca66f875d59b3672e4567de6de273514f65044eec4341477f45e62f6f95ac719548d6a427257533956ef071964eac0513a58897711624825a00dcfacdd92dbed88426659304dae4eb6fea58c7a3cac0155ba9c4eb9c837a2e4599fd671a15e9076244b028d368c8706219a5e348afdc5af3a3b8dcded25904db9bbc5a1b1ada29918e9c6d2164399affc3377811714b999ed126cf4a7fb17f8669e4b509772ffb12fcc04fa1fa01e3e11d866f7e1c7bea856a19900bac089b0b43e5e0eba111cbc1ba4a53cfe347c608bcb5e7d5f2abffaf36a268c513fdb0a8660afd25c4ac67d0fa4be6d6ad552fd548d37601c1817ebd14e8201e952ce38ab4ebf1c1d4e7a54d1d8725a06fb776d94021ccc3d386c0c9392ad967e5158bbb5f3be1c48a8443c36b4f74a1e8758f39143d85b030a91e0df277468314ec3e8e9bfa9107f662cdd2689f1ce11c34b70da0f2addbad8d76af575d053c11f6163c3c3a579ef04897a5026f884abbeaa969e7dba2cfd19e2ea88a85b5b1e208b9b8a7ece31f0450c8b255d2b28d9c9cca6b04c3ec55cbda1674e59786647f92004f192f29cc8973e8dedffd0068854e14e2f45036400badfa353f198a862166f6c1a1c7c0e8bc3c074c6790efe57035d6ae2f123f3a0a029cee762473c63739973b42beacdf5b479213df8eed3e12dec21dd258390c17b9a4ce1c51758f082dacc1a30283b6cc8d3e12ed6334c9e3c9eed43c93bd9e0d21fea1369922707ebbdf91982224c26e7bc88e8f995dcedf1e30ded62018cce7bd9d9ad8e3f319f5cd4198305f6a0e6d8e3fa474f6bd16fdb6ad537e8cd74e7a21f76422d7fe4d3191773b86908b4ede6a33e626a4a6b893404b7e1aaa1ccaf04fad9be3eeb2c9822b308f9947614f4166e6f55ca1bb3ae58767aa3a4e2b8f2428065149d6f8d71ff69da755d2ad0a14a46e4cda88ac51495b01eaa7d0d2f49c9edf8293cb9983e2b383aee06b6a5c2913104ee567ecf34e91d90067851070b5072fbb05347fc23e7501725a793d5a0423a41b7ae345d80fc2396a72bad01e1af4e6634aaec95cef82553c029751a02c12dc919e5bf37f90ec0eca580280a022a712983c8d7ed0d27ed532ba2d7f6eafd8f3b8fb8a5915b834c49c577008276e5e2aff20e85e61bc9fb696d9c345dd794f8e97e6cfcaa06f15a28a7bb6512b9fdc4b448ca5055243d131624f704eac361f6f14fb48885df4a86ab76d53545ed59f237d10f00c9bce1efbaaba0c7ea75f440318db6880ab4f115454cd1ef7a1e85f64e96c9334d027240603a4db4611f1e20a6ee056b8151bc7044e99f3ae5a979b43b599dfb4ce576f973e24ff7fd34d2443d1f21c06457e8c1d6b7a832b4bfa57cbaad4ab29defc084a70fd5aa424c17db9858db7c21c5f08e0163636df09342a9899b30147b57a00014289ac875981f3c3c6604b075e9af475598c38e76d4e26581bbb18e224d697bdb08228eb4cdc39f38a391c62ef06b92cf454f95789714cb769dd6f50804f5f70175af45f637ef071fa8e1e1661407ead98ff12df6d971e0daae95c5ec2de1be7459cff7d2db8cdef28b7b16ef91c22b56df5fd0e4bde34c0a5ae1dc8f719c44a02e99215c2daae1da3066ebeeba9feedc1cad2c95654ecdeec0cde82766880b994a4272d65302803e9e029ba2286d47774907c29c033e9462d46ee93f9a693028adf25428cb4cb717a5a3098480ea2eda1d841ca7012eac037b0a4e59870af1ba6a2ebd27ca2e14d184c8fe61f5663b284cf18e9c84cc7df035c869ed202fca035e8e330e3ad926773226f5291107bfaa9236c9113e86186578209ceea022e9365b4f69510706e753d73a81c30b6afa82535a299a043fbe4f8bea8ee9154182b777d92536bad1568324d2337605288b9f2c22b126a585563bc99576af5f3a5baa03050b30b8063bf9c06eccbefbeecd63f581d9f9fc4db561bb626924177e1656f8b756bae24c1edbc300733713bde609182f1b97410f5ad4e8b64d06b7b6095c79510b04295e384b5bbc78ef19c1b1b254b0552bd317b7c908ee57c0e03c836c6e4df285fefa30e3175cf3c88a2115a6fee3374182be838827a66dc56670a4d97ae56e919b42603aba0415024b9d4f3d8c5aa9dbadc17dab9bb81500d335c775750153aebaa5726bf5a149bbaa9073b3a39973dd88ef1580152e72dba00a7aa2f98a33fde483c337873984f3d762f8a1de8e0328f683c0949d8ad7708390120957fe9c75b1e0d8172b080c54d9a343e61ae4c9b879645bf1b3394d8b17053cb439f5974a46e1c1bc3f7a0a605fa78ff36e917be0121d87f7ab4e901a2876c9d6868435a7bd9b8558f381915a8fa94e5ba68e2fedcfaec3bbb2b808772d0bbf5bb95d255387482f02b6ca1d620ea290984da647e4750938e6e120a9a6d1d7360b824b8230b7b20a42451edde9820b9262cb3e32b0684a058ac5f3ec6465cec1443f203f65eb6398b4ef12952765544cc187a77ad4e068312008a32b7c8b57379a7ffe30fcde2dff1bad375b3e6d1bac107c379d57ed4f0747d9dfe1e425dab921a5f7c13f293f06ba241eb3f2c5cee598261531352c90863f42d6920cfec81d63d09bb6cd570a55455d9bebccd7beb85efbe69a21412ed00ddf95f62d83a4a7a2744ef30491a0dc8e18a9635f92d7b0ceea0306d6d05e473adcdc69ab8249ddeb43d7e383e6f9705f312c119b8522f91d30af1e3ae67bea1143826ba79b1260c534cbc5eabf2531e88de62f0e9fb8aaec7d6a84cad8dd83f9972c7a7c9c6a4d939e58d600ebb103f854aedfa4949e3b2b8c5c457f7d6c14c5a5ae43f46798628b1921f914fc8726c88a382b00224bd8da735bb881754538816a3d194cdd6eb0c61292aba33218b48cdd8192453d3d098c4bd529041395f7070a04f73b7af0871b5d6fbd9b521d331ea3cda86b053a81b804dd3943fdadc82d6191e419626aa8607d94a7cc778cca414357d9dea94e05a9be7977638fd4b5f0fd739cbf029e342d5f4e9455c6b49ac6af2850a0bdf6584b3be82b7bf4a720f2bc8a84036a0d79aa581d00ea599496ce7361cf400e7beabb7a4600d906a68e0ee9099d942b972b511bcc25d01bbf9315194fd6444bdef87aaafe833e4f1a16e522db714614dc6de3e114b4caac9a9ac374a18cd9232b5dbb251938e91d73a8ae46e4c8071b5d75c1afc203021a03c508463609d29eb5f4081a490fc8c3c043d88193b0580be1a7923798ae3fc9a447ee4c879f28ef6d07fd6c597721ad6bff95ac8627631c73488cd7ce05e0b71ed73c26e7ed7a470d53535a901f26e557a8f91290310e39c77fc1d8444324a79662b840f6b8496daf2b2f07f8688834a8add2e46fd36435e1e885a7ee7655918ef0632858b109daafaeb165fda682a4cefb74a6900c767b7718fe42fd2755bbfb6244106f7d4ad14fa6a0c08a532d7be0d3d9a5066dce082bdebb57301457e45cebebaad5d67453e4f62637b5ee67feeccd72aa107c59e8f2816dc99d0315de2ba82e8e853b031ec4ab58e6e8eb8529f3d4769fdd4d0f220117a093089c1fe28ed2dadb58804d29147aa571cdfdea7e0514088ab1dda5e4fe7b28d3df33ceedf4a8d1beb0a15011b5cd24fcbb63871d4d9ede1bc6043c923c01a556435963d2b06453438c2abb02589fd5e81d4d834dcce37deb69dc5512a9996d7554a51bad0c2032313d90535a12a1f21c90c5b86ae018ccf65a4396b81e763dc2b39c9ba1e9348a5376b411a23f6d345ad1f38aeb8895fa681f942c"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r4) syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r1) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) futimesat(r0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={{0x77359400}, {0x77359400}}) (async) futimesat(r0, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={{0x77359400}, {0x77359400}}) timerfd_settime(r1, 0x3, &(0x7f0000001500)={{0x77359400}, {0x77359400}}, &(0x7f0000001540)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000001580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000001580)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000016c0)={r4, &(0x7f00000015c0)='batadv\x00', 0x100, &(0x7f0000001600)={@align=0x5, {0x8, 0x5, 0x9, 0x5bd}}, 0x5, &(0x7f0000001640), &(0x7f0000001680)=0x4}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000001840)={{r4, &(0x7f0000001700)='@]\\\x00', 0x40, &(0x7f0000001740)={@align=0x1, {0xf, 0x66, 0x60a, 0x2}}, 0x5, &(0x7f0000001780), &(0x7f00000017c0)=0x955}, {[0x8001, 0x0, 0x7ff, 0x7]}, 0xaf2, 0x15, &(0x7f0000001800)=""/21}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001900), r3) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xd0, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="c3297f918a305bae0f05a9563a03b95abd5b941c8b1c95d59f6d9b1b5fdc91992179862f8693ea520a5d84c1a3516833a7510225a194ee53eddcfc91ea2b58d2166f05647226f09ca7fa6bf4c26e3b36dc2a24bfb36250e4ff768c40b026beabac85d2bb2a79425bf68a707a033cc0c7b7487b22db9926d70ac8d33233c4fd25f714061c6b6ab8399174a8f26c7c3b1685586539ef4e7e3510adc8166594d53c4bd152ce599aec13ed8770b750a709ba2229e2851afcfa"}]}, 0xd0}}, 0x4004014) (async) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xd0, r8, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="c3297f918a305bae0f05a9563a03b95abd5b941c8b1c95d59f6d9b1b5fdc91992179862f8693ea520a5d84c1a3516833a7510225a194ee53eddcfc91ea2b58d2166f05647226f09ca7fa6bf4c26e3b36dc2a24bfb36250e4ff768c40b026beabac85d2bb2a79425bf68a707a033cc0c7b7487b22db9926d70ac8d33233c4fd25f714061c6b6ab8399174a8f26c7c3b1685586539ef4e7e3510adc8166594d53c4bd152ce599aec13ed8770b750a709ba2229e2851afcfa"}]}, 0xd0}}, 0x4004014) close(r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x4c, r9, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xbe3, 0x42}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8804}, 0x44001) io_setup(0x6, &(0x7f0000001c80)) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d00), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001dc0)={'syztnl1\x00', &(0x7f0000001d40)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xca, 0x7fff, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7, 0x8000, 0x1, 0x7500}}) r13 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001e00)='ns/time\x00') sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000001f00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x5c, r11, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r12}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @GTPA_NET_NS_FD={0x8, 0x7, r13}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x200040c5) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x34, r9, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000804) (async) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x34, r9, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000804) ioctl$VHOST_VDPA_SET_VRING_ENABLE(0xffffffffffffffff, 0x4008af75, &(0x7f00000020c0)={0x2, 0x8}) 37.69237805s ago: executing program 2 (id=1110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121b43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000640000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x45, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a33, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.526392741s ago: executing program 2 (id=1111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x804) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x101, 0x0, 0x2, 0x9, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], 0x1}) unshare(0x66020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/snmp\x00') exit(0x2616) close(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x760, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8300, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB='\a'], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000280)={0x4, 0x8}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x2, 0x8, 0xb, 0x2}, {0xfff8, 0x8, 0x8, 0x6}, {0x6, 0x4, 0x49, 0x100}, {0x0, 0x9, 0x1e, 0x89}, {0x4, 0x6, 0xa, 0x7f}]}) 36.681901s ago: executing program 0 (id=1112): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = dup3(r1, r0, 0x0) shutdown(r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @none, 0x1d}, 0xa) 36.672321258s ago: executing program 0 (id=1113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x117, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x68, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x3, 0x1, 0x50, 0x80, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1bbe86a1f9f5510e, 0x30, 0xfc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4b}, [@mixer_unit={0x7, 0x24, 0x5, 0x5, 0x7f, "d5a7"}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x100, 0x4, 0x4, 0x68, 0x0, 0x101, 0x9, 0x1}, @feature_unit={0x11, 0x24, 0x7, 0x6, 0x2, [0x1, 0x4, 0x9]}, @feature_unit={0x9, 0x24, 0x7, 0x3, 0x2, [0x3]}, @power_domain={0xd, 0x24, 0x10, 0x9, 0x0, 0xfff9, 0x13, "01ed8561"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0x4, "20dd50", "0e"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x4, "4896"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0xfe, 0x2d, {0xa, 0x25, 0x25, 0x400, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3ff, 0x400, 0x88, 0x9}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x3, 0x8, "2d518bc4f8d6105c"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x10, 0x3, 0xc, 0x8, "60b8058d54d623"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa4, 0x1, 0xc5, 0xa, "", "c3f5"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x7, 0xe7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x0, 0x9, {0xa, 0x25, 0x25, 0x5, 0x3, 0x2}}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x5, 0x3, 0x7f, 0xff, 0x9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x4, [{0xfd, &(0x7f0000000340)=@string={0xfd, 0x3, "d46d09d2fb40f35adc9b3ff7e5a63c081a71c05c6daef2328f2309f92e1413c5ceb12663cc01ad22b9365d69888941776d7575378277f37600f040835322ad4917e94435380aa21592cbc2cdd9bbec19aad778ec544f01ec9055c614f8d0919c515428001d46b2400a6e75201c4b5eaf2036d57e38ef4adc32ce2cc3aa78ecf26faa6b4e36f643cd1f08960d0e83cdb3c602d82db276e225466eaca49e6656c1486f0c3909d615ecf667d5b9926c2bd787565ad070f4b86bf95378e8fb206d4a58ade62a27aac674674f23c1b969a3b62a80c8a0837d8d981f04a2c02c87776ec146bf66991090cc3d4b2c2c198600"/251}}, {0xcc, &(0x7f0000000440)=@string={0xcc, 0x3, "c504cadb0b676ba3bb688a567c1d82f1954a322090efc37aa549312733d977800b968a50da2b404ae85c31651329f8c2e28c3ebc1c4e892c91fc98721931afbb82b6253e967bae702188b8397289fab3ecc6397490bf966cc01c8e6c9aeb54977acc5edfa86e35212ff09c58fea3cc42d67c003a0bb13f5be6530d1543039212ebfe64a1807962633e6bcffc1f30a4574ada2de290d136841a15642c501c558b177a44b035e900400f4c8ab11e3e8bfbae3e0e1252b964b168a5a684a3f4c1e58cb1b827860427811153"}}, {0x9f, &(0x7f0000000580)=@string={0x9f, 0x3, "29f5dfedab875bb7d7ccebc8ac466a94a5dbd9c1cda3e28111bad73dc2ad4339608ac4221d5a4200acce19cb38a45bf6b7774ffd3ffba3a77f78aa383643d5f71dc102d364f932f47a479e5cb1afd8f151dcf0011fd97b5dbb2d7e654d2c472fced30fe43dc7fa747772fb5a08d546c63365576befddd9808d437ccb0cdec087f399dba460c55de3633d69504a63c20a98cb4530192ec482b33e7045aa"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "d6ef467f"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x1, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 35.876898186s ago: executing program 1 (id=1117): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x100000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000640)={&(0x7f0000000080)=0x81, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000680)=@generic={0x0, 0x2666, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044810) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000840)) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000018c0)={&(0x7f00000008c0)=""/4096, 0x1000}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001c00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001940)={0x260, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_RATES={0xd4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x16, 0x16, 0x30, 0x30, 0x5, 0x3, 0x3, 0xc, 0xc, 0x33]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1b1, 0x3, 0x5, 0xc0, 0x6, 0x9, 0xc, 0xe]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0xa}, {0x4, 0x5}, {0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x7, 0x6}, {0x4}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0x9}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x0, 0x3}, {0x6}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x7}, {0x5, 0x1}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x3}, {0x3, 0x2}, {0x3, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x4, 0x3}, {0x1, 0x4}, {0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {}, {0x2, 0x5}, {0x3}, {0x1, 0x3}, {0x5}, {0x2, 0x9}, {0x7, 0x8}, {0x3, 0x1}, {0x4, 0x4}, {0x6}, {0x4, 0x4}, {0x1, 0x3}, {0x6, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x5, 0x5}, {}, {0x6, 0x9}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x2}, {0x6, 0x7}, {0x6}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x5, 0x3}, {0x4, 0xa}, {0x7, 0x6}, {0x4, 0x7}, {0x2, 0xa}, {0x3, 0x9}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x8}, {0x2, 0x2}, {0x4, 0x6}, {0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x1}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x3}, {0x4, 0x1}, {0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x0, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x2, 0x5}, {0x4, 0x6}, {0x6, 0x2}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x3}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x3, 0x2}, {0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x4, 0x1}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x3}, {0x4, 0x9}, {0x3, 0x3}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x2, 0x2, 0x0, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x19}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x9}, {0x1}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x9}, {0x6, 0x9}, {0x6, 0xa}, {0x6}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x13}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x1}, {0x3, 0x9}, {0x2}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x8}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x36, 0x3, 0xcf3a, 0x7, 0xb3, 0x2]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xbde, 0x3, 0x5ca7, 0x9, 0x6655, 0x7, 0x2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xd, 0x3, 0x6, 0xa, 0x89, 0x24, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba, 0x8, 0xed51, 0xfff8, 0x401, 0x4, 0xd6c]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x80}, 0x30040855) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001c80)={0x100000000, 0x38, '\x00', 