last executing test programs: 6m19.491939476s ago: executing program 3 (id=227): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)={0x20, r2, 0xc6012487b07c7d97, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x20}}, 0x40000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000"], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x876}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6ea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x95}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x140}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r6, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000080)) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x3, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4d}}, 0xf0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 6m19.456652687s ago: executing program 3 (id=228): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000001800)=0xff, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) lsm_set_self_attr(0x66, 0x0, 0x22, 0x20) fcntl$notify(r2, 0x402, 0x18) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) r4 = getpid() getpriority(0x2, r4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0xf0, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24040000) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)={0x20, 0x12, 0xc9222ec23c9a640f, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x14e, 0x0, 0x1, [@nested={0x4, 0x77}]}, @generic="17ad583718"]}, 0x20}], 0x1}, 0x800) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xdb31}], 0x1, 0x40002102, 0x0) 6m19.422561818s ago: executing program 3 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110) sendto$inet(r1, &(0x7f0000000200)="f20bc2a432c5eac876c82af4146f1ff67c005c983c9b911162200a7719ee8a3af7f790231766e42893dcc23779bea32ed65f0fd21fedaf8287b1867211f843ec39613d637ac650b3c0f5d65a7c8425b065cfe9a1", 0x54, 0x0, &(0x7f0000000100)={0x2, 0x4e28}, 0x10) write(r0, &(0x7f0000000140)="7188b0bd8b17355be81f3bc3b078392db8fb8953ec6f2653fe5710c3045ab6d059937c073cb94cb622adf659f6ce4f786cbb6f2018d0bc72b08c9dad3a5c56e34677ca281dfde2bb784717c6756aa3d3bda6161235312b989bcd3e9b453f2598ad6c60a31815c3880cea8abfbab6375f086586f605f131f2b2afd1dc7f8e4eb35edd4f", 0x83) syz_usb_disconnect(0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="fc0000001c000704ab5b2509b86803000aab0200000000000000", 0x1a) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001a68ef5c4d4e10a2ca3a8b2cfa7b50904020000010230000904020101010230000905820920"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) memfd_secret(0x80000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x121040, 0x242) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xc, 0x0, 0x2000}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 6m18.214394537s ago: executing program 3 (id=237): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) setreuid(r1, r0) 6m18.162777759s ago: executing program 3 (id=238): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) close_range(r0, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2e, &(0x7f0000000040)="b942bbce96c65657b1d9897f845c70d6861217bf0a7892345f7a8f4309f08df4f8f2367051e64438284f7ed8cb9e") 6m18.083196831s ago: executing program 3 (id=240): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x4, 0x80000000) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x53, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0xe, 0x0, 0x2, 0x0, 0x2, 0x0, 0xdae}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ec7000/0x3000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x5b14, &(0x7f0000000100)={0x0, 0xf527, 0x10c0, 0x1, 0x324}, 0x0, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) read$ublk_bdev(0xffffffffffffffff, &(0x7f0000000300)=""/240, 0xf0) 6m17.968947445s ago: executing program 32 (id=240): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x4, 0x80000000) getsockopt$inet6_mreq(r1, 0x29, 0x7, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x53, &(0x7f0000000180)=[@vmwrite={0x8, 0x0, 0xe, 0x0, 0x2, 0x0, 0x2, 0x0, 0xdae}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ec7000/0x3000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x5b14, &(0x7f0000000100)={0x0, 0xf527, 0x10c0, 0x1, 0x324}, 0x0, 