last executing test programs: 37.268063658s ago: executing program 3 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r5, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r6 = dup2(r0, r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x10, 0x0, &(0x7f0000000140)) read$msr(r6, &(0x7f0000000480)=""/243, 0xf3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090300000000000000001d0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 37.110246517s ago: executing program 3 (id=1076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000300)=[{{0x0, 0xea60}, 0x17, 0xf5, 0x7}, {{0x0, 0x2710}, 0x14, 0x3, 0x3}, {{0x77359400}, 0x14, 0x7, 0x78}], 0x48) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r7, 0x29, 0x7, &(0x7f0000000000)={0x7, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10}}, {{0xa, 0x4e22, 0x18000, @remote, 0x8}}}, 0x108) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = dup(r8) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000080200000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) r11 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r11, &(0x7f0000002d80)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}], 0x1}}], 0x1, 0x20000854) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 36.486491963s ago: executing program 3 (id=1080): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x264002, 0x0) (async) setuid(0xee00) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) (async) tkill(r1, 0x3) setresuid(0xee01, 0x0, 0x0) (async) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff06, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="80fd06000040", 0x6}], 0x1, 0x0, 0x5) 36.282427245s ago: executing program 3 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2a2389d, 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0x8) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x7292000) 36.185249s ago: executing program 3 (id=1082): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f0000ed7000/0x4000)=nil, 0x4000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 36.184396121s ago: executing program 3 (id=1083): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0x80c5}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4101, 0x1005}, {&(0x7f0000003800)=""/4077, 0xfed}, {&(0x7f00000011c0)=""/242, 0xf2}, {&(0x7f00000012c0)=""/193, 0xc1}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f0000000340)=""/256, 0xfa}, {&(0x7f00000026c0)=""/4096, 0xfffffffffffffd6e}, {&(0x7f00000014c0)=""/161, 0xa1}, {&(0x7f00000036c0)=""/113, 0x71}], 0x9, 0x1, 0x3, 0x510) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 36.109393115s ago: executing program 32 (id=1083): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0x80c5}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84042, 0x0) preadv2(r3, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4101, 0x1005}, {&(0x7f0000003800)=""/4077, 0xfed}, {&(0x7f00000011c0)=""/242, 0xf2}, {&(0x7f00000012c0)=""/193, 0xc1}, {&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f0000000340)=""/256, 0xfa}, {&(0x7f00000026c0)=""/4096, 0xfffffffffffffd6e}, {&(0x7f00000014c0)=""/161, 0xa1}, {&(0x7f00000036c0)=""/113, 0x71}], 0x9, 0x1, 0x3, 0x510) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 28.915675934s ago: executing program 1 (id=1125): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) (async) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x4}]}, 0x10) (async, rerun: 32) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) (async, rerun: 64) sendto$inet6(r4, &(0x7f0000000000)="846bb66f", 0x18, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async, rerun: 64) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @broadcast}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth0_to_team\x00', 0xff, 0xc619, 0xc460}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x11, r0, 0x180000000) 28.861265997s ago: executing program 4 (id=1126): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000083c0)={0x2020}, 0x2020) umount2(&(0x7f0000000600)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 28.778733832s ago: executing program 1 (id=1128): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b08000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f00006e8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x36}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x100000000000005c, 0x0, [{0x4b564d00}]}) 28.753441984s ago: executing program 4 (id=1129): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x214, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8628}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40fbbe1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfcb}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4004000}, 0x11) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) 28.057139614s ago: executing program 0 (id=1138): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00003fe000/0x400000)=nil) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x28) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000580)={0x9, 0x0, [{0x4, 0x7f, 0x1, 0x100, 0x4, 0x7}, {0x2, 0x40, 0x5, 0x7, 0x7, 0x632, 0x10}, {0x80000008, 0x9, 0x1, 0x7, 0x8, 0x8, 0x6}, {0x80000007, 0x9, 0x4, 0x3, 0x1ff, 0x3, 0x5}, {0x0, 0x0, 0x5, 0x101, 0x6, 0xf24}, {0x1, 0x6, 0x0, 0x9e44, 0x9f6, 0x982e, 0x6}, {0x80000007, 0x2, 0x6, 0x400, 0xd, 0x40, 0x80000000}, {0xa, 0x3ff, 0x3, 0x5, 0x8115, 0x7fffffff, 0x5}, {0xb, 0x9, 0x4, 0x0, 0x952, 0x600000, 0x8}]}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x3bc, 0x12, 0x1, 0x70bd2a, 0x25dfdbfd, {0x11, 0x43, 0xa3, 0xc, {0x4e20, 0x4e21, [0x1, 0x4, 0x9, 0x7], [0x3, 0x4, 0x9, 0x8], 0x0, [0x8025, 0x5]}, 0x8, 0xf0a2}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "5823d14a17f6e1f9c516c5eb3ae266d94641f95b89318fda6af843f962585f36c7713cacb5c7f47b8f50dbbca41d26b99ce27d2461ed7b7e19aebc30da0ed07436750b8b44384f4cba780d09e607b14ced428b939609d9fe92fad30b8527fe906234639125ea050f87fb38ec77b6fe32bb34ea81bbe4e4e9a9523655ea6a6e402e33fb359fbe6f1d87624736a4229d5c00b1a74d9a7b2a90"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "645a8f4da3f81ae74a0e74ad46ef0eaba12bee8e80c9186e1a7524a23e1b236b00b88d9cc7c79e156e9641a3e50a4d2553336b3e"}, @INET_DIAG_REQ_BYTECODE={0x4e, 0x1, "69403720136ebcb7f7d6e34cf3929e2be27a014b0feaf42369f3388070f5ad5af578a3f1beb44ced2a2db512cfe2491ea2bab219bdfa54578e3a31f3c1e4995d0ff9b6b087f106f240cb"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "64bac0bcc97e9ba3af4881bb7f3ec6f9e7a4dd90420b32717294515e66bd5c15524da73435ab70aaf1e064a46be63bf970c131f01811992ae97c28c27b1ff3266c5a4f2f02bdb8f0d1c390ecfece47aeecd99e4db195580da4719e6c1d1209c124935a"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "0623a06883c7820525a71a605d70f343626163e1f9540abbf12063ef6ad0b1b32aa3c3d724aa312606db8fb933a99e8befa6706c827242227098780403daa9b3ba0240d3fe247e9ab97d4f82c881118023d4e31a6718401ff4c71e3ddf9764642f76b143e7c1fced7492a7789f832e40178241c2fe1cd1bf1f508c304e02c902e0b9041c8d336ca5db45466490804afdeb8bfc7de1612a8c29b553032fb393f05d14826b58240d4d204d91284c112b0bc591907d400fbe230fee06d9048e5c7c4cbc"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "bc80bf965143c8cdc32b7b9a4ce0011035ac6bd37eebe06be2d8b2f30bfa5d1eaf53b18761f480610e6f46b4f349d6ffc795426ad84ff5ef2196005999902270e0c3350edcc89ba1cd9267d8b7d082fb132f8e2112aa5d35cff6f76dbbf7e7048ffca68aeefb32e617bbc9aedc34312d5ef25246b76565d375716255506c1b9558c682e2734409dcafefa1ff431cace0e1ef21711f2482c328716e5e45f76ff5eab2c653a23926b107"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "aa3464a0521aca71bcc0e19bb0dd744073fe3b73f731069065caa8581a8a23740f8ae5926cb8c4ec891cc11f94db2ccb6ac349c8c2bf"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "150a8407874f6c"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "444602862a9a0537c701adbb26f1b989325f8b7810658fea5cd63ebaeba9"}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00') 27.985035738s ago: executing program 0 (id=1139): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x45, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000100)={0x5}) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) 27.661218658s ago: executing program 1 (id=1141): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4, 0x4, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000040) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.907241711s ago: executing program 4 (id=1146): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4100}, 0x18, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 26.675398565s ago: executing program 4 (id=1148): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xd4, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6a00000}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x200000c4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x6, 0x1, '\x00', 0x72ce}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x80000008, 0x8, 0x4, 0x1, 0xb, 0x5, 0x6}]}) 26.41878515s ago: executing program 0 (id=1150): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x1, 0x7d, 0x3, 0x3e, 0xfffffffb, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x2, 0x7c, 0x7, 0x9}, [{0x6474e551, 0x5f26, 0xfffffffffffffffc, 0x1a, 0x8, 0x7, 0x6, 0xee}, {0x5, 0xbae, 0xc8c8, 0x6, 0x1, 0x81, 0x0, 0x6}]}, 0xb0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000380)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4000) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @remote, 0x1002}}}, 0x108) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000000)=""/1, &(0x7f0000000080)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x96, 0x7fffffff}, {0x7, 0x47, 0x7, 0x7}, {0xf20, 0x7, 0x8, 0x6}]}) 26.41776851s ago: executing program 4 (id=1151): syz_io_uring_setup(0x44d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x2, 0x0, 0x295}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x80}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x1, 0x4}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x302, 0x0, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, '\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0xae, 0x0, {0x7, 0x25, 0x1, 0x83}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 26.08389603s ago: executing program 0 (id=1152): r0 = open(0x0, 0x20000, 0x1) r1 = inotify_init1(0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000100000f30660f55c566b8000000000f23d80f21f86635000000500f23f8660fd7f866b9dd01000066b82400000066ba000000000f30bad004b000ee66b89554fd010f23c00f21f86635020008000f23f866d8970080f2f2366426360f4dc5660f388108", 0x6f}], 0x1, 0x10, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210600000122940309058103"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="4123a3a8a1c0aaf4f2", 0x9}], 0x1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x20000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000540)={0x2, 0x0, [{0xac7, 0xec000000, 0x7}, {0x4000009f, 0x0, 0x6}]}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x9, 0xffffffffffffff06) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 25.56333502s ago: executing program 2 (id=1154): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xcd0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x4a, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x561}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x1f, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1, 0x1}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x9, 0xec, 0x8, 0x2}, 0x6d, &(0x7f00000000c0)={0x5, 0xf, 0x6d, 0x2, [@generic={0x48, 0x10, 0x3, "cf371f12ea22e3b6ae5381054f57e31d53c0a5114dbb1ddb2e3de158c3adb39ffd1c5d655c4aff9c3f4c4db12bf3f95a117e14de371b6f844c803d8c10a45c177d3a8e853d"}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x8, 0xff0f, 0x7d, [0xc0cf, 0xc000, 0xff1f8f, 0x3f30, 0xff00c0]}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x401}}, {0x22, &(0x7f0000000180)=@string={0x22, 0x3, "8ea308d485a816a96947be5409972a5edf58b6dad5340ce2ad73b1f2e0a2e8be"}}, {0xba, &(0x7f00000001c0)=@string={0xba, 0x3, "d10a8462186efbafb2bf6984603efe3ec4962475854a42e7c111f52150f0f74ebf0dc933b6a1d19c9519f5e9161ce9dee3a0830e2667a850482d5bb5e5b7216dd6a80f18bc6ec3def737e9459a7da5cdab054e5ced7b7acf2885ea1b4c7af4e29b52fe30a9c29c6e15beec924c37ad8ec3b2a5f9d2fce459439e0428b24c57ef2bf1ed8746a98b0cd7b7d4698e9a29f26d052eacc66a22ebc3c9f862d89a30eb64be78808a9f530ab1a09d24e37ac236f41012515c0831ed"}}, {0xcd, &(0x7f00000002c0)=@string={0xcd, 0x3, "cc284cfb4315ba217f327343b658f5977c9bdad8a89c27f856468ffe51a60216d5bc63580a82add81bdcc9d1f2f6d5791f1339c9dfe7ad897a0e3a1980f50aeb004c6691bed97f362b068a3c17e69c4e720bb00a578d027d3a43a8a681bce0fd3e61ba4fde7550add5c7a407ac8996c92c8d078e912a6510fbf9cf319697cb41db56dbe028eb16dab88cab7ffb194267c3eeea5fa3f3b23720a97f1bb42c4c3db4b27b4a071f2bae213f57e31dd14237c50c3fdce18d60599217d7c046472b3a628356c079e6965ba8257e"}}, {0x54, &(0x7f00000003c0)=@string={0x54, 0x3, "217c73f1693de60fc8b6838ae3cf856a7466abf78e4fb704cbec12b8d417b6c3537456ae0e227f2efccd0adde01b56fdb4a11d084774b48a7be2fae85476bb3a1b5eca7ccbc48173d7b15e19cc34ba95b595"}}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) fstat(0xffffffffffffffff, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write$binfmt_script(r7, &(0x7f00000004c0)={'#! ', './file0', [], 0xa, "6fa2dd05e52d"}, 0x11) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "b54b55c9b691706d", "b5421a989404d5c952ba74f879bed1a5bfadabb985e5681803932ccc7beb0f83", "cba83b41", "ef3c6c588e3360e2"}, 0x38) sendfile(r6, r7, &(0x7f0000000100)=0x10, 0x7ffff000) fcntl$addseals(r2, 0x409, 0x4) (async) r9 = dup(r5) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 32) write$tun(r4, &(0x7f0000000280)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x4, @local}}}}}}}, 0x52) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, {0x8, 0x22, "24c0ca9bc400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 25.459993306s ago: executing program 2 (id=1155): openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x9}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff5b34000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) 24.786320345s ago: executing program 2 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x6475, @none, 0x10, 0x2}, 0xe) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[@nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro64=0x2400, 0x1, 0x8, 0xc}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x231bb000, 0xc43e}}, @nested_vmresume={0x130, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x3, 0xb}}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x70, {0x1, 0x10001, [@uexit={0x0, 0x18, 0x9}, @wrmsr={0x65, 0x20, {0xb2a, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0xc4}]}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x16, 0x7, 0x5, 0x2}}, @nested_amd_stgi={0x17e, 0x10}], 0x180}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x2c, 0x24, 0xc8fe83ee7f0e7fd5, 0x0, 0x0, "", [@nested={0x8, 0x0, 0x0, 0x0, [@typed={0x4}]}, @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x2c}], 0x1}, 0x4000) r4 = dup(r1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000000c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 24.627361574s ago: executing program 1 (id=1157): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 'id0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000080)={{0x0, 0x6, 0x10, 0x0, 0x8, 0xb3f, 0x4, 0x9, 0x4, 0x0, 0x1ff, 0xfff, 0x1, 0x1, 0x20}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001080)={{r1, 0xda5, 0x81, 0x80000000, 0x100000000, 0x7, 0x2, 0x3, 0x800, 0x6, 0x3, 0x180000000000, 0x5, 0x2c90, 0x5}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000020c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x60, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c050}, 0x20000040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002540)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002500)={&(0x7f00000022c0)={0x224, r3, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x3c}}}}, [@NL80211_ATTR_TESTDATA={0x12, 0x45, "b8a6ac0e83c3bfe42c77fcbba5c5"}, @NL80211_ATTR_TESTDATA={0x84, 0x45, "7515665da0179e4ff3061bf935862239994356c27be749169d6c785870cea8b4b23524b15001bb56ba96db8dac6143a67d551bc3248e51e8c4f83f66f686562d8b532e94eca5aa70a39734b2b551075191135c388af7f31ef64ef45d39fde16d57bc8a4cb97d4a5b095bf33bbe50e6541f03acf22b827b819a8ef7d586bf99ae"}, @NL80211_ATTR_TESTDATA={0xa8, 