last executing test programs: 1m26.472021868s ago: executing program 1 (id=102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x3) r2 = signalfd4(r1, &(0x7f0000000080), 0x8, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x1, 0x3, 0x304, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_EXP={0xd0, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xba}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x10c0) fsopen(&(0x7f0000000280)='openpromfs\x00', 0x1) ioctl$FICLONE(r0, 0x40049409, r1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000002c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) r3 = fsopen(&(0x7f00000003c0)='reiserfs\x00', 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000480)={0x2, 0x2, 0x2}) mkdir(&(0x7f00000004c0)='./file0\x00', 0x80) r4 = syz_clone3(&(0x7f0000000780)={0x11020000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x1d}, &(0x7f00000005c0)=""/108, 0x6c, &(0x7f0000000640)=""/254, &(0x7f0000000740)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r2}}, 0x58) sched_setscheduler(r4, 0x5, &(0x7f0000000800)=0x61dd) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000a40)={&(0x7f0000000840)=0x7fffffffffffffff, 0x10001, &(0x7f0000000880)=[{}, {}], &(0x7f0000000a00)}) epoll_pwait(r2, &(0x7f0000000a80)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f0000000ac0)={[0x200]}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x140, 0x0, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x4010}, 0x20000034) sched_setscheduler(r4, 0x5, &(0x7f0000000d00)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000d40)={0x0, 0x6010, [0x30, 0x9b0, 0xff, 0x3, 0x8, 0x1800000000]}) r5 = openat$incfs(r2, &(0x7f0000000d80)='.pending_reads\x00', 0x101000, 0x3) close_range(r0, r2, 0x2) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000dc0), &(0x7f0000000e00)=0x10) ioctl$FICLONE(r0, 0x40049409, r5) recvfrom$inet(r2, &(0x7f0000000e40)=""/226, 0xe2, 0x23, &(0x7f0000000f40)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000f80), &(0x7f0000000fc0), 0x2, 0x3) r7 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000001000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x223, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0xec}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x7, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x1c, 0x5}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x200, 0x1, 0x5, 0x5, 0xff}, 0x1c, &(0x7f0000001080)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x3, 0xf, 0xffc0, [0xffc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x1, 0x1}]}, 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x402}}, {0xd, &(0x7f0000001100)=@string={0xd, 0x3, "c80e87040e443642d4ef7a"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$hid(r7, &(0x7f0000001400)={0x24, &(0x7f0000001240)={0x0, 0x22, 0xa0, {0xa0, 0xa, "17c7c7fc71b76be285cc14547c9319bfce7b7998d2d806e4d714c79507b15bb1337a43b72e1e2b7ba76da9eca7e42e3c97a28838eb483a3090341b63c72f5dd3eb66d098c9cb67cf40d7139a890a97a8a0dedb425378d296cd3130de9650cd854b59e8163c7d07dc733410883c7f131fe25459e82fed0e38cb50a5a277c335ca104dce620b19325ec757bc87fd61f8820f56fc9c468a4557dac73e24a50c"}}, &(0x7f0000001300)={0x0, 0x3, 0x92, @string={0x92, 0x3, "fa418a9c2e521b6dba600e747e173b2f6803c3b31236a5f7a041f274a7cd61776c04b2f8f6ecc42c55f0a1e1e0566bab5146eba1ed8517c98bc07507281ab9927870067f4be253fcebbe57b426f04caf5be6d283a3f3f6522f6a8e8de0a0ae79ceb04957b4c00844d130573d02c5cee5ac38a843a2fa833ea99169e3ad27d696b18f03e33e9706ee32728d540ba76340"}}, &(0x7f00000013c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x8, "801a9fa8"}, @local=@item_4={0x3, 0x2, 0x1, "fd8a7087"}, @global=@item_4={0x3, 0x1, 0x3, "f29af69f"}]}}, 0xfffffffffffffffc}, &(0x7f0000001640)={0x2c, &(0x7f0000001440)={0x40, 0x14, 0x5, "b26a92c4af"}, &(0x7f0000001480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000014c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001500)={0x20, 0x1, 0xd9, "d9e274d15fd78d099b7d2f35775ea687032b537946461663b7c66ca7b6ac5575c47b1f7f82b3fff6d9ffdf059b3637aa2cff274f6e84603e5d2efc274cc75ff98e8463eb7b35c4b1b65af0675c584bfcce493047e5df4e8e6542b9f0c543803c8c0197ce1809a269df004c288f8cbd02ca1310d8890bd5cad2f8b976acdb501b0ca65435cacf089a9a0542efd3d8265c0bcee22372e08956ca981107f775660d51de8d5562ba677163700f358239793dc1f4a6cffdba779b9941e9382f2fe61006b7a3edcee3d81a80f6f5f6b1337d4d6f95754a0b6ba8bb25"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0x1}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), r2) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)={0x130, r8, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x588}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2673}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000018c0)) 1m25.962757129s ago: executing program 1 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0xeeee0000, 0x1000, &(0x7f000005d000/0x1000)=nil}) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setrlimit(0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x5ef5c000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x2}}) splice(r6, &(0x7f0000000080)=0xfffffffffffffffb, r7, &(0x7f0000000180)=0x1, 0x1, 0x2) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0x4, 0x1e, 0x1, {0x22, 0x9f3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7, 0x8e}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x2, 0x80}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x4, 0x7, 0x3, 0x20, 0x8}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x4, 0x800}]}, 0x9, [{0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="30032f5319521745549864bdbc98b4dc3f34f20360830fdd325bfb4d6aeb45a9ba45cd65e5c83e810cce6e233487d4e1"]}, {0xc1, &(0x7f0000000300)=@string={0xc1, 0x3, "98b3aae74911276fac827836fb86cd8fca4774803dfffe7edc6d8a89b701baf2d7c000b21ef19eb829fd77ae69c07db5000947b38a96c0ffaa6f827f2da5fdc63f4abf4e582a446cb5d8f7c988d99e144a7e5e6cd34c3b8b390d6c987586e2904101b2a568c4fa2098b11b8587716af87539ac17a2e152999b870ff1a8fb11f85e1409b677177c8bfa21fd6e1a40dcda3ff43f8bb33ba041038eb1fed94703fc95c21ab5a26ad319612824d83d3ab701da1fc2a7280030b959027f27bd4b4b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}, {0x4e, &(0x7f0000000480)=@string={0x4e, 0x3, "aa84b44a68ff538e7b4492f9badd6231a063808b44518f1ec0aa9ead0fc166a29b0edea7b0ba7ef99eb827e7324d2e6b1d3315a8258245a63fe6d7a9394debf0e7b66270d15466e6477369df"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81d}}, {0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1303743656002384a4f344f11927a9fecf9866"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc04}}, {0xe, &(0x7f00000005c0)=@string={0xe, 0x3, "f63aa87f5383895e30a54f0c"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x408}}]}) (async) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x1, 0x2, 0x20, {0x9, 0x21, 0x4, 0x1e, 0x1, {0x22, 0x9f3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7, 0x8e}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x2, 0x80}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x4, 0x7, 0x3, 0x20, 0x8}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x4, 0x800}]}, 0x9, [{0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="30032f5319521745549864bdbc98b4dc3f34f20360830fdd325bfb4d6aeb45a9ba45cd65e5c83e810cce6e233487d4e1"]}, {0xc1, &(0x7f0000000300)=@string={0xc1, 0x3, "98b3aae74911276fac827836fb86cd8fca4774803dfffe7edc6d8a89b701baf2d7c000b21ef19eb829fd77ae69c07db5000947b38a96c0ffaa6f827f2da5fdc63f4abf4e582a446cb5d8f7c988d99e144a7e5e6cd34c3b8b390d6c987586e2904101b2a568c4fa2098b11b8587716af87539ac17a2e152999b870ff1a8fb11f85e1409b677177c8bfa21fd6e1a40dcda3ff43f8bb33ba041038eb1fed94703fc95c21ab5a26ad319612824d83d3ab701da1fc2a7280030b959027f27bd4b4b"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}, {0x4e, &(0x7f0000000480)=@string={0x4e, 0x3, "aa84b44a68ff538e7b4492f9badd6231a063808b44518f1ec0aa9ead0fc166a29b0edea7b0ba7ef99eb827e7324d2e6b1d3315a8258245a63fe6d7a9394debf0e7b66270d15466e6477369df"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x81d}}, {0x13, &(0x7f0000000540)=ANY=[@ANYBLOB="1303743656002384a4f344f11927a9fecf9866"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc04}}, {0xe, &(0x7f00000005c0)=@string={0xe, 0x3, "f63aa87f5383895e30a54f0c"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r8, &(0x7f0000000880)={0x24, &(0x7f0000000700)={0x20, 0x8, 0x9b, {0x9b, 0x4, "c42dc356038005b0f95d2c8504de8a4e641f6e25772b0d746681379b1de6fc33a599f3211010836bc9035419190d66b8c44245365c67e0772ada35343b5dfb9a3b5b3929d11603a509116f324e45b33514770b8af372f0ca58b2c08d315253f8f2ce2d686fc1fde3270b1d7f1f35d8e12949a269b8907f2ed412e4f24228292896623dc35f475b47abac790d123f9d037a75cbc62b99196d43"}}, &(0x7f00000007c0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "8dcfc438688a9314ab6f409325760c346dc64a"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="00f5000000000000000000000000000047d6b7403cb0751928a9da24a85c94a1aafda908719b50a8e450c4ad4fe2077e7f73812a1807a11b438fcf631a7f65be79d78582d0da742fa14545ac4291365f034be3c60dddb041b38ab4e6e373bc3da49e3d80d46ae1e188525b7935e8b48b084760369071b9c6348300034e7c133f4bbdeb29b910ab0740bf9ed178f7078ff199c520df22"], &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc18, 0x4, 0x1, {0x22, 0x72e}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000c40)={0x20, 0x11, 0x7e, "c3a08e679205952c9ec983940ae0c65c5f5fe87fc82419f510b39813c618f7bc4c803ebfb491e6cec87a30365d2a03e14b15d81b2129174eec0d278473d65447e373e20e5970d7111acb1e54991419c37de937f1e742fd9bb1a0c682057aa0f035f264c335d83d1c946112dd5dabbd885320ce8afded1a3574a370c176ba"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x8, 0xf}, &(0x7f0000000a00)={0x20, 0x1, 0xc3, "18bbbce8d2d145b46217a588e54b2a607e3c492796b1a2199e9f3b9ad25fe7194f16ce4f0153bdcfc2c05c3423e68bea50a54bb1a701721f8b6e346d17689455306637ecee070035b5552cf06a89d017229554c67c4c4bc0e477f224ffe9f54f54964baa135ca05f4487fa476b7887a3fa9dbc8f8335f8778408613a8125ec8d67f57ad948b4e9d7acd5137672bce1f5d1ae12c1d0bad32e0b61697a93a8db6e2addf78f623533eae78df14c1e247b4e432b8a49e570816ab963d6a02778a174cc8eef"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd}}) (async) syz_usb_control_io$hid(r8, &(0x7f0000000880)={0x24, &(0x7f0000000700)={0x20, 0x8, 0x9b, {0x9b, 0x4, "c42dc356038005b0f95d2c8504de8a4e641f6e25772b0d746681379b1de6fc33a599f3211010836bc9035419190d66b8c44245365c67e0772ada35343b5dfb9a3b5b3929d11603a509116f324e45b33514770b8af372f0ca58b2c08d315253f8f2ce2d686fc1fde3270b1d7f1f35d8e12949a269b8907f2ed412e4f24228292896623dc35f475b47abac790d123f9d037a75cbc62b99196d43"}}, &(0x7f00000007c0)={0x0, 0x3, 0x15, @string={0x15, 0x3, "8dcfc438688a9314ab6f409325760c346dc64a"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="00f5000000000000000000000000000047d6b7403cb0751928a9da24a85c94a1aafda908719b50a8e450c4ad4fe2077e7f73812a1807a11b438fcf631a7f65be79d78582d0da742fa14545ac4291365f034be3c60dddb041b38ab4e6e373bc3da49e3d80d46ae1e188525b7935e8b48b084760369071b9c6348300034e7c133f4bbdeb29b910ab0740bf9ed178f7078ff199c520df22"], &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc18, 0x4, 0x1, {0x22, 0x72e}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000c40)={0x20, 0x11, 0x7e, "c3a08e679205952c9ec983940ae0c65c5f5fe87fc82419f510b39813c618f7bc4c803ebfb491e6cec87a30365d2a03e14b15d81b2129174eec0d278473d65447e373e20e5970d7111acb1e54991419c37de937f1e742fd9bb1a0c682057aa0f035f264c335d83d1c946112dd5dabbd885320ce8afded1a3574a370c176ba"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x8, 0xf}, &(0x7f0000000a00)={0x20, 0x1, 0xc3, "18bbbce8d2d145b46217a588e54b2a607e3c492796b1a2199e9f3b9ad25fe7194f16ce4f0153bdcfc2c05c3423e68bea50a54bb1a701721f8b6e346d17689455306637ecee070035b5552cf06a89d017229554c67c4c4bc0e477f224ffe9f54f54964baa135ca05f4487fa476b7887a3fa9dbc8f8335f8778408613a8125ec8d67f57ad948b4e9d7acd5137672bce1f5d1ae12c1d0bad32e0b61697a93a8db6e2addf78f623533eae78df14c1e247b4e432b8a49e570816ab963d6a02778a174cc8eef"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0xd}}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0x9, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @remote}, 0x400, 0x2, 0x0, 0x8, 0x8, 0x1}, 0x20) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0x85) 1m25.305685242s ago: executing program 1 (id=104): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40012020) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r2, @ANYBLOB="1dceb8274df82e0c"], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) shutdown(r3, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x105480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m25.224733155s ago: executing program 1 (id=105): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) syz_io_uring_setup(0x623c, &(0x7f0000000040)={0x0, 0x8d49, 0x4000, 0x0, 0x2cc, 0x0, r2}, 0x0, 0x0, &(0x7f0000000000)) 1m25.224427315s ago: executing program 1 (id=106): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021d00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_usb_connect(0x3, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100191083120ac050214d2e901020301090226000206a420010904fb03012358d7e4013b090509101000030708090409080052ef774081cf95af864bb4ba3fce5e9b95b9862cb0d0886bf960b36a6a121325c0f1b543242f27f7103004e5b0012d294617b9fc2dbbcca14ec1628e2088ec400e26069ad89d755fe0c549617ca250614d5f858957b3f50ac0c5cb53c84e7d1c88171362cbb55cab47ee5708c22317f03b8142de88fe3055df8641d129fd7fef947cc1c049"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="1201010200000020fa04014240000102030109026e00030140a000080b1a01012030050904000000010130000a2401070aff07000000090401000001023000090401010101e0cb35f4aa270230000905010900bc9eeb6320e0696bda0209087d0a25250600000000060009040200000102300009040201010102300009058209"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x67, &(0x7f0000000480)=@string={0x67, 0x3, "28379ce0b02d252926bd1fba3140cb7372aadf5cb16b58b34195955425beff9b841a800d4ebea365de7a589a980f8a506486a4587fe8c8b47dac0b5e92e00afeea22b0a50ec6a34fab1faed208ab47fbec63f306390d4e821658510cb668f3fbfb4ce351d8"}}]}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e4162e43ac610200000000002000000001000000000000000000000d00", [0x2, 0x7]}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x10070380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peekuser(0x3, r6, 0x118) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/15, 0xf}], 0x1, 0x0, 0x9) fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_SET_XCRS(r10, 0x4188aea7, &(0x7f00000015c0)={0xb, 0x0, [{0x6e89, 0x0, 0x1}, {0x3, 0x0, 0x807f}, {0x2}, {0x9, 0x0, 0x80}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0xb0}, {0x80, 0x0, 0x6}, {0xa, 0x0, 0x3d}, {0x40}, {0x0, 0x0, 0x7}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffff9, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x3}, {0x40, 0x0, 0x10f4}]}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xd, 0xac, 0x4, 0x6, 0x1, 0x40000009, 0xfffffff7}]}) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) 1m24.05295295s ago: executing program 1 (id=117): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000400085704debbf6ffff000000000001090220000100000003090400040103000300092106000b0122280009058103ff03df08fe"], 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40984) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001e00)={0x10, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}], 0x20, 0x24000001}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1000001c, 0x27, 0x2, 0x372, 0x0, r11}, 0x0, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x880) dup(r12) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r13) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r13) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x20, r14, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r14, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r15, 0x29, 0x19, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m24.026815261s ago: executing program 32 (id=117): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000400085704debbf6ffff000000000001090220000100000003090400040103000300092106000b0122280009058103ff03df08fe"], 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x40984) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001e00)={0x10, 0x1d, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000008d80)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}], 0x20, 0x24000001}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) syz_io_uring_setup(0x3c5f, &(0x7f0000000340)={0x0, 0x1000001c, 0x27, 0x2, 0x372, 0x0, r11}, 0x0, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x880) dup(r12) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r13) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r13) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x20, r14, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r14, 0x800, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r15, 0x29, 0x19, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xc) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) 48.985098445s ago: executing program 4 (id=371): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@remote]}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) (async) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) (async) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x202800, 0x0) pselect6(0x2a, 0x0, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) dup(r3) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) fcntl$setstatus(r4, 0x4, 0x2800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000100)={{0x7, 0x8008}, {0xeb7, 0x5e}, 0x8008, 0x20a}) (async) fsync(r2) 48.921812586s ago: executing program 4 (id=372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040f20436120000000000010902240001000000090904121001030003000921fcff050122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x1c4) io_setup(0x7f, &(0x7f0000000100)=0x0) r3 = eventfd(0x8e) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' !)'], 0x0, 0x0, 0x0, 0x0}, 0x0) 47.237224913s ago: executing program 4 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}]}) (async) syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async, rerun: 64) r1 = socket(0x1, 0x5, 0x0) (rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x41) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000280)=@arm64={0x2, 0xd5, 0x4, '\x00', 0x40}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) setreuid(r2, 0x0) (async) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) (async) setpriority(0x2, 0xff, 0x0) (async) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2054) (async) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=""/68) 47.212474913s ago: executing program 4 (id=384): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020304090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005006c00000002000000e0bcc27da7282cb979000000010016004e200000010014"], 0x60}}, 0x0) r4 = socket$inet6(0xa, 0xe, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbff, {{@in6=@loopback, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x100, 0x1, 0x1}}, 0xb8}}, 0x8000) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000040)='%((@\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) 47.093040456s ago: executing program 4 (id=385): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x12880, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) close(r2) sendto$inet6(r0, 0x0, 0x0, 0x200008d0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @rand_addr=0x64010102}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = inotify_init1(0x80000) fadvise64(r3, 0x9, 0x5, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) 47.092951546s ago: executing program 4 (id=386): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002e0003050003"], 0x30}], 0x1}, 0x0) 44.09708872s ago: executing program 3 (id=400): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0xc0b80a672bb01960, 0x100000200a000}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) mount$incfs(0x0, 0x0, 0x0, 0x82, 0x0) 44.09505102s ago: executing program 3 (id=401): syz_usb_connect$uac3(0x1, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x40, 0xd0, 0x0, {0x8, 0xb, 0x0, 0x4, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x406}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x8, 0x7d, {0xa, 0x25, 0x25, 0x6, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x56, 0x1, {0xa, 0x25, 0x25, 0x7, 0x8, 0x1}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x102) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x0, 0x900, 0x1, 0x2000008}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80020000001050500000000070336000000000a0000003c0002802c05000000000300ff01000000000000000000000000000114000400ff02000005021c220000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200c68bd3000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001240006801400939965ef6601ade54305870400000000000000000000000000000002bc3ca07a5a8e959b504b212796010c5c7d3bade5231e4ddb25ae579e1d629e00003a2456cb64a78564096bcfc9845856f8f8d0ed0a307e76743c196f88d4c421547c2f25506baddcfca5bc18f92cb1e2b88089c4ba6fc65bdcaacd599b4afe6bd5f5807301154b35eb0f0112fdd0b5ba8863b5cc47cfffe8c02f5cbaed37cdec8d3c1b013879f4b6cd2f7403af569145b5fcd8eb4f8ae810e5b5856cbf20b2"], 0xb8}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x0, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0x36, 0x200000007, 0x5, 0x4, 0x100000000001], 0xe000, 0x4fb40}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 41.105038434s ago: executing program 0 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'gretap0\x00', @random="22e991d870e1"}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbb89ea0d20debbbbbbed00000000000088a80b00810000000802451e007000684000070190780000001cac1414aa0ba8907800010000450300040067000302ff08007f000001ac141417443451c364010100000000087ffcf197481e99c114e83300fb00000007ff00000000ed9d744a94946cdb0f00000fac1414bb00000005e000000100000003ac1414bb000080018809b6af6220de3ed1000000"], 0x86) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x2, {0x0, 0xea60}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) r4 = accept4$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x0, @none}, &(0x7f0000000380)=0xe, 0x80000) sendfile(r1, r4, &(0x7f0000000480)=0x80000000, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000240)={0x1d, r8}, 0x10) 41.089593345s ago: executing program 3 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8001) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0x400000b0, 0x0, 0x1}, {0x400000b1, 0x0, 0xfffffffffffffff7}]}) (async) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000086a052c83000000000001090224000100003001090400000b03000100092109800a01222c0009058103"], 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) ptrace(0x10, r4) (async) ptrace$getsig(0x4202, r4, 0x19, 0x0) (async) sched_setscheduler(r4, 0x5, &(0x7f0000000080)) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x2f, {0x2f, 0x22, "e7e6da6e41eaddfb0a8a34d2dd23ee248c364bf0cc12a1ac3369688a105a7e62531ce847e3a77de26fb1400690"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x6, 0x4}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x0, 0x3a, 0xb0, 0x8, 0xf3}, 0x17, &(0x7f0000000140)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2b, 0x1, 0x1, 0x3, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x0, 0x8000}]}, 0x5, [{0xad, &(0x7f0000000200)=@string={0xad, 0x3, "cd58a60c7c02c22dfa6e4bee70b5478b5860f3fc9f9d9bb8454542cad294f49edbde9f40824952acbc35c01bf626f3e49cffa9fc1ccf969497681c8d189948c87a69a4f0531e8f25803d7a666d1ff02600b2110ebbc9982cfc8b810cd9b950040dacfd7f176aa59093fbe588a365bc787ff694a15da5090b23235810df178122f33025a63b24ed94d8313aeefe0b29e5293a1209359a0f214e6e78277414e08e45f2d289567589e92dc250"}}, {0x56, &(0x7f00000002c0)=@string={0x56, 0x3, "82bb5d5eacf29104c5189e6a631b9c402b77fec3764bab7b4268352ea4d642176eea6da0a67116ae594fc708c64406472c6ee0b0e4d3312377a005a530f9c6fc29920a18c98a66773a15cae955b8bd781359d4c0"}}, {0x46, &(0x7f0000000340)=@string={0x46, 0x3, "4f7eb5eb5d75a6abcf4ca9844f8fd8371b840a105ced1a46a9cd40f8b221d6acc81164b6f3e8523f8846b41033174acb2f94f4925ad4a645c83935899bd4f8e0398a8ee5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x11, 0x17, {0x17, 0x30, "3c6fb93c315115bbe77ad1bd3f8f1e2929ba014d95"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfc305b3ee44b3b0e}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x40, 0x16, 0x73, "9037ee7332c0e8c24c190301c86fc71a327d9924a0984f46bf4db75dd85c43f2073b513a163e87b941967d257e4b15926598316c036bae328314114c78148a743543967005b7accf60e6984b08a66a4349826f4aa0b03125d78ec95514ddf5aab77954b4ab7599faab886b85743a166021d5e0"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000680)={0x20, 0x0, 0x76, {0x74, "bd598c1a08e2ffcaaaed024ee37cca3b466578d63406fa681d36e43577eaa573934ecdf9cf54afad77b54b29c229b408dd2d441cb644cdac6d5bb7d63ce97003ca02bf44cd21cdb93492eccca99b36e0c7b12b2bca6e9d31993504a6c953067fe05572fb4b7c81b1830ec646b397c619113f88e2"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0xa8}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x19}}) 41.025020656s ago: executing program 0 (id=413): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x8c, 0x0, 0x1, 0x2000000, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004840}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) socket$nl_generic(0x10, 0x3, 0x10) 40.85693963s ago: executing program 0 (id=415): r0 = memfd_secret(0x80000) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000000)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xb2, 0xb, 0xf4, 0x6}}, @code={0xa, 0x64, {"660f2a6600b9d20a0000b800100000ba000000000f300f2366c744240013000000c744240200d00000c7442406000000000f0114240fc75c0d51c4a27d5a4e190f09450f22c666430fc7b503000000450f01f8"}}, @rdmsr={0x66, 0x18, {0x264}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x6d, 0x1, 0x2, 0x3}}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}], 0x17c}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="c4c17e108300000000b9d6080000b8f2000000ba000000000f300ff56800640fc75d0e622066b801018ed03e0f96cac4c23ddec866baf80cb83522548cef66bafc0cb000ee66ba610066ed", 0x4b}], 0x1, 0x19, &(0x7f0000000280), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x7, 0x800000000000, 0xa, 0x5, 0x5, 0x6, 0x1a, 0xf, 0x5, 0x2b4f, 0x5, 0xf0, 0xffffffff, 0x333000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000340)={{r2, 0x526d, 0xfffffffffffffffe, 0xff, 0x0, 0x80000001, 0x16, 0x5, 0x6, 0x7, 0x2, 0x0, 0x7, 0x1, 0x7}}) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001800)={0x0, &(0x7f0000001340)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x1113}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0xb062}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x611b}}, @cpuid={0x64, 0x18, {0x8, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xd4}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0xaf3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2810, 0x6e5d2412, 0x3, 0x3}}, @code={0xa, 0x44, {"f0430fbb5706c441d15641000f01741c06440f017d660f0fc29e46f644903bf7c4e139e07807dac6c4c1e5dac066b8d9008ec8"}}, @set_irq_handler={0xc8, 0x20, {0x5c, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xbc, 0x8, 0x0, 0xffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x3, 0x7, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8, 0x480000000000, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x469, 0x2791, 0x2, 0x9}}, @cpuid={0x64, 0x18, {0x2, 0xfffffffd}}, @code={0xa, 0x57, {"b9800000c00f3235000400000f304b0fc76eb30f01cff30f1ede0f20e035000020000f22e0450f017e7f440f20c03501000000440f22c066b839018ed0460f017c5a0c673832"}}, @code={0xa, 0x66, {"2e66420f0f8a01000000a466b80a018ed866ba4100ed460f00da400f30652e2636660fe010400f0736653e650f01c3f3430f019c316cfd8192c744240006000000c744240206000000c7442406000000000f011424"}}, @wr_drn={0x68, 0x20, {0x1, 0x7}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c02, 0x3, 0x8, 0x9}}, @uexit={0x0, 0x18, 0x6}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x2, 0x6, 0x5}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x8, 0x3}}, @enable_nested={0x12c, 0x18}], 0x481}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001840)={0x1, 0x0, [{0x9d7}]}) (async) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000001880)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async, rerun: 32) r6 = socket$inet(0x2, 0x800, 0xfffffffe) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001900)={'ipvlan1\x00'}) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001940)='ip_vti0\x00', 0x10) (async, rerun: 32) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001980), 0x228082, 0x0) readv(r7, &(0x7f0000002d00)=[{&(0x7f00000019c0)=""/24, 0x18}, {&(0x7f0000001a00)=""/198, 0xc6}, {&(0x7f0000001b00)=""/49, 0x31}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/66, 0x42}, {&(0x7f0000001c00)=""/217, 0xd9}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000002d80)=0x1, 0x8) (async) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000002dc0)={"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"}) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000031c0), 0x40083, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000003200)={'tunl0\x00'}) (async, rerun: 32) r10 = openat$cgroup_type(r9, &(0x7f0000003240), 0x2, 0x0) (rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f00000037c0)={{r5, &(0x7f0000003280)=']\x00', 0x44c00, &(0x7f00000032c0)={@_ha_fsid={[0x3ff, 0x9]}, {0x7, 0x9cd, 0x5f9, 0x8}}, 0x9, &(0x7f0000003300)={@_ha_fsid}, &(0x7f0000003340)=0x1a45ea42}, 0x5, &(0x7f0000003700)=[{0x2, 0x4, &(0x7f0000003380)='/proc/self/net/pfkey\x00', &(0x7f00000033c0)="6d1392228049800ddcaeeb05b7c067", 0xf, 0x2}, {0x2, 0x4, &(0x7f0000003400)='/proc/self/net/pfkey\x00', &(0x7f0000003440)="27c36b3d76fbbc1fb5ebdb1f2259ea7cdae7f8d77dde1811d45d0a1f34618d2625a2704aff59ce593224a3aa035b435c66ac56f02e11093e898bd083e6f80c41eacc18e28b21fafcf69654086e22f1db16e66f7390b2799a01edcd602d10b04fad6d44110834827f05445fb759f8753146f9e93f0121d2", 0x77, 0xa}, {0x2, 0x2302, &(0x7f00000034c0)='\\]^[\x00', &(0x7f0000003500)="469ff7c2cb3b46ac898ff8762c1814d0a1cdcc", 0x13, 0x20}, {0x2, 0x1ff, &(0x7f0000003540)='/-)\x00', &(0x7f0000003580)="acfdde61a61d5d40eea9b1b8a478928e2908d3124163bd53289b176c0902d794950707aa67e22ea627913bb72c240349e3883d9507bf1330e7f839d4ea8a2e073025aa18d3d154ab23467321428480c3645fe668b680cfcd61cefc97e6845978476a9ddc7c818b290e9358ca6d38fc8e673de82d26c06a", 0x77, 0x10}, {0x2, 0x6, &(0x7f0000003600)='tunl0\x00', &(0x7f0000003640)="066dd660cd029dd5b2a1c1ba4dd7d2add0a45662d8bdf9e4f861bae18d55909a765141625bcbbca258d6d13eb561dcc625065f4c5b958b58f7a767c9ed50043a5ab2404d94639bb4c3185f24fe7894dcf938a3403e6ca18b18dcbb88ebfe09151c835f15db0ab07a9bae825c556c5ef72cd20414ba5665d327be0d4e3d849b7311", 0x81, 0x2}]}) (async) r12 = socket(0x8, 0x807, 0x9) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003840), 0xc4480, 0x0) waitid$P_PIDFD(0x3, r13, &(0x7f0000003880), 0x80000000, &(0x7f0000003900)) (async) sendmsg$inet6(r12, &(0x7f0000003c80)={&(0x7f00000039c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7fff}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000003a00)="a3f56c0f1110b54d0829152dbc5cddbaf1a4475cdef90f4958834bee72a15fa7f4e7034ee1727a42f8cffd25bc0ae19d8ffbbdfd3ef301e78ba5624aa1e5578d263ecfde80a02ef5a9b1285a49512ce06166c959a4043674aeeb65b9e895516915f0291073abe5d8ee016c26c044b0014271d430b932f8f3551da432bdd4971d73885e4841cc10268c76308084b05b2a01b1220bc13d0ef19cfe9468a3df9aaa0d2c5d5da36e8b802f1d11ad3da486e011656262479f6d368c83da2cb6f1277790d185fdf4d062695090325fa9b474b647620a09746589b7d2", 0xd9}, {&(0x7f0000003b00)="a0ae1ead0beb1855594376d7e43d12c9bfa6066505d2dd4512019d9aaa00ffad2ef72760dccd2124c74a0330950f9ba38f00d549d2ddca56994018e573b2", 0x3e}, {&(0x7f0000003b40)="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", 0xfe}], 0x3}, 0x4001) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000003d00)={0x8, &(0x7f0000003cc0)=[{0xc, 0x5, 0x7, 0x8}, {0x9, 0xa, 0xc4, 0x3}, {0x3de, 0x26, 0x2, 0x5}, {0xf, 0x1, 0xa7, 0x6}, {0xb39, 0x7, 0x7, 0xaa3}, {0x5, 0x3, 0x4, 0x10}, {0x8ba, 0x7, 0x2, 0x1}, {0x6, 0x5, 0x1, 0x7}]}, 0x10) (rerun: 64) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000003d40)={0xc7, 0x0, 0x1}) 40.696669073s ago: executing program 0 (id=418): socket$packet(0x11, 0x3, 0x300) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x3, 0x77c, 0x0, 0x1}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffbff) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10f6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa0}}}, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="2d434c798c1194640b708cae1f8c82acd02d94c83c2839b5f2bf1550c4173dfb623cf23a959da5c6fccebc", 0x2b}], 0x1}, 0xc0d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r7, 0x55364360fd2742af, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x84) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0xc00c5512, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01060000000000000000090000002400048013000100"], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) preadv(r12, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 40.456758488s ago: executing program 0 (id=419): syz_usb_connect$uac1(0x0, 0x88, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000081e0400304000010203010902760003011190040904000000010100000a240101010a0002010209040100000102000009040101010102000009050109200000fe090725010c005a00090402000001020082802ab54438db0600000f24020206010700027fcbeab7f900072401d50b04000905820920000f030c07250108ff0000"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d0, 0x0, 0x0) syz_usb_connect(0x3, 0x598, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xcc, 0xaa, 0xd0, 0x40, 0x1b3d, 0x17c, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x586, 0x2, 0x7e, 0x80, 0xa0, 0x80, "", [{{0x9, 0x4, 0x1d, 0x1, 0x5, 0xf7, 0x2c, 0xa6, 0xbf, [], [{{0x9, 0x5, 0x2, 0x10, 0x200, 0x44, 0x7, 0x7, [@generic={0x7f, 0x5, "71b75b762a920a1f4bafe40b9c2a425c99010029afffed0c06ba8358af2f96e375579cf7077402ffa310f491fecafa0440ca10bffacf1f7fdd2463df777abb2cf2e122af52f6b511eb39ffa3a82107ea40854cdd8c2da139f96d98f17f03b4294063b1d5ab628a4ad366ea3ab6ff8cfecde2d04addf6708236314e2459"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x2, 0x1, 0x3, [@generic={0xd5, 0x4, "90ac69ef96964a71ba2f0cdae91eefefdf48a205ee572af412b151a0fcb7fb221a449694257131960fa38eebd1e1e5e8c5fd206d704c5ba5b49d82803dd3a40f6be98db6b48f033270527a6bfac4ba1f513b528d0c36f17e07080e4690632e7d81edc6c1f00fd8d83162ea8b072275b21beb4fdba14181a0a43ab4a9343ba5a4fa42b976857ad99157e50682bf578d412c8d06fbc927df5ffa5f5ee21cd9d31a6f345cd74ae18474bc5f4dcee9429ffc5be0cc22bb5d551ee70342b8a60a65ddc1c60e52b4d0c96c24dc065eea95109cc441bb"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xa, 0x45, 0x2, [@generic={0xb4, 0xe, "d08f8d232ff74f3c6f72ef3386e0c79a6efc2ca5034570b3f511cce6fb1dba8810a0e24514f2284762a816064a915d6e23ed4d11cf190e7b216f9d09833f6a80a8d7cb28fd19d862f238cc6316ac5467678bb62c1f2b3ae4758cec06fd6564f57ad467d7e24c83a75f9c78ad92ff53f378c4acf338b37b263fa720a0518af576baa2c26c9f70557c6d8cfb3e21490ff425536cdca8ec181565620cbeeb3e37bd89ea50487f56eb6bd9f880a026b9283dc5e0"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x8}, @generic={0xf3, 0x21, "8aa29b8f3cbf6ba6987a12cad44f8407b81051e08809ad838a746417bd7d2d50508f3867a9e0608e0ad981f4e80989fbbc217752f198b252e55b8c2a24b8cf928f3dfb703ff4dfaeb745fab1f892d71494394c230f35dcb07e8d52ba0c0aad1680a17704df4e0b90fd4de39ae767d37b2ceef444b35568dbf923a262a7cc27fa69afd7a3d40b223777b89570d064f256c7c29425ac4ef3a2a2a4b0a494747ca81553f812bb65195136612d84618b83a855656e76e9ded956e4d6e79274632711ec13d5a6cc1af20ff05b90b12883ae0a67d0923df9e52f721e2dc136835644473465c9bc8be93a20da6e5d89db718f8f4b"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0xa0, 0xef}}]}}, {{0x9, 0x4, 0xf1, 0x4, 0x6, 0x44, 0xc2, 0x65, 0x8e, [@hid_hid={0x9, 0x21, 0x262, 0x5, 0x1, {0x22, 0x2b}}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x5, 0xd, [@generic={0x5, 0xe, "dbe708"}, @generic={0xe6, 0xf, "c29f95befd245b99a7c6426e23e80c0685c494b329758a03737b2b63b6a289efbcc1bd115fd3712a3fda62cdb5a0f11d543140a611b2a90749ef0af7cdc2543e340012d392e1854bc123ce1981596e9c91a1e2d65c2db381c12ec760aeb642f003383e4e1d2a8f463c26f84a32b920f07555510b86905b9157ea78f2d97193c172712139fb2f497dfaaf8c0964ac898baad0e5182b9ede2effa0be04755c038c876cf6dfd7fd0232501e9d65a973a158dfd48230656be6dbe62821099a0ba60d042ed09f52c5a80c3318f13ed800d4272d96953d1eff41e677e631932e46209b357cd9cf"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x6, 0x7f, 0x0, [@generic={0xa, 0xe, "a0183fda8d318c35"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x1, 0x5, 0xc, [@generic={0x65, 0x22, "c92e6601683a4aa2c2954ea8634fe23938e9c73d409513192daa72d3cc86bb1fde3ff805ec3927ae688ce96cea743bca3d2fa9e06fb6727bb516913b13a69be51b4425f9f514cacc5555f097a80bc5216f79e72254eb0f2440cd1436662216b5ae77d8"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x240, 0x6, 0x2, 0x6, [@generic={0x52, 0x2, "3bc66553f6970ddc72fdd47d271220af968b2070afae8e8c280ecf925899847d9eefff6af49cd1f52aacaed528e40e4f99e3aebdb5f419478fb16c6ec15d51c9a9ef4b28c0433405c75ded92601cbe2c"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x10, 0x0, 0x5}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x2, 0xfe, 0x98, [@generic={0x4a, 0x21, "6245b84339d99fcb2fa74b9675936f317f28653fc7321c5b9b1a291e3f064efcd0b7fab98c6f65d458e27f6c477345c9e9b1d7d4198031125ee2dde7950b493679f6a89733c39982"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0xd, 