0x0, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r3) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x80, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r1) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002000)={0x9, &(0x7f0000001f80)=[{0x4, 0x0, 0x3, 0xf}, {0xec8, 0x6, 0xda, 0x7}, {0x400, 0x4, 0xab, 0x5}, {0x8001, 0x5, 0x81, 0xd}, {0x4, 0x9, 0x2, 0xffffff00}, {0x7, 0xa, 0xc, 0x3}, {0x486, 0x4, 0x4, 0x6}, {0x8706, 0x2, 0x1, 0x4}, {0x9, 0x40, 0x6, 0x10001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000020c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ce0000/0x1000)=nil, &(0x7f0000002040)="44b909aae4f8965c799a6be26e14a2c574de88dd011579e3ba618bc09b2f89b972a2872dbd40421e699ae2c17cbe0685c9e449160a586b142e4a06a5d63721639b1e2bd97b794e0d45530a95104dd8e2e39d61d6a255c74ec8073062900cad641dc5930811da0923d478208dadb841ef", 0x70, r4}, 0x68) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000002340)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002300)={&(0x7f00000021c0)={0x12c, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7b3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24004814}, 0x11) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000002380)={{0x2, 0x4e22, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x40, {0x2, 0x4e23, @loopback}, 'veth1\x00'}) writev(r8, &(0x7f0000002940)=[{&(0x7f0000002400)="3a35053c9150ba0cf9903a0a7f5a13e03aa4d2a086347f329b779a55545a671e6fe0aa92ff80b849a1bfa2791e040072073b4fb17709b9a47577ecf22e2545569b1de3e3dc333151b5dd822c51f241343f12c8a4b4b33992861c8a93b07bda427720142298b3b6a02aeb05a8f95d5d4d00677c953061136ed66dfbc56d1dba9fc18785f3e9bfa87d9fcb03349cbc345e2d22b8495a2e8ea5b18a6f64c7f25ee24c28b6934b378447b6d1c9b70afc86fc56d45f1b44d3b41dbb8da0c591919e66feb57836b312a448b16bf4b0ea15", 0xce}, {&(0x7f0000002500)="11e649b893cdb71b53a5c58de877eea9a1ce480dee0d33bcce02846376c737be7c74ef2a5ab6ff3894", 0x29}, {&(0x7f0000002540)="497a410d48b985", 0x7}, {&(0x7f0000002580)}, {&(0x7f00000025c0)="8ebf6907ae338cdd0c094ced8bc2f1a96e6f5a1355ce60bfcc5e31635708e278473cb85a062506aad532b76437658045372491441c9fec6f7cf27fe3ecdc07eada4356044dda35b206dc5fe8d79aee2707a6bf259d9007f94a4874a531dd8ac32b1dfd429272ad93b84607add3e381df7bf7e204754234bbed2c746045cfa423c1ef98652da2a509f7397d76e0851f764acf52e3a2f746e4ad246f3df077b19b37c22e7d6949fee13b016ddf0dba0a65388421f10c059150f84febf9a077348764610696e8437cddfc726a512a934ad0", 0xd0}, {&(0x7f00000026c0)="e6b7e5eb43e35b65bbbe2a693fd979b9d652de287de680026f5ac7f31b6ceadc14c6f6bfa29fe4082aea6b", 0x2b}, {&(0x7f0000002700)="a6be1a3d99a8f623e94627a3b4392df2557a30005e89c9e83bb93f75d657db2d3313d09b69eef08aca2a3eb8154f7bfdfd5736bb60f09497294c71d2b4f4a612e27db26e865c0c3c668a9e2f835e48a7f91460d387103bef982d19f5d12b29328700d205d834d99ad17df3d8cc5425187f77646102525725b8c7c0f775a2235899fce2767c7d846d64352d05ba479115ef15ddbbc9c089edd36daec79562a2a39cc19418e10a0f8961d7a8cf76943c2ee73d08c0e1691204d3b4238037a5100d31e17f3f0d6d0de628b0fe6876e4304cd27ec035aacb02", 0xd7}, {&(0x7f0000002800)="12cec95f4e052b886045e508a38d3d8af36170b5d9a3a16b18b89f07df1032b886b61099bcd376e663111ccb1ebee3b8bd", 0x31}, {&(0x7f0000002840)="c54869385d813b4f212dd6fbeb6f551f2ddedc6afefe29707013a0ce87f7902afda1bb1b8bbf440abc3897b9387275e3520061731f6e79dc6483c28303710b49160b192bf7f37ccf1592b8baaa870153ec071101c3935f641c453c86b8dce67a9a998c9a56a166970138cc34d4fcba459c61d0da7d8968ac278add1cff2678bbda48e9de188162ecf977ec47210a0ca421d46cf362b8f17cc7654cbb4449b6bd694962c15f251fdb5457fe0608865939c0592c2ad07a6d7422590c81880602172107ef3556c173c85a395a89f5ce0c9aa620e437ab63dbb4c23c4e5b1197ee40a91d580e2b588bc9b5c7fc7a7a6b130bec9bd21ed461b680", 0xf8}], 0x9) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000002a00), 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r9, 0x80286722, &(0x7f0000002ac0)={&(0x7f0000002a40)=""/79, 0x4f, 0x3ff, 0x6}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b40), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000002dc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002b80)={0x200, r10, 0x7b81e87bfd31e8e6, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2174}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x35}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40}, 0x40d0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r3) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x28, r11, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xca, 0xe}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 35.845668201s ago: executing program 1 (id=1118): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) (async) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x1dc7, &(0x7f0000000140)={0x0, 0xd5a8, 0x2, 0x1}, &(0x7f00000003c0), &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1c, 0x27, 0x5, 0x372, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1c, 0x27, 0x5, 0x372, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) 35.772291267s ago: executing program 1 (id=1119): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="33031600ffff140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f4", 0x26, 0x40008c0, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x62}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r11, 0xffffffffffffffff, 0x2) dup3(r9, r11, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000340)='notify_on_release\x00', 0x2, 0x0) sendfile(r13, r13, 0x0, 0x400000c90) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 34.974801345s ago: executing program 3 (id=1120): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x85, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000020532b3100400001020301090273000301054007080b0200012630020904000000010130000a2401010f000e06000005240c08000904010000010230000904010101010230000905010908000c00020a2525ff000000fc0200090402000001023000090402010101"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x20, 0x11, 0x7, "75a3f7b7ea27e7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000640)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="40115c0000005c0d22843b7262d95456917cc07a59d887a040339406150aa4d18330a8770da7433adcc7f95d3cec0cd4b140d27edd84c848c7d2cab7d44a119c3cca6468a6aaa02a24db70225a003b3faab33b8b1d9515b116ec54233f92d4be1a5deecc4b505c0811dea488aa1c6052af2d00000000000000002f18cfd7466f956982925e444f436dd59b69c9337dd0febbd4da21517105d55a17"], 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002200)={0x20, 0x1d, 0x1, 0x0, 0x0, {0x8a, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x50810}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x2, {0x2, 0x2c}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 34.623050292s ago: executing program 0 (id=1121): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r1 = socket(0x10, 0x80000, 0x3) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x1) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) statx(r2, 0x0, 0x2000, 0x100, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000003, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) fcntl$setlease(r1, 0x400, 0x2) 33.497908201s ago: executing program 1 (id=1122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f0000000040)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000480)=0xfffffbff, 0x4) 31.454408067s ago: executing program 0 (id=1123): r0 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[], [], 0x2f}) socket(0x1e, 0x2, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[], [], 0x2f}) (async) 26.15063939s ago: executing program 1 (id=1124): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x4000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f00000024c0)=""/209, 0xd1, 0x8) (async) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r5, 0x400, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0xff, 0xffffffff, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x2, 0x1, 0x6890, 0x3, 0xa3a, 'wg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @private=0xa010100, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@private=0xa010102, @local, 0xffffff00, 0xff, 0x3, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xc, 0x801, 0x7, 0x800, 0x1, 'macvlan1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x540}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, &(0x7f0000000080)=0x7) (async) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r8, &(0x7f0000002bc0)={0x2020}, 0x2020) (async, rerun: 32) accept4$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) (async, rerun: 32) r9 = eventfd(0xfffffffa) fsetxattr$system_posix_acl(r9, &(0x7f0000002740)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 25.381463242s ago: executing program 3 (id=1125): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000008cabe2531397"], 0x28}, 0xc4) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) 22.556417098s ago: executing program 0 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) fcntl$addseals(r3, 0x409, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22.161997787s ago: executing program 1 (id=1127): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) r4 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') fchdir(r4) close_range(r0, r2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') (async) fchdir(r4) (async) close_range(r0, r2, 0x0) (async) 21.703607836s ago: executing program 32 (id=1111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x0, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x30}, 0x804) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x101, 0x0, 0x2, 0x9, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}], 0x1}) unshare(0x66020000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/snmp\x00') exit(0x2616) close(0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x760, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000300)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8300, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB='\a'], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000280)={0x4, 0x8}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x2, 0x8, 0xb, 0x2}, {0xfff8, 0x8, 0x8, 0x6}, {0x6, 0x4, 0x49, 0x100}, {0x0, 0x9, 0x1e, 0x89}, {0x4, 0x6, 0xa, 0x7f}]}) 15.914202982s ago: executing program 3 (id=1129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fremovexattr(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x2c, 0x24, 0xc8fe83ee7f0e7fd5, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x0, [@typed={0x4}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x2c}], 0x1}, 0x4000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f3245000fbe252e8a094d36420f705626002e660f3a176a4b00b9800100c00f20c035f70000000f22c067420f01c3460f79c20cb8400f00994200000045c194710a00000005c68244bcae0090", 0x5d}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x30}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpeername$inet6(r6, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x94020, 0x180) mknodat(r7, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000000240)={0x20, 0x0, r8, {0x0, 0x18}}, 0x20) chdir(&(0x7f00000000c0)='./bus\x00') lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000002c0)={0x2, [0xfffffffc, 0x800]}, 0x10) 5.854736355s ago: executing program 33 (id=1126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) fcntl$addseals(r3, 0x409, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.176363258s ago: executing program 34 (id=1127): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) r4 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') fchdir(r4) close_range(r0, r2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583", @ANYRES16], 0x0) (async) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') (async) fchdir(r4) (async) close_range(r0, r2, 0x0) (async) 0s ago: executing program 35 (id=1129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fremovexattr(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x2c, 0x24, 0xc8fe83ee7f0e7fd5, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x0, [@typed={0x4}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x2c}], 0x1}, 0x4000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f3245000fbe252e8a094d36420f705626002e660f3a176a4b00b9800100c00f20c035f70000000f22c067420f01c3460f79c20cb8400f00994200000045c194710a00000005c68244bcae0090", 0x5d}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x30}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpeername$inet6(r6, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x94020, 0x180) mknodat(r7, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f0000000240)={0x20, 0x0, r8, {0x0, 0x18}}, 0x20) chdir(&(0x7f00000000c0)='./bus\x00') lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f00000002c0)={0x2, [0xfffffffc, 0x800]}, 0x10) kernel console output (not intermixed with test programs): .557075][ T367] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.564889][ T367] usb 3-1: too many configurations: 18, using maximum allowed: 8 [ 125.573224][ T367] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.580919][ T367] usb 3-1: can't read configurations, error -71 [ 125.713384][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 125.843387][ T9] usb 4-1: device descriptor read/64, error -71 [ 126.093436][ T9] usb 4-1: device descriptor read/64, error -71 [ 126.131217][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 126.131238][ T36] audit: type=1400 audit(1772950515.720:560): avc: denied { setattr } for pid=3069 comm="syz.2.854" path="/" dev="configfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.233385][ T237] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 126.333626][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 126.383400][ T237] usb 1-1: Using ep0 maxpacket: 8 [ 126.389955][ T237] usb 1-1: config 165 interface 0 has no altsetting 0 [ 126.398502][ T237] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=89.f2 [ 126.407842][ T237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.416165][ T237] usb 1-1: Product: syz [ 126.420418][ T237] usb 1-1: Manufacturer: syz [ 126.425115][ T237] usb 1-1: SerialNumber: syz [ 126.464160][ T9] usb 4-1: device descriptor read/64, error -71 [ 126.650931][ T237] snd-usb-audio 1-1:165.0: probe with driver snd-usb-audio failed with error -22 [ 126.661209][ T237] usb 1-1: USB disconnect, device number 63 [ 126.699984][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:165.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 126.715961][ T9] usb 4-1: device descriptor read/64, error -71 [ 126.823520][ T9] usb usb4-port1: attempt power cycle [ 127.163470][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 127.173400][ T237] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 127.184406][ T9] usb 4-1: device descriptor read/8, error -71 [ 127.314400][ T9] usb 4-1: device descriptor read/8, error -71 [ 127.324666][ T237] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.334977][ T237] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.342928][ T3086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.344103][ T237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.354925][ T3086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.363817][ T237] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.381831][ T237] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.390936][ T376] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 127.398725][ T237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.409377][ T237] hub 3-1:1.0: bad descriptor, ignoring hub [ 127.415358][ T237] hub 3-1:1.0: probe with driver hub failed with error -5 [ 127.422558][ T237] cdc_wdm 3-1:1.0: skipping garbage [ 127.427801][ T237] cdc_wdm 3-1:1.0: skipping garbage [ 127.433800][ T237] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 127.439721][ T237] cdc_wdm 3-1:1.0: Unknown control protocol [ 127.553423][ T376] usb 1-1: Using ep0 maxpacket: 32 [ 127.553431][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 127.568221][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 127.574515][ T9] usb 4-1: device descriptor read/8, error -71 [ 127.579439][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18139, setting to 1024 [ 127.596881][ T376] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.605940][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.615492][ T376] usb 1-1: config 0 descriptor?? [ 127.620768][ T3084] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 127.625797][ T3081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.636702][ T3081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.646096][ T376] hub 1-1:0.0: USB hub found [ 127.650462][ T3081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.659800][ T3081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.714516][ T9] usb 4-1: device descriptor read/8, error -71 [ 127.773499][ T31] usb 3-1: USB disconnect, device number 62 [ 127.823505][ T9] usb usb4-port1: unable to enumerate USB device [ 127.836908][ T376] hub 1-1:0.0: 1 port detected [ 127.996828][ T3091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.005877][ T3091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.037605][ T36] audit: type=1326 audit(1772950517.630:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.0.