0x45, "76632058d2c436d066b68069a272aef97217f8d04e508dfdb8d29eca8acdaee97c96177d342616ffe321298650996e21eebd6f94e88b2a3f5c5aaf53792eff220718e2eed14c197637e70ae40665f779542422a868ae026626845194a4899c7f8852435310275d7f885c3b0240a38297a6a382c274edd806e5428bfe51b6a9a40c10548c7084ec22bf0a14b983a5b66633f88d2a9649356b7731b1914e99916390f97ed6"}, @NL80211_ATTR_TESTDATA={0xba, 0x45, "07127025cd1c0a70be90fae999f96fc7579a0b1c4bb6ba4948ff7011e59ad5e993ee8886c2eac72e34b8da6400c5a43f3f507e45f06418fdd4fe44e871642252e1f54502a220f3a1baaadbc47000d323891a830bc1dbd5759cb3a69d348799394afe7f2ce12d8bc414723ddf78bdfd8850c77b0faab4fde5a92641a1ff21786d09002148d466e83dfccfcff261d2677340f7ec88e2c59ce654afaf9ed85f83344ce5e7ab57d7d64cb4b1d714d28053f64616ddafe04b"}]}, 0x224}, 0x1, 0x0, 0x0, 0x50}, 0x820) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002580)) r5 = socket(0x26, 0x3, 0x7) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f00000025c0)={{r0}, "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"}) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f00000035c0)=@gcm_256={{0x304}, "9fadab227167f1cb", "be7eb859860310534c913572523da4a875378fd1baa0ec897bb0b20eabd005ff", "5fb3bd7d", "8e5e6f15c1f12ddb"}, 0x38) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x488d0}, 0x20008001) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000038c0)={&(0x7f0000003700), 0xc, &(0x7f0000003880)={&(0x7f0000003740)={0x118, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5b}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed0}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x101}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbc}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003940), r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004010) setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f0000003a40)=0x2, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003a80)='/proc/cpuinfo\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000003ac0)=0x10002, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003b00)={'wlan1\x00'}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000003b80), r7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003c40)={'ip_vti0\x00', &(0x7f0000003bc0)={'syztnl2\x00', 0x0, 0x1, 0x1, 0x537b, 0x8, {{0xd, 0x4, 0x1, 0x31, 0x34, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0xdc, [@remote]}, @generic={0x88, 0x9, "528d3c55f64047"}, @timestamp={0x44, 0x10, 0x5f, 0x0, 0x5, [0x6, 0x0, 0x6]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000003c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003cc0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000003d00)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000003d40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003e00)={'syztnl1\x00', &(0x7f0000003d80)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0xfffffa3c, 0x7, {{0xa, 0x4, 0x3, 0x13, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, {[@timestamp={0x44, 0x14, 0x8f, 0x0, 0x6, [0x6c31, 0x8, 0x6ce, 0xe]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003e40)={'veth1_to_bridge\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004300)={0x584, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c00}}}]}}, {{0x8, 0x1, r10}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7739}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0xe, 0x9, 0xfffffffc}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xeab}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x1, 0x81}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x584}, 0x1, 0x0, 0x0, 0x10}, 0x400c4000) 24.596343226s ago: executing program 1 (id=1158): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) (async) creat(&(0x7f0000000100)='./cgroup\x00', 0x2c) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) read(r0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) r1 = gettid() (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) (async) read$FUSE(r2, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r4) (async) r5 = socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x4, 0xc3, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote}}}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r1}, &(0x7f0000bbdffc)) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 24.321458352s ago: executing program 1 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x22, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r4], 0x20}}, 0x40816) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000001c0)={0x1, 0x11, @ioapic={0xfec00000, 0xffffffff, 0x3, 0x7fffffff, 0x0, [{0x5, 0x2, 0x7, '\x00', 0x6b}, {0xe, 0x3, 0x3, '\x00', 0x4}, {0x1, 0xf, 0x9}, {0x9, 0xa, 0x2, '\x00', 0x2a}, {0x0, 0xbb, 0x1, '\x00', 0x11}, {0x15, 0xd, 0x5}, {0x49, 0xe, 0x9, '\x00', 0x3}, {0xb, 0x7, 0x0, '\x00', 0x3}, {0xaf, 0x4, 0x8, '\x00', 0x9}, {0x1, 0xff, 0xe, '\x00', 0x7}, {0x6, 0xc, 0x76, '\x00', 0x5}, {}, {0x46, 0x1, 0xfe, '\x00', 0x6}, {0x2, 0xfd, 0x4}, {0x5, 0xc, 0xc, '\x00', 0x2}, {0x3, 0x47, 0x12, '\x00', 0x74}, {0x7, 0xbe, 0x6, '\x00', 0xce}, {0x8d, 0x6, 0x2, '\x00', 0x83}, {0xfc, 0x2, 0x3, '\x00', 0x8f}, {0x2, 0x80, 0x5, '\x00', 0x6}, {0x6, 0x7f, 0x7, '\x00', 0x3b}, {0x90, 0xfe, 0x1, '\x00', 0x7}, {0x5, 0x2, 0xb, '\x00', 0xb5}, {0x4, 0x4, 0x0, '\x00', 0xb}]}}) socket$netlink(0x10, 0x3, 0x14) 24.269019875s ago: executing program 2 (id=1160): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xdfc, 0x106, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x62b, 0x8, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0x26, 0x22}}}}}]}}]}}, 0x0) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0xff7f, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5}, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x1, 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fddbdf254f00000008000300", @ANYRES32, @ANYBLOB="040002"], 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000001300)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) 23.695699099s ago: executing program 2 (id=1161): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b08000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f00006e8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x36}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x100000000000005c, 0x0, [{0x4b564d00}]}) 23.694741899s ago: executing program 0 (id=1162): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000ec17105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009623130600000b53743ff62a9000670900be0083f4"], 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000500)={0xb, {{0x2, 0x4e23, @multicast2}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x7a913000) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) statx(r6, 0x0, 0x1000, 0x20, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) 23.289931862s ago: executing program 4 (id=1163): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/44, &(0x7f0000000040)=0x2c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x189, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 21.214225423s ago: executing program 2 (id=1164): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0xfffffff8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x251d}}, {{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010140, 0x0, 0x3}]}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x6, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$sock_SIOCGIFBR(r7, 0x8941, &(0x7f0000000140)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 19.734711509s ago: executing program 0 (id=1165): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 8.684778433s ago: executing program 33 (id=1159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x28, 0xa, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x22, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES32=r4], 0x20}}, 0x40816) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000001c0)={0x1, 0x11, @ioapic={0xfec00000, 0xffffffff, 0x3, 0x7fffffff, 0x0, [{0x5, 0x2, 0x7, '\x00', 0x6b}, {0xe, 0x3, 0x3, '\x00', 0x4}, {0x1, 0xf, 0x9}, {0x9, 0xa, 0x2, '\x00', 0x2a}, {0x0, 0xbb, 0x1, '\x00', 0x11}, {0x15, 0xd, 0x5}, {0x49, 0xe, 0x9, '\x00', 0x3}, {0xb, 0x7, 0x0, '\x00', 0x3}, {0xaf, 0x4, 0x8, '\x00', 0x9}, {0x1, 0xff, 0xe, '\x00', 0x7}, {0x6, 0xc, 0x76, '\x00', 0x5}, {}, {0x46, 0x1, 0xfe, '\x00', 0x6}, {0x2, 0xfd, 0x4}, {0x5, 0xc, 0xc, '\x00', 0x2}, {0x3, 0x47, 0x12, '\x00', 0x74}, {0x7, 0xbe, 0x6, '\x00', 0xce}, {0x8d, 0x6, 0x2, '\x00', 0x83}, {0xfc, 0x2, 0x3, '\x00', 0x8f}, {0x2, 0x80, 0x5, '\x00', 0x6}, {0x6, 0x7f, 0x7, '\x00', 0x3b}, {0x90, 0xfe, 0x1, '\x00', 0x7}, {0x5, 0x2, 0xb, '\x00', 0xb5}, {0x4, 0x4, 0x0, '\x00', 0xb}]}}) socket$netlink(0x10, 0x3, 0x14) 1.286035225s ago: executing program 34 (id=1165): munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 234.025806ms ago: executing program 35 (id=1164): socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0xfffffff8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x251d}}, {{0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010140, 0x0, 0x3}]}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x6, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$sock_SIOCGIFBR(r7, 0x8941, &(0x7f0000000140)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) 0s ago: executing program 36 (id=1163): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x4) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/44, &(0x7f0000000040)=0x2c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000003c0)=0x189, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ons parsing error. -22 [ 125.913078][ T3145] incfs: mount failed -22 [ 125.996458][ T331] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 126.147659][ T331] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 126.159101][ T331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.168876][ T331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 126.182175][ T331] usb 1-1: New USB device found, idVendor=47e2, idProduct=0000, bcdDevice= 0.00 [ 126.191349][ T331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.200509][ T331] usb 1-1: config 0 descriptor?? [ 126.256456][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 126.407871][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 126.416457][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 126.426764][ T10] usb 2-1: config 220 has no interface number 2 [ 126.433293][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 126.447092][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 126.454643][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 126.461810][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 126.470725][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 126.480353][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.488744][ T10] usb 2-1: Product: syz [ 126.492913][ T10] usb 2-1: Manufacturer: syz [ 126.497546][ T10] usb 2-1: SerialNumber: syz [ 126.576515][ T1045] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 126.710581][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 126.717542][ T10] usb 2-1: No valid video chain found. [ 126.723123][ T10] usb 2-1: selecting invalid altsetting 0 [ 126.735264][ T10] usb 2-1: USB disconnect, device number 63 [ 126.739464][ T1045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.752721][ T1045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.763169][ T1045] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.776249][ T1045] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.785981][ T1045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.797104][ T1045] usb 4-1: config 0 descriptor?? [ 126.849801][ T331] usbhid 1-1:0.0: can't add hid device: -71 [ 126.856081][ T331] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 126.865695][ T331] usb 1-1: USB disconnect, device number 67 [ 127.206188][ T1045] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 127.220282][ T1045] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.486490][ T481] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 127.636472][ T481] usb 2-1: Using ep0 maxpacket: 16 [ 127.644834][ T481] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 127.654767][ T481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.663760][ T481] usb 2-1: Product: syz [ 127.668342][ T481] usb 2-1: Manufacturer: syz [ 127.673277][ T481] usb 2-1: SerialNumber: syz [ 127.756475][ T1045] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 127.881214][ T3196] netlink: 'syz.1.894': attribute type 16 has an invalid length. [ 127.889410][ T3196] netlink: 'syz.1.894': attribute type 3 has an invalid length. [ 127.897263][ T3196] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.894'. [ 127.908173][ T1045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.918643][ T1045] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 127.919227][ T3217] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.928497][ T1045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.946954][ T1045] usb 1-1: config 0 descriptor?? [ 128.022894][ T45] usb 4-1: USB disconnect, device number 72 [ 128.111495][ T481] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 128.123766][ T481] usb 2-1: USB disconnect, device number 64 [ 128.127775][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.357207][ T3214] TCP: TCP_TX_DELAY enabled [ 128.364117][ T1045] usbhid 1-1:0.0: can't add hid device: -71 [ 128.370505][ T1045] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.379820][ T1045] usb 1-1: USB disconnect, device number 68 [ 128.632771][ T3261] netlink: 'syz.2.914': attribute type 27 has an invalid length. [ 128.648377][ T36] audit: type=1400 audit(1771072722.036:996): avc: denied { ioctl } for pid=3245 comm="syz.3.910" path="socket:[22072]" dev="sockfs" ino=22072 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.876472][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 128.887029][ T3272] syzkaller1: entered promiscuous mode [ 128.892637][ T3272] syzkaller1: entered allmulticast mode [ 128.916509][ T331] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 129.026456][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 129.033289][ T10] usb 2-1: config 8 has an invalid interface number: 189 but max is 0 [ 129.041616][ T10] usb 2-1: config 8 has no interface number 0 [ 129.050106][ T10] usb 2-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 129.060035][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.068478][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 129.073653][ T10] usb 2-1: Product: syz [ 129.078115][ T10] usb 2-1: Manufacturer: syz [ 129.083175][ T10] usb 2-1: SerialNumber: syz [ 129.088995][ T331] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 129.099775][ T331] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.114185][ T331] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 129.124810][ T331] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.139004][ T331] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 129.149509][ T331] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.162802][ T331] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 129.172718][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.185330][ T331] hub 4-1:32.0: Invalid hub with more than one config or interface [ 129.193801][ T331] hub 4-1:32.0: probe with driver hub failed with error -22 [ 129.216213][ T3279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 129.314963][ T10] usb-storage 2-1:8.189: USB Mass Storage device detected [ 129.323437][ T10] usb-storage 2-1:8.189: device ignored [ 129.336505][ T1045] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 129.348171][ T10] usb 2-1: USB disconnect, device number 65 [ 129.386088][ T481] usb 4-1: USB disconnect, device number 73 [ 129.486523][ T1045] usb 1-1: Using ep0 maxpacket: 16 [ 129.493231][ T1045] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.506527][ T1045] usb 1-1: config 1 interface 0 has no altsetting 0 [ 129.515169][ T1045] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.40 [ 129.524381][ T1045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.532546][ T1045] usb 1-1: Product: syz [ 129.536767][ T1045] usb 1-1: Manufacturer: syz [ 129.541547][ T1045] usb 1-1: SerialNumber: syz [ 129.748252][ T3272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.757123][ T3272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.771750][ T1045] usbhid 1-1:1.0: can't add hid device: -71 [ 129.778739][ T1045] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 129.787589][ T1045] usb 1-1: USB disconnect, device number 69 [ 129.902389][ T36] audit: type=1400 audit(1771072723.286:997): avc: denied { map } for pid=3291 comm="syz.3.923" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 129.926171][ T36] audit: type=1400 audit(1771072723.286:998): avc: denied { execute } for pid=3291 comm="syz.3.923" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 130.039919][ T36] audit: type=1400 audit(1771072723.426:999): avc: denied { validate_trans } for pid=3297 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.375762][ T3310] overlayfs: unescaped trailing colons in lowerdir mount option. [ 130.407572][ T1045] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 130.409491][ T3322] bridge0: port 3(veth0_to_bridge) entered blocking state [ 130.423032][ T3322] bridge0: port 3(veth0_to_bridge) entered disabled state [ 130.430419][ T3322] veth0_to_bridge: entered allmulticast mode [ 130.437158][ T3322] veth0_to_bridge: entered promiscuous mode [ 130.443540][ T3322] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.456898][ T3322] bridge0: port 3(veth0_to_bridge) entered blocking state [ 130.464174][ T3322] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 130.499883][ T3322] netlink: 'syz.0.932': attribute type 63 has an invalid length. [ 130.507925][ T3322] netlink: 5 bytes leftover after parsing attributes in process `syz.0.932'. [ 130.517021][ T3322] gretap0: entered allmulticast mode [ 130.522966][ T3322] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.556465][ T1045] usb 4-1: Using ep0 maxpacket: 8 [ 130.563051][ T1045] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 130.572448][ T1045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.581304][ T1045] usb 4-1: config 0 descriptor?? [ 130.615218][ T3328] netlink: 'syz.2.934': attribute type 4 has an invalid length. [ 130.646490][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 130.731838][ T3353] netlink: 180 bytes leftover after parsing attributes in process `syz.0.941'. [ 130.767687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.780458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.792815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.805058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.817488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.830145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.842852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.855613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.867877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.909979][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 130.970639][ T10] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.006483][ T481] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 131.008031][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.036619][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 131.036695][ T1045] prodikeys 0003:041E:2801.001E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 131.045971][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.069223][ T10] usb 2-1: config 0 descriptor?? [ 131.136449][ T481] usb 1-1: device descriptor read/64, error -71 [ 131.239319][ T3308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.249611][ T3308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.272069][ T1045] usb 4-1: USB disconnect, device number 74 [ 131.343346][ T3320] random: crng reseeded on system resumption [ 131.396476][ T481] usb 1-1: device descriptor read/64, error -71 [ 131.426092][ T3375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.434916][ T3375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.504525][ T3379] syzkaller1: entered promiscuous mode [ 131.510673][ T3379] syzkaller1: entered allmulticast mode [ 131.636475][ T481] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 131.656267][ T10] lenovo 0003:17EF:60A4.001F: unknown main item tag 0x0 [ 131.680383][ T10] lenovo 0003:17EF:60A4.001F: unknown main item tag 0x0 [ 131.706708][ T10] lenovo 0003:17EF:60A4.001F: unknown main item tag 0x0 [ 131.713810][ T10] lenovo 0003:17EF:60A4.001F: unknown main item tag 0x0 [ 131.746501][ T10] lenovo 0003:17EF:60A4.001F: unknown main item tag 0x0 [ 131.757034][ T10] lenovo 0003:17EF:60A4.001F: hidraw0: USB HID v4.06 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 131.790184][ T3320] Restarting kernel threads ... done. [ 131.799694][ T481] usb 1-1: device descriptor read/64, error -71 [ 131.858025][ T3320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.858695][ T3382] Restarting kernel threads ... [ 131.868152][ T3320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.889060][ T3382] done. [ 131.905725][ T1045] usb 2-1: USB disconnect, device number 66 [ 131.943958][ T36] audit: type=1326 audit(1771072725.326:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.1.949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a2339bf79 code=0x0 [ 132.047823][ T481] usb 1-1: device descriptor read/64, error -71 [ 132.087424][ T3389] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3389 comm=syz.2.950 [ 132.167633][ T481] usb usb1-port1: attempt power cycle [ 132.326935][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.342904][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.354486][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.362725][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.371116][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.382504][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.391254][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.399648][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.407919][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.415733][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.425563][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.439951][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.469857][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.497870][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.513711][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.522336][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.530912][ T481] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 132.546033][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.554705][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.583673][ T481] usb 1-1: device descriptor read/8, error -71 [ 132.590375][ T1045] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 132.598793][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.607342][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.615508][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.623862][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.632683][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.640756][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.648872][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.656928][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.665074][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.673837][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.682680][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.692438][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.705168][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.713676][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.721951][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.735713][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.744275][ T481] usb 1-1: device descriptor read/8, error -71 [ 132.750980][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.759495][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.773965][ T1045] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 132.786513][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.806026][ T3412] SELinux: Context unconfined is not valid (left unmapped). [ 132.814074][ T36] audit: type=1400 audit(1771072726.186:1001): avc: denied { relabelfrom } for pid=3411 comm="syz.1.958" name="TCPv6" dev="sockfs" ino=22539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 132.837931][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.848400][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.858206][ T1045] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 132.872033][ T1045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 132.893527][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.913551][ T1045] usb 4-1: Product: syz [ 132.918776][ T36] audit: type=1400 audit(1771072726.236:1002): avc: denied { relabelto } for pid=3411 comm="syz.1.958" name="TCPv6" dev="sockfs" ino=22539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="unconfined" [ 132.945409][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.956554][ T1045] usb 4-1: Manufacturer: syz [ 132.967542][ T1045] usb 4-1: SerialNumber: syz [ 132.976467][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 132.986809][ T1045] usb 4-1: config 0 descriptor?? [ 133.002170][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.011224][ T1045] cdc_acm 4-1:0.0: Zero length descriptor references [ 133.026461][ T481] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 133.034223][ T1045] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 133.043297][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.059522][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.069273][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.078322][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.086749][ T481] usb 1-1: device descriptor read/8, error -71 [ 133.107277][ T3416] netlink: 232 bytes leftover after parsing attributes in process `syz.2.960'. [ 133.118137][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.126214][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.136447][ T45] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 133.163638][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.178909][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.193752][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.207265][ T65] usb 4-1: USB disconnect, device number 75 [ 133.227438][ T481] usb 1-1: device descriptor read/8, error -71 [ 133.234317][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.242647][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.251801][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.260012][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.268508][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.277223][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.287914][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.296058][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.305000][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.313874][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.325455][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.335867][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.344059][ T481] usb usb1-port1: unable to enumerate USB device [ 133.351103][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.359377][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 133.369337][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.378018][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.386176][ T45] usb 2-1: SerialNumber: syz [ 133.391094][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.402790][ T45] usb 2-1: 0:2 : does not exist [ 133.410419][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.419214][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.427734][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.435997][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.444348][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.453077][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.461562][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.470001][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.478303][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.486697][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.495041][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.503475][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.511668][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.521100][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.529580][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.537871][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.546625][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.554631][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.563664][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.572050][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.580973][ T349] hid-generic 0000:FFFFFFFE:0007.0020: unknown main item tag 0x0 [ 133.601638][ T349] hid-generic 0000:FFFFFFFE:0007.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 133.639783][ T45] usb 2-1: USB disconnect, device number 67 [ 133.647729][ T3425] fido_id[3425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.667240][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 133.790713][ T3427] fuse: Bad value for 'fd' [ 134.152463][ T3432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.966'. [ 134.426432][ T349] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 134.579232][ T349] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 134.589136][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.604130][ T349] usb 2-1: Product: syz [ 134.608750][ T349] usb 2-1: Manufacturer: syz [ 134.613845][ T349] usb 2-1: SerialNumber: syz [ 134.829069][ T481] usb 2-1: USB disconnect, device number 68 [ 135.046462][ T349] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 135.208064][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.219695][ T349] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 135.235034][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.246633][ T349] usb 1-1: config 0 descriptor?? [ 135.256802][ T3443] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 135.266645][ T481] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 135.380322][ T45] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 135.449715][ T481] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.463807][ T481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.478215][ T3443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.487533][ T481] usb 2-1: Product: syz [ 135.491545][ T3443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.496979][ T481] usb 2-1: Manufacturer: Й [ 135.506784][ T481] usb 2-1: SerialNumber: syz [ 135.526444][ C0] net_ratelimit: 60976 callbacks suppressed [ 135.526465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.545220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.546423][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 135.557581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.563930][ T45] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 135.575461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.584424][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.596349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.607645][ T45] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.619421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.629842][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.641533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.648475][ T45] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 135.660269][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.669692][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.681546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.692061][ T45] usb 4-1: config 0 descriptor?? [ 135.701974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.718638][ T3443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.737982][ T3443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.749103][ T3443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.761004][ T3443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.973454][ T349] usbhid 1-1:0.0: can't add hid device: -71 [ 135.987550][ T349] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.000920][ T349] usb 1-1: USB disconnect, device number 74 [ 136.320117][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.329647][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.346551][ T3446] tipc: Enabling of bearer rejected, media not registered [ 136.362347][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.372306][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.390148][ T3446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.403818][ T3446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.436168][ T3450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.449260][ T3450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.756448][ T349] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 136.800887][ T36] audit: type=1400 audit(1771072730.186:1003): avc: denied { mounton } for pid=3453 comm="syz.2.975" path="/414/file1" dev="tmpfs" ino=2273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.824487][ T3454] 9pnet_fd: Insufficient options for proto=fd [ 136.895801][ T36] audit: type=1400 audit(1771072730.276:1004): avc: denied { create } for pid=3458 comm="syz.2.