0x0, &(0x7f0000000040)) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) read$ublk_bdev(0xffffffffffffffff, &(0x7f0000000300)=""/240, 0xf0) 4m51.295693018s ago: executing program 4 (id=732): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="bc", 0xffffffc3, 0x8841, 0x0, 0xffffffffffffff99) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) 4m51.275694988s ago: executing program 4 (id=733): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)='\x00\x00\x00\x00\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x103}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r2, &(0x7f00000002c0)='u', 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x338) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'xfrm0\x00', @link_local}) 4m51.22800779s ago: executing program 4 (id=734): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mlock(&(0x7f00003a1000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) timer_delete(r0) r1 = syz_clone3(0x0, 0x0) tgkill(r1, 0x0, 0x41) timer_settime(0x0, 0x1, 0x0, 0x0) 4m51.111575664s ago: executing program 4 (id=735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x183402, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x81, 0x100000f, 0x9, 0x0, 0x1, 0xfffffffffffffffc, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x10, 0x1, 0x8], 0x6000, 0x80340}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x141091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x12100, 0x0) syz_usb_connect$midi(0x5, 0x41, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xa67, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x20, 0xf, 0xd7, 0x2, {0x14, 0x25, 0x1, 0x10, "2777c545066c63910a23007d78e94449"}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x4, 0x0, [{0x40000000, 0x6, 0x4, 0x40, 0x1, 0x8, 0x44d}, {0x2, 0xf5, 0x1, 0x2, 0x3, 0x0, 0x7}, {0x2, 0x1, 0x1, 0x7, 0x2, 0x5, 0x3a4da24b}, {0xd, 0x0, 0x4, 0x2, 0xfff, 0x7, 0x65}]}) 4m49.821496425s ago: executing program 4 (id=737): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @private2, @empty, 0x0, 0x40, 0xfffffffe, 0x1}}) 4m49.64248324s ago: executing program 4 (id=738): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf2270ff9b1ab9ad62a3f9629a01bea8af7e7a8059edf4894205de26"], 0x40}, 0x1, 0x0, 0x0, 0x24000844}, 0x20008018) 4m49.515468555s ago: executing program 33 (id=738): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf2270ff9b1ab9ad62a3f9629a01bea8af7e7a8059edf4894205de26"], 0x40}, 0x1, 0x0, 0x0, 0x24000844}, 0x20008018) 1m33.331681595s ago: executing program 0 (id=1860): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf2270ff9b1ab9ad62a3f9629a01bea8af7e7a8059edf4894205de26e8e40c9e3e1a38e2bb935d9f0b02554ef87f279cb4c0088da647893e8352d129d3be2341e296c634545e71c99bda36e85f56511a2f2494ede3529522b7f69b0b957b263e5ef54ef15e361832"], 0x40}, 0x1, 0x0, 0x0, 0x24000844}, 0x20008018) 1m32.913351418s ago: executing program 2 (id=1861): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000780)="120000001200e7ef007b462ea95ce8197900", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)=""/4069, 0xfe5}, {&(0x7f0000000300)=""/189, 0xbd}, {&(0x7f0000000000)=""/78, 0x4e}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f0000001c00)=""/233, 0xe9}, {&(0x7f0000000100)=""/75, 0x4b}, {&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000080)=""/99, 0x63}], 0xa}, 0x5e}, {{0x0, 0x0, 0x0, 0xffc3}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x1}], 0x7, 0x0, 0x0) 1m32.895966659s ago: executing program 2 (id=1862): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a0000000000fe00000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816) 1m32.835563521s ago: executing program 2 (id=1863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x355, 0x4, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdffffffbe, 0xfdfffffffffffff9, 0x100, 0x9, 0xc82, 0x767], 0xeeef0000, 0x81082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000026c0)=@vmx={0x109, 0x0, 0x2080, {0x1, 0x8080000, {}, 0x16, 0x8}, {"d07ee511000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b9b6434c039ec9b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ff00", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926", @ANYRESDEC=0x0], 0x0) 1m32.614634648s