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11759c799 code=0x0 [ 128.140185][ T376] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 128.150564][ T376] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 128.160146][ T376] usbhid 1-1:0.0: can't add hid device: -71 [ 128.166325][ T376] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.194008][ T376] usb 1-1: USB disconnect, device number 64 [ 128.443410][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 128.554118][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.562664][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.579070][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.588231][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.596430][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.605325][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.613880][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.622519][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.630346][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 128.633813][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.639063][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 128.646845][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.658264][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 128.666680][ T3112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.678014][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 128.684955][ T3112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.694286][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.709880][ T9] usb 3-1: Product: syz [ 128.714076][ T9] usb 3-1: Manufacturer: syz [ 128.718765][ T9] usb 3-1: SerialNumber: syz [ 128.823405][ T453] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 128.931267][ T9] usb 3-1: Can't get UAC3 power state for id 10 [ 128.938488][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 128.947842][ T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 128.960739][ T9] usb 3-1: USB disconnect, device number 63 [ 128.977950][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 128.986330][ T453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.996716][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 129.012390][ T453] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 129.027756][ T453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.036988][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.045077][ T453] usb 4-1: SerialNumber: syz [ 129.254098][ T376] usb 4-1: USB disconnect, device number 77 [ 129.323415][ T453] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 129.473390][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 129.479954][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.491170][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.500976][ T453] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 129.510312][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.518912][ T453] usb 1-1: config 0 descriptor?? [ 129.593420][ T36] audit: type=1400 audit(1772950519.180:562): avc: denied { create } for pid=3124 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 129.638218][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.773289][ T36] audit: type=1400 audit(1772950519.360:563): avc: denied { write } for pid=3128 comm="syz.3.875" name="/" dev="incremental-fs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.927647][ T453] savu 0003:1E7D:2D5A.0029: unbalanced delimiter at end of report description [ 129.938982][ T453] savu 0003:1E7D:2D5A.0029: parse failed [ 129.944869][ T453] savu 0003:1E7D:2D5A.0029: probe with driver savu failed with error -22 [ 130.128499][ T376] usb 1-1: USB disconnect, device number 65 [ 131.043566][ T453] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 131.195160][ T453] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.205555][ T453] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 131.214868][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.222902][ T453] usb 4-1: Product: syz [ 131.227187][ T453] usb 4-1: Manufacturer: syz [ 131.231798][ T453] usb 4-1: SerialNumber: syz [ 131.439616][ T453] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 131.447524][ T453] usb 4-1: unit 13 not found! [ 131.457478][ T453] usb 4-1: USB disconnect, device number 78 [ 131.466877][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 131.693469][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.693476][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 131.733407][ T376] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 131.883372][ T376] usb 1-1: Using ep0 maxpacket: 32 [ 131.890047][ T376] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 131.898585][ T376] usb 1-1: config 0 has no interface number 0 [ 131.906725][ T376] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 131.916227][ T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.924567][ T376] usb 1-1: Product: syz [ 131.928928][ T376] usb 1-1: Manufacturer: syz [ 131.933821][ T376] usb 1-1: SerialNumber: syz [ 131.946775][ T376] usb 1-1: config 0 descriptor?? [ 131.957043][ T376] smsc95xx v2.0.0 [ 131.993386][ T453] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 132.173442][ T453] usb 3-1: Using ep0 maxpacket: 8 [ 132.180115][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.204182][ T453] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 132.215548][ T9] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 132.224730][ T453] usb 3-1: New USB device found, idVendor=0499, idProduct=7000, bcdDevice= 0.40 [ 132.233930][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.241955][ T453] usb 3-1: Product: â ‰ [ 132.246195][ T453] usb 3-1: Manufacturer: ୼꺞⯼ﲳ궷艣핎䅱Ʞㄾ꒢Θ쫠쓑ဒ敾峳æ¼ìž’綇Ⴔ鑜飶ãšèµ›å¦¡ä´­æº¢Ø¯æ¢—ꃶ⚑膎䷋彨é脜侕í‡îŠ¡ì“ ëž©ï»»ã´í¡å¶±äº´â´®Óµìº¯çƒ…ᔿ쾎댦矕뭷౯廾㜢߄쑭ë†ë¯ºÆ䳥ꃄæ”å•‹ïë¹å•áœ¢ï‘†ä¨Šã†œë¦˜å¡¥à¿³îš‚꽅駥颧ᆶ憯쌟ê…ണ䀼涂ᙲ켹껰쿳༲₮Ứë‚ç”»ì¿ï’¹ì¸ïŸ­ê™Œë˜®ä˜’쌒㭯í—쟼â‘啌훿îžáž¿ [ 132.281301][ T453] usb 3-1: SerialNumber: ⊠[ 132.294803][ T3157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 132.305606][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'. [ 132.374550][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.385390][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 132.397249][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 132.407335][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.422227][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 132.431391][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.439515][ T9] usb 4-1: Product: syz [ 132.443735][ T9] usb 4-1: Manufacturer: syz [ 132.448478][ T9] usb 4-1: SerialNumber: syz [ 132.453978][ T9] usb 4-1: config 0 descriptor?? [ 132.490482][ T453] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 132.500615][ T453] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 132.512362][ T453] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 132.531059][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 132.661627][ T453] usb 4-1: USB disconnect, device number 79 [ 132.764877][ T376] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 133.039355][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.048729][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.166163][ T376] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 133.177026][ T376] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 133.186235][ T376] usb 1-1: USB disconnect, device number 66 [ 133.207894][ T36] audit: type=1400 audit(1772950522.800:564): avc: denied { map } for pid=3165 comm="syz.3.888" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 133.603403][ T453] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 133.754747][ T453] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 133.763551][ T453] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 133.776753][ T453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.787746][ T453] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.797784][ T453] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.816334][ T453] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 133.827992][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.843528][ T453] usb 4-1: config 0 descriptor?? [ 133.906279][ T3213] kvm: kvm [3212]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0x5407 [ 133.915360][ T3213] kvm: kvm [3212]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc1) = 0x5b07 [ 134.058261][ T376] kernel write not supported for file /uhid (pid: 376 comm: kworker/1:4) [ 134.079324][ T3224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.088787][ T3224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.100109][ T3224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.110952][ T3224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.139994][ T3228] batadv_slave_0: entered promiscuous mode [ 134.150447][ T3228] batadv_slave_0: left promiscuous mode [ 134.250987][ T3180] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 134.252915][ T453] usbhid 4-1:0.0: can't add hid device: -71 [ 134.271284][ T453] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.280883][ T453] usb 4-1: USB disconnect, device number 80 [ 134.403564][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 134.554479][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.565554][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.575571][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.584934][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.594068][ T9] usb 1-1: config 0 descriptor?? [ 134.736974][ T3249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.745716][ T3249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.770541][ T453] usb 3-1: USB disconnect, device number 64 [ 134.802594][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 134.812473][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.822124][ T9] usb 1-1: USB disconnect, device number 67 [ 135.113419][ T453] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 135.121068][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 135.265423][ T3257] rust_binder: Got transaction with invalid offset. [ 135.265457][ T3257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.272448][ T3257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1107 [ 135.273378][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 135.297678][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.308151][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.315899][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.325662][ T453] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.335932][ T3259] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 135.336013][ T453] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.346661][ T36] audit: type=1400 audit(1772950524.940:565): avc: denied { relabelto } for pid=3258 comm="syz.1.918" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 135.357008][ T3259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.382765][ T36] audit: type=1400 audit(1772950524.940:566): avc: denied { associate } for pid=3258 comm="syz.1.918" name="loop5" dev="devtmpfs" ino=54 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:urandom_device_t:s0" [ 135.390964][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.419062][ T376] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 135.429417][ T3259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.442978][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.451223][ T9] usb 1-1: Product: syz [ 135.455517][ T9] usb 1-1: Manufacturer: syz [ 135.460231][ T9] usb 1-1: SerialNumber: syz [ 135.464904][ T453] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 135.473976][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.481957][ T453] usb 3-1: Product: syz [ 135.486495][ T453] usb 3-1: Manufacturer: syz [ 135.491402][ T453] usb 3-1: SerialNumber: syz [ 135.499681][ T453] usb 3-1: selecting invalid altsetting 1 [ 135.584528][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.595541][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.606189][ T376] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.615356][ T376] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 135.623412][ T376] usb 4-1: Manufacturer: syz [ 135.628783][ T376] usb 4-1: config 0 descriptor?? [ 135.700265][ T3233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.708939][ T3233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.982392][ T36] audit: type=1400 audit(1772950525.570:567): avc: denied { shutdown } for pid=3262 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.016210][ T36] audit: type=1400 audit(1772950525.610:568): avc: denied { write } for pid=3264 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.047430][ T294] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.054477][ T294] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.225624][ T9] usb 1-1: 0:2 : does not exist [ 136.237783][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 136.249494][ T453] usb 3-1: unit 6 not found! [ 136.256751][ T9] usb 1-1: USB disconnect, device number 68 [ 136.441860][ T376] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002A/input/input22 [ 136.453976][ T376] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002A/input/input23 [ 136.465821][ T376] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002A/input/input24 [ 136.479508][ T376] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002A/input/input25 [ 136.482031][ T453] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.502701][ T376] uclogic 0003:256C:006D.002A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 136.505174][ T453] usb 3-1: USB disconnect, device number 65 [ 136.567685][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory [ 136.646958][ T31] usb 4-1: USB disconnect, device number 81 [ 136.793452][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 136.943408][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 136.950371][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.960675][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.969696][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 136.978973][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.987940][ T9] usb 1-1: config 0 descriptor?? [ 137.206529][ T453] usb 1-1: USB disconnect, device number 69 [ 137.314359][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 137.473400][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.484763][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.512136][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.522562][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 137.533535][ T9] usb 3-1: config 1 interface 2 has no altsetting 0 [ 137.541703][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 137.550878][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.559150][ T9] usb 3-1: Product: syz [ 137.563406][ T453] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 137.573058][ T9] usb 3-1: Manufacturer: syz [ 137.583372][ T9] usb 3-1: SerialNumber: syz [ 137.737641][ T453] usb 1-1: string descriptor 0 read error: -71 [ 137.744332][ T453] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.751454][ T36] audit: type=1400 audit(1772950527.340:569): avc: denied { create } for pid=3310 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 137.753673][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.783564][ T36] audit: type=1400 audit(1772950527.380:570): avc: denied { sys_admin } for pid=3310 comm="syz.3.933" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 137.806807][ T9] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 137.823408][ T453] usb 1-1: can't set config #1, error -71 [ 137.829420][ T9] usb 3-1: 1:1 : sample bitwidth 248 in over sample bytes 1 [ 137.838547][ T453] usb 1-1: USB disconnect, device number 70 [ 137.846236][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 137.852367][ T9] usb 3-1: selecting invalid altsetting 0 [ 137.860185][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 137.873400][ T9] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 137.880827][ T9] usb 3-1: 1:1 : sample bitwidth 248 in over sample bytes 