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 136.906123][ T3459] No source specified [ 136.948551][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.960690][ T349] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 136.979375][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.990453][ T349] usb 1-1: config 0 descriptor?? [ 137.428235][ T349] konepure 0003:1E7D:2DB4.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 137.458285][ T36] audit: type=1400 audit(1771072730.846:1005): avc: denied { mounton } for pid=3471 comm="syz.2.982" path="/421/file0" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.523938][ T3480] cgroup: noprefix used incorrectly [ 137.652223][ T3452] incfs: iterate_incfs_dir / -22 [ 137.661860][ T349] usb 1-1: USB disconnect, device number 75 [ 137.876522][ T349] usb 2-1: USB disconnect, device number 69 [ 137.945675][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 137.969124][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 137.984490][ T45] usb 4-1: USB disconnect, device number 76 [ 137.993290][ T3487] loop9: detected capacity change from 0 to 7 [ 138.003689][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.013436][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.024115][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.032520][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.054397][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.187989][ T3496] netlink: 'syz.0.989': attribute type 5 has an invalid length. [ 138.226426][ T349] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 138.253399][ T3499] EXT4-fs: dax option not supported [ 138.388029][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.399454][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.415351][ T349] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 138.424946][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.444504][ T349] usb 2-1: config 0 descriptor?? [ 138.496427][ T45] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 138.657588][ T45] usb 4-1: config 0 has an invalid interface number: 99 but max is 0 [ 138.666620][ T45] usb 4-1: config 0 has no interface number 0 [ 138.678538][ T45] usb 4-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023 [ 138.694098][ T45] usb 4-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.704773][ T45] usb 4-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 138.717022][ T45] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68 [ 138.731851][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.747820][ T45] usb 4-1: Product: syz [ 138.752374][ T45] usb 4-1: Manufacturer: syz [ 138.765073][ T45] usb 4-1: SerialNumber: syz [ 138.773481][ T45] usb 4-1: config 0 descriptor?? [ 138.784622][ T3498] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 138.797865][ T45] ftdi_sio 4-1:0.99: FTDI USB Serial Device converter detected [ 138.806666][ T45] ftdi_sio ttyUSB0: unknown device type: 0x7968 [ 138.868024][ T349] konepure 0003:1E7D:2DB4.0022: unknown main item tag 0x0 [ 138.883016][ T349] konepure 0003:1E7D:2DB4.0022: hidraw0: USB HID v0.fd Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 139.007196][ T349] usb 4-1: USB disconnect, device number 77 [ 139.023540][ T349] ftdi_sio 4-1:0.99: device disconnected [ 139.087177][ T3485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.096760][ T3485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.113918][ T45] usb 2-1: USB disconnect, device number 70 [ 139.204505][ T3506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.993'. [ 139.539543][ T3519] binder: Unknown parameter 'fscontext?}' [ 139.549571][ T45] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 139.669192][ T3527] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1001'. [ 139.704305][ T3527] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1001'. [ 139.717686][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.736653][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 139.771943][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.800070][ T45] usb 1-1: config 0 descriptor?? [ 139.816498][ T349] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 139.986461][ T349] usb 4-1: Using ep0 maxpacket: 8 [ 139.995325][ T349] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 140.004247][ T349] usb 4-1: config 179 has no interface number 0 [ 140.011421][ T349] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 140.023265][ T349] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 140.044206][ T349] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.065801][ T349] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 140.089642][ T349] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.120855][ T349] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.144709][ T349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.169058][ T3522] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.225591][ T45] wacom 0003:056A:032A.0023: unknown main item tag 0x0 [ 140.239170][ T45] wacom 0003:056A:032A.0023: unknown main item tag 0x0 [ 140.253664][ T45] wacom 0003:056A:032A.0023: unknown main item tag 0x0 [ 140.263763][ T45] wacom 0003:056A:032A.0023: hidraw0: USB HID vff.ff Device [HID 056a:032a] on usb-dummy_hcd.0-1/input0 [ 140.386136][ T3522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.415664][ T3522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.427403][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.434823][ T45] usb 1-1: USB disconnect, device number 76 [ 140.436093][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.536440][ C0] net_ratelimit: 59914 callbacks suppressed [ 140.536463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.555128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.567607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.580188][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.593305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.605766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.618245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.630365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.642830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.655395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.671750][ T45] usb 4-1: USB disconnect, device number 78 [ 140.671806][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 140.671840][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 140.869501][ T349] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 141.026428][ T349] usb 2-1: Using ep0 maxpacket: 8 [ 141.035030][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.046529][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.061944][ T349] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 141.073599][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.086554][ T349] usb 2-1: config 0 descriptor?? [ 141.489012][ T3568] binder: Bad value for 'stats' [ 141.496700][ T349] kye 0003:0458:0087.0024: item fetching failed at offset 5/7 [ 141.512988][ T45] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 141.527484][ T349] kye 0003:0458:0087.0024: parse failed [ 141.533404][ T349] kye 0003:0458:0087.0024: probe with driver kye failed with error -22 [ 141.701005][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.712676][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.732022][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.740550][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 141.759441][ T481] usb 2-1: USB disconnect, device number 71 [ 141.767627][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 141.791429][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.805310][ T45] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 141.822702][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.839130][ T45] usb 4-1: config 0 descriptor?? [ 141.847483][ T45] usb 4-1: MIDIStreaming interface descriptor not found [ 141.912603][ T3576] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 141.924407][ T3576] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1016'. [ 141.933712][ T349] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 141.945901][ T3575] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 141.954374][ T3575] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1016'. [ 142.096450][ T349] usb 1-1: Using ep0 maxpacket: 32 [ 142.103304][ T481] usb 4-1: USB disconnect, device number 79 [ 142.117807][ T349] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 142.160180][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 142.177305][ T349] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 142.197960][ T349] usb 1-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 142.207887][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.218106][ T349] usb 1-1: config 0 descriptor?? [ 142.430381][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.438049][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.449619][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.456874][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.464299][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.481178][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.488935][ T349] lenovo 0003:04B3:3100.0025: unknown main item tag 0x0 [ 142.499887][ T349] lenovo 0003:04B3:3100.0025: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.0-1/input0 [ 142.546462][ T481] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 142.704745][ T36] audit: type=1400 audit(1771072736.086:1006): avc: denied { accept } for pid=3603 comm="syz.3.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 142.742823][ T481] usb 2-1: Using ep0 maxpacket: 32 [ 142.757570][ T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.777799][ T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.794742][ T481] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 142.804461][ T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.822667][ T481] usb 2-1: config 0 descriptor?? [ 143.047494][ T481] koneplus 0003:1E7D:2D51.0026: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 143.300099][ T481] koneplus 0003:1E7D:2D51.0026: couldn't init struct koneplus_device [ 143.323863][ T481] koneplus 0003:1E7D:2D51.0026: couldn't install mouse [ 143.342039][ T481] koneplus 0003:1E7D:2D51.0026: probe with driver koneplus failed with error -71 [ 143.376176][ T481] usb 2-1: USB disconnect, device number 72 [ 143.497013][ T3618] netlink: 'syz.1.1028': attribute type 32 has an invalid length. [ 143.518471][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 143.729998][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.757795][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.884607][ T3641] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1036'. [ 143.896029][ T3641] gretap0: entered promiscuous mode [ 143.966432][ T349] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 144.140355][ T349] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.154027][ T349] usb 2-1: not running at top speed; connect to a high speed hub [ 144.165561][ T349] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 144.187881][ T349] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.206294][ T349] usb 2-1: config 1 interface 0 has no altsetting 0 [ 144.215941][ T349] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.225372][ T481] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 144.237348][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.251722][ T349] usb 2-1: Product: syz [ 144.256243][ T349] usb 2-1: Manufacturer: syz [ 144.261260][ T349] usb 2-1: SerialNumber: syz [ 144.397693][ T481] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 144.406474][ T481] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.437890][ T481] usb 4-1: config 0 has no interface number 0 [ 144.457963][ T481] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 144.469683][ T481] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.480242][ T481] usb 4-1: Product: syz [ 144.488198][ T481] usb 4-1: Manufacturer: syz [ 144.493831][ T349] cdc_ether 2-1:1.0: skipping garbage [ 144.505580][ T349] cdc_ether 2-1:1.0: skipping garbage [ 144.511622][ T481] usb 4-1: SerialNumber: syz [ 144.516603][ T349] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 144.533804][ T481] usb 4-1: config 0 descriptor?? [ 144.542923][ T349] usb 2-1: USB disconnect, device number 73 [ 144.709683][ T65] usb 1-1: USB disconnect, device number 77 [ 144.823493][ T36] audit: type=1400 audit(1771072738.206:1007): avc: denied { getopt } for pid=3653 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.845928][ T36] audit: type=1400 audit(1771072738.206:1008): avc: denied { accept } for pid=3653 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.966247][ T65] usb 4-1: USB disconnect, device number 80 [ 145.386438][ T65] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 145.546472][ C0] net_ratelimit: 64611 callbacks suppressed [ 145.546495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.551083][ T65] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.552933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.565576][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.576485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.589087][ T349] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 145.595969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.618292][ T65] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 145.628541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.638313][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.650024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.659462][ T65] usb 2-1: config 0 descriptor?? [ 145.670574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.679338][ T3663] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.687779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.707205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.719425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.746424][ T481] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 145.817848][ T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.828183][ T349] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.842417][ T349] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 145.859243][ T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.877779][ T481] usb 4-1: device descriptor read/64, error -71 [ 145.884444][ T349] usb 1-1: config 0 descriptor?? [ 145.903847][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 145.911616][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 145.928778][ T65] usb 2-1: USB disconnect, device number 74 [ 146.136500][ T481] usb 4-1: device descriptor read/64, error -71 [ 146.297718][ T349] wacom 0003:056A:00F8.0027: hidraw0: USB