ago: executing program 1 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x80, r1, 0x1, 0x10000, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x3cff, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x80}}, 0x0) 1m32.55168505s ago: executing program 1 (id=1866): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x900, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 1m32.55148262s ago: executing program 1 (id=1867): syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12807625a0000010b80402024000010203010902240001010000d20904006102070102ff09050102100006052009058202ff03100300"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1m31.591934791s ago: executing program 0 (id=1868): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x800fff, 0x5, 0x63, 0x8001}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000600000000000800040001000000", 0x24) 1m31.579333781s ago: executing program 0 (id=1869): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000002000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4005, 0x6, 0x8, 0x5}]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xfe, 0x46, 0x83, 0x8, 0x199e, 0x8002, 0xbb31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0xb0, 0x1, "", [{{0x9, 0x4, 0xe6, 0x4, 0x1, 0xe, 0x1, 0x0, 0x3, [], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0xfd, 0x80, 0x2a}}]}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 1m31.443708305s ago: executing program 2 (id=1870): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r2) write$tun(r2, &(0x7f00000003c0)={@void, @val={0x1, 0x0, 0x9, 0x400, 0x400, 0x400}, @ipv4=@igmp={{0x11, 0x4, 0x1, 0x1, 0x140, 0x67, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010102, @multicast2, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xad, 0x3, 0x0, [{@multicast1, 0x8aaa}, {@empty, 0x9}, {@remote, 0x300}, {@multicast2, 0xc}, {@empty, 0x9354}]}]}}, {0x13, 0x6, 0x0, @rand_addr=0x64010102, "ee96fc14829797c0b70b065b321bbe17ccd5c205637fc9887fbcc78e2447adde65aa427e5f5667e766a33c2d2dd8f276e2f88b5db2c4e766817c03df5bb08f48d1930f543686192762da413e6f77dc337493b5164446349e0d2c2466a2814f13b92e5724766e66cd101fe8eee078493f3f7cdb90b0919a622bbecf8adb9071ac3777fd92788f724f73acb4629beacd2ce0778d245f27a5e6ce6184b3a5541f1bfa7e3850fe09eec2a8a11146b5378f5cb40ab895d480bfd02e3bca7b6ee3eb51d7112412bf0f724931a5324673186b907fdcc3a782a06cc01408da36e0b12b171ff3b234e227cb043d8453f6fa7916a6df1a97f7"}}}, 0x14a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=r0], 0xffdd) 1m31.428232036s ago: executing program 2 (id=1871): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={[{@name={'name', 0x3d, '\x928A\xf86\xcd[\xfe\xa6|\x86\x91\xe2\xfa\x9d\x92\xdd~w\x85\xd5\xa8E\xf8&k\x06;\x17[@\xa1I!Bd\xa3\xc0B\"\xc7\x10\xb5\x04^I\x01\x02\xce\xc6\x87\xa2xe\x8d\x7f\xa2o\xe0\x04\x05\xb0\xfc^L\xa6\xd6\x94t\x84\x9f\xc3\xd3 I5\xd8/OI\xb9\'\xa3\xcf{\"\xf8:jp\xb2\x9c\xfc9\xa4\xd6r<@y\x97U`\xf29\x05\xca\v2\x16 \x905k\x9c>>P%w\xfb\x9c\xf27N\xca\x87\xacG\xe7\xb8@\x05\x1d\xdc\x9b,\xb43\\\x1e\x96#\x8f\x02\xe1\xca\xb7\x87\x8e\x06\xbeX\xe2\xda6\xf0\xc3\xdeK\xeb\xcc\xaab\xdc\x0e\xb6\x04Tr\xa0\x12\xea6M\x1e\x8ds\xa1\xdd\x14\x16a5\xf4\xf9i\x97\xf6\xb6B\x01c\xfb6\xf7A\xba\xd0;\xbb\x04\xdd\xa4\x8d\xe9'}}]}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x80000000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) unshare(0x24020400) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005fb000/0x400000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000865000/0x1000)=nil) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x25, &(0x7f00000000c0)=@string={0x25, 0x3, "c81c4ec327931c913b6171b4252fc0ce5ef9faeb1bf40c4ef020d84b8edd3c86310610"}}]}) 1m30.355725371s ago: executing program 0 (id=1876): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000003008", @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) close(r0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000000040)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x5f}, {0x0}], 0x2, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001480)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/217, 0xd9}], 0x4, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0xb77, 0x2, 0x5, 0x6, "2661b9", 0x4, [0x3ff]}}) 