0xf8, 0xfd, 0x20, 0x57}, 0x29, &(0x7f0000000000)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x3, 0x78f, 0x7, [0x30, 0x3f00, 0x3f00, 0x0, 0x3f30, 0x0]}]}}) 40.207444594s ago: executing program 2 (id=420): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x82002, 0x105) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x7a, 0x9, 0x80, 0x2, 0x9, 0x9, 0x5, 0x4, 0x3, 0x1, 0x0, 0x0, 0x3, 0x1, 0x400, 0x4], 0xa000, 0x60082}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00', 0x0}) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) listen(r7, 0xfffffc01) (rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r9, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) (async, rerun: 64) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)) (async, rerun: 64) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0xe0, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x3, 0x26, 0xc5}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x1, [0x0, 0x1, 0x2, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x400, 0xa8, 0x3, 0x6, 0xfff9, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) 40.093029836s ago: executing program 2 (id=421): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "138c62345923fecf", "fb8c120266a9cecdc3b7e4c96505ce79", "10001000", "8b07d135f977d25f"}, 0x28) (async) sendto$inet6(r2, &(0x7f0000000380)="c6", 0x1, 0x8040, 0x0, 0x0) (async) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) (async) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) (async) write$ppp(r4, &(0x7f0000000700)="c021aaecceb2", 0x6) (async) write$binfmt_elf64(r2, 0x0, 0x78) (async) sendto$inet6(r2, &(0x7f00000002c0)="f107574e8562963faa040d9428e7ec3fcbab", 0x12, 0x8000, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) (async) r5 = socket$inet6(0x10, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0xfffffffffffffffd) (async) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x3, 0x7, 0xe1, 0x84, 0x5, 0xf9, 0x40, 0x46, 0xfb, 0x8, 0xc, 0x0, 0xe5, 0x4, 0x3, 0x38}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 40.070610817s ago: executing program 2 (id=422): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000001000/0x4000)=nil) 40.001052898s ago: executing program 2 (id=423): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000f02000000050f23000303100b140804d3ad0e475b1bf392818f68c2ef4b7feda50710"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) 39.412272111s ago: executing program 0 (id=424): syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x228a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003b00), &(0x7f0000003b40)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x48, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x2}}]}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000002c0)={0x5, 0x3, 0x0, [{0xc, 0x0, 0x138, 0x1, 0x2f, 0xd, 0xed, '\x00', 0xb}, {0x3, 0x1, 0x3, 0x7, 0x4, 0x5, 0x6, '\x00', 0x3ff}, {0x2, 0x3, 0x4, 0x4, 0x40, 0x40, 0x5, '\x00', 0x8000000000000001}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000100)={0x5, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r11}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r11}, 0x14) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="38010000100033060000000001000000fc000000000000000000000000000000fc01000000000000110000000000000000000000000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000000000000000000000b00000002000000000000000000000000000000000000000000000000000000000300000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r11}}}], 0x28}}], 0x1, 0x0) r13 = dup(r8) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) 38.879055633s ago: executing program 3 (id=425): capset(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() capset(&(0x7f0000000140)={0x19980330, r1}, &(0x7f0000000180)={0x7f, 0xae, 0x5, 0x7fff, 0x7, 0x6}) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac057c020000ebff000109022400010000100009040008090300000009210309058103ff00"/54], 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$trusted_overlay_origin(r4, 0x0, 0x0, 0x0, 0x1) capget(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0xeb, 0x1, 0xfffffffd, 0x40000, 0x8d, 0x6}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="20372f0000002f31dca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f5f10e0c0502eb600000000000000000000000000000050e64e53071eeed5836546f2e106c98828c3785564499dd314c22b075afe74a130c1615c03e4ee9f2f8e768c5e3cbf60905fc5d1363b0bb8fbfc88969ec8abb8e53ea41319bfbf18f26fe31291f9ec3421191cc7fa2224e74fab5ac1ea56860263846ab8f5b782cdbad3c87a55443b731ff865004650c5d0cc311271fccdae85"], 0x0, 0x0, 0x0, 0x0}, 0x0) 36.316661328s ago: executing program 2 (id=426): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)='\b', 0x1}], 0x1, 0xfffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) r3 = syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f00000000c0)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x7, 0xc0, 0xfb, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x7, 0x24, 0x6, 0x0, 0x0, "b0ac"}, {0x5, 0x24, 0x0, 0xc4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x24, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x6, 0xe53}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x83, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xc, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x6, 0x49}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x19, 0x6, 0x10, 0xe}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xa, 0x2, 0xbe}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x0, 0x0, 0x83, {0x83, 0x3, "b3958f884e637b04b8f0e293553054b9f9f0afadad6ca2cc2f3502d92cdb73d54cd53edbbcd2e57ee49ba61f48361422cd2f2a52100ef671c250e78849506d848e6953a17251bfbee6bee4a406adc845b383cc2f41ceb37bffc3da75cce33432dbed518b35da07b6c0dfb6dab83400fcaeff3a24abb1516d1c6073fb4c2eadc5ad"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x0, 0x14, 0xd4, "d40fe456780c3f163a86fad10a1542c2f14f4798120d7d97684fe7d57ab6b3d68f9e14e8c40bfd1fab5df15876af82ad6817f11096abc55708c9ab9605ae0cf16f367aa2f94affd8888f490301e1b8313b890b94494333774559a09f773b096f792d37c4297c077fdb6470d080892291cf3589e71c9a5b9e23ce63eb5074d312f8db2eb6c166455762ec3363d248584f5221eb290d015147f3d305cd901fdd1dae91e15a9cd0b294ade6d00f7a98fea7f6999bf8e74c655cecff88d39c60f40bdfee5503861ead63e287011f7155e101f85f4122"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}}) 34.051325226s ago: executing program 3 (id=427): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="ec09409807d7b2dafc2ae547ab39fadcc871d714d273c49267325180608f796f611695933e23d44c7c", 0xffffffffffffffeb, 0x2040, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001280)) close_range(r3, 0xffffffffffffffff, 0x0) 31.034207352s ago: executing program 33 (id=386): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002e0003050003"], 0x30}], 0x1}, 0x0) 29.23561556s ago: executing program 2 (id=429): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x60000600) socket(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) syz_usb_connect(0x5, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x5a, 0xf8, 0x40, 0x20, 0x1949, 0xcd89, 0xf1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc2, 0xc, 0x40, 0x2, "", [{{0x9, 0x4, 0x31, 0x8, 0x2, 0xff, 0x5d, 0x81, 0x8, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x3, 0x12}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x401, 0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x33}, 0x2) 26.703712325s ago: executing program 3 (id=430): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100100000040b827ed0100000000000109022400010000b000090400000c4800010009230500010b816664accbc61c2ae0f5e66b000002e84bf5af44fbf9371edd6cd0af77f12d57af03f8ea5436015ef68811c9311fd4a237bf1a5459f220bcd167c181af"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) futex(&(0x7f0000000400)=0x1, 0xa, 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f0000000500), 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000002c0), 0x4) sendmsg(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r1) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x60, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x20, 0xd601, 0x9}, [@nested={0x28, 0x12, 0x0, 0x1, [@nested={0x24, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0xc, 0xfb, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @uid=r4}]}]}]}, @nested={0x24, 0x6, 0x0, 0x1, [@nested={0x20, 0xce, 0x0, 0x1, [@nested={0x1c, 0x13e, 0x0, 0x1, [@nested={0x18, 0xa0, 0x0, 0x1, [@typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@remote}]}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000087) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2008280000000000000000cb4fdca0560f920d54f365c5b1d43ee4"], 0x0, 0x0, 0x0, 0x0}, 0x0) move_mount(r5, &(0x7f0000000540)='./file0\x00', r5, &(0x7f0000000580)='./file1\x00', 0x304) 23.414157906s ago: executing program 34 (id=424): syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x228a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003b00), &(0x7f0000003b40)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x48, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x2}}]}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f00000002c0)={0x5, 0x3, 0x0, [{0xc, 0x0, 0x138, 0x1, 0x2f, 0xd, 0xed, '\x00', 0xb}, {0x3, 0x1, 0x3, 0x7, 0x4, 0x5, 0x6, '\x00', 0x3ff}, {0x2, 0x3, 0x4, 0x4, 0x40, 0x40, 0x5, '\x00', 0x8000000000000001}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000100)={0x5, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r11}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r11}, 0x14) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="38010000100033060000000001000000fc000000000000000000000000000000fc01000000000000110000000000000000000000000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000000000000000000000b00000002000000000000000000000000000000000000000000000000000000000300000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) sendmmsg$inet6(r9, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r11}}}], 0x28}}], 0x1, 0x0) r13 = dup(r8) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) 9.351466618s ago: executing program 35 (id=429): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x60000600) socket(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) syz_usb_connect(0x5, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x5a, 0xf8, 0x40, 0x20, 0x1949, 0xcd89, 0xf1db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc2, 0xc, 0x40, 0x2, "", [{{0x9, 0x4, 0x31, 0x8, 0x2, 0xff, 0x5d, 0x81, 0x8, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x8, 0x5, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x9, 0x3, 0x12}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x401, 0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @any, 0x33}, 0x2) 0s ago: executing program 36 (id=430): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100100000040b827ed0100000000000109022400010000b000090400000c4800010009230500010b816664accbc61c2ae0f5e66b000002e84bf5af44fbf9371edd6cd0af77f12d57af03f8ea5436015ef68811c9311fd4a237bf1a5459f220bcd167c181af"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) futex(&(0x7f0000000400)=0x1, 0xa, 0x2, &(0x7f0000000440)={0x77359400}, &(0x7f0000000500), 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000002c0), 0x4) sendmsg(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r1) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x60, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x20, 0xd601, 0x9}, [@nested={0x28, 0x12, 0x0, 0x1, [@nested={0x24, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0xc, 0xfb, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @uid=r4}]}]}]}, @nested={0x24, 0x6, 0x0, 0x1, [@nested={0x20, 0xce, 0x0, 0x1, [@nested={0x1c, 0x13e, 0x0, 0x1, [@nested={0x18, 0xa0, 0x0, 0x1, [@typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@remote}]}]}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000087) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2008280000000000000000cb4fdca0560f920d54f365c5b1d43ee4"], 0x0, 0x0, 0x0, 0x0}, 0x0) move_mount(r5, &(0x7f0000000540)='./file0\x00', r5, &(0x7f0000000580)='./file1\x00', 0x304) kernel console output (not intermixed with test programs): :sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.523005][ T36] audit: type=1400 audit(1783153489.730:250): avc: denied { ioctl } for pid=921 comm="syz.0.173" path="socket:[9545]" dev="sockfs" ino=9545 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.552725][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.562222][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.571546][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.581143][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.590243][ T400] usb 5-1: Using ep0 maxpacket: 8 [ 52.595326][ T637] usb 4-1: Using ep0 maxpacket: 16 [ 52.600872][ T637] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 52.602525][ T400] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 52.616882][ T400] usb 5-1: can't read configurations, error -22 [ 52.623361][ T400] usb usb5-port1: attempt power cycle [ 52.623771][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.638380][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.639493][ T637] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 52.649518][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.658513][ T637] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 52.669470][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.674198][ T637] usb 4-1: Product: syz [ 52.685339][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.687156][ T637] usb 4-1: Manufacturer: syz [ 52.699023][ T923] kvm_intel: kvm [921]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xadc2 [ 52.712133][ T637] r8152-cfgselector 4-1: Unknown version 0x0000 [ 52.718713][ T637] r8152-cfgselector 4-1: config 0 descriptor?? [ 52.726464][ T637] cdc_acm 4-1:0.0: Zero length descriptor references [ 52.733251][ T637] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 52.927447][ T920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.938306][ T920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.947878][ T637] r8152-cfgselector 4-1: USB disconnect, device number 23 [ 52.965160][ T400] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.985498][ T400] usb 5-1: Using ep0 maxpacket: 8 [ 52.992117][ T400] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 53.015076][ T400] usb 5-1: can't read configurations, error -22 [ 53.145117][ T400] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 53.175456][ T400] usb 5-1: Using ep0 maxpacket: 8 [ 53.181987][ T400] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 53.190162][ T400] usb 5-1: can't read configurations, error -22 [ 53.196781][ T400] usb usb5-port1: unable to enumerate USB device [ 53.350512][ T927] rust_binder: Read failure Err(EAGAIN) in pid:187 [ 53.351544][ T36] audit: type=1400 audit(1783153490.550:251): avc: denied { connect } for pid=926 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.468844][ T936] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.475494][ T937] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.478017][ T936] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.494826][ T937] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.516046][ T36] audit: type=1400 audit(1783153490.720:252): avc: denied { bpf } for pid=938 comm="syz.3.178" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.708766][ T36] audit: type=1400 audit(1783153490.910:253): avc: denied { read write } for pid=947 comm="syz.0.182" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.713410][ T400] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 53.737238][ T36] audit: type=1400 audit(1783153490.910:254): avc: denied { open } for pid=947 comm="syz.0.182" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 53.775755][ T400] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.815067][ T637] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 53.966639][ T637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.978173][ T637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.988025][ T637] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.997128][ T637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.006111][ T637] usb 4-1: config 0 descriptor?? [ 54.023366][ T401] usb 3-1: 0:1 : does not exist [ 54.058351][ T401] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 54.070249][ T401] usb 3-1: USB disconnect, device number 12 [ 54.077486][ T400] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 54.091600][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.236182][ T400] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 54.247304][ T400] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.258539][ T400] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.268500][ T400] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 54.281654][ T400] usb 1-1: config 0 interface 0 has no altsetting 0 [ 54.288317][ T400] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 54.297596][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.306468][ T400] usb 1-1: config 0 descriptor?? [ 54.425072][ T401] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.576715][ T401] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.588401][ T401] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.599440][ T401] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.610751][ T401] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 54.619847][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.621181][ T637] usb 4-1: language id specifier not provided by device, defaulting to English [ 54.637101][ T954] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 54.717463][ T950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.726084][ T950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.048812][ T982] dummy0: entered allmulticast mode [ 55.054776][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.063440][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.072444][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.081001][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.245713][ T637] uclogic 0003:256C:006D.000A: v1 frame probing failed: -71 [ 55.253180][ T637] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 55.260898][ T637] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 55.271187][ T637] usb 4-1: USB disconnect, device number 24 [ 55.325082][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.476025][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 55.484377][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 55.493324][ T9] usb 5-1: config 