HID v80.00 Device [HID 056a:00f8] on usb-dummy_hcd.0-1/input0 [ 146.396460][ T481] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 146.488686][ T3675] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 146.504732][ T349] usb 1-1: USB disconnect, device number 78 [ 146.536472][ T481] usb 4-1: device descriptor read/64, error -71 [ 146.786458][ T481] usb 4-1: device descriptor read/64, error -71 [ 146.906564][ T481] usb usb4-port1: attempt power cycle [ 146.946509][ T65] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 147.107696][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.124736][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.136912][ T65] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 147.147102][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.162121][ T65] usb 2-1: config 0 descriptor?? [ 147.256585][ T481] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 147.276473][ T349] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 147.287763][ T481] usb 4-1: device descriptor read/8, error -71 [ 147.384641][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.394516][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.417427][ T349] usb 1-1: device descriptor read/64, error -71 [ 147.427656][ T481] usb 4-1: device descriptor read/8, error -71 [ 147.628605][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 147.635876][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.655638][ T65] usb 2-1: USB disconnect, device number 75 [ 147.666460][ T349] usb 1-1: device descriptor read/64, error -71 [ 147.672895][ T481] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 147.697641][ T481] usb 4-1: device descriptor read/8, error -71 [ 147.827653][ T481] usb 4-1: device descriptor read/8, error -71 [ 147.916462][ T349] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 147.946618][ T481] usb usb4-port1: unable to enumerate USB device [ 148.056437][ T349] usb 1-1: device descriptor read/64, error -71 [ 148.184856][ T3687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1053'. [ 148.297237][ T349] usb 1-1: device descriptor read/64, error -71 [ 148.418313][ T349] usb usb1-port1: attempt power cycle [ 148.576450][ T481] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 148.663564][ T36] audit: type=1400 audit(1771072742.046:1009): avc: denied { create } for pid=3699 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.729284][ T481] usb 2-1: Using ep0 maxpacket: 16 [ 148.739569][ T481] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 148.756454][ T349] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 148.764757][ T481] usb 2-1: config 1 has no interface number 0 [ 148.774994][ T481] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 148.785443][ T481] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 148.806405][ T349] usb 1-1: device descriptor read/8, error -71 [ 148.815977][ T481] usb 2-1: config 1 interface 105 has no altsetting 0 [ 148.841224][ T481] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 148.853067][ T481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.861480][ T481] usb 2-1: Product: syz [ 148.868821][ T481] usb 2-1: Manufacturer: syz [ 148.873560][ T481] usb 2-1: SerialNumber: syz [ 148.884301][ T3692] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.892920][ T3692] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.955875][ T349] usb 1-1: device descriptor read/8, error -71 [ 149.206447][ T349] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 149.248236][ T349] usb 1-1: device descriptor read/8, error -71 [ 149.301263][ T3692] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.318737][ T3692] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 149.377505][ T349] usb 1-1: device descriptor read/8, error -71 [ 149.495106][ T349] usb usb1-port1: unable to enumerate USB device [ 149.751182][ T481] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 149.777931][ T481] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 149.789927][ T481] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 149.811004][ T481] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f8:29:70:c6:36:f5 [ 150.110885][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.145652][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.150961][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.166640][ T3692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.178636][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.188242][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.197321][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.209421][ T3692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.218064][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.229604][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.239241][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.283518][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.301086][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.311788][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.366760][ T349] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 150.436661][ T481] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 150.556444][ C0] net_ratelimit: 63772 callbacks suppressed [ 150.556468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.576271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 150.589473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.601919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.614247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.627104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.636457][ T481] usb 1-1: Using ep0 maxpacket: 8 [ 150.639976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.646351][ T481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.657888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.670167][ T481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.682748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 150.693220][ T481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.705386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.712429][ T481] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 150.734132][ T481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.751846][ T481] usb 1-1: config 0 descriptor?? [ 151.181505][ T481] logitech 0003:046D:C294.0028: unbalanced collection at end of report description [ 151.197111][ T481] logitech 0003:046D:C294.0028: parse failed [ 151.203496][ T481] logitech 0003:046D:C294.0028: probe with driver logitech failed with error -22 [ 151.401907][ T481] usb 1-1: USB disconnect, device number 83 [ 154.046755][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -110 [ 154.086862][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 154.126355][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 154.160581][ T149] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -32 [ 154.169762][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -32 [ 154.178644][ T149] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -32 [ 154.203965][ T3751] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 154.229308][ T3751] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 154.252110][ T481] usb 2-1: USB disconnect, device number 76 [ 154.273323][ T481] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 154.337291][ T481] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 154.353003][ T481] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 154.368433][ T481] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 154.384786][ T481] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 154.475647][ T481] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 154.514610][ T481] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 154.543679][ T481] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 154.658197][ T3787] netlink: 'syz.3.1076': attribute type 27 has an invalid length. [ 154.724916][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.766516][ T45] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 154.847647][ T481] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 154.916448][ T45] usb 1-1: device descriptor read/64, error -71 [ 155.027770][ T481] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.044618][ T481] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 155.065314][ T481] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.088013][ T481] usb 2-1: config 0 descriptor?? [ 155.186441][ T45] usb 1-1: device descriptor read/64, error -71 [ 155.300499][ T36] audit: type=1400 audit(1771072748.686:1010): avc: denied { execute } for pid=3806 comm="syz.3.1081" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.429610][ T45] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 155.497393][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.518596][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.526217][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.546460][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.566531][ C0] net_ratelimit: 52205 callbacks suppressed [ 155.566555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.576436][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.585256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.605215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.606424][ T45] usb 1-1: device descriptor read/64, error -71 [ 155.617833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.636723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.649539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.660685][ T481] hid-generic 0003:18D1:503C.0029: unknown main item tag 0x0 [ 155.661899][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 155.681725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.686488][ T481] hid-generic 0003:18D1:503C.0029: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.1-1/input0 [ 155.694611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.718793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.743219][ T36] audit: type=1400 audit(1771072749.126:1011): avc: denied { mounton } for pid=3817 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 155.836721][ T481] usb 2-1: USB disconnect, device number 77 [ 155.896432][ T45] usb 1-1: device descriptor read/64, error -71 [ 155.925674][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.933603][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.941037][ T3817] bridge_slave_0: entered allmulticast mode [ 155.947815][ T3817] bridge_slave_0: entered promiscuous mode [ 155.955469][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.964978][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.972704][ T3817] bridge_slave_1: entered allmulticast mode [ 155.979473][ T3817] bridge_slave_1: entered promiscuous mode [ 156.006546][ T45] usb usb1-port1: attempt power cycle [ 156.165601][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.172891][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.180422][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.187661][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.245632][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.262465][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.296012][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.303504][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.315620][ T36] audit: type=1400 audit(1771072749.696:1012): avc: denied { execute } for pid=3840 comm="syz.1.1091" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.343865][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.351058][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.377760][ T3841] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.397113][ T45] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 156.417626][ T45] usb 1-1: device descriptor read/8, error -71 [ 156.465652][ T3817] veth0_vlan: entered promiscuous mode [ 156.496187][ T3817] veth1_macvtap: entered promiscuous mode [ 156.547515][ T45] usb 1-1: device descriptor read/8, error -71 [ 156.565445][ T36] audit: type=1400 audit(1771072749.946:1013): avc: denied { mounton } for pid=3817 comm="syz-executor" path="/root/syzkaller.CPhdLm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 156.786462][ T45] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 156.817647][ T45] usb 1-1: device descriptor read/8, error -71 [ 156.896416][ T481] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.947453][ T45] usb 1-1: device descriptor read/8, error -71 [ 157.056555][ T45] usb usb1-port1: unable to enumerate USB device [ 157.067674][ T481] usb 5-1: config 0 has no interfaces? [ 157.074730][ T481] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 157.091035][ T481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.123314][ T481] usb 5-1: SerialNumber: syz [ 157.146675][ T481] usb 5-1: config 0 descriptor?? [ 157.406470][ T65] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 157.454701][ T3854] overlayfs: workdir and upperdir must be separate subtrees [ 157.567772][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 157.577849][ T3856] Invalid ELF header len 16 [ 157.584194][ T36] audit: type=1400 audit(1771072750.966:1014): avc: denied { module_load } for pid=3855 comm="syz.0.1095" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 157.588062][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.588099][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.588124][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.588201][ T65] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.588227][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.589068][ T65] usb 2-1: config 0 descriptor?? [ 158.009280][ T65] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 158.029431][ T65] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 158.068412][ T65] microsoft 0003:045E:07DA.002A: no inputs found [ 158.093193][ T65] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 158.207178][ T65] usb 2-1: USB disconnect, device number 78 [ 158.794647][ T45] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 158.933713][ T3881] Invalid ELF header len 16 [ 158.940311][ T36] audit: type=1400 audit(1771072752.326:1015): avc: denied { read } for pid=3880 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.963419][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 158.970417][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.982284][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.997468][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.011403][ T45] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.023429][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.033088][ T45] usb 1-1: config 0 descriptor?? [ 159.213820][ T36] audit: type=1400 audit(1771072752.596:1016): avc: denied { accept } for pid=3885 comm="syz.2.