1 [ 137.893440][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 137.899577][ T9] usb 3-1: selecting invalid altsetting 0 [ 137.905455][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 137.915980][ T9] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 137.923528][ T9] usb 3-1: 1:1 : sample bitwidth 248 in over sample bytes 1 [ 137.930942][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 137.937270][ T9] usb 3-1: selecting invalid altsetting 0 [ 137.948173][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 137.964436][ T9] usb 3-1: USB disconnect, device number 66 [ 137.978675][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 138.093384][ T1331] Bluetooth: hci0: command 0x1003 tx timeout [ 138.099431][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.133409][ T31] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 138.261759][ T3322] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 138.283432][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 138.289921][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.298468][ T31] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 138.306852][ T31] usb 4-1: config 0 has no interface number 0 [ 138.313363][ T31] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 138.321022][ T3322] 9pnet: p9_errstr2errno: server reported unknown error [ 138.324411][ T31] usb 4-1: config 0 interface 88 has no altsetting 0 [ 138.344099][ T31] usb 4-1: string descriptor 0 read error: -22 [ 138.350379][ T31] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 138.359782][ T31] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 138.368902][ T31] usb 4-1: config 0 descriptor?? [ 138.380751][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input26 [ 138.388592][ T36] audit: type=1400 audit(1772950527.970:571): avc: denied { read write } for pid=3326 comm="syz.2.938" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.495174][ T36] audit: type=1400 audit(1772950527.970:572): avc: denied { open } for pid=3326 comm="syz.2.938" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.663108][ T9] usb 4-1: USB disconnect, device number 82 [ 138.683365][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 138.702870][ T3338] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 138.710647][ T3338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 138.719494][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.726611][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.805598][ T3341] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.837923][ T3344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.846559][ T3344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.883501][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 138.891982][ T31] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 138.901293][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.909453][ T31] usb 1-1: Product: syz [ 138.913757][ T31] usb 1-1: Manufacturer: syz [ 138.918388][ T31] usb 1-1: SerialNumber: syz [ 138.924292][ T31] usb 1-1: config 0 descriptor?? [ 138.930568][ T31] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 138.938531][ T31] usb 1-1: Detected FT-X [ 139.136337][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 139.143436][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 139.150509][ T31] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 139.157827][ T31] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 139.167067][ T31] usb 1-1: USB disconnect, device number 71 [ 139.174179][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.184030][ T31] ftdi_sio 1-1:0.0: device disconnected [ 139.273366][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 139.424758][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.433362][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 139.444438][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 139.458249][ T9] usb 3-1: string descriptor 0 read error: -22 [ 139.464829][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 139.474121][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.519114][ T3360] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 139.527642][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 139.593404][ T453] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 139.659147][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 139.763418][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 139.771304][ T453] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 139.776060][ T3385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.781970][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.789751][ T3385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.797978][ T453] usb 4-1: Product: syz [ 139.813355][ T453] usb 4-1: Manufacturer: syz [ 139.818098][ T453] usb 4-1: SerialNumber: syz [ 139.838364][ T36] audit: type=1400 audit(1772950529.430:573): avc: denied { map } for pid=3386 comm="syz.0.959" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.861516][ T36] audit: type=1400 audit(1772950529.430:574): avc: denied { execute } for pid=3386 comm="syz.0.959" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.116924][ T3350] netlink: 'syz.2.946': attribute type 4 has an invalid length. [ 140.128070][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 140.138738][ T9] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 140.156868][ T9] usb 3-1: USB disconnect, device number 67 [ 140.241155][ T3357] syz.3.949 (3357): /proc/3356/oom_adj is deprecated, please use /proc/3356/oom_score_adj instead. [ 140.252629][ T3357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.949'. [ 140.263985][ T453] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 140.275442][ T453] usb 4-1: USB disconnect, device number 83 [ 140.377107][ T36] audit: type=1400 audit(1772950529.970:575): avc: denied { write } for pid=3404 comm="syz.1.966" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.415120][ T3410] overlayfs: workdir and upperdir must be separate subtrees [ 140.661380][ T3433] tipc: New replicast peer: 255.255.255.255 [ 140.667988][ T3433] tipc: Enabled bearer , priority 10 [ 140.688584][ T36] audit: type=1400 audit(1772950530.280:576): avc: denied { accept } for pid=3432 comm="syz.2.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.814337][ T3439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 140.943517][ T36] audit: type=1400 audit(1772950530.530:577): avc: denied { mounton } for pid=3460 comm="syz.3.980" path="/selinux/context" dev="selinuxfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 141.075141][ T3479] 8021q: VLANs not supported on lo [ 141.080751][ T3479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'. [ 141.127059][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.137807][ T3487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.147547][ T3487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.159517][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.170249][ T3486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.179750][ T3486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.310757][ T237] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 141.353407][ T31] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 141.363233][ T3496] process 'memfd:-BÕN4¦EyÛѧ±Sñ:)' started with executable stack [ 141.453397][ T237] usb 4-1: device descriptor read/64, error -71 [ 141.503414][ T31] usb 1-1: device descriptor read/64, error -71 [ 141.703428][ T237] usb 4-1: device descriptor read/64, error -71 [ 141.743436][ T31] usb 1-1: device descriptor read/64, error -71 [ 141.793425][ T10] tipc: Node number set to 3849718771 [ 141.803393][ T453] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 141.830620][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.839670][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.848486][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.857839][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.953444][ T237] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 141.963477][ T453] usb 3-1: Using ep0 maxpacket: 32 [ 141.970165][ T453] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 141.978416][ T453] usb 3-1: config 0 has no interface number 0 [ 141.986290][ T453] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 141.993410][ T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 141.995398][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.010934][ T453] usb 3-1: Product: syz [ 142.015135][ T453] usb 3-1: Manufacturer: syz [ 142.019733][ T453] usb 3-1: SerialNumber: syz [ 142.025333][ T453] usb 3-1: config 0 descriptor?? [ 142.031258][ T453] smsc95xx v2.0.0 [ 142.083438][ T237] usb 4-1: device descriptor read/64, error -71 [ 142.123444][ T31] usb 1-1: device descriptor read/64, error -71 [ 142.234348][ T3515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.242951][ T3515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.256115][ T453] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 142.266889][ T453] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 142.279112][ T453] usb 3-1: USB disconnect, device number 68 [ 142.323386][ T237] usb 4-1: device descriptor read/64, error -71 [ 142.363452][ T31] usb 1-1: device descriptor read/64, error -71 [ 142.434358][ T237] usb usb4-port1: attempt power cycle [ 142.473468][ T31] usb usb1-port1: attempt power cycle [ 142.733625][ T453] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 142.773458][ T237] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 142.794493][ T237] usb 4-1: device descriptor read/8, error -71 [ 142.813411][ T31] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 142.834564][ T31] usb 1-1: device descriptor read/8, error -71 [ 142.883407][ T453] usb 3-1: Using ep0 maxpacket: 8 [ 142.890078][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 142.898648][ T453] usb 3-1: config 2 has an invalid interface number: 11 but max is 0 [ 142.907236][ T453] usb 3-1: config 2 has no interface number 0 [ 142.913579][ T453] usb 3-1: config 2 interface 11 has no altsetting 0 [ 142.920150][ T3526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.922449][ T453] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=99.24 [ 142.929299][ T3526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.939085][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.946682][ T237] usb 4-1: device descriptor read/8, error -71 [ 142.954005][ T453] usb 3-1: Product: syz [ 142.961829][ T3526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.964473][ T453] usb 3-1: Manufacturer: syz [ 142.974052][ T3526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.977911][ T453] usb 3-1: SerialNumber: syz [ 142.986050][ T31] usb 1-1: device descriptor read/8, error -71 [ 143.195983][ T3524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.203411][ T237] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 143.204684][ T3524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.224872][ T237] usb 4-1: device descriptor read/8, error -71 [ 143.226461][ T453] ums-cypress 3-1:2.11: USB Mass Storage device detected [ 143.233904][ T31] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 143.265114][ T31] usb 1-1: device descriptor read/8, error -71 [ 143.267437][ T453] usb 3-1: USB disconnect, device number 69 [ 143.354504][ T237] usb 4-1: device descriptor read/8, error -71 [ 143.394510][ T31] usb 1-1: device descriptor read/8, error -71 [ 143.463491][ T237] usb usb4-port1: unable to enumerate USB device [ 143.503577][ T31] usb usb1-port1: unable to enumerate USB device [ 143.516376][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 143.631706][ T3536] SELinux: syz.1.1005 (3536) set checkreqprot to 1. This is no longer supported. [ 143.631725][ T36] audit: type=1400 audit(1772950533.220:578): avc: denied { setcheckreqprot } for pid=3535 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.865756][ T36] audit: type=1400 audit(1772950533.460:579): avc: denied { rename } for pid=3547 comm="syz.2.1009" name="file0" dev="tmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 143.882342][ T3549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.897337][ T3549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.103396][ T453] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 144.264472][ T453] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 144.274833][ T453] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.284576][ T453] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.293767][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.301786][ T453] usb 3-1: SerialNumber: syz [ 144.503439][ T237] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 144.513039][ T453] usb 3-1: 0:2 : does not exist [ 144.518653][ T453] usb 3-1: unit 5 not found! [ 144.526193][ T453] usb 3-1: USB disconnect, device number 70 [ 144.537473][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 144.653521][ T237] usb 1-1: Using ep0 maxpacket: 16 [ 144.659799][ T237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.670899][ T237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.680766][ T237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.693695][ T237] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.702729][ T237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.711455][ T237] usb 1-1: config 0 descriptor?? [ 145.013419][ T453] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 145.080857][ T3565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 145.119314][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.128045][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.141609][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.150166][ T237] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 145.159090][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.166483][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.173362][ T453] usb 4-1: Using ep0 maxpacket: 32 [ 145.173907][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.180196][ T453] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 145.186835][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.194996][ T453] usb 4-1: config 0 has no interface number 0 [ 145.201987][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.208247][ T453] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 145.215468][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.226767][ T453] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 145.232948][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.242391][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.249353][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.257845][ T453] usb 4-1: Product: syz [ 145.264714][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.268996][ T453] usb 4-1: Manufacturer: syz [ 145.276089][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.280758][ T453] usb 4-1: SerialNumber: syz [ 145.287881][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.296991][ T453] usb 4-1: config 0 descriptor?? [ 145.299758][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.305915][ T3559] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.311970][ T237] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 145.330479][ T237] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002B/input/input28 [ 145.339363][ T3557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.352238][ T3557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.353879][ T237] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 145.383381][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 145.394198][ T237] usb 1-1: USB disconnect, device number 76 [ 145.522412][ T3559] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 145.543781][ T10] usb 3-1: too many configurations: 72, using maximum allowed: 8 [ 145.557242][ T10] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 145.566461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.575453][ T10] usb 3-1: config 0 descriptor?? [ 145.581332][ T10] usb 3-1: bad CDC descriptors [ 145.693524][ T237] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 145.782054][ T10] usb 3-1: USB disconnect, device number 71 [ 145.843377][ T237] usb 1-1: Using ep0 maxpacket: 32 [ 145.849694][ T237] usb 1-1: config 3 has an invalid interface number: 160 but max is 0 [ 145.858115][ T237] usb 1-1: config 3 has no interface number 0 [ 145.864396][ T237] usb 1-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16 [ 145.874360][ T237] usb 1-1: config 3 interface 160 has no altsetting 0 [ 145.882714][ T237] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=7d.bd [ 145.891964][ T237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.900361][ T237] usb 1-1: Product: syz [ 145.904593][ T237] usb 1-1: Manufacturer: syz [ 145.909215][ T237] usb 1-1: SerialNumber: syz [ 145.915385][ T3577] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.126053][ T237] usbhid 1-1:3.160: couldn't find an input interrupt endpoint [ 146.131871][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 146.137269][ T237] usb 1-1: USB disconnect, device number 77 [ 146.344224][ T453] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 146.354523][ T453] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 146.365572][ T453] asix 4-1:0.188: probe with driver asix failed with error -61 [ 146.613375][ T237] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 146.683125][ T3585] 9pnet_fd: Insufficient options for proto=fd [ 146.754918][ T3591] netlink: 'syz.1.1025': attribute type 28 has an invalid length. [ 146.760762][ T3593] rust_binder: 594: no such ref 3 [ 146.768106][ T3593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 146.769136][ T237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.798855][ T237] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.810030][ T237] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.827162][ T237] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.840538][ T237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.849477][ T237] usb 3-1: config 0 descriptor?? [ 147.000794][ T3608] tipc: New replicast peer: 255.255.255.255 [ 147.006954][ T3608] tipc: Enabled bearer , priority 10 [ 147.015282][ T3608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.023907][ T3608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.032349][ T3608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.041548][ T3608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.051583][ T3608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3608 comm=syz.1.1030 [ 147.057374][ T36] audit: type=1400 audit(1772950536.650:580): avc: denied { ioctl } for pid=3609 comm="syz.0.1031" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.289649][ T237] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 147.298712][ T237] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.333399][ T368] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 147.485630][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.493750][ T368] usb 1-1: not running at top speed; connect to a high speed hub [ 147.502702][ T368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 147.510948][ T368] usb 1-1: can't read configurations, error -22 [ 147.643434][ T368] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 147.795091][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.798112][ T453] usb 3-1: USB disconnect, device number 72 [ 147.803914][ T368] usb 1-1: not running at top speed; connect to a high speed hub [ 147.819672][ T368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 147.827684][ T368] usb 1-1: can't read configurations, error -22 [ 147.834290][ T368] usb usb1-port1: attempt power cycle [ 148.123374][ T453] tipc: Node number set to 2994877872 [ 148.173398][ T368] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 148.195447][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.203589][ T368] usb 1-1: not running at top speed; connect to a high speed hub [ 148.212375][ T368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 148.220344][ T368] usb 1-1: can't read configurations, error -22 [ 148.269790][ T453] usb 4-1: USB disconnect, device number 88 [ 148.371348][ T368] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 148.401622][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.411494][ T368] usb 1-1: not running at top speed; connect to a high speed hub [ 148.420631][ T368] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 148.433460][ T368] usb 1-1: can't read configurations, error -22 [ 148.444821][ T368] usb usb1-port1: unable to enumerate USB device [ 148.454745][ T36] audit: type=1400 audit(1772950538.050:581): avc: denied { getopt } for pid=3617 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 149.963365][ T453] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 150.108800][ T3643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.117521][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 150.124725][ T3643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.136552][ T3643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.146280][ T3643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.157448][ T3643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.168106][ T3643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.313382][ T453] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 150.463376][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 150.470070][ T453] usb usb3-port1: attempt power cycle [ 150.493541][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 150.633380][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.813461][ T453] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 150.833833][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 150.873485][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.963748][ T453] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 151.003749][ T453] usb 3-1: Invalid ep0 maxpacket: 64 [ 151.009692][ T453] usb usb3-port1: unable to enumerate USB device [ 151.038054][ T3648] FAULT_INJECTION: forcing a failure. [ 151.038054][ T3648] name failslab, interval 1, probability 0, space 0, times 0 [ 151.050889][ T3648] CPU: 0 UID: 0 PID: 3648 Comm: syz.1.1042 Not tainted syzkaller #0 93fdfe3663caa6d824c2578ca6c3b1aacfeda3e9 [ 151.050940][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.050954][ T3648] Call Trace: [ 151.050970][ T3648] [ 151.050979][ T3648] __dump_stack+0x21/0x30 [ 151.051011][ T3648] dump_stack_lvl+0x140/0x1c0 [ 151.051035][ T3648] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.051060][ T3648] ? __cfi_avc_has_perm+0x10/0x10 [ 151.051084][ T3648] ? kasan_save_alloc_info+0x40/0x50 [ 151.051107][ T3648] dump_stack+0x19/0x20 [ 151.051130][ T3648] should_fail_ex+0x3d7/0x530 [ 151.051157][ T3648] should_failslab+0xac/0x100 [ 151.051185][ T3648] __kmalloc_cache_noprof+0x41/0x470 [ 151.051210][ T3648] ? vhost_task_create+0x12c/0x400 [ 151.051241][ T3648] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 151.051273][ T3648] vhost_task_create+0x12c/0x400 [ 151.051300][ T3648] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 151.051332][ T3648] ? __cfi_vhost_task_create+0x10/0x10 [ 151.051361][ T3648] ? __cfi_vhost_task_fn+0x10/0x10 [ 151.051390][ T3648] ? __kasan_check_write+0x18/0x20 [ 151.051413][ T3648] ? mutex_lock+0x97/0x1d0 [ 151.051437][ T3648] ? __cfi_mutex_lock+0x10/0x10 [ 151.051461][ T3648] ? kernel_text_address+0xa9/0xe0 [ 151.051485][ T3648] kvm_mmu_post_init_vm+0x161/0x300 [ 151.051511][ T3648] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 151.051536][ T3648] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 151.051560][ T3648] ? kstrtoull+0x13b/0x1e0 [ 151.051579][ T3648] ? kstrtouint+0x78/0xf0 [ 151.051597][ T3648] ? ioctl_has_perm+0x1bc/0x500 [ 151.051618][ T3648] ? __asan_memcpy+0x5a/0x80 [ 151.051641][ T3648] ? ioctl_has_perm+0x408/0x500 [ 151.051662][ T3648] ? has_cap_mac_admin+0xd0/0xd0 [ 151.051683][ T3648] ? __kasan_check_write+0x18/0x20 [ 151.051706][ T3648] ? mutex_lock_killable+0x97/0x1d0 [ 151.051730][ T3648] ? __cfi_mutex_lock_killable+0x10/0x10 [ 151.051755][ T3648] ? proc_fail_nth_write+0x184/0x220 [ 151.051778][ T3648] kvm_vcpu_ioctl+0xa48/0x1000 [ 151.051806][ T3648] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 151.051833][ T3648] ? __cfi_vfs_write+0x10/0x10 [ 151.051857][ T3648] ? __kasan_check_write+0x18/0x20 [ 151.051881][ T3648] ? mutex_unlock+0x90/0x240 [ 151.051903][ T3648] ? __cfi_mutex_unlock+0x10/0x10 [ 151.051926][ T3648] ? __fget_files+0x2c5/0x340 [ 151.051954][ T3648] ? __fget_files+0x2c5/0x340 [ 151.051988][ T3648] ? bpf_lsm_file_ioctl+0xd/0x20 [ 151.052009][ T3648] ? security_file_ioctl+0x3e/0x110 [ 151.052030][ T3648] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 151.052057][ T3648] __se_sys_ioctl+0x135/0x1b0 [ 151.052084][ T3648] __x64_sys_ioctl+0x7f/0xa0 [ 151.052111][ T3648] x64_sys_call+0x1878/0x2ee0 [ 151.052137][ T3648] do_syscall_64+0x57/0xf0 [ 151.052157][ T3648] ? clear_bhb_loop+0x50/0xa0 [ 151.052178][ T3648] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.052208][ T3648] RIP: 0033:0x7fb11fd9c799 [ 151.052226][ T3648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.052244][ T3648] RSP: 002b:00007fb120baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.052268][ T3648] RAX: ffffffffffffffda RBX: 00007fb120015fa0 RCX: 00007fb11fd9c799 [ 151.052283][ T3648] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 151.052297][ T3648] RBP: 00007fb120baa090 R08: 0000000000000000 R09: 0000000000000000 [ 151.052311][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.052324][ T3648] R13: 00007fb120016038 R14: 00007fb120015fa0 R15: 00007ffec43757f8 [ 151.052342][ T3648] [ 151.473394][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 151.603433][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.619602][ T36] audit: type=1400 audit(1772950541.210:582): avc: denied { setcurrent } for pid=3656 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 151.639241][ T36] audit: type=1401 audit(1772950541.210:583): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 151.682782][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 151.843387][ T10] usb 1-1: device descriptor read/64, error -71 [ 151.953479][ T10] usb usb1-port1: attempt power cycle [ 151.983386][ T453] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 152.133362][ T453] usb 4-1: Using ep0 maxpacket: 8 [ 152.139664][ T453] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8 [ 152.149624][ T453] usb 4-1: config 1 interface 0 altsetting 93 endpoint 0x3 has invalid maxpacket 2320, setting to 1024 [ 152.160781][ T453] usb 4-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1024 [ 152.170811][ T453] usb 4-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 152.183970][ T453] usb 4-1: config 1 interface 0 has no altsetting 0 [ 152.191344][ T453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.200526][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.208631][ T453] usb 4-1: SerialNumber: syz [ 152.214206][ T3665] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 152.221386][ T3665] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 152.293390][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 152.314424][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.430875][ T3665] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 152.438198][ T3665] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 152.446585][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.466504][ T3667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.475277][ T3667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.683500][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 152.704406][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.834476][ T10] usb 1-1: device descriptor read/8, error -71 [ 152.847953][ T453] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 152.953533][ T10] usb usb1-port1: unable to enumerate USB device [ 153.003098][ T3686] bridge0: port 4(veth1_to_bridge) entered blocking state [ 153.010646][ T3686] bridge0: port 4(veth1_to_bridge) entered disabled state [ 153.018238][ T3686] veth1_to_bridge: entered allmulticast mode [ 153.024788][ T3686] veth1_to_bridge: entered promiscuous mode [ 153.030786][ T3686] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 153.043178][ T3686] bridge0: port 4(veth1_to_bridge) entered blocking state [ 153.049201][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 7c! [ 153.050454][ T3686] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 153.058419][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ff! [ 153.073222][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 153.078694][ T3686] syzkaller1: entered promiscuous mode [ 153.086873][ T3686] syzkaller1: entered allmulticast mode [ 153.087376][ T368] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 153.216225][ T3692] FAULT_INJECTION: forcing a failure. [ 153.216225][ T3692] name failslab, interval 1, probability 0, space 0, times 0 [ 153.228931][ T3692] CPU: 0 UID: 0 PID: 3692 Comm: syz.1.1053 Not tainted syzkaller #0 93fdfe3663caa6d824c2578ca6c3b1aacfeda3e9 [ 153.228968][ T3692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.228981][ T3692] Call Trace: [ 153.228990][ T3692] [ 153.229001][ T3692] __dump_stack+0x21/0x30 [ 153.229033][ T3692] dump_stack_lvl+0x140/0x1c0 [ 153.229057][ T3692] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.229078][ T3692] dump_stack+0x19/0x20 [ 153.229092][ T3692] should_fail_ex+0x3d7/0x530 [ 153.229106][ T3692] should_failslab+0xac/0x100 [ 153.229129][ T3692] kmem_cache_alloc_node_noprof+0x45/0x420 [ 153.229156][ T3692] ? dup_task_struct+0xc1/0xd50 [ 153.229178][ T3692] ? kasan_save_alloc_info+0x40/0x50 [ 153.229199][ T3692] ? __kasan_kmalloc+0x96/0xb0 [ 153.229225][ T3692] ? __kmalloc_cache_noprof+0x23c/0x470 [ 153.229248][ T3692] dup_task_struct+0xc1/0xd50 [ 153.229261][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229283][ T3692] ? _raw_spin_lock_irq+0x93/0x120 [ 153.229303][ T3692] ? copy_process+0x3220/0x3220 [ 153.229326][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229349][ T3692] copy_process+0x55a/0x3220 [ 153.229373][ T3692] ? __cfi_copy_process+0x10/0x10 [ 153.229388][ T3692] ? __kmalloc_cache_noprof+0x23c/0x470 [ 153.229404][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229419][ T3692] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 153.229443][ T3692] vhost_task_create+0x1f7/0x400 [ 153.229472][ T3692] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 153.229504][ T3692] ? __cfi_vhost_task_create+0x10/0x10 [ 153.229532][ T3692] ? __cfi_vhost_task_fn+0x10/0x10 [ 153.229549][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229564][ T3692] ? mutex_lock+0x97/0x1d0 [ 153.229579][ T3692] ? __cfi_mutex_lock+0x10/0x10 [ 153.229599][ T3692] ? kernel_text_address+0xa9/0xe0 [ 153.229625][ T3692] kvm_mmu_post_init_vm+0x161/0x300 [ 153.229650][ T3692] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 153.229675][ T3692] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 153.229691][ T3692] ? kstrtoull+0x13b/0x1e0 [ 153.229703][ T3692] ? kstrtouint+0x78/0xf0 [ 153.229714][ T3692] ? ioctl_has_perm+0x1bc/0x500 [ 153.229728][ T3692] ? __asan_memcpy+0x5a/0x80 [ 153.229747][ T3692] ? ioctl_has_perm+0x408/0x500 [ 153.229768][ T3692] ? has_cap_mac_admin+0xd0/0xd0 [ 153.229789][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229811][ T3692] ? mutex_lock_killable+0x97/0x1d0 [ 153.229834][ T3692] ? __cfi_mutex_lock_killable+0x10/0x10 [ 153.229849][ T3692] ? proc_fail_nth_write+0x184/0x220 [ 153.229864][ T3692] kvm_vcpu_ioctl+0xa48/0x1000 [ 153.229882][ T3692] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 153.229917][ T3692] ? __cfi_vfs_write+0x10/0x10 [ 153.229941][ T3692] ? __kasan_check_write+0x18/0x20 [ 153.229963][ T3692] ? mutex_unlock+0x90/0x240 [ 153.229987][ T3692] ? __cfi_mutex_unlock+0x10/0x10 [ 153.230011][ T3692] ? __fget_files+0x2c5/0x340 [ 153.230041][ T3692] ? __fget_files+0x2c5/0x340 [ 153.230068][ T3692] ? bpf_lsm_file_ioctl+0xd/0x20 [ 153.230087][ T3692] ? security_file_ioctl+0x3e/0x110 [ 153.230107][ T3692] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 153.230129][ T3692] __se_sys_ioctl+0x135/0x1b0 [ 153.230149][ T3692] __x64_sys_ioctl+0x7f/0xa0 [ 153.230166][ T3692] x64_sys_call+0x1878/0x2ee0 [ 153.230187][ T3692] do_syscall_64+0x57/0xf0 [ 153.230207][ T3692] ? clear_bhb_loop+0x50/0xa0 [ 153.230229][ T3692] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 153.230259][ T3692] RIP: 0033:0x7fb11fd9c799 [ 153.230276][ T3692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.230288][ T3692] RSP: 002b:00007fb120baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.230304][ T3692] RAX: ffffffffffffffda RBX: 00007fb120015fa0 RCX: 00007fb11fd9c799 [ 153.230314][ T3692] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 153.230323][ T3692] RBP: 00007fb120baa090 R08: 0000000000000000 R09: 0000000000000000 [ 153.230333][ T3692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.230347][ T3692] R13: 00007fb120016038 R14: 00007fb120015fa0 R15: 00007ffec43757f8 [ 153.230365][ T3692] [ 153.294488][ T368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.378876][ T453] usb 4-1: USB disconnect, device number 89 [ 153.382070][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.397870][ T453] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 153.402382][ T368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.653432][ T367] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 153.654281][ T368] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 153.701375][ T368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.711149][ T368] usb 3-1: config 0 descriptor?? [ 153.813388][ T367] usb 1-1: Using ep0 maxpacket: 32 [ 153.820101][ T367] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 153.828735][ T367] usb 1-1: config 0 has no interface number 0 [ 153.839902][ T367] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.855220][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.863331][ T367] usb 1-1: Product: syz [ 153.872922][ T367] usb 1-1: Manufacturer: syz [ 153.877667][ T367] usb 1-1: SerialNumber: syz [ 153.888027][ T367] usb 1-1: config 0 descriptor?? [ 153.904020][ T3726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.913407][ T367] smsc95xx v2.0.0 [ 153.923268][ T3726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.119410][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.126851][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.134154][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.141393][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.148563][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.156101][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.163150][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.170246][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.177344][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.184435][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x4 [ 154.191573][ T368] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x0 [ 154.198658][ T31] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 154.207175][ T368] hid-rmi 0003:0461:4E72.002D: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 154.332216][ T368] usb 3-1: USB disconnect, device number 77 [ 154.343488][ T31] usb 4-1: device descriptor read/64, error -71 [ 154.583409][ T31] usb 4-1: device descriptor read/64, error -71 [ 154.591276][ T36] audit: type=1400 audit(1772950544.180:584): avc: denied { map } for pid=3744 comm="syz.1.1062" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.632255][ T3748] FAULT_INJECTION: forcing a failure. [ 154.632255][ T3748] name failslab, interval 1, probability 0, space 0, times 0 [ 154.645046][ T3748] CPU: 0 UID: 0 PID: 3748 Comm: syz.1.1063 Not tainted syzkaller #0 93fdfe3663caa6d824c2578ca6c3b1aacfeda3e9 [ 154.645077][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.645091][ T3748] Call Trace: [ 154.645099][ T3748] [ 154.645108][ T3748] __dump_stack+0x21/0x30 [ 154.645130][ T3748] dump_stack_lvl+0x140/0x1c0 [ 154.645146][ T3748] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.645167][ T3748] ? __kasan_check_write+0x18/0x20 [ 154.645182][ T3748] ? copy_mm+0x2d2/0x1cf0 [ 154.645197][ T3748] dump_stack+0x19/0x20 [ 154.645211][ T3748] should_fail_ex+0x3d7/0x530 [ 154.645233][ T3748] should_failslab+0xac/0x100 [ 154.645250][ T3748] kmem_cache_alloc_noprof+0x42/0x410 [ 154.645266][ T3748] ? alloc_pid+0xa5/0xba0 [ 154.645279][ T3748] ? __asan_memcpy+0x5a/0x80 [ 154.645294][ T3748] alloc_pid+0xa5/0xba0 [ 154.645306][ T3748] copy_process+0x1409/0x3220 [ 154.645321][ T3748] ? __cfi_copy_process+0x10/0x10 [ 154.645334][ T3748] ? __kmalloc_cache_noprof+0x23c/0x470 [ 154.645350][ T3748] ? __kasan_check_write+0x18/0x20 [ 154.645365][ T3748] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 154.645385][ T3748] vhost_task_create+0x1f7/0x400 [ 154.645403][ T3748] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 154.645423][ T3748] ? __cfi_vhost_task_create+0x10/0x10 [ 154.645442][ T3748] ? __cfi_vhost_task_fn+0x10/0x10 [ 154.645461][ T3748] ? __kasan_check_write+0x18/0x20 [ 154.645475][ T3748] ? mutex_lock+0x97/0x1d0 [ 154.645491][ T3748] ? __cfi_mutex_lock+0x10/0x10 [ 154.645505][ T3748] ? kernel_text_address+0xa9/0xe0 [ 154.645521][ T3748] kvm_mmu_post_init_vm+0x161/0x300 [ 154.645540][ T3748] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 154.645566][ T3748] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 154.645590][ T3748] ? kstrtoull+0x13b/0x1e0 [ 154.645609][ T3748] ? kstrtouint+0x78/0xf0 [ 154.645628][ T3748] ? ioctl_has_perm+0x1bc/0x500 [ 154.645650][ T3748] ? __asan_memcpy+0x5a/0x80 [ 154.645668][ T3748] ? ioctl_has_perm+0x408/0x500 [ 154.645681][ T3748] ? has_cap_mac_admin+0xd0/0xd0 [ 154.645694][ T3748] ? __kasan_check_write+0x18/0x20 [ 154.645708][ T3748] ? mutex_lock_killable+0x97/0x1d0 [ 154.645724][ T3748] ? __cfi_mutex_lock_killable+0x10/0x10 [ 154.645739][ T3748] ? proc_fail_nth_write+0x184/0x220 [ 154.645754][ T3748] kvm_vcpu_ioctl+0xa48/0x1000 [ 154.645772][ T3748] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 154.645790][ T3748] ? __cfi_vfs_write+0x10/0x10 [ 154.645804][ T3748] ? __kasan_check_write+0x18/0x20 [ 154.645819][ T3748] ? mutex_unlock+0x90/0x240 [ 154.645834][ T3748] ? __cfi_mutex_unlock+0x10/0x10 [ 154.645849][ T3748] ? __fget_files+0x2c5/0x340 [ 154.645867][ T3748] ? __fget_files+0x2c5/0x340 [ 154.645884][ T3748] ? bpf_lsm_file_ioctl+0xd/0x20 [ 154.645896][ T3748] ? security_file_ioctl+0x3e/0x110 [ 154.645909][ T3748] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 154.645926][ T3748] __se_sys_ioctl+0x135/0x1b0 [ 154.645944][ T3748] __x64_sys_ioctl+0x7f/0xa0 [ 154.645961][ T3748] x64_sys_call+0x1878/0x2ee0 [ 154.645979][ T3748] do_syscall_64+0x57/0xf0 [ 154.645991][ T3748] ? clear_bhb_loop+0x50/0xa0 [ 154.646004][ T3748] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 154.646024][ T3748] RIP: 0033:0x7fb11fd9c799 [ 154.646037][ T3748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.646048][ T3748] RSP: 002b:00007fb120baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.646064][ T3748] RAX: ffffffffffffffda RBX: 00007fb120015fa0 RCX: 00007fb11fd9c799 [ 154.646074][ T3748] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 154.646083][ T3748] RBP: 00007fb120baa090 R08: 0000000000000000 R09: 0000000000000000 [ 154.646092][ T3748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.646100][ T3748] R13: 00007fb120016038 R14: 00007fb120015fa0 R15: 00007ffec43757f8 [ 154.646111][ T3748] [ 154.903408][ T31] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 154.914981][ T367] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 154.921714][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 155.087920][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.096677][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.115636][ T367] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 155.127222][ T367] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 155.138122][ T367] usb 1-1: USB disconnect, device number 86 [ 155.183415][ T31] usb 4-1: device descriptor read/64, error -71 [ 155.423383][ T31] usb 4-1: device descriptor read/64, error -71 [ 155.533559][ T31] usb usb4-port1: attempt power cycle [ 155.616327][ T3756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.625051][ T3756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.718938][ T36] audit: type=1400 audit(1772950545.310:585): avc: denied { getopt } for pid=3762 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.873400][ T31] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 155.894471][ T31] usb 4-1: device descriptor read/8, error -71 [ 156.024555][ T31] usb 4-1: device descriptor read/8, error -71 [ 156.148548][ T3793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.157759][ T3793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.167083][ T3793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.175707][ T3793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.223403][ T453] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 156.255829][ T3798] syzkaller1: entered promiscuous mode [ 156.261455][ T3798] syzkaller1: entered allmulticast mode [ 156.263421][ T31] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 156.294528][ T31] usb 4-1: device descriptor read/8, error -71 [ 156.373364][ T453] usb 3-1: Using ep0 maxpacket: 32 [ 156.381520][ T453] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 156.390712][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.398873][ T453] usb 3-1: Product: syz [ 156.403124][ T453] usb 3-1: Manufacturer: syz [ 156.407802][ T453] usb 3-1: SerialNumber: syz [ 156.434770][ T31] usb 4-1: device descriptor read/8, error -71 [ 156.543552][ T31] usb usb4-port1: unable to enumerate USB device [ 156.620071][ T453] usb 3-1: USB disconnect, device number 78 [ 156.637451][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 156.826381][ T36] audit: type=1326 audit(1772950546.420:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3804 comm="syz.1.1081" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb11fd9c799 code=0x0 [ 156.972268][ T36] audit: type=1400 audit(1772950546.560:587): avc: denied { create } for pid=3808 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.992603][ T36] audit: type=1400 audit(1772950546.560:588): avc: denied { connect } for pid=3808 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.023434][ T3815] netlink: 'syz.3.1084': attribute type 27 has an invalid length. [ 157.363478][ T453] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 157.483604][ T31] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 157.513409][ T453] usb 4-1: Using ep0 maxpacket: 16 [ 157.520037][ T453] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.528897][ T453] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.539278][ T453] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.548378][ T453] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.562742][ T453] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.572444][ T453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.580871][ T453] usb 4-1: Product: syz [ 157.585205][ T453] usb 4-1: Manufacturer: syz [ 157.589874][ T453] usb 4-1: SerialNumber: syz [ 157.639190][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.652266][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 157.663710][ T31] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 157.674984][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.676054][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x83 has invalid maxpacket 46587, setting to 64 [ 157.685364][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.697221][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.711890][ T3828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.713184][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.722197][ T3828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.730538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.750464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.762801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.775287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.776279][ T36] audit: type=1400 audit(1772950547.370:589): avc: denied { read write } for pid=3825 comm="syz.0.1089" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.787664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.811793][ T36] audit: type=1400 audit(1772950547.410:590): avc: denied { open } for pid=3825 comm="syz.0.1089" path="/213/file0/file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 157.846784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.850106][ T3818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.859235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.869162][ T3818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.879694][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.896109][ T453] usb 4-1: 0:2 : does not exist [ 157.899504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.911806][ T453] usb 4-1: USB disconnect, device number 94 [ 157.916789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 158.124260][ T31] usb 3-1: Product: syz [ 158.128627][ T31] usb 3-1: Manufacturer: syz [ 158.135108][ T31] usb 3-1: SerialNumber: syz [ 158.161377][ T36] audit: type=1400 audit(1772950547.750:591): avc: denied { map } for pid=3836 comm="syz.0.1092" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.347696][ T36] audit: type=1400 audit(1772950547.940:592): avc: denied { transfer } for pid=3850 comm="syz.1.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.368320][ T3851] rust_binder: Error while translating object. [ 158.368365][ T3851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 158.375065][ T3851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1295 [ 158.394681][ T36] audit: type=1400 audit(1772950547.960:593): avc: denied { map } for pid=3823 comm="syz.2.1088" path="socket:[34215]" dev="sockfs" ino=34215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.449893][ T3854] __vm_enough_memory: pid: 3854, comm: syz.3.1099, bytes: 137707393024 not enough memory for the allocation [ 158.464631][ T3856] __vm_enough_memory: pid: 3856, comm: syz.3.1099, bytes: 137707393024 not enough memory for the allocation [ 158.477321][ T3854] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 158.517656][ T3856] xt_NFQUEUE: number of total queues is 0 [ 158.523577][ T3857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.540183][ T3857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.563505][ T453] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 158.723369][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 158.729911][ T453] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 158.738550][ T453] usb 1-1: config 0 has no interface number 0 [ 158.746524][ T453] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 158.757147][ T453] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.768668][ T453] usb 1-1: config 0 interface 196 has no altsetting 0 [ 158.777284][ T453] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 158.787321][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.795650][ T453] usb 1-1: Product: syz [ 158.800033][ T453] usb 1-1: Manufacturer: syz [ 158.805769][ T453] usb 1-1: SerialNumber: syz [ 158.816792][ T453] usb 1-1: config 0 descriptor?? [ 158.822892][ T3843] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.324759][ T31] cdc_ncm 3-1:1.0: bind() failure [ 159.336446][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 159.371495][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 159.421620][ T31] usb 3-1: USB disconnect, device number 79 [ 159.733409][ T64] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 159.893979][ T64] usb 4-1: Using ep0 maxpacket: 8 [ 159.903043][ T64] usb 4-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 159.912838][ T64] usb 4-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 159.923515][ T64] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 159.932907][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.107975][ T36] audit: type=1400 audit(1772950549.700:594): avc: denied { mounton } for pid=3889 comm="syz.2.1108" path="/254/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.131583][ T3890] 9pnet_fd: Insufficient options for proto=fd [ 160.200534][ T3878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=3878 comm=syz.3.1104 [ 160.213731][ T3878] netlink: 61 bytes leftover after parsing attributes in process `syz.3.1104'. [ 160.326529][ T3897] kvm: emulating exchange as write [ 160.803431][ T367] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 160.963374][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 160.971057][ T367] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.981769][ T367] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.993593][ T367] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.002952][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.011385][ T367] usb 3-1: Product: syz [ 161.016064][ T367] usb 3-1: Manufacturer: syz [ 161.020782][ T367] usb 3-1: SerialNumber: syz [ 161.244727][ T453] ipheth 1-1:0.196: Unable to find endpoints [ 161.267406][ T453] usb 1-1: USB disconnect, device number 87 [ 161.519761][ T3909] rust_binder: 1302: no such ref 2 [ 161.525119][ T3909] rust_binder: Write failure EINVAL in pid:1302 [ 161.526439][ T3909] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1115'. [ 161.567572][ T3914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.580324][ T3914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.613373][ T453] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 161.763365][ T453] usb 1-1: Using ep0 maxpacket: 16 [ 161.770434][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.782293][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.792794][ T453] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.806832][ T453] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.816937][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.830829][ T453] usb 1-1: config 0 descriptor?? [ 162.043141][ T3905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.054348][ T3905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.181422][ T3921] tipc: Enabling of bearer rejected, failed to enable media [ 162.444599][ T453] HID 045e:07da: Invalid code 65791 type 1 [ 162.670761][ T453] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002E/input/input31 [ 162.723362][ C1] net_ratelimit: 21717 callbacks suppressed [ 162.723388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.723533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.729763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.741859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.753967][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.765854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.778019][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.789697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.801793][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.813490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.851969][ T64] usb 4-1: string descriptor 0 read error: -71 [ 163.632264][ T367] usb 3-1: 0:2 : does not exist [ 163.689978][ T367] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 163.891513][ T367] usb 3-1: USB disconnect, device number 80 [ 164.370896][ T64] usb 4-1: Found UVC 0.00 device (2833:0201) [ 164.410791][ T453] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 164.517066][ T64] usb 4-1: No valid video chain found. [ 164.553047][ T64] usb 4-1: USB disconnect, device number 95 [ 164.703227][ T453] usb 1-1: USB disconnect, device number 88 [ 164.725945][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 164.942445][ T3929] option changes via remount are deprecated (pid=3927 comm=syz.0.1121) [ 164.984870][ T64] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 165.012636][ T36] audit: type=1400 audit(1772950554.530:595): avc: denied { mounton } for pid=3927 comm="syz.0.1121" path="/219/file0" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 167.733350][ C0] net_ratelimit: 65886 callbacks suppressed [ 167.733374][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.733404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.739732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.752403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.764343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.776482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.788448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.800636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 167.812494][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.824535][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 170.653327][ C0] sched: DL replenish lagged too much [ 170.904976][ T36] audit: type=1400 audit(1772950554.530:596): avc: denied { remount } for pid=3927 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 172.743349][ C1] net_ratelimit: 71770 callbacks suppressed [ 172.743374][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.743427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.749612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.761580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.773729][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.785524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.798106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.810211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.822556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.834448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.753375][ C0] net_ratelimit: 70266 callbacks suppressed [ 177.753398][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.753472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.759423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.771732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.783532][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.795573][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.807467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.819713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 177.831435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.843502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 179.186966][ T376] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 179.597611][ T376] usb 4-1: Using ep0 maxpacket: 8 [ 179.665726][ T376] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 179.724935][ T376] usb 4-1: config 0 has no interface number 0 [ 180.018842][ T36] audit: type=1400 audit(1772950569.610:597): avc: denied { mounton } for pid=3955 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 180.047453][ T3952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.186110][ T376] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 180.530017][ T376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.591112][ T376] usb 4-1: Product: syz [ 180.598306][ T376] usb 4-1: Manufacturer: syz [ 180.617457][ T3952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.771362][ T376] usb 4-1: SerialNumber: syz [ 180.798333][ T376] usb 4-1: config 0 descriptor?? [ 181.633108][ T376] usb 4-1: can't set config #0, error -71 [ 182.357614][ T3954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.428013][ T376] usb 4-1: USB disconnect, device number 97 [ 182.488783][ T3954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.763320][ C1] net_ratelimit: 69443 callbacks suppressed [ 182.763345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.763355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.763456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.769562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.781299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.793591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.805441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.817784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 182.830005][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.842288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.773391][ C0] net_ratelimit: 72516 callbacks suppressed [ 187.773418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.773488][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.779609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.791874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.803538][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.815562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.827315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.839597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.851446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.863587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.783339][ C0] net_ratelimit: 69405 callbacks suppressed [ 192.783361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.783551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.789396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.801662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.813400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.825565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.837271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.849358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 192.861082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.873534][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.793388][ C0] net_ratelimit: 70222 callbacks suppressed [ 197.793413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.793516][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.799642][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.812005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.823920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.836049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.847987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.860005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.871841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.884216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.803338][ C0] net_ratelimit: 71302 callbacks suppressed [ 202.803364][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.803436][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.809394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.821761][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.833586][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.845870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.857623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.870185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 202.882011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.894335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.813324][ C0] net_ratelimit: 70630 callbacks suppressed [ 207.813349][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.813519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.819391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.831531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.843336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.855355][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.867252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.879449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 207.891226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.903367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.823357][ C0] net_ratelimit: 74567 callbacks suppressed [ 212.823382][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.823384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.823611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.829401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.841548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.853315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.865323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.877071][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.889196][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.901042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.833319][ C0] net_ratelimit: 73235 callbacks suppressed [ 217.833344][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.833479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.839368][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.851508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.863288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.875544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.887300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.899511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.911265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.923313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 218.818208][ T237] usb 2-1: USB disconnect, device number 2 [ 222.843340][ C0] net_ratelimit: 72235 callbacks suppressed [ 222.843364][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.843429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.849407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.861587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.873388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.885497][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.897486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.909631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.921517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.933678][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.853350][ C0] net_ratelimit: 72834 callbacks suppressed [ 227.853374][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.853437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.859483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.871626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.883382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.895523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.907255][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.919584][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.931315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.944217][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.916232][ T3955] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.965477][ T3955] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.972631][ T3955] bridge_slave_0: entered allmulticast mode [ 232.863322][ C0] net_ratelimit: 74023 callbacks suppressed [ 232.863348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.863389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.869725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.882062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.893806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.906003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.917985][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.930037][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.942860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.954905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.991983][ T3955] bridge_slave_0: entered promiscuous mode [ 236.004025][ T3955] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.011116][ T3955] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.228260][ T3955] bridge_slave_1: entered allmulticast mode [ 236.324651][ T3955] bridge_slave_1: entered promiscuous mode [ 237.873305][ C0] net_ratelimit: 72314 callbacks suppressed [ 237.873326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.873495][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.879438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.891753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.903718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.916020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.927857][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.940119][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 237.952045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.964182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.191830][ T3967] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.215681][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.247407][ T3967] bridge_slave_0: entered allmulticast mode [ 240.315002][ T3967] bridge_slave_0: entered promiscuous mode [ 240.420593][ T3967] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.445435][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.452568][ T3967] bridge_slave_1: entered allmulticast mode [ 240.492417][ T3967] bridge_slave_1: entered promiscuous mode [ 242.883345][ C0] net_ratelimit: 68663 callbacks suppressed [ 242.883369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.883624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.889419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.901673][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.913412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.925567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.937463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.949643][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 242.961406][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.973705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.893343][ C0] net_ratelimit: 67116 callbacks suppressed [ 247.893368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.893370][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.893642][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.899482][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.911738][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.923512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.936077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.948051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.960085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 247.972124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.602876][ T3968] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.625053][ T3968] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.753959][ T3968] bridge_slave_0: entered allmulticast mode [ 250.867864][ T3968] bridge_slave_0: entered promiscuous mode [ 251.119161][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.134608][ T3968] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.195660][ T3968] bridge_slave_1: entered allmulticast mode [ 251.324675][ T3968] bridge_slave_1: entered promiscuous mode [ 252.611321][ T3969] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.631435][ T3969] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.765906][ T3969] bridge_slave_0: entered allmulticast mode [ 252.794246][ T3969] bridge_slave_0: entered promiscuous mode [ 252.903349][ C0] net_ratelimit: 70734 callbacks suppressed [ 252.903373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.903439][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.909388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.921530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.933309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.945343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.957081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.969365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 252.981229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.993298][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 253.519859][ T3969] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.531010][ T3969] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.561895][ T3969] bridge_slave_1: entered allmulticast mode [ 253.593943][ T3969] bridge_slave_1: entered promiscuous mode [ 257.913343][ C0] net_ratelimit: 68016 callbacks suppressed [ 257.913369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.913574][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.919420][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.931625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.943500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.955507][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.967271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.979457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 257.991201][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.003676][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.923398][ C0] net_ratelimit: 69714 callbacks suppressed [ 262.923421][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.923433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.923659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.929465][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.941511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.953646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.965876][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 262.977791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.990035][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 263.002033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.933370][ C0] net_ratelimit: 67341 callbacks suppressed [ 267.933395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.933423][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.939443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.951836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.963630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.975776][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 267.987809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.999660][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 268.011533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.023825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.943358][ C0] net_ratelimit: 67716 callbacks suppressed [ 272.943383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.943398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.943625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.949414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.961583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.973809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.986150][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 272.997953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.010088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 273.021819][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.953304][ C0] net_ratelimit: 82834 callbacks suppressed [ 277.953328][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.953411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 277.959519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.971512][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 277.983364][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.995618][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 278.007535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.019575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 278.031465][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.043467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.963308][ C0] net_ratelimit: 88282 callbacks suppressed [ 282.963333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.963339][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.963492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 282.969373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.981454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 282.993385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.005528][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 283.017574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.029578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 283.041580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.973299][ C0] net_ratelimit: 84027 callbacks suppressed [ 287.973323][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.973552][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.979354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.991462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 288.003946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.016371][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 288.028234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.040380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 288.052187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.064261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 291.037497][ T37] INFO: task syz.2.1111:3901 blocked for more than 124 seconds. [ 291.047828][ T37] Not tainted syzkaller #0 [ 291.052795][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.394631][ T36] audit: type=1400 audit(1772950680.970:598): avc: denied { write } for pid=269 comm="syz-executor" path="pipe:[3152]" dev="pipefs" ino=3152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.539053][ T37] task:syz.2.1111 state:D stack:0 pid:3901 tgid:3899 ppid:292 flags:0x00004006 [ 291.549337][ T37] Call Trace: [ 291.552659][ T37] [ 291.555659][ T37] __schedule+0x134f/0x1ea0 [ 291.560204][ T37] ? __sched_text_start+0x10/0x10 [ 291.565450][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 291.570862][ T37] ? __kasan_check_write+0x18/0x20 [ 291.576052][ T37] ? llist_add_batch+0x10f/0x1f0 [ 291.581124][ T37] schedule+0xc5/0x240 [ 291.585270][ T37] schedule_timeout+0xc7/0x3b0 [ 291.590089][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 291.595624][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 291.601208][ T37] ? generic_exec_single+0x1fd/0x500 [ 291.606558][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 291.612299][ T37] wait_for_common+0x369/0x650 [ 291.617129][ T37] ? wait_for_completion+0x40/0x40 [ 291.622349][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 291.628996][ T37] ? xa_find+0x145/0x170 [ 291.633549][ T37] wait_for_completion+0x1c/0x40 [ 291.638600][ T37] rcu_barrier+0x415/0x540 [ 291.643040][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 291.648544][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 291.653352][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 291.658585][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 291.664293][ T37] ? __kasan_check_write+0x18/0x20 [ 291.669446][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 291.675128][ T37] ? free_pages+0x86/0x90 [ 291.679582][ T37] kvm_put_kvm+0xb04/0x12c0 [ 291.684139][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 291.689276][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 291.695371][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 291.700602][ T37] kvm_vm_release+0x47/0x70 [ 291.705215][ T37] __fput+0x1fb/0xa00 [ 291.709652][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 291.715419][ T37] ____fput+0x20/0x30 [ 291.719426][ T37] task_work_run+0x1e5/0x260 [ 291.724085][ T37] ? __cfi_task_work_run+0x10/0x10 [ 291.729245][ T37] ? free_nsproxy+0x223/0x290 [ 291.734085][ T37] do_exit+0x9e3/0x2650 [ 291.738358][ T37] ? futex_wake+0x666/0x950 [ 291.742895][ T37] ? __cfi_do_exit+0x10/0x10 [ 291.747545][ T37] ? futex_setup_timer+0xb4/0xd0 [ 291.752507][ T37] ? futex_wait+0x2ac/0x7b0 [ 291.757188][ T37] ? __kasan_check_write+0x18/0x20 [ 291.762326][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 291.767575][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 291.773144][ T37] do_group_exit+0x229/0x2f0 [ 291.777779][ T37] ? __kasan_check_write+0x18/0x20 [ 291.782917][ T37] get_signal+0x1398/0x14e0 [ 291.787643][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 291.793225][ T37] ? prctl_set_seccomp+0x80/0x80 [ 291.798212][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 291.804525][ T37] ? __kasan_check_write+0x18/0x20 [ 291.809668][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 291.815282][ T37] do_syscall_64+0x63/0xf0 [ 291.819725][ T37] ? clear_bhb_loop+0x50/0xa0 [ 291.824534][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 291.830552][ T37] RIP: 0033:0x7f1d4dd9c799 [ 291.835033][ T37] RSP: 002b:00007f1d4ed000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 291.843629][ T37] RAX: fffffffffffffe00 RBX: 00007f1d4e016098 RCX: 00007f1d4dd9c799 [ 291.851635][ T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d4e016098 [ 291.859753][ T37] RBP: 00007f1d4e016090 R08: 0000000000000000 R09: 0000000000000000 [ 291.867788][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.875983][ T37] R13: 00007f1d4e016128 R14: 00007ffe4414fef0 R15: 00007ffe4414ffd8 [ 291.884021][ T37] [ 291.904592][ T37] NMI backtrace for cpu 1 [ 291.904613][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 93fdfe3663caa6d824c2578ca6c3b1aacfeda3e9 [ 291.904642][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 291.904654][ T37] Call Trace: [ 291.904662][ T37] [ 291.904672][ T37] __dump_stack+0x21/0x30 [ 291.904704][ T37] dump_stack_lvl+0x140/0x1c0 [ 291.904731][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 291.904758][ T37] dump_stack+0x19/0x20 [ 291.904783][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 291.904805][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 291.904831][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 291.904851][ T37] ? sched_show_task+0x371/0x530 [ 291.904876][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 291.904901][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.904927][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 291.904952][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 291.904975][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 291.905000][ T37] watchdog+0xdad/0xf00 [ 291.905030][ T37] ? __kasan_check_write+0x18/0x20 [ 291.905058][ T37] ? __cfi_watchdog+0x10/0x10 [ 291.905086][ T37] ? __kasan_check_read+0x15/0x20 [ 291.905110][ T37] ? __kthread_parkme+0x137/0x180 [ 291.905139][ T37] ? schedule+0xc5/0x240 [ 291.905162][ T37] kthread+0x2c9/0x370 [ 291.905181][ T37] ? __cfi_watchdog+0x10/0x10 [ 291.905211][ T37] ? __cfi_kthread+0x10/0x10 [ 291.905231][ T37] ret_from_fork+0x64/0xa0 [ 291.905256][ T37] ? __cfi_kthread+0x10/0x10 [ 291.905277][ T37] ret_from_fork_asm+0x1a/0x30 [ 291.905307][ T37] [ 291.905316][ T37] Sending NMI from CPU 1 to CPUs 0: [ 292.121635][ C0] NMI backtrace for cpu 0 [ 292.121652][ C0] CPU: 0 UID: 0 PID: 3988 Comm: syz-executor Not tainted syzkaller #0 93fdfe3663caa6d824c2578ca6c3b1aacfeda3e9 [ 292.121677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.121687][ C0] RIP: 0010:unmap_page_range+0x1546/0x3fa0 [ 292.121715][ C0] Code: 00 00 e8 0d 27 b8 ff bb 01 00 00 00 e9 e7 18 00 00 e8 fe 26 b8 ff e9 23 04 00 00 4c 8b bc 24 08 01 00 00 4c 89 f8 48 c1 e8 03 <48> b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 32 0b [ 292.121730][ C0] RSP: 0018:ffffc9000e247540 EFLAGS: 00000a02 [ 292.121746][ C0] RAX: 1ffff11021f66483 RBX: 1ffffd40009310d3 RCX: ffff88811f2e4c00 [ 292.121760][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.121771][ C0] RBP: ffffc9000e247770 R08: ffffea0004988687 R09: 1ffffd40009310d0 [ 292.121784][ C0] R10: dffffc0000000000 R11: fffff940009310d1 R12: 800000012621a027 [ 292.121797][ C0] R13: 0000000000000000 R14: ffffea0004988698 R15: ffff88810fb32418 [ 292.121820][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 292.121836][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.121849][ C0] CR2: 00007f28f09f84c0 CR3: 0000000151b4c000 CR4: 00000000003526b0 [ 292.121866][ C0] Call Trace: [ 292.121872][ C0] [ 292.121883][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 292.121904][ C0] ? uprobe_munmap+0x181/0x490 [ 292.121928][ C0] unmap_vmas+0x2d2/0x3f0 [ 292.121948][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 292.121968][ C0] ? __kasan_check_write+0x18/0x20 [ 292.121989][ C0] exit_mmap+0x29c/0xbc0 [ 292.122010][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 292.122031][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 292.122053][ C0] ? uprobe_clear_state+0x2cd/0x340 [ 292.122075][ C0] __mmput+0x93/0x320 [ 292.122090][ C0] ? mmput+0x4d/0x170 [ 292.122105][ C0] mmput+0x55/0x170 [ 292.122120][ C0] do_exit+0x93f/0x2650 [ 292.122139][ C0] ? __cfi_do_exit+0x10/0x10 [ 292.122157][ C0] ? _raw_read_unlock+0x16/0x40 [ 292.122173][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 292.122190][ C0] ? remove_wait_queue+0x132/0x150 [ 292.122206][ C0] ? __kasan_check_write+0x18/0x20 [ 292.122225][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 292.122240][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 292.122257][ C0] do_group_exit+0x229/0x2f0 [ 292.122275][ C0] ? __kasan_check_write+0x18/0x20 [ 292.122293][ C0] get_signal+0x1398/0x14e0 [ 292.122314][ C0] arch_do_signal_or_restart+0xbc/0x760 [ 292.122337][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 292.122360][ C0] ? __kasan_check_read+0x15/0x20 [ 292.122406][ C0] syscall_exit_to_user_mode+0x57/0xb0 [ 292.122428][ C0] do_syscall_64+0x63/0xf0 [ 292.122444][ C0] ? clear_bhb_loop+0x50/0xa0 [ 292.122461][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 292.122485][ C0] RIP: 0033:0x7fc704b57917 [ 292.122499][ C0] Code: Unable to access opcode bytes at 0x7fc704b578ed. [ 292.122507][ C0] RSP: 002b:00007ffee8a339d0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 292.122524][ C0] RAX: fffffffffffffe00 RBX: 0000555594040500 RCX: 00007fc704b57917 [ 292.122537][ C0] RDX: 0000000040000000 RSI: 00007ffee8a33a2c RDI: ffffffffffffffff [ 292.122549][ C0] RBP: 00007ffee8a33a2c R08: 0000000000000000 R09: 0000000000000000 [ 292.122560][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 292.122572][ C0] R13: 0000000000000003 R14: 00007ffee8a33c88 R15: 0000000000000000 [ 292.122585][ C0] [ 292.983304][ C1] net_ratelimit: 71534 callbacks suppressed [ 292.983328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.983578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.989433][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.001626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.013677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 293.025943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.038058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.049981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.062070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.074095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.993325][ C1] net_ratelimit: 74552 callbacks suppressed [ 297.993351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 297.993443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.999576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 298.011578][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.023813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.035690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.047624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.059569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.071741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:9c:45:f9:d0:f0, vlan:0) [ 298.083770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)