220 has an invalid descriptor of length 92, skipping remainder of the config [ 55.503729][ T9] usb 5-1: config 220 has no interface number 2 [ 55.510582][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 55.523765][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 55.530583][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 55.537692][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 55.545884][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 55.554985][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.563071][ T9] usb 5-1: Product: syz [ 55.567267][ T9] usb 5-1: Manufacturer: syz [ 55.571886][ T9] usb 5-1: SerialNumber: syz [ 55.668193][ T989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.676810][ T989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.743888][ T36] audit: type=1326 audit(1783153492.940:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.0.194" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5ab9de59 code=0x0 [ 55.782131][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 55.790528][ T9] usb 5-1: No valid video chain found. [ 55.796363][ T9] usb 5-1: selecting invalid altsetting 0 [ 55.810338][ T9] usb 5-1: USB disconnect, device number 8 [ 56.045091][ T65] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 56.196491][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 56.204967][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.215160][ T65] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.224157][ T65] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 56.235116][ T65] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 56.248345][ T65] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 56.259283][ T65] usb 4-1: config 1 interface 1 has no altsetting 0 [ 56.268109][ T65] usb 4-1: string descriptor 0 read error: -22 [ 56.274354][ T65] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 56.283454][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.402265][ T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.410973][ T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.420096][ T36] audit: type=1400 audit(1783153493.620:256): avc: denied { transfer } for pid=997 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 56.425836][ T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.447718][ T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.456217][ T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.464712][ T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.485492][ T1003] usb usb8: usbfs: process 1003 (syz.0.198) did not claim interface 0 before use [ 56.494724][ T1004] usb usb8: usbfs: process 1004 (syz.0.198) did not claim interface 0 before use [ 56.517636][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.526866][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.595181][ T637] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.745076][ T637] usb 5-1: Using ep0 maxpacket: 32 [ 56.751420][ T637] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 56.760011][ T637] usb 5-1: config 0 has no interface number 0 [ 56.766128][ T637] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 56.776169][ T637] usb 5-1: config 0 interface 196 has no altsetting 0 [ 56.784425][ T637] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 56.793511][ T637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.801532][ T637] usb 5-1: Product: syz [ 56.805728][ T637] usb 5-1: Manufacturer: syz [ 56.810336][ T637] usb 5-1: SerialNumber: syz [ 56.815788][ T637] usb 5-1: config 0 descriptor?? [ 56.821048][ T996] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 57.029542][ T996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.038284][ T996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.180902][ T401] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 57.189004][ T401] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 57.212311][ T401] usb 3-1: USB disconnect, device number 13 [ 57.212381][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 57.245073][ T637] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 57.266470][ T637] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 57.284346][ T637] usb 5-1: USB disconnect, device number 9 [ 57.301740][ T1028] overlayfs: missing 'workdir' [ 57.309792][ T992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.321164][ T992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.345894][ T394] usb 4-1: USB disconnect, device number 25 [ 57.635059][ T637] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.695074][ T401] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.705089][ T394] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 57.780167][ T1041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1041 comm=syz.0.212 [ 57.792556][ T1041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 57.795105][ T637] usb 5-1: Using ep0 maxpacket: 16 [ 57.807908][ T637] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 57.816395][ T637] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 57.825148][ T637] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 57.835389][ T637] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 57.845099][ T401] usb 3-1: Using ep0 maxpacket: 8 [ 57.849704][ T637] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.854623][ T401] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1656, setting to 1024 [ 57.859598][ T637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.871448][ T401] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 57.884835][ T637] usb 5-1: Product: syz [ 57.888989][ T394] usb 4-1: config 0 interface 0 has no altsetting 0 [ 57.897077][ T637] usb 5-1: Manufacturer: syz [ 57.900367][ T394] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 57.912686][ T637] usb 5-1: SerialNumber: syz [ 57.913267][ T401] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 57.927274][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.937269][ T401] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.946495][ T394] usb 4-1: config 0 descriptor?? [ 57.951574][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.961313][ T401] usb 3-1: Product: syz [ 57.965551][ T401] usb 3-1: Manufacturer: 땂嫊⒤ሳİ∇齧⅘评浏恭쳣雅〾⇕횢⅛ә୙䊱ⲉ韢⯲䋼᎚砄瘐荎䞬諩ᴵ赫緭᧐л區Ԑ쉴뉢㣨쨥ꩯ㴤꣭ݓ䉙赬լ贪豫禝쉼玏瀌鴗䁂ᑸꖹ謸瘹㝱Ꝍᔟ鿭覐寮ㆡ擙ഏ蠰Ḳ쒗⏹⥰霬ࠝ쪃ᤖ걑ꫧᶞ [ 57.991978][ T401] usb 3-1: SerialNumber: syz [ 57.998032][ T1037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.011592][ T1044] SELinux: policydb version 1 does not match my version range 15-33 [ 58.019802][ T1044] SELinux: failed to load policy [ 58.046780][ T36] audit: type=1400 audit(1783153495.250:257): avc: denied { map } for pid=1045 comm="syz.0.214" path="socket:[9806]" dev="sockfs" ino=9806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.070677][ T36] audit: type=1400 audit(1783153495.250:258): avc: denied { lock } for pid=1045 comm="syz.0.214" path="socket:[10587]" dev="sockfs" ino=10587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.180495][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.189584][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.215805][ T401] cdc_ncm 3-1:1.0: bind() failure [ 58.236567][ T401] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 58.243414][ T401] cdc_ncm 3-1:1.1: bind() failure [ 58.252231][ T401] usb 3-1: USB disconnect, device number 14 [ 58.363231][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x1 [ 58.385125][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x5 [ 58.392222][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x6 [ 58.415354][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.422444][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.435367][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.442452][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.465082][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.472161][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.485177][ T394] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x0 [ 58.761984][ T394] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -71 [ 58.785148][ T394] usb 4-1: USB disconnect, device number 26 [ 58.819216][ T36] audit: type=1400 audit(1783153496.020:259): avc: denied { read } for pid=1052 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.978494][ T1056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.987180][ T1056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.105058][ T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 59.255042][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 59.261415][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.272379][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.282187][ T65] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 59.291311][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.300524][ T65] usb 3-1: config 0 descriptor?? [ 59.429416][ T36] audit: type=1400 audit(1783153496.630:260): avc: denied { watch watch_reads } for pid=1065 comm="syz.3.219" path="/28/file0" dev="tmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.469263][ T1068] FAULT_INJECTION: forcing a failure. [ 59.469263][ T1068] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.482414][ T1068] CPU: 0 UID: 0 PID: 1068 Comm: syz.3.220 Not tainted syzkaller #0 991092e6aacd45c89fe3e25b50ff7d10cec51463 [ 59.482448][ T1068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.482471][ T1068] Call Trace: [ 59.482477][ T1068] [ 59.482486][ T1068] __dump_stack+0x21/0x30 [ 59.482526][ T1068] dump_stack_lvl+0x140/0x1c0 [ 59.482548][ T1068] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.482588][ T1068] ? _parse_integer+0x2e/0x40 [ 59.482609][ T1068] ? kstrtoull+0x13b/0x1e0 [ 59.482629][ T1068] dump_stack+0x19/0x20 [ 59.482658][ T1068] should_fail_ex+0x3c2/0x510 [ 59.482680][ T1068] should_fail+0xf/0x20 [ 59.482695][ T1068] should_fail_usercopy+0x1e/0x30 [ 59.482715][ T1068] _copy_from_user+0x20/0xa0 [ 59.482755][ T1068] ___sys_sendmsg+0x1c7/0x370 [ 59.482775][ T1068] ? __sys_sendmsg+0x2a0/0x2a0 [ 59.482794][ T1068] ? proc_fail_nth_write+0x184/0x220 [ 59.482824][ T1068] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 59.482849][ T1068] ? __fget_files+0x2bc/0x330 [ 59.482884][ T1068] __x64_sys_sendmsg+0x206/0x2e0 [ 59.482903][ T1068] ? fput+0x1a4/0x230 [ 59.482928][ T1068] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 59.482952][ T1068] ? ksys_write+0x1f3/0x260 [ 59.482969][ T1068] ? __kasan_check_read+0x15/0x20 [ 59.482985][ T1068] x64_sys_call+0x2a4c/0x2ee0 [ 59.482998][ T1068] do_syscall_64+0x57/0xf0 [ 59.483030][ T1068] ? clear_bhb_loop+0x50/0xa0 [ 59.483056][ T1068] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.483081][ T1068] RIP: 0033:0x7fb06759de59 [ 59.483105][ T1068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.483119][ T1068] RSP: 002b:00007fb06846e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.483135][ T1068] RAX: ffffffffffffffda RBX: 00007fb067825fa0 RCX: 00007fb06759de59 [ 59.483147][ T1068] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 59.483173][ T1068] RBP: 00007fb06846e090 R08: 0000000000000000 R09: 0000000000000000 [ 59.483188][ T1068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.483206][ T1068] R13: 00007fb067826038 R14: 00007fb067825fa0 R15: 00007fff502d1848 [ 59.483224][ T1068] [ 59.711707][ T36] audit: type=1400 audit(1783153496.910:261): avc: denied { mount } for pid=1052 comm="syz.2.216" name="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.743924][ T36] audit: type=1400 audit(1783153496.910:262): avc: denied { search } for pid=1052 comm="syz.2.216" name="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.766085][ T36] audit: type=1400 audit(1783153496.910:263): avc: denied { read } for pid=1052 comm="syz.2.216" name="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.787971][ T36] audit: type=1400 audit(1783153496.910:264): avc: denied { open } for pid=1052 comm="syz.2.216" path="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.809807][ T400] usbhid 1-1:0.0: can't add hid device: -110 [ 59.816139][ T400] usbhid 1-1:0.0: probe with driver usbhid failed with error -110 [ 59.834259][ T36] audit: type=1400 audit(1783153497.030:265): avc: denied { ioctl } for pid=1072 comm="syz.0.222" path="socket:[10706]" dev="sockfs" ino=10706 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.936338][ T1079] overlayfs: failed to resolve './bus': -2 [ 59.959301][ T1081] syzkaller1: entered promiscuous mode [ 59.964830][ T1081] syzkaller1: entered allmulticast mode [ 59.980387][ T65] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 59.987781][ T65] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 59.995390][ T65] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 60.002661][ T65] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0 [ 60.010712][ T65] konepure 0003:1E7D:2DB4.000C: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 60.181215][ T65] usb 3-1: USB disconnect, device number 15 [ 60.327035][ T637] usb 5-1: 0:2 : does not exist [ 60.336759][ T637] usb 5-1: unit 6 not found! [ 60.345355][ T637] usb 5-1: USB disconnect, device number 10 [ 60.355245][ T36] audit: type=1400 audit(1783153497.560:266): avc: denied { map } for pid=1085 comm="syz.4.225" path="socket:[10734]" dev="sockfs" ino=10734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.374510][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.410266][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.418821][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.427361][ T1088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.435902][ T1088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.459624][ T1095] fuse: Unknown parameter '000000000000000000000040xffffffffffffffff' [ 60.472743][ T14] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.479785][ T1095] fuse: Bad value for 'fd' [ 60.646763][ T1107] &nr: renamed from bond_slave_1 [ 60.891136][ T1125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 61.015071][ T400] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 61.166108][ T400] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 61.179127][ T400] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.185770][ T400] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 61.194804][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.203422][ T400] usb 5-1: config 0 descriptor?? [ 61.275073][ T637] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 61.405075][ T637] usb 4-1: device descriptor read/64, error -71 [ 61.412579][ T1117] netlink: 'syz.4.235': attribute type 6 has an invalid length. [ 61.420285][ T1117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 61.630577][ T1117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.639906][ T1117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.655087][ T637] usb 4-1: device descriptor read/64, error -71 [ 61.849343][ T400] usb 5-1: string descriptor 0 read error: -71 [ 61.856121][ T400] uclogic 0003:5543:3031.000D: failed retrieving string descriptor #200: -71 [ 61.864939][ T400] uclogic 0003:5543:3031.000D: failed retrieving pen parameters: -71 [ 61.873161][ T400] uclogic 0003:5543:3031.000D: failed probing pen v2 parameters: -71 [ 61.881541][ T400] uclogic 0003:5543:3031.000D: failed probing parameters: -71 [ 61.889346][ T400] uclogic 0003:5543:3031.000D: probe with driver uclogic failed with error -71 [ 61.901833][ T400] usb 5-1: USB disconnect, device number 11 [ 61.905141][ T637] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 62.057211][ T637] usb 4-1: device descriptor read/64, error -71 [ 62.295098][ T637] usb 4-1: device descriptor read/64, error -71 [ 62.355081][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 62.405149][ T637] usb usb4-port1: attempt power cycle [ 62.495079][ T1096] Bluetooth: hci0: command 0x1003 tx timeout [ 62.495101][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.507356][ T45] usb 3-1: device descriptor read/64, error -71 [ 62.528822][ T1223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.537389][ T1223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.605087][ T352] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 62.745141][ T45] usb 3-1: device descriptor read/64, error -71 [ 62.751462][ T637] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 62.776302][ T637] usb 4-1: device descriptor read/8, error -71 [ 62.782519][ T352] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 62.791617][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.800446][ T352] usb 5-1: config 0 descriptor?? [ 62.916121][ T637] usb 4-1: device descriptor read/8, error -71 [ 62.995080][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 63.062868][ T1225] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 63.072940][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 63.072956][ T36] audit: type=1400 audit(1783153500.270:278): avc: denied { relabelto } for pid=1224 comm="syz.0.251" name="71" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 63.105521][ T36] audit: type=1400 audit(1783153500.270:279): avc: denied { associate } for pid=1224 comm="syz.0.251" name="71" dev="tmpfs" ino=400 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 63.132728][ T36] audit: type=1400 audit(1783153500.310:280): avc: denied { write } for pid=293 comm="syz-executor" name="71" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 63.134072][ T45] usb 3-1: device descriptor read/64, error -71 [ 63.159927][ T36] audit: type=1400 audit(1783153500.310:281): avc: denied { remove_name } for pid=293 comm="syz-executor" name="binderfs" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 63.167040][ T637] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 63.201892][ T36] audit: type=1400 audit(1783153500.310:282): avc: denied { rmdir } for pid=293 comm="syz-executor" name="71" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 63.240374][ T1227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1227 comm=syz.0.252 [ 63.246716][ T637] usb 4-1: device descriptor read/8, error -71 [ 63.386111][ T637] usb 4-1: device descriptor read/8, error -71 [ 63.455128][ T45] usb 3-1: device descriptor read/64, error -71 [ 63.495195][ T637] usb usb4-port1: unable to enumerate USB device [ 63.565251][ T45] usb usb3-port1: attempt power cycle [ 63.813451][ T1221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.822087][ T1221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.842242][ T1229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.253'. [ 63.851157][ T1229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.253'. [ 63.905078][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.926023][ T45] usb 3-1: device descriptor read/8, error -71 [ 63.949160][ T1232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.957810][ T1232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.031350][ T352] usb 5-1: Cannot set autoneg [ 64.036207][ T352] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 64.048713][ T352] usb 5-1: USB disconnect, device number 12 [ 64.056315][ T45] usb 3-1: device descriptor read/8, error -71 [ 64.073406][ T1235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.081942][ T1235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.295080][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 64.316178][ T45] usb 3-1: device descriptor read/8, error -71 [ 64.446165][ T45] usb 3-1: device descriptor read/8, error -71 [ 64.455076][ T637] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 64.546676][ T1240] capability: warning: `syz.4.257' uses 32-bit capabilities (legacy support in use) [ 64.565964][ T45] usb usb3-port1: unable to enumerate USB device [ 64.602477][ T1244] gretap0: refused to change device tx_queue_len [ 64.616118][ T637] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 64.627140][ T637] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.653369][ T637] usb 4-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40 [ 64.663444][ T637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.672886][ T637] usb 4-1: Product: syz [ 64.679030][ T1248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 64.679740][ T637] usb 4-1: Manufacturer: syz [ 64.700815][ T637] usb 4-1: SerialNumber: syz [ 64.787602][ T1254] kvm: MWAIT instruction emulated as NOP! [ 64.893923][ T1260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.902614][ T1260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.914618][ T637] usb 4-1: 0:1 : does not exist [ 64.919551][ T637] usb 4-1: unit 5 not found! [ 64.925741][ T637] usb 4-1: USB disconnect, device number 31 [ 64.935347][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.124412][ T36] audit: type=1400 audit(1783153502.320:283): avc: denied { mount } for pid=1263 comm="syz.2.263" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.125701][ T1264] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 65.146249][ T36] audit: type=1400 audit(1783153502.320:284): avc: denied { mounton } for pid=1263 comm="syz.2.263" path="/83/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 65.176419][ T36] audit: type=1400 audit(1783153502.380:285): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.485092][ T36] audit: type=1400 audit(1783153502.680:286): avc: denied { getopt } for pid=1272 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.515047][ T637] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 65.531526][ T1281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.558883][ T1281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.563682][ T1286] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 65.574401][ T1286] SELinux: failed to load policy [ 65.638455][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.647120][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.685117][ T637] usb 3-1: Using ep0 maxpacket: 16 [ 65.702867][ T637] usb 3-1: config 0 interface 0 has no altsetting 0 [ 65.712426][ T637] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 65.721720][ T637] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.737401][ T637] usb 3-1: config 0 descriptor?? [ 65.935964][ T400] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.947688][ T1269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.956338][ T1269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.085071][ T400] usb 5-1: Using ep0 maxpacket: 32 [ 66.091552][ T400] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 66.099819][ T400] usb 5-1: config 0 has no interface number 0 [ 66.106016][ T400] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 66.116119][ T400] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 66.127655][ T400] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 66.136757][ T400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.144801][ T400] usb 5-1: Product: syz [ 66.149051][ T65] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 66.156666][ T400] usb 5-1: Manufacturer: syz [ 66.161271][ T400] usb 5-1: SerialNumber: syz [ 66.167174][ T400] usb 5-1: config 0 descriptor?? [ 66.173235][ T1298] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.180493][ T1298] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.188064][ T637] wacom 0003:056A:00BB.000E: unknown main item tag 0x6 [ 66.195092][ T637] wacom 0003:056A:00BB.000E: ignoring exceeding usage max [ 66.204242][ T637] wacom 0003:056A:00BB.000E: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 66.214537][ T637] wacom 0003:056A:00BB.000E: hidraw1: USB HID v0.81 Device [HID 056a:00bb] on usb-dummy_hcd.2-1/input0 [ 66.226423][ T637] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BB.000E/input/input12 [ 66.305065][ T65] usb 4-1: device descriptor read/64, error -71 [ 66.374263][ T394] usb 3-1: USB disconnect, device number 20 [ 66.389378][ T1298] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.396595][ T1298] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.545125][ T65] usb 4-1: device descriptor read/64, error -71 [ 66.604847][ T400] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 66.615157][ T400] asix 5-1:0.188: probe with driver asix failed with error -61 [ 66.785083][ T65] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 66.915110][ T65] usb 4-1: device descriptor read/64, error -71 [ 67.125087][ T394] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 67.155085][ T65] usb 4-1: device descriptor read/64, error -71 [ 67.265146][ T65] usb usb4-port1: attempt power cycle [ 67.275059][ T394] usb 3-1: Using ep0 maxpacket: 32 [ 67.281637][ T394] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.290117][ T394] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 27, changing to 7 [ 67.302615][ T394] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 67.311719][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.319760][ T394] usb 3-1: Product: syz [ 67.323914][ T394] usb 3-1: Manufacturer: syz [ 67.328544][ T394] usb 3-1: SerialNumber: syz [ 67.535752][ T1307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.544423][ T1307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.556286][ T1307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.564857][ T1307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.579206][ T394] usb 3-1: USB disconnect, device number 21 [ 67.599329][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 67.615131][ T65] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 67.636067][ T65] usb 4-1: device descriptor read/8, error -71 [ 67.766040][ T65] usb 4-1: device descriptor read/8, error -71 [ 68.005095][ T65] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 68.026163][ T65] usb 4-1: device descriptor read/8, error -71 [ 68.156109][ T65] usb 4-1: device descriptor read/8, error -71 [ 68.265177][ T65] usb usb4-port1: unable to enumerate USB device [ 68.325093][ T637] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 68.476149][ T637] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 68.487814][ T637] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=17.a2 [ 68.496945][ T637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.504962][ T637] usb 3-1: Product: syz [ 68.509177][ T637] usb 3-1: Manufacturer: syz [ 68.513787][ T637] usb 3-1: SerialNumber: syz [ 68.607079][ T1316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.615644][ T1316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.722428][ T637] net1080 3-1:7.0: probe with driver net1080 failed with error -22 [ 68.731517][ T637] usb 3-1: USB disconnect, device number 22 [ 68.927366][ T36] audit: type=1400 audit(1783153506.130:287): avc: denied { read } for pid=1317 comm="syz.3.281" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.931557][ T637] usb 5-1: USB disconnect, device number 13 [ 68.950812][ T36] audit: type=1400 audit(1783153506.130:288): avc: denied { open } for pid=1317 comm="syz.3.281" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.991240][ T36] audit: type=1400 audit(1783153506.180:289): avc: denied { ioctl } for pid=1317 comm="syz.3.281" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x6f05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.016430][ T36] audit: type=1400 audit(1783153506.190:290): avc: denied { accept } for pid=1317 comm="syz.3.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.043864][ T1323] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 69.051444][ T36] audit: type=1400 audit(1783153506.240:291): avc: denied { map } for pid=1322 comm="syz.3.283" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.141246][ T36] audit: type=1400 audit(1783153506.340:292): avc: denied { create } for pid=1327 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 69.184464][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.198151][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.209682][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.219016][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.227926][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.236849][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.245567][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.254446][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.263179][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.272001][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.285930][ T1336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.294848][ T1336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.435097][ T400] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 69.505083][ T637] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 69.535074][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 69.586468][ T400] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.594927][ T400] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.605077][ T400] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.614063][ T400] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 69.624989][ T400] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 69.638188][ T400] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.649002][ T400] usb 4-1: config 1 interface 1 has no altsetting 0 [ 69.656383][ T637] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.658100][ T400] usb 4-1: string descriptor 0 read error: -22 [ 69.667051][ T637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.672891][ T400] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 69.684668][ T637] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.692590][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.704177][ T637] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.723504][ T45] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 69.733820][ T45] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 69.742955][ T45] usb 3-1: config 220 interface 0 has no altsetting 0 [ 69.751150][ T637] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.760269][ T637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.768327][ T45] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 69.777448][ T637] usb 5-1: Product: syz [ 69.781833][ T637] usb 5-1: Manufacturer: syz [ 69.786479][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.794486][ T45] usb 3-1: Product: syz [ 69.798709][ T637] usb 5-1: SerialNumber: syz [ 69.803792][ T45] usb 3-1: Manufacturer: syz [ 69.808749][ T45] usb 3-1: SerialNumber: syz [ 69.814198][ T637] cdc_mbim 5-1:1.0: skipping garbage [ 69.835043][ T1343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.843902][ T1343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.914826][ T400] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 69.978468][ T36] audit: type=1400 audit(1783153507.180:293): avc: denied { map } for pid=1349 comm="syz.0.292" path="socket:[12705]" dev="sockfs" ino=12705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.001779][ T36] audit: type=1400 audit(1783153507.180:294): avc: denied { read } for pid=1349 comm="syz.0.292" path="socket:[12705]" dev="sockfs" ino=12705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.025602][ T1338] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 70.037152][ T45] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 70.043824][ T45] usb 3-1: No valid video chain found. [ 70.050401][ T45] usb 3-1: USB disconnect, device number 23 [ 70.126616][ T1335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.136930][ T1335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.156129][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 70.166326][ T1355] overlayfs: missing 'lowerdir' [ 70.196867][ T400] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 70.208504][ T400] usb 4-1: USB disconnect, device number 36 [ 70.219242][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.245504][ T36] audit: type=1400 audit(1783153507.450:295): avc: denied { create } for pid=1357 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.299627][ T1365] netlink: 'syz.0.296': attribute type 30 has an invalid length. [ 70.506604][ T1369] SELinux: failed to load policy [ 70.514310][ T36] audit: type=1400 audit(1783153507.710:296): avc: denied { sqpoll } for pid=1368 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.521348][ T1369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 70.561564][ T1372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 70.634663][ T1338] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 70.842952][ T1338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.853185][ T1338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.861532][ T637] cdc_mbim 5-1:1.0: bind() failure [ 70.869330][ T637] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 70.878138][ T637] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 70.887633][ T637] usb 5-1: USB disconnect, device number 14 [ 71.005101][ T400] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 71.175062][ T400] usb 4-1: Using ep0 maxpacket: 8 [ 71.181304][ T400] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 71.189843][ T400] usb 4-1: config 179 has no interface number 0 [ 71.196172][ T400] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 71.207433][ T400] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 71.219126][ T400] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.230681][ T400] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 71.244166][ T400] usb 4-1: config 179 interface 65 has no altsetting 0 [ 71.251107][ T400] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 71.260199][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.275571][ T400] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15 [ 71.323466][ T1404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.325474][ T95] input input15: unable to receive magic message: -110 [ 71.332503][ T1404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.354350][ T95] input input15: unable to receive magic message: -32 [ 71.361674][ T95] input input15: unable to receive magic message: -32 [ 71.447458][ T1413] netlink: 'syz.4.310': attribute type 11 has an invalid length. [ 71.479297][ T400] usb 4-1: USB disconnect, device number 37 [ 71.485279][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 71.496723][ T400] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 71.745105][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 71.815095][ T65] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 71.905070][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 71.911704][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 71.921409][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.936977][ T31] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 71.945154][ T65] usb 5-1: device descriptor read/64, error -71 [ 71.948601][ T31] usb 3-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 71.967189][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.971285][ T1430] netlink: 80 bytes leftover after parsing attributes in process `syz.0.316'. [ 71.975517][ T31] usb 3-1: Product: syz [ 71.995027][ T31] usb 3-1: Manufacturer: syz [ 71.999650][ T31] usb 3-1: SerialNumber: syz [ 72.299057][ T31] usb 3-1: unit 2 not found! [ 72.324238][ T31] usb 3-1: USB disconnect, device number 24 [ 72.334633][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.365129][ T65] usb 5-1: device descriptor read/64, error -71 [ 72.420679][ T1437] bridge0: port 3(veth0_to_bridge) entered blocking state [ 72.427959][ T637] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 72.428082][ T1437] bridge0: port 3(veth0_to_bridge) entered disabled state [ 72.442843][ T1437] veth0_to_bridge: entered allmulticast mode [ 72.449390][ T1437] veth0_to_bridge: entered promiscuous mode [ 72.455538][ T1437] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.467775][ T1437] bridge0: port 3(veth0_to_bridge) entered blocking state [ 72.474882][ T1437] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 72.536783][ T1438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 72.587771][ T637] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.595928][ T637] usb 4-1: not running at top speed; connect to a high speed hub [ 72.604430][ T637] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.614792][ T637] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.615319][ T65] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 72.624157][ T637] usb 4-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 72.645656][ T637] usb 4-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 72.659049][ T637] usb 4-1: config 1 interface 1 has no altsetting 0 [ 72.667154][ T637] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 72.676362][ T637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.684368][ T637] usb 4-1: Product: syz [ 72.688733][ T637] usb 4-1: Manufacturer: syz [ 72.693372][ T637] usb 4-1: SerialNumber: syz [ 72.704261][ T1445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.712885][ T1445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.785070][ T65] usb 5-1: device descriptor read/64, error -71 [ 73.025067][ T394] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 73.032715][ T65] usb 5-1: device descriptor read/64, error -71 [ 73.145157][ T65] usb usb5-port1: attempt power cycle [ 73.185049][ T394] usb 3-1: Using ep0 maxpacket: 32 [ 73.191379][ T394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.202949][ T394] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 73.212061][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.220239][ T394] usb 3-1: Product: syz [ 