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.253106][ T3876] netlink: 'syz.0.1100': attribute type 6 has an invalid length. [ 159.480813][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 159.494371][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.511485][ T45] usb 1-1: USB disconnect, device number 88 [ 160.166434][ T65] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 160.326421][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 160.339521][ T65] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 160.353969][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.377397][ T65] usb 2-1: config 0 has no interface number 0 [ 160.397421][ T65] usb 2-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.425370][ T65] usb 2-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 160.463259][ T65] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 160.480215][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.506684][ T65] usb 2-1: config 0 descriptor?? [ 160.533162][ T65] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 160.552070][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 160.576436][ C0] net_ratelimit: 38174 callbacks suppressed [ 160.576459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 160.597015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.609844][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.622173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.634721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.647151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.659485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.672538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 160.686001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.699563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.700045][ T65] usb 5-1: USB disconnect, device number 2 [ 160.740213][ T3892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.752482][ T36] audit: type=1400 audit(1771072754.126:1017): avc: denied { read } for pid=3891 comm="syz.1.1105" name="/" dev="configfs" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.808636][ T3892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.824023][ T36] audit: type=1400 audit(1771072754.126:1018): avc: denied { open } for pid=3891 comm="syz.1.1105" path="/" dev="configfs" ino=2541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.856418][ T481] usb 2-1: USB disconnect, device number 79 [ 160.872786][ T3904] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 160.884772][ T3904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 161.201797][ T36] audit: type=1400 audit(1771072754.586:1019): avc: denied { lock } for pid=3926 comm="syz.4.1117" path="socket:[25700]" dev="sockfs" ino=25700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.242646][ T45] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 161.508410][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.533045][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.543711][ T65] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 161.569797][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.607561][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.629617][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.659783][ T45] usb 1-1: config 0 descriptor?? [ 161.719515][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.742146][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 161.772492][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 161.802970][ T65] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 161.839973][ T65] usb 5-1: string descriptor 0 read error: -22 [ 161.848206][ T65] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.878492][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.917782][ T65] usb 5-1: 0:2 : does not exist [ 162.077914][ T45] plantronics 0003:047F:FFFF.002B: unknown main item tag 0xd [ 162.096982][ T45] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 162.126037][ T45] plantronics 0003:047F:FFFF.002B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 162.131899][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.156638][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.190857][ T36] audit: type=1400 audit(1771072755.566:1020): avc: denied { accept } for pid=3935 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 162.273620][ T3939] rust_binder: 19: no such ref 0 [ 162.293710][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.326064][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.337415][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.364922][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.381652][ T45] usb 1-1: USB disconnect, device number 89 [ 162.585110][ T65] usb 5-1: USB disconnect, device number 3 [ 162.737196][ T3958] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 162.763557][ T3958] overlayfs: missing 'lowerdir' [ 162.881572][ T36] audit: type=1400 audit(1771072756.246:1021): avc: denied { execute } for pid=3955 comm="syz.2.1127" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.959238][ T36] audit: type=1400 audit(1771072756.246:1022): avc: denied { execute_no_trans } for pid=3955 comm="syz.2.1127" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.121066][ T36] audit: type=1400 audit(1771072756.496:1023): avc: denied { execute } for pid=3979 comm="syz.2.1132" name="file0" dev="rootfs" ino=26077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 163.252607][ T36] audit: type=1400 audit(1771072756.496:1024): avc: denied { execute_no_trans } for pid=3979 comm="syz.2.1132" path="/file0" dev="rootfs" ino=26077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 163.427291][ T525] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.650912][ T3997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1139'. [ 163.765127][ T525] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 163.784214][ T525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.839975][ T525] usb 5-1: config 0 descriptor?? [ 164.056416][ T65] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 164.098343][ T525] usb 5-1: Cannot read MAC address [ 164.103678][ T525] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 164.136438][ T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 164.143929][ T525] usb 5-1: USB disconnect, device number 4 [ 164.208455][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.222352][ T65] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.232024][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.244010][ T65] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.253401][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.276179][ T65] hub 1-1:1.0: bad descriptor, ignoring hub [ 164.286425][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 164.292297][ T65] hub 1-1:1.0: probe with driver hub failed with error -5 [ 164.300542][ T65] cdc_wdm 1-1:1.0: skipping garbage [ 164.306025][ T65] cdc_wdm 1-1:1.0: skipping garbage [ 164.312127][ T45] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 164.323328][ T65] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.331754][ T45] usb 2-1: config 0 has no interface number 0 [ 164.338586][ T45] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 164.353280][ T45] usb 2-1: config 0 interface 196 has no altsetting 0 [ 164.377710][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 164.391792][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.410402][ T45] usb 2-1: Product: syz [ 164.414636][ T45] usb 2-1: Manufacturer: syz [ 164.429701][ T45] usb 2-1: SerialNumber: syz [ 164.445035][ T45] usb 2-1: config 0 descriptor?? [ 164.454848][ T4003] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 164.596590][ T481] usb 1-1: USB disconnect, device number 90 [ 164.668530][ T4013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4013 comm=syz.2.1145 [ 164.734769][ T36] audit: type=1400 audit(1771072758.116:1025): avc: denied { load_policy } for pid=4014 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 164.767251][ T4015] SELinux: failed to load policy [ 164.896759][ T45] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 164.936516][ T45] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 165.139813][ T4028] Invalid argument reading file caps for ./file0 [ 165.584271][ T525] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.605042][ C0] net_ratelimit: 36718 callbacks suppressed [ 165.605070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.605990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.606131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.606254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 165.606615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.756541][ T45] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 165.946454][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 166.140176][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.163701][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.216777][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.277906][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 166.326418][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.365246][ T45] usb 1-1: config 0 descriptor?? [ 166.542423][ T525] usb 5-1: Using ep0 maxpacket: 8 [ 166.682967][ T525] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.719631][ T525] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.800674][ T45] hid (null): invalid report_count -218988544 [ 166.811804][ T525] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.817669][ T45] hid (null): unknown global tag 0xc [ 166.847718][ T525] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.852034][ T4049] fuse: Bad value for 'fd' [ 166.886244][ T349] usb 2-1: USB disconnect, device number 80 [ 166.921414][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.002C/input/input37 [ 166.991394][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.002C/input/input38 [ 167.013579][ T4049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1156'. [ 167.043652][ T45] kye 0003:0458:5011.002C: input,hiddev96,hidraw0: USB HID v0.06 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 167.085856][ T4056] overlayfs: failed to clone upperpath [ 167.127998][ T525] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.150052][ T525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.165687][ T525] usb 5-1: Product: syz [ 167.182290][ T525] usb 5-1: Manufacturer: syz [ 167.230252][ T525] usb 5-1: SerialNumber: syz [ 167.315618][ T65] usb 1-1: USB disconnect, device number 91 [ 167.504681][ T525] usb 5-1: USB disconnect, device number 5 [ 167.529365][ T45] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 167.698089][ T45] usb 2-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.711849][ T45] usb 2-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.727359][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.735593][ T45] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 167.750073][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.765485][ T45] usb 2-1: config 0 descriptor?? [ 168.240033][ T45] hid-generic 0003:04D8:00DF.002D: hidraw0: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 168.397404][ T525] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 168.444611][ T4059] netlink: 'syz.1.1159': attribute type 11 has an invalid length. [ 168.688275][ T36] audit: type=1400 audit(1771072761.946:1026): avc: denied { create } for pid=4058 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.418019][ T45] usb 2-1: USB disconnect, device number 81 [ 169.430463][ T525] usb 1-1: Using ep0 maxpacket: 16 [ 169.535489][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.663612][ T4067] fido_id[4067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 169.853474][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.408260][ T525] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.606420][ C1] net_ratelimit: 61397 callbacks suppressed [ 170.606443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.606487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.612997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.626002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.639531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.651803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.665140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.679813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.693746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.706525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.979234][ T525] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.007634][ T525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.960754][ T525] usb 1-1: config 0 descriptor?? [ 172.135928][ T525] usb 1-1: can't set config #0, error -71 [ 172.167079][ T525] usb 1-1: USB disconnect, device number 92 [ 175.616472][ C1] net_ratelimit: 95832 callbacks suppressed [ 175.616494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.616579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 175.623448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.636892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.649206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.662036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.675018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.687872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.701396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.714294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.999394][ C1] sched: DL replenish lagged too much [ 180.626454][ C1] net_ratelimit: 94467 callbacks suppressed [ 180.626480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.626487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.626593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.632589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.645360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.658534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.671943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.685088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.697589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.711270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.636391][ C0] net_ratelimit: 119096 callbacks suppressed [ 185.636417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.636448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.642777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.655281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.668308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.682244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.694688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.707974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.720512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.733285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.646391][ C0] net_ratelimit: 140202 callbacks suppressed [ 190.646416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 190.646455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.653078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.665591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.678478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.690608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.703823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.716863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.730076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.742636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.656414][ C1] net_ratelimit: 136456 callbacks suppressed [ 195.656437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.656480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.662974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.675409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.687861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.700384][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.712587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.724847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.737057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.750070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 200.666392][ C1] net_ratelimit: 145504 callbacks suppressed [ 200.666415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.666439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.672683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.685226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 200.697418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.709524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.721826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.733938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.746381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.758665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.676382][ C1] net_ratelimit: 147766 callbacks suppressed [ 205.676407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.676472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.682850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.695312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.707389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.719633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.731734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.743924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.756287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.768911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.686399][ C1] net_ratelimit: 