1m30.355529591s ago: executing program 0 (id=1877): r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf2270ff9b1ab9ad62a3f9629a01bea8af7e7a8059edf4894205de26e8e40c9e3e1a38e2bb935d9f0b02554ef87f279cb4c0088da647893e8352d129d3be2341e296c634545e71c99bda36e85f56511a2f2494ede3529522b7f69b0b957b263e5ef54ef15e361832"], 0x40}, 0x1, 0x0, 0x0, 0x24000844}, 0x20008018) 1m29.532336637s ago: executing program 1 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0x2, 0xa, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8000000000000) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xd2301, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, 0x0, &(0x7f0000000100)) mlock2(&(0x7f0000058000/0x3000)=nil, 0x3000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r5, &(0x7f0000000380)={0x50000000}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0xfa, 0x40, 0xc, 0xfd, 0x5, 0x1000, 0xffff, 0xb, 0x1, 0xffffffff, 0xffffffffffffffc, 0x9, 0x1, 0x20000000000fc, 0x2, 0x4], 0x8080000}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f00000003c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x35) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in, @in6=@private2}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m27.931706469s ago: executing program 2 (id=1880): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x4000000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1m27.87224748s ago: executing program 0 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x4, 0xff, 0x1, 0x4, '\x00', 0x0, 0x100000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000000000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xa2, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x2, 0x4}]}}) 1m26.400971428s ago: executing program 1 (id=1882): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f00000000c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat2(r0, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18) 1m24.502479659s ago: executing program 1 (id=1884): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="bc", 0xffffffc3, 0x8841, 0x0, 0xffffffffffffff99) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080)=0x14, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x2, 0x6, @local}, 0x6b) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) 1m12.296044322s ago: executing program 34 (id=1881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x4, 0xff, 0x1, 0x4, '\x00', 0x0, 0x100000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000000000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0xa2, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x2, 0x4}]}}) 1m12.027190251s ago: executing program 35 (id=1880): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x4000000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1m8.32212411s ago: executing program 36 (id=1884): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000340)="bc", 0xffffffc3, 0x8841, 0x0, 0xffffffffffffff99) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080)=0x14, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r7, 0x2, 0x6, @local}, 0x6b) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x9) 1m2.275708865s ago: executing program 5 (id=1891): r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x200, 0x1a1800) syz_clone(0x6800c000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000480)=""/10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xc, 0x0, 0x2000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x3, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x1fffffd], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x91a, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x3, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 47.567215999s ago: executing program 5 (id=1892): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0xc}, 0x0) r0 = syz_io_uring_setup(0xf5c, &(0x7f0000000000)={0x0, 0x93aa, 0x1, 0x0, 0x1b1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x10e8, &(0x7f00000001c0)={0x0, 0x2456, 0x808, 0x0, 0x20080aea, 0x0, r0}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 46.019002038s ago: executing program 5 (id=1893): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0xa}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000050) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000740)={0x0}) 42.833877131s ago: executing program 5 (id=1894): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x78) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4601ff1f02060000000000000003000600000000809f01000038000000c502000000040000040020001b00"], 0xa58) (async) syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f0000000000)='\x00', 0x210000, &(0x7f0000000100)={@align=0x8a, {0x9, 0x4, 0x9, 0xfffffffffffffffc}}, 0x1, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x1}, 0x5, &(0x7f00000006c0)=[{0x2, 0x3, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)="38812a1ca63c85cc954357cc5b20ba225edc2cda60910d21b77e543cafa4f095a958d7d2a75d4f4ea508079e36e8822ba6b23983118f7976bbc7a007f0478930c6026f3ea2f4a169a862a521335be6b4c396ad9ec46938814dfb17baf32555a5922ae47323e4bdf33ef9b36728723031d96a34335f3309aff37e1ec46f1854c4937d0b8283fbf8dccccdaa81cb2a205a4ad88b169a561e37a2a0f882e21cdb18a9706cf825c1daffc0897a8d307dfb17dbcc", 0xb2, 0x30}, {0x1, 0x9, &(0x7f00000002c0)='\x00', &(0x7f0000000340)="414a6b64d2b90439974ead7fbcd27fd4e4a4edca2d5f48a052f6d99e76110057388e181e78e3bc6383a6bfe69b0028687478fca1c9474873ec3b2260dc80cbbe3d2abd39563918a6f7166e1d9deb8cf21c727f603e823a74c3c5ae2d35110f3eab4de16679bcd98c9b3ed734cda3cb93eed2be92b1fa9b5d39be5c6d9c614be2ea05b16497e2050b9e19e02c4a1394046ea7c58df0beb5f0ec88bbb70f955c33f94002e29070fd443c59098ed92d596688aff9b283f4093763c6176a5a", 0xbd, 0x10}, {0x1, 0x7, &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)="2ceb8ddfe12774100153d19ae46b0bab6d61e4d6b4bde46e1bb33dfb5d4b2dd96a01f76bb096f14837e4ce2c2e58d3a98bd8a6fe3ce8171dc8b4c36a8a1c1135efc4f8f603f94cd12c16c3761a83b15cfc7b3efc6c7ac9376f408b97f2842364c04246b3f8141ed59929786b835ce15a59878e5e2112e7", 0x77, 0x22}, {0xdd587fdf518c416f, 0x10, &(0x7f00000004c0)='security.capability\x00', &(0x7f0000000500)="d46e227d1cdb44b11f5da657bcb3e4d32d6c52d191d30f9d02e7d5d2588f8ff396a2c40b35ff175ceabd62ec2f00982925a06a09953d8cc9368768d0df2a48c57320adabe113cd18621c491cb714b24e7db2878005a69c142bb1ec297bff6e904e309a0520afe99c4a29fad48299499a599ebfcbb56108f2046d8b8b0f6406124f32785de1ae248c7fecdd4883a1cdb29f5e300013f30eba27e1c92c0ef137aec5749f099bda62a0e3f52452e7d74c4af2c8ecfd4f6b2409bf6c1315a48191150ce73b56490ed0821a94a3f0", 0xcc, 0x28}, {0x2, 0x0, &(0x7f0000000600)='security.capability\x00', &(0x7f0000000640)="b4a15fd71e131874e10a860e4006c88eefdbbb3b5761202005dad66b3833604eb6ca42f2774bb1c6f2829c721eae6f9602cd6b1d6fd11e50966fa6aff442fdf2a5500e351579cf849de8fe3bcc078c9460ea0d7f223b3abdc63d2dab6c2a56637bd982b08c54fbe7d472f4c2fb9cc725b1a3e81fa4d87b45982e585b626194", 0x7f, 0x2}]}) close(r1) (async) socketpair(0xf, 0xa, 0x8, &(0x7f0000000300)) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 39.286736855s ago: executing program 5 (id=1895): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000000880)={0x14, &(0x7f0000000640)={0x0, 0x11, 0xfb, {0xfb, 0x2, "122d422b07c542a4c915924bdc12cf82f58631d67c75c1fb06ec48e06dec0f9e99109be8c6b0ce0c67e438fc7f88ca960d5ab02d08a655c2407a79704bfc679b864ef5883350a1363be4b1bbb88d4dc9e935310abd210bf3f4c1184ab9ea51d8baa901c13ad8827fef7241ddf3e6737411f44276149eb3d75481d5a63fed1edd8a18c9676151b79f0d69dcad80e5099e69415852da9c57ff5040e17cf947d025e08be56c704efba6b5cd4c5d920c6fc98aaaa62b322e0b76f2fba09c111fe0ea9af3f1eaf4774b89ff2caff1961775ae4bffbb71bf9c6bc7076c83076088c40b26bce9345966db74e10778f95f149f5e264ba7cd8e4ec2db04"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000008c0)={0x40, 0x8, 0x53, "c00496752ab8c831cc95a454d1e7a1f9e5b4aeda983b32332101fbe8e62bf24b80e40a3d97c3b5602216060ec592334ed17034b84552aef11bcc9844eab622352202665ac5eaefea7f99fd06d7d51f3051030b"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x24}, &(0x7f00000009c0)={0x20, 0x81, 0x2, "3990"}, &(0x7f0000000a00)={0x20, 0x82, 0x2, '\fk'}, &(0x7f0000000a40)={0x20, 0x83, 0x2, "a980"}, &(0x7f0000000b40)={0x20, 0x84, 0x1, "93"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "6a983b"}}) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x10, 0xba, {0xba, 