73.224424][ T394] usb 3-1: Manufacturer: syz [ 73.229363][ T394] usb 3-1: SerialNumber: syz [ 73.235380][ T394] usb 3-1: config 0 descriptor?? [ 73.242326][ T394] usb 3-1: bad CDC descriptors [ 73.247410][ T394] usb 3-1: unsupported MDLM descriptors [ 73.346724][ T1461] sock: sock_set_timeout: `syz.0.326' (pid 1461) tries to set negative timeout [ 73.411748][ T637] usb 4-1: 0:2 : does not exist [ 73.417914][ T637] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 73.421829][ T1466] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 73.432976][ T1466] rust_binder: 1464:1466 transaction to 1464 failed: BR_DEAD_REPLY [ 73.452539][ T637] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 73.473240][ T637] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.488251][ T394] usb 3-1: USB disconnect, device number 25 [ 73.492874][ T637] usb 4-1: USB disconnect, device number 38 [ 73.505246][ T65] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 73.513076][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.537096][ T65] usb 5-1: device descriptor read/8, error -71 [ 73.573857][ T1474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'. [ 73.666176][ T65] usb 5-1: device descriptor read/8, error -71 [ 73.895074][ T637] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 73.905076][ T65] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 73.926164][ T65] usb 5-1: device descriptor read/8, error -71 [ 74.046549][ T637] usb 4-1: unable to get BOS descriptor or descriptor too short [ 74.054951][ T637] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.056686][ T65] usb 5-1: device descriptor read/8, error -71 [ 74.065608][ T637] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.080241][ T637] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 74.091139][ T637] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 74.104401][ T637] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 74.115304][ T637] usb 4-1: config 1 interface 1 has no altsetting 0 [ 74.124096][ T637] usb 4-1: string descriptor 0 read error: -22 [ 74.130376][ T637] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 74.139696][ T637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.175154][ T65] usb usb5-port1: unable to enumerate USB device [ 74.265073][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 74.295890][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 74.295907][ T36] audit: type=1400 audit(1783153511.500:301): avc: denied { ioctl } for pid=1491 comm="syz.0.335" path="socket:[13587]" dev="sockfs" ino=13587 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.416258][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 74.424649][ T31] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 74.435865][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 74.446321][ T31] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 74.455532][ T31] usb 3-1: config 220 has no interface number 1 [ 74.461905][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 74.468757][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 74.477239][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 74.486443][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.494521][ T31] usb 3-1: Product: syz [ 74.507904][ T31] usb 3-1: Manufacturer: syz [ 74.512658][ T31] usb 3-1: SerialNumber: syz [ 74.560338][ T1505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 74.612106][ T36] audit: type=1400 audit(1783153511.810:302): avc: denied { read write } for pid=1508 comm="syz.4.340" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.647643][ T36] audit: type=1400 audit(1783153511.810:303): avc: denied { open } for pid=1508 comm="syz.4.340" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.683794][ T36] audit: type=1400 audit(1783153511.880:304): avc: denied { setopt } for pid=1510 comm="syz.4.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.726228][ T31] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 74.732732][ T31] usb 3-1: No valid video chain found. [ 74.745205][ T31] usb 3-1: USB disconnect, device number 26 [ 75.162144][ T1513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.170873][ T1513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.475076][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 75.485176][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 75.626116][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.637182][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 75.642429][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.655291][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 75.664479][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.673585][ T45] usb 5-1: config 0 descriptor?? [ 75.679409][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 75.689381][ T45] usbhid 5-1:0.0: can't add hid device: -22 [ 75.695680][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.703685][ T31] usb 3-1: Product: syz [ 75.707944][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 75.716730][ T31] usb 3-1: Manufacturer: syz [ 75.721382][ T31] usb 3-1: SerialNumber: syz [ 75.770836][ T637] usb 4-1: USB disconnect, device number 39 [ 75.935787][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.943090][ T31] usb 3-1: unit 5 not found! [ 75.955550][ T31] usb 3-1: USB disconnect, device number 27 [ 75.958558][ T36] audit: type=1400 audit(1783153513.160:305): avc: denied { name_bind } for pid=1532 comm="syz.0.350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 75.987925][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.037727][ T36] audit: type=1400 audit(1783153513.240:306): avc: denied { ioctl } for pid=1536 comm="syz.0.352" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.116350][ T1540] input: syz0 as /devices/virtual/input/input17 [ 76.124167][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.132639][ T1541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.132830][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.146450][ T1541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.471704][ T1546] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 76.535091][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 76.667213][ T31] usb 4-1: device descriptor read/64, error -71 [ 76.691494][ T36] audit: type=1400 audit(1783153513.890:307): avc: denied { map } for pid=1556 comm="syz.0.359" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 76.827685][ T1560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.836608][ T1560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.836791][ T1561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.853013][ T1561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.905114][ T31] usb 4-1: device descriptor read/64, error -71 [ 77.028406][ T36] audit: type=1400 audit(1783153514.230:308): avc: denied { bind } for pid=1562 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.100370][ T1575] overlay: Unknown parameter 'uid<00000000000000016896' [ 77.145061][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 77.275119][ T31] usb 4-1: device descriptor read/64, error -71 [ 77.425103][ T394] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 77.515070][ T31] usb 4-1: device descriptor read/64, error -71 [ 77.575151][ T394] usb 3-1: Using ep0 maxpacket: 16 [ 77.581531][ T394] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.588488][ T394] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 77.597750][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.606790][ T394] usb 3-1: config 0 descriptor?? [ 77.627620][ T31] usb usb4-port1: attempt power cycle [ 77.975042][ T31] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 78.006159][ T31] usb 4-1: device descriptor read/8, error -71 [ 78.014399][ T394] wacom 0003:056A:00B3.000F: unknown main item tag 0x0 [ 78.035060][ T394] wacom 0003:056A:00B3.000F: unknown main item tag 0x0 [ 78.041953][ T394] wacom 0003:056A:00B3.000F: item fetching failed at offset 2/40 [ 78.050121][ T394] wacom 0003:056A:00B3.000F: parse failed [ 78.056060][ T394] wacom 0003:056A:00B3.000F: probe with driver wacom failed with error -22 [ 78.146120][ T31] usb 4-1: device descriptor read/8, error -71 [ 78.216691][ T36] audit: type=1400 audit(1783153515.420:309): avc: denied { cmd } for pid=1576 comm="iou-wrk-1577" path="socket:[14716]" dev="sockfs" ino=14716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.258011][ T637] usb 5-1: USB disconnect, device number 19 [ 78.385038][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 78.406108][ T31] usb 4-1: device descriptor read/8, error -71 [ 78.558700][ T31] usb 4-1: device descriptor read/8, error -71 [ 78.621406][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'. [ 78.675994][ T31] usb usb4-port1: unable to enumerate USB device [ 78.713730][ T36] audit: type=1400 audit(1783153515.910:310): avc: denied { write } for pid=1594 comm="syz.4.371" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.839020][ T400] usb 3-1: USB disconnect, device number 28 [ 78.904068][ T1601] netlink: 'syz.2.373': attribute type 46 has an invalid length. [ 78.923066][ T1601] kvm: user requested TSC rate below hardware speed [ 78.930925][ T1601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 79.055087][ T394] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 79.134852][ T1614] sock: sock_set_timeout: `syz.2.376' (pid 1614) tries to set negative timeout [ 79.255190][ T394] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 79.263439][ T394] usb 5-1: config 0 has no interface number 0 [ 79.273721][ T394] usb 5-1: config 0 interface 18 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.284980][ T394] usb 5-1: config 0 interface 18 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.295014][ T394] usb 5-1: config 0 interface 18 has no altsetting 0 [ 79.305058][ T394] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 79.318146][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.339411][ T394] usb 5-1: config 0 descriptor?? [ 79.385049][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 79.562041][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.578597][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.593378][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.605135][ T31] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 79.614560][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.631534][ T31] usb 3-1: config 0 descriptor?? [ 79.752275][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.765077][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.774750][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.782725][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.789810][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.796888][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.803945][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.821231][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.828365][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.835538][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.842610][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.849718][ T36] audit: type=1400 audit(1783153517.050:311): avc: denied { create } for pid=1612 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.853908][ T31] usb 3-1: string descriptor 0 read error: -71 [ 79.869052][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.882990][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.891081][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.898605][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.905904][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.915541][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.915920][ T31] usb 3-1: USB disconnect, device number 29 [ 79.922755][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.937920][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.945357][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.953547][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.962684][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.969972][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.980072][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.987264][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 79.994415][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.001620][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.009448][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.016716][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.023877][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.031099][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.038463][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.057388][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.070768][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.078069][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.085254][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.092450][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.100728][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.108602][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.115950][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.123130][ T394] chicony 0003:04F2:1236.0010: unknown main item tag 0x0 [ 80.148950][ T394] chicony 0003:04F2:1236.0010: hidraw1: USB HID vff.fc Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input18 [ 80.173478][ T394] usb 5-1: USB disconnect, device number 20 [ 80.212995][ T1620] fuse: Bad value for 'group_id' [ 80.218217][ T1620] fuse: Bad value for 'group_id' [ 80.303418][ T1623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 80.413283][ T36] audit: type=1400 audit(1783153517.610:312): avc: denied { append } for pid=1627 comm="syz.2.381" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.596409][ T36] audit: type=1400 audit(1783153517.800:313): avc: denied { map } for pid=1640 comm="syz.4.385" path="/58" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.632383][ T36] audit: type=1400 audit(1783153517.830:314): avc: denied { setattr } for pid=753 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.675076][ T394] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 80.745079][ T65] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 80.826273][ T394] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 80.875053][ T394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.905072][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 80.934027][ T394] usb 3-1: config 0 has no interfaces? [ 80.942825][ T394] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 80.955049][ T65] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 80.966371][ T65] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.985024][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.993082][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.003164][ T65] usb 4-1: Product: syz [ 81.012290][ T394] usb 3-1: config 0 descriptor?? [ 81.018492][ T65] usb 4-1: Manufacturer: syz [ 81.023124][ T65] usb 4-1: SerialNumber: syz [ 81.036875][ T65] r8152-cfgselector 4-1: Unknown version 0x0000 [ 81.053299][ T65] r8152-cfgselector 4-1: config 0 descriptor?? [ 81.229569][ T394] usb 3-1: USB disconnect, device number 30 [ 81.781394][ T1660] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 81.801933][ T36] audit: type=1400 audit(1783153519.000:315): avc: denied { bind } for pid=1659 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.841696][ T36] audit: type=1400 audit(1783153519.000:316): avc: denied { setopt } for pid=1659 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.082196][ T1664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.092288][ T1664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.585052][ T65] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 82.642119][ T1668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.652680][ T1668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.666835][ T36] audit: type=1400 audit(1783153519.870:317): avc: denied { accept } for pid=1667 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.736383][ T65] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 82.744976][ T65] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 82.754078][ T65] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 82.767696][ T65] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 82.777393][ T65] usb 3-1: config 220 has no interface number 1 [ 82.783758][ T65] usb 3-1: config 220 interface 0 has no altsetting 0 [ 82.790783][ T65] usb 3-1: config 220 interface 76 has no altsetting 0 [ 82.799385][ T65] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 82.808678][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.816849][ T65] usb 3-1: Product: syz [ 82.821151][ T65] usb 3-1: Manufacturer: syz [ 82.825936][ T65] usb 3-1: SerialNumber: syz [ 83.035048][ T65] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 83.041665][ T65] usb 3-1: No valid video chain found. [ 83.050687][ T65] usb 3-1: USB disconnect, device number 31 [ 83.217770][ T36] audit: type=1400 audit(1783153520.420:318): avc: denied { accept } for pid=1669 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.238235][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.247643][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.257009][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.265888][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.514743][ T394] r8152-cfgselector 4-1: USB disconnect, device number 44 [ 83.825069][ T637] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 83.841315][ T36] audit: type=1400 audit(1783153521.040:319): avc: denied { mount } for pid=1686 comm="syz.0.402" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.863895][ T1687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.872458][ T1687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.945066][ T394] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 83.985079][ T637] usb 3-1: Using ep0 maxpacket: 16 [ 84.005802][ T637] usb 3-1: config 0 has an invalid descriptor of length 153, skipping remainder of the config [ 84.016459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.028486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.040534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.052556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.064621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.076646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.088650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.100679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.105226][ T394] usb 4-1: Invalid ep0 maxpacket: 32 [ 84.112843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.135018][ C1] net_ratelimit: 98 callbacks suppressed [ 84.135040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.152714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.164709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.176729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.188731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.200733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.212736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.224736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.236738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.248783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 84.265072][ T394] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 84.308660][ T637] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 84.319779][ T637] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=159 [ 84.329737][ T637] usb 3-1: Product: syz [ 84.333925][ T637] usb 3-1: Manufacturer: syz [ 84.435031][ T394] usb 4-1: Invalid ep0 maxpacket: 32 [ 84.440601][ T394] usb usb4-port1: attempt power cycle [ 84.460076][ T637] usb 3-1: SerialNumber: syz [ 84.485780][ T637] usb 3-1: config 0 descriptor?? [ 84.498198][ T1692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.525859][ T1692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.699590][ T65] usb 3-1: USB disconnect, device number 32 [ 84.805054][ T394] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 84.835410][ T394] usb 4-1: Invalid ep0 maxpacket: 32 [ 84.965043][ T394] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 84.985404][ T394] usb 4-1: Invalid ep0 maxpacket: 32 [ 84.994554][ T394] usb usb4-port1: unable to enumerate USB device [ 85.106781][ T1695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.125899][ T1695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.265390][ T1699] tipc: Started in network mode [ 85.270312][ T1699] tipc: Node identity ac14140f, cluster identity 4711 [ 85.285125][ T1699] tipc: New replicast peer: 255.255.255.255 [ 85.295889][ T1699] tipc: Enabled bearer , priority 10 [ 85.496301][ T1708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.508745][ T36] audit: type=1400 audit(1783153522.630:320): avc: denied { write } for pid=1707 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.526490][ T1708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.636770][ T65] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 85.826103][ T65] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 85.834517][ T65] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 85.853564][ T65] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 85.872638][ T65] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 85.893199][ T65] usb 3-1: config 220 has no interface number 2 [ 85.903316][ T65] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.935222][ T65] usb 3-1: config 220 interface 0 has no altsetting 0 [ 85.952344][ T65] usb 3-1: config 220 interface 76 has no altsetting 0 [ 85.972584][ T65] usb 3-1: config 220 interface 1 has no altsetting 0 [ 85.980995][ T65] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 85.995024][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.013265][ T65] usb 3-1: Product: syz [ 86.017684][ T65] usb 3-1: Manufacturer: syz [ 86.022314][ T65] usb 3-1: SerialNumber: syz [ 86.252121][ T65] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 86.265044][ T65] usb 3-1: No valid video chain found. [ 86.279743][ T65] usb 3-1: USB disconnect, device number 33 [ 86.305038][ T394] tipc: Node number set to 2886997007 [ 86.347864][ T36] audit: type=1400 audit(1783153523.550:321): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.427990][ T36] audit: type=1400 audit(1783153523.630:322): avc: denied { map } for pid=1710 comm="syz.0.409" path="socket:[15734]" dev="sockfs" ino=15734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.495933][ T36] audit: type=1400 audit(1783153523.630:323): avc: denied { read } for pid=1710 comm="syz.0.409" path="socket:[15734]" dev="sockfs" ino=15734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.638908][ T36] audit: type=1400 audit(1783153523.750:324): avc: denied { mounton } for pid=1713 comm="syz.0.410" path="/142/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.685088][ T36] audit: type=1400 audit(1783153523.750:325): avc: denied { read } for pid=1713 comm="syz.0.410" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 86.742240][ T36] audit: type=1400 audit(1783153523.750:326): avc: denied { open } for pid=1713 comm="syz.0.410" path="/142/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.014770][ T36] audit: type=1400 audit(1783153524.210:327): avc: denied { setattr } for pid=1734 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.218136][ T637] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 87.317715][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.345186][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.382282][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.406067][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.421046][ T637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.485855][ T637] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.505658][ T637] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.535691][ T637] usb 4-1: New USB device found, idVendor=056a, idProduct=832c, bcdDevice= 0.00 [ 87.544788][ T637] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.666541][ T637] usb 4-1: config 0 descriptor?? [ 88.788711][ T401] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 89.145018][ C0] net_ratelimit: 104339 callbacks suppressed [ 89.145042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 89.145081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.151284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 89.163256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.175156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 89.187212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.199005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 89.211203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.222947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 89.234966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.551473][ T36] audit: type=1400 audit(1783153527.750:328): avc: denied { getopt } for pid=1755 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.270362][ C1] sched: DL replenish lagged too much [ 91.678060][ T401] usb 3-1: device not accepting address 34, error -71 [ 91.959802][ T1759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.141521][ T1759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.082397][ T637] usbhid 4-1:0.0: can't add hid device: -32 [ 93.126778][ T401] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 93.687911][ T637] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 94.155079][ C1] net_ratelimit: 96690 callbacks suppressed [ 94.155102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.155248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 94.161346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.173257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 94.185343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.197150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 94.209585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.221211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 94.233088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.245043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 96.340285][ T401] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 96.355140][ T401] usb 3-1: can't read configurations, error -71 [ 99.165031][ C0] net_ratelimit: 96352 callbacks suppressed [ 99.165053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 99.165082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.171297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 99.183732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.195287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 99.207237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.219199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 99.231196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.242994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 99.255549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.326703][ T401] usb usb3-port1: attempt power cycle [ 104.175061][ C0] net_ratelimit: 95298 callbacks suppressed [ 104.175084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 104.175307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.181322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 104.193772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.205255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 104.217383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.229259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 104.241254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.253056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 104.265610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.318288][ T11] usb 1-1: USB disconnect, device number 18 [ 107.708124][ T1173] bridge_slave_1: left allmulticast mode [ 107.855950][ T1173] bridge_slave_1: left promiscuous mode [ 108.187652][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.417314][ T1173] bridge_slave_0: left allmulticast mode [ 109.185045][ C0] net_ratelimit: 91340 callbacks suppressed [ 109.185068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 109.185218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.191272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 109.203686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.215339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 109.227336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.239222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 109.251253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.263089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 109.275599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.427963][ T1173] bridge_slave_0: left promiscuous mode [ 109.496859][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.576240][ T1776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.798380][ T1776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.195014][ C0] net_ratelimit: 91385 callbacks suppressed [ 114.195035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 114.195046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.195368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.201327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 114.213778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.225191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 114.237162][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.249106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 114.261067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.273052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 119.205090][ C1] net_ratelimit: 91666 callbacks suppressed [ 119.205111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.205136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 119.211481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.223384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 119.235385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.247244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 119.259596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.271156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 119.283184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.295041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.215000][ C0] net_ratelimit: 94025 callbacks suppressed [ 124.215023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.215306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.221230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.233219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.245132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.257159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.269003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.281457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.292987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 124.304942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.225002][ C0] net_ratelimit: 91481 callbacks suppressed [ 129.225022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 129.225307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.231270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 129.243944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.255366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 129.267284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.279147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 129.291239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.303022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 129.315733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.350901][ T11] usb 4-1: USB disconnect, device number 49 [ 134.235046][ C1] net_ratelimit: 96384 callbacks suppressed [ 134.235068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.235196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 134.241350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.253261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 134.265277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.277086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 134.289506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.301090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 134.313056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.324908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.245050][ C0] net_ratelimit: 97376 callbacks suppressed [ 139.245071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.245265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.251335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.263370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.275296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.287263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.299139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.311617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.323059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 139.335101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.255032][ C1] net_ratelimit: 96113 callbacks suppressed [ 144.255056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.255193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 144.261732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.273219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 144.285233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.297154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 144.309147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.320998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 144.333401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.344999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.265016][ C1] net_ratelimit: 95745 callbacks suppressed [ 149.265062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.265067][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.265350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.271248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.283171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.295235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.307142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.319544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.331131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 149.343017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.274994][ C1] net_ratelimit: 98336 callbacks suppressed [ 154.275015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.275043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 154.281231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.293164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 154.305160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.317005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 154.329037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.340971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 154.353361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.364887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 159.285021][ C0] net_ratelimit: 97458 callbacks suppressed [ 159.285043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 159.285057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.285285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.291271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 159.303265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.315153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 159.327061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.339045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 159.351910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.362915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.295037][ C0] net_ratelimit: 87475 callbacks suppressed [ 164.295059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.295083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.301343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.313361][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.325312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.337420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.349333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.361353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.373535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 164.386026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.304976][ C0] net_ratelimit: 89119 callbacks suppressed [ 169.305485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.310930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 169.323111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.335110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 169.347213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.359040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 169.370916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.382870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 169.394787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.406750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.315036][ C0] net_ratelimit: 92133 callbacks suppressed [ 