146774 callbacks suppressed [ 210.686424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.686462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.692865][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.705099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.717673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.730469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.743370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.757068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.770054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.782776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.696436][ C1] net_ratelimit: 150266 callbacks suppressed [ 215.696461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.696504][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 215.702832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.715671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.728733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.741356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.754079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.766568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.779233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.792469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.706371][ C1] net_ratelimit: 149448 callbacks suppressed [ 220.706396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.706483][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.712947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.725401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.738544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.751573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 220.764285][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.777373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.791500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.805302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.716368][ C1] net_ratelimit: 128909 callbacks suppressed [ 225.716393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.716421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.722569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.734918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.747168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.759572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.771751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.784079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.796553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.809129][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.726385][ C1] net_ratelimit: 151178 callbacks suppressed [ 230.726409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.726472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.732756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.745307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.758142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.776403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.783993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.797222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.810750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.824301][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.736385][ C0] net_ratelimit: 149567 callbacks suppressed [ 235.736414][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.736456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.743842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.758582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.773543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.788308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.805157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.820150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.835340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.850254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.746403][ C1] net_ratelimit: 145735 callbacks suppressed [ 240.746429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.746477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.752993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.765155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.777805][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.790326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.802616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.814909][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.827426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.839777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.756383][ C0] net_ratelimit: 148263 callbacks suppressed [ 245.756416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.756455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.762889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.775346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.787835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.799718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.816381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.823916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.836130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.848489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.766350][ C1] net_ratelimit: 145232 callbacks suppressed [ 250.766374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.766438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.772715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.785400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.797592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.810150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.822742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.834893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.847670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.860070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.776341][ C1] net_ratelimit: 132644 callbacks suppressed [ 255.776364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.776389][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.782926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.796286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.809277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.822657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.835892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.849584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.862436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.875390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.786357][ C1] net_ratelimit: 142924 callbacks suppressed [ 260.786382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.786453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.792946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.805734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.818118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.831725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.845275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.858025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.871527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.884354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.796380][ C0] net_ratelimit: 147912 callbacks suppressed [ 265.796405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.796439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.802649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.814887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.827427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.840032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.852313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.865160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.878731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.891253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.806343][ C1] net_ratelimit: 151915 callbacks suppressed [ 270.806367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.806397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.812460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.824681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.837507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.856364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.862262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.875988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.888909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.902058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.816346][ C0] net_ratelimit: 153290 callbacks suppressed [ 275.816372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.816376][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.816440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.822670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.834935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.847287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.859394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.871567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.884071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.896624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.826399][ C1] net_ratelimit: 150387 callbacks suppressed [ 280.826424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.826586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.833213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.845906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.858675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.871727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.885409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.898440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.913596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.926631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.836355][ C0] net_ratelimit: 146705 callbacks suppressed [ 285.836380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.836425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.842865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.854979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.867333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.879473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.891834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.904654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.916841][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.930335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.846350][ C1] net_ratelimit: 148253 callbacks suppressed [ 290.846374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.846499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.852897][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.865100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.877616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.890388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.906412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.915409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.927716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.941745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.856326][ C1] net_ratelimit: 149797 callbacks suppressed [ 295.856350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.856421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.862622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.874754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.887020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.899680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 295.912217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.924644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.936973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.949323][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 300.866339][ C1] net_ratelimit: 140906 callbacks suppressed [ 300.866365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.866403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.876398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.893379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.907726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.925143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.940943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.957973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.973911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.990884][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.876357][ C0] net_ratelimit: 147465 callbacks suppressed [ 305.876382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.876413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.882635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.895266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.908361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.921072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.935213][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.947516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.959757][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.971940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.886342][ C1] net_ratelimit: 144679 callbacks suppressed [ 310.886366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.886396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.892454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.904912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.917269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.929708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 310.941861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.954886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.967100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.980434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:4b:be:37:65:84, vlan:0) [ 312.518993][ T37] INFO: task syz.1.1159:4058 blocked for more than 126 seconds. [ 312.572079][ T37] Not tainted syzkaller #0 [ 312.577198][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.586554][ T37] task:syz.1.1159 state:D stack:0 pid:4058 tgid:4058 ppid:291 flags:0x00004004 [ 312.598091][ T37] Call Trace: [ 312.601669][ T37] [ 312.604751][ T37] __schedule+0x134f/0x1ea0 [ 312.609415][ T37] ? __sched_text_start+0x10/0x10 [ 312.614556][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 312.620173][ T37] ? __kasan_check_write+0x18/0x20 [ 312.625401][ T37] ? llist_add_batch+0x10f/0x1f0 [ 312.630483][ T37] schedule+0xc5/0x240 [ 312.634576][ T37] schedule_timeout+0xc7/0x3b0 [ 312.639904][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 312.646221][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 312.652200][ T37] ? generic_exec_single+0x1fd/0x500 [ 312.657642][ T37] ? kvm_vm_release+0x47/0x70 [ 312.662630][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 312.668421][ T37] wait_for_common+0x369/0x650 [ 312.673412][ T37] ? wait_for_completion+0x40/0x40 [ 312.678796][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 312.685508][ T37] wait_for_completion+0x1c/0x40 [ 312.690640][ T37] rcu_barrier+0x415/0x540 [ 312.695096][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 312.700797][ T37] ? kfree+0x158/0x440 [ 312.704983][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 312.710836][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 312.715986][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 312.721774][ T37] ? __kasan_check_write+0x18/0x20 [ 312.727034][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 312.733050][ T37] kvm_put_kvm+0xb04/0x12c0 [ 312.737886][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 312.743863][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 312.749855][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 312.755189][ T37] kvm_vm_release+0x47/0x70 [ 312.760631][ T37] __fput+0x1fb/0xa00 [ 312.764835][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 312.770864][ T37] ____fput+0x20/0x30 [ 312.775581][ T37] task_work_run+0x1e5/0x260 [ 312.780359][ T37] ? __cfi_task_work_run+0x10/0x10 [ 312.785887][ T37] ? __kasan_check_read+0x15/0x20 [ 312.791632][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 312.798488][ T37] resume_user_mode_work+0x35/0x50 [ 312.803757][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 312.809732][ T37] do_syscall_64+0x63/0xf0 [ 312.814376][ T37] ? clear_bhb_loop+0x50/0xa0 [ 312.819270][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 312.825485][ T37] RIP: 0033:0x7f2a2339bf79 [ 312.830397][ T37] RSP: 002b:00007ffc26967148 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 312.840088][ T37] RAX: 0000000000000000 RBX: 00007ffc26967230 RCX: 00007f2a2339bf79 [ 312.849026][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 312.857515][ T37] RBP: 0000000000028db0 R08: 0000000000000001 R09: 0000000000000000 [ 312.865801][ T37] R10: 0000001b2de20000 R11: 0000000000000246 R12: 00007ffc26967270 [ 312.874105][ T37] R13: 00007f2a23615fac R14: 00000000000292e8 R15: 00007f2a23615fa0 [ 312.882428][ T37] [ 312.885568][ T37] INFO: task syz.4.1163:4070 blocked for more than 126 seconds. [ 312.917622][ T37] Not tainted syzkaller #0 [ 312.937898][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.949166][ T37] task:syz.4.1163 state:D stack:0 pid:4070 tgid:4070 ppid:3817 flags:0x00004006 [ 312.987372][ T37] Call Trace: [ 312.990970][ T37] [ 312.994211][ T37] __schedule+0x134f/0x1ea0 [ 313.017912][ T37] ? __sched_text_start+0x10/0x10 [ 313.023296][ T37] ? __kasan_check_write+0x18/0x20 [ 313.037066][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 313.042593][ T37] ? __kasan_check_write+0x18/0x20 [ 313.053086][ T37] ? trace_contention_begin+0xc0/0xc0 [ 313.058920][ T37] ? kernel_text_address+0xa9/0xe0 [ 313.064464][ T37] schedule+0xc5/0x240 [ 313.068804][ T37] schedule_preempt_disabled+0x14/0x30 [ 313.074565][ T37] __mutex_lock+0x960/0x1bb0 [ 313.079834][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 313.087137][ T37] ? stack_depot_save_flags+0x38/0x800 [ 313.093176][ T37] ? kasan_save_track+0x4f/0x80 [ 313.098193][ T37] ? kasan_save_track+0x3e/0x80 [ 313.103523][ T37] ? kasan_save_free_info+0x4a/0x60 [ 313.109129][ T37] ? __kasan_slab_free+0x5f/0x80 [ 313.114365][ T37] ? kfree+0x158/0x440 [ 313.118709][ T37] ? kvfree+0x39/0x50 [ 313.122731][ T37] ? kvm_arch_destroy_vm+0x36a/0x420 [ 313.128070][ T37] ? kvm_vm_release+0x47/0x70 [ 313.132954][ T37] ? __fput+0x1fb/0xa00 [ 313.137412][ T37] ? ____fput+0x20/0x30 [ 313.141699][ T37] ? do_syscall_64+0x63/0xf0 [ 313.146704][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.153006][ T37] __mutex_lock_slowpath+0xe/0x20 [ 313.158111][ T37] mutex_lock+0x113/0x1d0 [ 313.162653][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 313.167763][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 313.174825][ T37] rcu_barrier+0x4d/0x540 [ 313.179661][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 313.185437][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 313.190452][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 313.195608][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 313.201411][ T37] ? __kasan_check_write+0x18/0x20 [ 313.206859][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 313.212704][ T37] kvm_put_kvm+0xb04/0x12c0 [ 313.217264][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 313.222591][ T37] kvm_vm_release+0x47/0x70 [ 313.227400][ T37] __fput+0x1fb/0xa00 [ 313.231517][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 313.237229][ T37] ____fput+0x20/0x30 [ 313.241448][ T37] task_work_run+0x1e5/0x260 [ 313.247061][ T37] ? __cfi_task_work_run+0x10/0x10 [ 313.252676][ T37] ? __kasan_check_write+0x18/0x20 [ 313.258734][ T37] resume_user_mode_work+0x35/0x50 [ 313.264281][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 313.270183][ T37] do_syscall_64+0x63/0xf0 [ 313.275079][ T37] ? clear_bhb_loop+0x50/0xa0 [ 313.280243][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.286361][ T37] RIP: 0033:0x7f8e2999bf79 [ 313.290908][ T37] RSP: 002b:00007ffe1e10b4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 313.299812][ T37] RAX: 0000000000000000 RBX: 00007f8e29c17da0 RCX: 00007f8e2999bf79 [ 313.308020][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 313.316202][ T37] RBP: 00007f8e29c17da0 R08: 00007f8e29c16128 R09: 0000000000000000 [ 313.324743][ T37] R10: 00000000003ffcf4 R11: 0000000000000246 R12: 0000000000029ffb [ 313.333256][ T37] R13: 00007f8e29c15fac R14: 0000000000029fba R15: 00007f8e29c15fa0 [ 313.342063][ T37] [ 313.408285][ T37] INFO: task syz.2.1164:4075 blocked for more than 127 seconds. [ 313.438456][ T37] Not tainted syzkaller #0 [ 313.456950][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.465948][ T37] task:syz.2.1164 state:D stack:0 pid:4075 tgid:4074 ppid:290 flags:0x00004004 [ 313.482082][ T37] Call Trace: [ 313.485575][ T37] [ 313.488799][ T37] __schedule+0x134f/0x1ea0 [ 313.493624][ T37] ? __sched_text_start+0x10/0x10 [ 313.498800][ T37] ? update_curr+0xf8/0x9e0 [ 313.503333][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 313.508500][ T37] ? __kasan_check_write+0x18/0x20 [ 313.513926][ T37] ? trace_contention_begin+0xc0/0xc0 [ 313.519711][ T37] schedule+0xc5/0x240 [ 313.523818][ T37] schedule_preempt_disabled+0x14/0x30 [ 313.529584][ T37] __mutex_lock+0x960/0x1bb0 [ 313.534390][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 313.541518][ T37] ? _raw_spin_unlock+0x45/0x60 [ 313.546930][ T37] ? __schedule+0x141b/0x1ea0 [ 313.551965][ T37] ? __kasan_check_write+0x18/0x20 [ 313.557339][ T37] ? work_grab_pending+0x32c/0x7b0 [ 313.562942][ T37] __mutex_lock_slowpath+0xe/0x20 [ 313.568304][ T37] mutex_lock+0x113/0x1d0 [ 313.573210][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 313.578407][ T37] rcu_barrier+0x4d/0x540 [ 313.582882][ T37] ? enable_work+0x16a/0x1f0 [ 313.588058][ T37] br_multicast_dev_del+0x5b0/0x610 [ 313.593829][ T37] ? ndisc_netdev_event+0x305/0x660 [ 313.599121][ T37] ? ipv6_mc_netdev_event+0x85/0x4c0 [ 313.604645][ T37] ? __cfi_br_multicast_dev_del+0x10/0x10 [ 313.610828][ T37] ? notifier_call_chain+0x298/0x2b0 [ 313.616184][ T37] br_dev_uninit+0x20/0x40 [ 313.620677][ T37] ? __cfi_br_dev_uninit+0x10/0x10 [ 313.626185][ T37] unregister_netdevice_many_notify+0x15cc/0x1c30 [ 313.633118][ T37] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 313.640486][ T37] ? __call_rcu_common+0x43b/0x720 [ 313.645931][ T37] ? __kasan_check_read+0x15/0x20 [ 313.651287][ T37] unregister_netdevice_queue+0x341/0x390 [ 313.657149][ T37] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 313.663610][ T37] br_dev_delete+0x100/0x130 [ 313.668369][ T37] ? br_del_bridge+0xb1/0xf0 [ 313.672995][ T37] br_del_bridge+0xbb/0xf0 [ 313.677664][ T37] br_ioctl_stub+0x88f/0xaf0 [ 313.682738][ T37] ? __cfi_br_ioctl_stub+0x10/0x10 [ 313.688015][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 313.694244][ T37] ? __kasan_check_write+0x18/0x20 [ 313.700480][ T37] ? mutex_lock+0x97/0x1d0 [ 313.704949][ T37] ? __cfi_mutex_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.710097][ T37] ? __cfi_do_futex+0x10/0x10 [ 313.715078][ T37] ? __cfi_br_ioctl_stub+0x10/0x10 [ 313.720438][ T37] sock_ioctl+0x401/0x810 [ 313.724998][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 313.730474][ T37] ? __fget_files+0x2c5/0x340 [ 313.735453][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 313.740712][ T37] ? security_file_ioctl+0x3e/0x110 [ 313.746337][ T37] ? __cfi_sock_ioctl+0x10/0x10 [ 313.751227][ T37] __se_sys_ioctl+0x135/0x1b0 [ 313.756134][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 313.761176][ T37] x64_sys_call+0x1878/0x2ee0 [ 313.766720][ T37] do_syscall_64+0x57/0xf0 [ 313.773649][ T37] ? clear_bhb_loop+0x50/0xa0 [ 313.778681][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 313.784824][ T37] RIP: 0033:0x7fc33cb9bf79 [ 313.789836][ T37] RSP: 002b:00007fc33da93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.793294][ T36] audit: type=1400 audit(1771072907.136:1027): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[431]" dev="pipefs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 313.798853][ T37] RAX: ffffffffffffffda RBX: 00007fc33ce15fa0 RCX: 00007fc33cb9bf79 [ 313.798881][ T37] RDX: 0000200000000140 RSI: 0000000000008941 RDI: 0000000000000009 [ 313.798896][ T37] RBP: 00007fc33cc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 313.798910][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.798923][ T37] R13: 00007fc33ce16038 R14: 00007fc33ce15fa0 R15: 00007ffef3461a48 [ 313.798941][ T37] [ 313.918501][ T37] NMI backtrace for cpu 1 [ 313.918525][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a14c28d9e62c02dc866229d1d178db2aa7df2752 [ 313.918556][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 313.918570][ T37] Call Trace: [ 313.918578][ T37] [ 313.918586][ T37] __dump_stack+0x21/0x30 [ 313.918619][ T37] dump_stack_lvl+0x140/0x1c0 [ 313.918651][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 313.918676][ T37] dump_stack+0x19/0x20 [ 313.918699][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 313.918729][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 313.918755][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 313.918784][ T37] ? sched_show_task+0x371/0x530 [ 313.918807][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 313.918830][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 313.918854][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 313.918889][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 313.918931][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 313.918954][ T37] watchdog+0xdad/0xf00 [ 313.918979][ T37] ? __kasan_check_write+0x18/0x20 [ 313.919004][ T37] ? __cfi_watchdog+0x10/0x10 [ 313.919030][ T37] ? __kasan_check_read+0x15/0x20 [ 313.919053][ T37] ? __kthread_parkme+0x137/0x180 [ 313.919082][ T37] ? schedule+0xc5/0x240 [ 313.919103][ T37] kthread+0x2c9/0x370 [ 313.919122][ T37] ? __cfi_watchdog+0x10/0x10 [ 313.919149][ T37] ? __cfi_kthread+0x10/0x10 [ 313.919167][ T37] ret_from_fork+0x67/0xa0 [ 313.919192][ T37] ? __cfi_kthread+0x10/0x10 [ 313.919211][ T37] ret_from_fork_asm+0x1a/0x30 [ 313.919239][ T37] [ 314.088879][ T37] Sending NMI from CPU 1 to CPUs 0: [ 314.094392][ C0] NMI backtrace for cpu 0 [ 314.094408][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 a14c28d9e62c02dc866229d1d178db2aa7df2752 [ 314.094430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 314.094439][ C0] RIP: 0010:get_stack_info+0x8/0x100 [ 314.094467][ C0] Code: d5 66 04 cc 31 c0 5d c3 cc cc cc cc cc 0f 1f 44 00 00 b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 48 89 e5 <41> 57 41 56 41 55 41 54 53 48 89 cb 49 89 d6 49 89 f7 48 85 f6 74 [ 314.094481][ C0] RSP: 0018:ffffc900000071a0 EFLAGS: 00000246 [ 314.094497][ C0] RAX: ffff888103663900 RBX: ffffc90000007228 RCX: ffffc90000007248 [ 314.094509][ C0] RDX: ffffc90000007228 RSI: ffff888103663900 RDI: ffffc90000007218 [ 314.094522][ C0] RBP: ffffc900000071a0 R08: ffffc90000007287 R09: 0000000000000000 [ 314.094534][ C0] R10: ffffc90000007228 R11: fffff52000000e51 R12: 0000000000000000 [ 314.094545][ C0] R13: ffffc90000007218 R14: dffffc0000000000 R15: ffff888103663900 [ 314.094557][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 314.094572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.094584][ C0] CR2: 00007f94350343e2 CR3: 000000010abd2000 CR4: 00000000003526b0 [ 314.094601][ C0] Call Trace: [ 314.094607][ C0] [ 314.094615][ C0] __unwind_start+0x20b/0x410 [ 314.094633][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 314.094650][ C0] arch_stack_walk+0xf2/0x170 [ 314.094672][ C0] stack_trace_save+0xaa/0x100 [ 314.094686][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 314.094701][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 314.094719][ C0] ? __kfree_skb+0x18f/0x210 [ 314.094739][ C0] kasan_save_track+0x3e/0x80 [ 314.094764][ C0] kasan_save_alloc_info+0x40/0x50 [ 314.094780][ C0] __kasan_slab_alloc+0x73/0x90 [ 314.094800][ C0] kmem_cache_alloc_noprof+0x1bf/0x410 [ 314.094818][ C0] ? dst_alloc+0x13c/0x250 [ 314.094834][ C0] dst_alloc+0x13c/0x250 [ 314.094848][ C0] ip_route_input_rcu+0x1a0e/0x2700 [ 314.094865][ C0] ? ip_route_input_noref+0x150/0x150 [ 314.094881][ C0] ? __asan_memcpy+0x5a/0x80 [ 314.094898][ C0] ? arpt_do_table+0x1ba7/0x1d80 [ 314.094924][ C0] ip_route_input_noref+0xd4/0x150 [ 314.094939][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 314.094956][ C0] ? __asan_memcpy+0x5a/0x80 [ 314.094973][ C0] arp_process+0x908/0x1790 [ 314.094992][ C0] ? __cfi_arp_process+0x10/0x10 [ 314.095011][ C0] ? __cfi_arp_process+0x10/0x10 [ 314.095028][ C0] NF_HOOK+0x181/0x1e0 [ 314.095045][ C0] ? __cfi_arp_process+0x10/0x10 [ 314.095062][ C0] ? arp_xmit+0x210/0x210 [ 314.095080][ C0] ? __cfi_arp_process+0x10/0x10 [ 314.095097][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 314.095116][ C0] arp_rcv+0x2f8/0x490 [ 314.095133][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 314.095151][ C0] process_backlog+0x556/0xad0 [ 314.095173][ C0] __napi_poll+0xd0/0x610 [ 314.095192][ C0] net_rx_action+0x5ea/0xd80 [ 314.095213][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 314.095232][ C0] ? sched_balance_domains+0x880/0xa20 [ 314.095256][ C0] ? sched_balance_softirq+0xbd/0x170 [ 314.095276][ C0] handle_softirqs+0x1aa/0x630 [ 314.095298][ C0] __do_softirq+0xf/0x16 [ 314.095315][ C0] do_softirq+0xb8/0x110 [ 314.095334][ C0] [ 314.095339][ C0] [ 314.095345][ C0] ? __cfi_do_softirq+0x10/0x10 [ 314.095364][ C0] ? dst_destroy+0x37d/0x460 [ 314.095379][ C0] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 314.095395][ C0] __local_bh_enable_ip+0x74/0x80 [ 314.095414][ C0] rcu_do_batch+0x5d9/0xd40 [ 314.095435][ C0] ? rcu_core+0xd30/0xd30 [ 314.095453][ C0] ? __kasan_check_write+0x18/0x20 [ 314.095470][ C0] ? _raw_spin_lock+0x92/0x120 [ 314.095485][ C0] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 314.095505][ C0] ? __kasan_check_read+0x15/0x20 [ 314.095522][ C0] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 314.095542][ C0] rcu_nocb_cb_kthread+0x524/0xb30 [ 314.095563][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 314.095583][ C0] ? __kasan_check_write+0x18/0x20 [ 314.095600][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 314.095614][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 314.095629][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 314.095644][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 314.095665][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 314.095687][ C0] ? __kasan_check_read+0x15/0x20 [ 314.095703][ C0] ? __kthread_parkme+0x137/0x180 [ 314.095724][ C0] ? schedule+0xc5/0x240 [ 314.095739][ C0] kthread+0x2c9/0x370 [ 314.095753][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 314.095774][ C0] ? __cfi_kthread+0x10/0x10 [ 314.095788][ C0] ret_from_fork+0x67/0xa0 [ 314.095806][ C0] ? __cfi_kthread+0x10/0x10 [ 314.095820][ C0] ret_from_fork_asm+0x1a/0x30 [ 314.095843][ C0] [ 315.896343][ C0] net_ratelimit: 113032 callbacks suppressed [ 315.896369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.896399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.903348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.917074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.929856][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.942786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.955516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.967881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.980455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.992734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.906362][ C0] net_ratelimit: 139184 callbacks suppressed [ 320.906385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.906425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.913047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.925977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.938768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.950934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.963334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.976021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.988702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.001781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)