174.315058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.315094][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.321314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.333239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.345170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.357339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.369130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.381239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.393105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 174.405825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.325021][ C0] net_ratelimit: 91825 callbacks suppressed [ 179.325041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 179.325167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.331209][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 179.343216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.355135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 179.367109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.378978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 179.391088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.402853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 179.415724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.335018][ C0] net_ratelimit: 96424 callbacks suppressed [ 184.335040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 184.335298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.341316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 184.353424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.365269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 184.377235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.389118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 184.401082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.413033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 184.425223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.345023][ C0] net_ratelimit: 96250 callbacks suppressed [ 189.345045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 189.345668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.351272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 189.363300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.375195][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 189.387495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.399095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 189.411144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.423007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 189.435084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.355013][ C0] net_ratelimit: 97369 callbacks suppressed [ 194.355036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 194.355501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.361217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 194.373265][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.385172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 194.397286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.409038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 194.421135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.432974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 194.444987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.365037][ C0] net_ratelimit: 94789 callbacks suppressed [ 199.365059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 199.365584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.371297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 199.383376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.395193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 199.407398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.419205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 199.431328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.445082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 199.455144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.374979][ C0] net_ratelimit: 94480 callbacks suppressed [ 204.375001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 204.375160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.381161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 204.393157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.405223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 204.417222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.429045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 204.441773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.453019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 204.465096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.384991][ C1] net_ratelimit: 93011 callbacks suppressed [ 209.385013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.385170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 209.391307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.403227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 209.415237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.427091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 209.439132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.451035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 209.463724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.475008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.394996][ C0] net_ratelimit: 94036 callbacks suppressed [ 214.395017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.395156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.401185][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.413172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.425118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.437085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.448991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.460985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.472861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 214.485654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.405046][ C0] net_ratelimit: 96850 callbacks suppressed [ 219.405069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 219.405572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.411247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 219.423276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.435149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 219.447384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.459146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 219.471106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.483010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 219.495060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.414971][ C0] net_ratelimit: 94922 callbacks suppressed [ 224.414993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 224.415141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.421226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 224.434114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.445394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 224.457404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.469267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 224.481496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.493211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 224.505191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.970146][ T37] INFO: task syz.0.424:1755 blocked for more than 125 seconds. [ 229.108091][ T37] Not tainted syzkaller #0 [ 229.113074][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.424965][ C0] net_ratelimit: 95625 callbacks suppressed [ 229.424987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 229.425054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.431197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 229.443225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.455146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 229.467158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.478932][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 229.491861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.502967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 229.515099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 229.588038][ T36] audit: type=1400 audit(1783153666.270:329): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2751]" dev="pipefs" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 230.108012][ T37] task:syz.0.424 state:D stack:0 pid:1755 tgid:1755 ppid:293 flags:0x00004004 [ 230.177842][ T37] Call Trace: [ 230.181181][ T37] [ 230.184148][ T37] __schedule+0x1496/0x20b0 [ 230.235245][ T37] ? __sched_text_start+0x10/0x10 [ 230.240339][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 230.328226][ T37] ? __kasan_check_write+0x18/0x20 [ 230.333413][ T37] ? rcu_segcblist_entrain+0x69/0x2f0 [ 230.441008][ T37] ? _raw_spin_unlock+0x45/0x60 [ 230.445953][ T37] ? __kasan_check_write+0x18/0x20 [ 230.451100][ T37] schedule+0xc5/0x240 [ 230.455239][ T37] schedule_timeout+0xc7/0x3b0 [ 230.460034][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 230.465454][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 230.471035][ T37] ? __smp_call_single_queue+0xd8/0x380 [ 230.476631][ T37] ? generic_exec_single+0x1fd/0x500 [ 230.481961][ T37] wait_for_common+0x368/0x650 [ 230.486778][ T37] ? wait_for_completion+0x40/0x40 [ 230.491924][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 230.497461][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 230.503997][ T37] ? xa_find+0x145/0x170 [ 230.508288][ T37] wait_for_completion+0x1c/0x40 [ 230.513261][ T37] rcu_barrier+0x45a/0x580 [ 230.517725][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 230.523128][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 230.527978][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 230.533128][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 230.538819][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 230.544486][ T37] kvm_put_kvm+0xadf/0x12d0 [ 230.549051][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 230.554190][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 230.559446][ T37] kvm_vm_release+0x47/0x70 [ 230.563989][ T37] __fput+0x208/0xa30 [ 230.568030][ T37] ____fput+0x20/0x30 [ 230.572040][ T37] task_work_run+0x1e8/0x260 [ 230.576686][ T37] ? __cfi_task_work_run+0x10/0x10 [ 230.581825][ T37] ? __kasan_check_write+0x18/0x20 [ 230.586990][ T37] resume_user_mode_work+0x35/0x50 [ 230.592156][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 230.597673][ T37] do_syscall_64+0x63/0xf0 [ 230.602116][ T37] ? clear_bhb_loop+0x50/0xa0 [ 230.606839][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 230.612760][ T37] RIP: 0033:0x7f8a5ab9de59 [ 230.617229][ T37] RSP: 002b:00007ffdf250b9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 230.625694][ T37] RAX: 0000000000000000 RBX: 00007f8a5ae27da0 RCX: 00007f8a5ab9de59 [ 230.633688][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 230.641715][ T37] RBP: 00007f8a5ae27da0 R08: 0000000000000006 R09: 0000000000000000 [ 230.649736][ T37] R10: 00000000003ffbd0 R11: 0000000000000246 R12: 0000000000016673 [ 230.657751][ T37] R13: 00007f8a5ae25fac R14: 0000000000016641 R15: 00007f8a5ae25fa0 [ 230.665767][ T37] [ 230.668877][ T37] NMI backtrace for cpu 1 [ 230.668892][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 991092e6aacd45c89fe3e25b50ff7d10cec51463 [ 230.668926][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.668939][ T37] Call Trace: [ 230.668946][ T37] [ 230.668955][ T37] __dump_stack+0x21/0x30 [ 230.668990][ T37] dump_stack_lvl+0x140/0x1c0 [ 230.669021][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 230.669053][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 230.669093][ T37] dump_stack+0x19/0x20 [ 230.669123][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 230.669145][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 230.669174][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 230.669194][ T37] ? sched_show_task+0x371/0x530 [ 230.669224][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 230.669255][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 230.669285][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 230.669315][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 230.669339][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 230.669368][ T37] watchdog+0xe45/0xf90 [ 230.669392][ T37] ? __kasan_check_write+0x18/0x20 [ 230.669418][ T37] ? __cfi_watchdog+0x10/0x10 [ 230.669439][ T37] ? __kasan_check_read+0x15/0x20 [ 230.669460][ T37] ? __kthread_parkme+0x12f/0x180 [ 230.669482][ T37] ? schedule+0xc5/0x240 [ 230.669507][ T37] kthread+0x2c7/0x360 [ 230.669531][ T37] ? __cfi_watchdog+0x10/0x10 [ 230.669554][ T37] ? __cfi_kthread+0x10/0x10 [ 230.669580][ T37] ret_from_fork+0x67/0xa0 [ 230.669612][ T37] ? __cfi_kthread+0x10/0x10 [ 230.669637][ T37] ret_from_fork_asm+0x1a/0x30 [ 230.669669][ T37] [ 230.669677][ T37] Sending NMI from CPU 1 to CPUs 0: [ 230.913311][ C0] NMI backtrace for cpu 0 [ 230.913327][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 991092e6aacd45c89fe3e25b50ff7d10cec51463 [ 230.913350][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.913361][ C0] RIP: 0010:update_stack_state+0x2c0/0x4d0 [ 230.913388][ C0] Code: 48 39 45 b8 73 19 31 c0 48 81 c4 88 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8b 7d c8 48 85 ff 4c 89 75 c0 <0f> 84 83 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8b 45 a0 42 80 [ 230.913403][ C0] RSP: 0018:ffffc90000007468 EFLAGS: 00000246 [ 230.913419][ C0] RAX: ffffc90000007930 RBX: ffffc90000007590 RCX: ffffc90000007901 [ 230.913432][ C0] RDX: ffffc90000007988 RSI: 1ffff92000000eb2 RDI: 0000000000000000 [ 230.913444][ C0] RBP: ffffc90000007518 R08: ffffc90000007650 R09: ffffc90000007648 [ 230.913457][ C0] R10: 0000000000000003 R11: ffffffff81759b00 R12: ffffc90000008000 [ 230.913469][ C0] R13: 1ffff92000000eb9 R14: ffffc900000075c8 R15: 0000000000000002 [ 230.913481][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 230.913494][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.913505][ C0] CR2: 000055cf52f4eaf8 CR3: 000000014ff28000 CR4: 00000000003526b0 [ 230.913521][ C0] Call Trace: [ 230.913526][ C0] [ 230.913535][ C0] unwind_next_frame+0x39e/0x6b0 [ 230.913557][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 230.913577][ C0] arch_stack_walk+0x138/0x170 [ 230.913594][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 230.913611][ C0] stack_trace_save+0xaa/0x100 [ 230.913629][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 230.913647][ C0] ? netif_receive_skb+0x160/0x7b0 [ 230.913673][ C0] kasan_save_track+0x3e/0x80 [ 230.913690][ C0] ? kasan_save_track+0x3e/0x80 [ 230.913707][ C0] ? kasan_save_free_info+0x44/0x50 [ 230.913731][ C0] ? __kasan_slab_free+0x5f/0x80 [ 230.913749][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 230.913774][ C0] kasan_save_free_info+0x44/0x50 [ 230.913797][ C0] __kasan_slab_free+0x5f/0x80 [ 230.913816][ C0] kmem_cache_free+0x1bd/0x4f0 [ 230.913832][ C0] ? __kfree_skb+0x18f/0x210 [ 230.913854][ C0] __kfree_skb+0x18f/0x210 [ 230.913875][ C0] ? ip6_mc_input+0x433/0x680 [ 230.913896][ C0] sk_skb_reason_drop+0xd8/0x310 [ 230.913918][ C0] ip6_mc_input+0x433/0x680 [ 230.913938][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 230.913959][ C0] ? __asan_memset+0x39/0x50 [ 230.913974][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 230.913990][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 230.914010][ C0] ip6_rcv_finish+0x341/0x3c0 [ 230.914031][ C0] ipv6_rcv+0xf1/0x240 [ 230.914050][ C0] ? __kasan_check_write+0x18/0x20 [ 230.914065][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 230.914085][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 230.914105][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 230.914122][ C0] ? ttwu_do_activate+0x620/0x620 [ 230.914142][ C0] process_backlog+0x472/0xaf0 [ 230.914174][ C0] ? try_to_wake_up+0x111a/0x1fd0 [ 230.914194][ C0] __napi_poll+0xd0/0x600 [ 230.914215][ C0] net_rx_action+0x5dc/0xd70 [ 230.914238][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 230.914259][ C0] ? sched_clock+0x44/0x60 [ 230.914281][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 230.914305][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 230.914328][ C0] handle_softirqs+0x1aa/0x620 [ 230.914345][ C0] ? __cfi___d_free+0x10/0x10 [ 230.914363][ C0] __do_softirq+0xf/0x16 [ 230.914380][ C0] do_softirq+0xb8/0x110 [ 230.914395][ C0] [ 230.914400][ C0] [ 230.914405][ C0] ? __cfi_do_softirq+0x10/0x10 [ 230.914420][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 230.914436][ C0] ? __d_free+0x27/0x30 [ 230.914454][ C0] ? __cfi___d_free+0x10/0x10 [ 230.914471][ C0] __local_bh_enable_ip+0x74/0x80 [ 230.914486][ C0] rcu_do_batch+0x590/0xcb0 [ 230.914504][ C0] ? rcu_core+0xcc0/0xcc0 [ 230.914517][ C0] ? __kasan_check_write+0x18/0x20 [ 230.914533][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 230.914549][ C0] ? __kasan_check_read+0x15/0x20 [ 230.914565][ C0] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 230.914581][ C0] rcu_nocb_cb_kthread+0x533/0xb60 [ 230.914599][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 230.914615][ C0] ? __kasan_check_write+0x18/0x20 [ 230.914630][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 230.914647][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 230.914670][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 230.914687][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 230.914704][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 230.914722][ C0] ? __kasan_check_read+0x15/0x20 [ 230.914736][ C0] ? __kthread_parkme+0x12f/0x180 [ 230.914753][ C0] ? schedule+0xc5/0x240 [ 230.914771][ C0] kthread+0x2c7/0x360 [ 230.914793][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 230.914814][ C0] ? __cfi_kthread+0x10/0x10 [ 230.914832][ C0] ret_from_fork+0x67/0xa0 [ 230.914854][ C0] ? __cfi_kthread+0x10/0x10 [ 230.914872][ C0] ret_from_fork_asm+0x1a/0x30 [ 230.914889][ C0] [ 234.434978][ C0] net_ratelimit: 76058 callbacks suppressed [ 234.435000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 234.435328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.441210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 234.453204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.465121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 234.477353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.489094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 234.501065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.512998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8a:80:55:1c:8a:ca, vlan:0) [ 234.525080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)