0xa, "94c96735a1c2bbbaefb5189d63dae6bcc6924e3e2ed249a205e13aef40e3d665c4a8ee1f617a1494c0ec329922334433b3a9c614057154cf7f4ee3b259601f1ab81d78ce46977b661a1ceedb6777d55e39b21e2e7016d277c3a481c2f0e832f692fa039c21a4112e5f10a982285f3a520565d6f96b1f110a2ed91af5aaa48ccc72c1ce4c7412db80a59aeea18dde112c1e8c6799d79b0a1546ac024b858526eb2405039f771d2df829a5c439505540b82a4e15d4f1acedaf"}}, &(0x7f0000000180)={0x0, 0x3, 0x42, @string={0x42, 0x3, "f1ee2875a7bbb1b669f32964a0f5f765ac65a0993a7e964a7e6dec7a9141d317a2e7e0ff05587d6c4e7361d68b48e16e33e96e6e91dfcb8cb1b9af679fb13c2e"}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x0, 0x12, 0x86, "7bab8a0e999168ae36127d09b8d0c300314828a59e524712572fac766350a527bcf55cb70cef258b04db104df67ff14fcc85ed36b3c11db410e734ef997f16ebb761c3d4d512454b4447e2af52a33a3d397d18937a4f2eba18fddb3e860332800d17d04f09a36e72aaf5b4f5e9baf9990cd832bf47f7d5fc196e95ca73a307411deb69e47491"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xee}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000400)={0x20, 0x81, 0x3, "18ae39"}, &(0x7f0000000440)={0x20, 0x82, 0x2, "9676"}, &(0x7f0000000480)={0x20, 0x83, 0x2, "7df5"}, &(0x7f00000004c0)={0x20, 0x84, 0x1, "f7"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "2563a0"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 29.224013629s ago: executing program 5 (id=1896): socket$pptp(0x18, 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) close(0x3) userfaultfd(0x801) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x200, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 21) 0s ago: executing program 37 (id=1896): socket$pptp(0x18, 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) close(0x3) userfaultfd(0x801) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) fsopen(&(0x7f0000000000)='proc\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x200, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x3, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 21) kernel console output (not intermixed with test programs): to get BOS descriptor or descriptor too short [ 335.280472][ T64] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 335.289572][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.297585][ T64] usb 6-1: Product: syz [ 335.301804][ T64] usb 6-1: Manufacturer: syz [ 335.306429][ T64] usb 6-1: SerialNumber: syz [ 335.527622][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.536340][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.547644][ T64] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 335.555471][ T318] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 335.562968][ T318] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 335.571220][ T318] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 335.579057][ T318] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 335.588563][ T64] usb 6-1: USB disconnect, device number 97 [ 335.595229][ T318] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 335.607522][ T318] plantronics 0003:047F:FFFF.004B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 335.623207][ T448] udevd[448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.756933][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1687'. [ 335.787319][ T6540] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 335.794718][ T6540] rust_binder: Write failure EINVAL in pid:1034 [ 335.820513][ T3139] usb 3-1: USB disconnect, device number 21 [ 335.894661][ T6545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=6545 comm=syz.0.1694 [ 336.153372][ T6564] FAULT_INJECTION: forcing a failure. [ 336.153372][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.166485][ T6564] CPU: 1 UID: 0 PID: 6564 Comm: syz.1.1702 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 336.166518][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.166533][ T6564] Call Trace: [ 336.166542][ T6564] [ 336.166554][ T6564] __dump_stack+0x21/0x30 [ 336.166581][ T6564] dump_stack_lvl+0x140/0x1c0 [ 336.166604][ T6564] ? __cfi_dump_stack_lvl+0x10/0x10 [ 336.166627][ T6564] dump_stack+0x19/0x20 [ 336.166649][ T6564] should_fail_ex+0x3d7/0x530 [ 336.166665][ T6564] should_fail+0xf/0x20 [ 336.166683][ T6564] should_fail_usercopy+0x1e/0x30 [ 336.166699][ T6564] _copy_to_iter+0x3b8/0x1510 [ 336.166718][ T6564] ? __cfi__copy_to_iter+0x10/0x10 [ 336.166735][ T6564] ? __check_object_size+0x527/0x830 [ 336.166751][ T6564] ? __cfi___check_object_size+0x10/0x10 [ 336.166767][ T6564] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 336.166792][ T6564] __skb_datagram_iter+0x103/0x930 [ 336.166814][ T6564] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 336.166838][ T6564] skb_copy_datagram_iter+0x44/0x160 [ 336.166861][ T6564] netlink_recvmsg+0x2d4/0xe60 [ 336.166951][ T6564] ? __cfi_netlink_recvmsg+0x10/0x10 [ 336.166968][ T6564] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 336.167032][ T6564] ? security_socket_recvmsg+0x44/0x130 [ 336.167053][ T6564] ? __cfi_netlink_recvmsg+0x10/0x10 [ 336.167068][ T6564] sock_recvmsg+0x18c/0x1e0 [ 336.167087][ T6564] ____sys_recvmsg+0x1e7/0x4a0 [ 336.167103][ T6564] ? __sys_recvmsg_sock+0x60/0x60 [ 336.167120][ T6564] ? import_iovec+0x80/0xb0 [ 336.167139][ T6564] ___sys_recvmsg+0x216/0x590 [ 336.167154][ T6564] ? __sys_recvmsg+0x290/0x290 [ 336.167169][ T6564] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 336.167184][ T6564] ? selinux_file_permission+0x318/0xb60 [ 336.167210][ T6564] ? __fget_files+0x2c5/0x340 [ 336.167229][ T6564] do_recvmmsg+0x380/0x830 [ 336.167245][ T6564] ? __sys_recvmmsg+0x2a0/0x2a0 [ 336.167260][ T6564] ? __cfi_vfs_write+0x10/0x10 [ 336.167278][ T6564] ? fput+0x1a4/0x240 [ 336.167299][ T6564] __x64_sys_recvmmsg+0x199/0x250 [ 336.167315][ T6564] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 336.167331][ T6564] ? __kasan_check_read+0x15/0x20 [ 336.167347][ T6564] x64_sys_call+0x292c/0x2ee0 [ 336.167362][ T6564] do_syscall_64+0x57/0xf0 [ 336.167378][ T6564] ? clear_bhb_loop+0x50/0xa0 [ 336.167397][ T6564] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 336.167415][ T6564] RIP: 0033:0x7fb74599ce59 [ 336.167429][ T6564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.167442][ T6564] RSP: 002b:00007fb7443e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 336.167459][ T6564] RAX: ffffffffffffffda RBX: 00007fb745c15fa0 RCX: 00007fb74599ce59 [ 336.167471][ T6564] RDX: 0000000000000006 RSI: 0000200000000b80 RDI: 0000000000000003 [ 336.167482][ T6564] RBP: 00007fb7443e3090 R08: 0000000000000000 R09: 0000000000000000 [ 336.167492][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.167502][ T6564] R13: 00007fb745c16038 R14: 00007fb745c15fa0 R15: 00007ffe03027d98 [ 336.167516][ T6564] [ 336.229282][ T64] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 336.369197][ T3139] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 336.488405][ T6568] FAULT_INJECTION: forcing a failure. [ 336.488405][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 336.501106][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.2.1704 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 336.501140][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.501153][ T6568] Call Trace: [ 336.501161][ T6568] [ 336.501169][ T6568] __dump_stack+0x21/0x30 [ 336.501205][ T6568] dump_stack_lvl+0x140/0x1c0 [ 336.501241][ T6568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 336.501267][ T6568] dump_stack+0x19/0x20 [ 336.501288][ T6568] should_fail_ex+0x3d7/0x530 [ 336.501303][ T6568] should_failslab+0xac/0x100 [ 336.501361][ T6568] __kmalloc_node_noprof+0x6c/0x4f0 [ 336.501388][ T6568] ? __kvmalloc_node_noprof+0x128/0x300 [ 336.501409][ T6568] ? __kmalloc_node_noprof+0x255/0x4f0 [ 336.501433][ T6568] __kvmalloc_node_noprof+0x128/0x300 [ 336.501454][ T6568] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 336.501488][ T6568] ? __kvmalloc_node_noprof+0x173/0x300 [ 336.501503][ T6568] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 336.501529][ T6568] io_futex_cache_init+0x4e/0x1a0 [ 336.501547][ T6568] io_ring_ctx_alloc+0x776/0x1d60 [ 336.501564][ T6568] io_uring_create+0x2e0/0x13d0 [ 336.501580][ T6568] ? __kasan_check_write+0x18/0x20 [ 336.501597][ T6568] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 336.501618][ T6568] ? __kasan_check_write+0x18/0x20 [ 336.501634][ T6568] ? __x64_sys_io_uring_setup+0x80/0x80 [ 336.501657][ T6568] ? __kasan_check_read+0x15/0x20 [ 336.501672][ T6568] __x64_sys_io_uring_setup+0x5f/0x80 [ 336.501693][ T6568] x64_sys_call+0x22c0/0x2ee0 [ 336.501709][ T6568] do_syscall_64+0x57/0xf0 [ 336.501725][ T6568] ? clear_bhb_loop+0x50/0xa0 [ 336.501745][ T6568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 336.501764][ T6568] RIP: 0033:0x7f3ffc39ce59 [ 336.501777][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.501792][ T6568] RSP: 002b:00007f3ffd1e0ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 336.501810][ T6568] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f3ffc39ce59 [ 336.501822][ T6568] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 000000000000001c [ 336.501846][ T6568] RBP: 0000200000000800 R08: 0000200000001540 R09: 0000000000000000 [ 336.501858][ T6568] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 336.501869][ T6568] R13: 0000200000000890 R14: 00007f3ffd1e0fd8 R15: 0000000000000000 [ 336.501882][ T6568] [ 336.560887][ T64] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 336.619252][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 336.647649][ T64] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 336.680541][ T3139] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 336.729248][ T64] usb 1-1: config 1 interface 0 has no altsetting 0 [ 336.736336][ T3139] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 336.746114][ T64] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 336.771023][ T3139] usb 6-1: config 1 interface 0 has no altsetting 0 [ 336.779179][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.785723][ T3139] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 336.790613][ T64] usb 1-1: Product: syz [ 336.800945][ T3139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.809782][ T64] usb 1-1: Manufacturer: syz [ 336.821115][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.824565][ T64] usb 1-1: SerialNumber: syz [ 336.833752][ T31] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.877915][ T6554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.885177][ T6554] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.892400][ T3139] usb 6-1: Product: syz [ 336.896601][ T3139] usb 6-1: Manufacturer: syz [ 336.901347][ T3139] usb 6-1: SerialNumber: syz [ 336.906492][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 336.913538][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 336.922738][ T6562] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 336.930043][ T6562] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 336.937292][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.949409][ T31] usb 2-1: config 0 descriptor?? [ 337.113540][ T36] audit: type=1400 audit(1780059990.490:414): avc: denied { execute } for pid=6573 comm="syz.2.1706" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 337.157507][ T6577] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1707'. [ 337.339157][ T6586] FAULT_INJECTION: forcing a failure. [ 337.339157][ T6586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.352674][ T6586] CPU: 1 UID: 0 PID: 6586 Comm: syz.2.1710 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 337.352705][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.352718][ T6586] Call Trace: [ 337.352725][ T6586] [ 337.352733][ T6586] __dump_stack+0x21/0x30 [ 337.352772][ T6586] dump_stack_lvl+0x140/0x1c0 [ 337.352802][ T6586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 337.352832][ T6586] ? check_stack_object+0x81/0x150 [ 337.352859][ T6586] ? __virt_addr_valid+0x2a6/0x380 [ 337.352881][ T6586] dump_stack+0x19/0x20 [ 337.352902][ T6586] should_fail_ex+0x3d7/0x530 [ 337.352936][ T6586] should_fail+0xf/0x20 [ 337.352954][ T6586] should_fail_usercopy+0x1e/0x30 [ 337.352975][ T6586] _copy_from_user+0x20/0xa0 [ 337.353000][ T6586] csum_and_copy_from_iter_full+0x1f0/0x1c70 [ 337.353033][ T6586] ? kasan_save_alloc_info+0x40/0x50 [ 337.353077][ T6586] ? __cfi_csum_and_copy_from_iter_full+0x10/0x10 [ 337.353109][ T6586] ? __alloc_skb+0x144/0x370 [ 337.353134][ T6586] ? __build_skb_around+0x2a4/0x590 [ 337.353165][ T6586] ping_getfrag+0x79/0x260 [ 337.353189][ T6586] __ip6_append_data+0x2fa6/0x3d40 [ 337.353213][ T6586] ? __cfi_ping_getfrag+0x10/0x10 [ 337.353257][ T6586] ? __kasan_check_write+0x18/0x20 [ 337.353278][ T6586] ? ip6_setup_cork+0x13f0/0x13f0 [ 337.353309][ T6586] ? ip6_append_data+0x25e/0x380 [ 337.353329][ T6586] ip6_append_data+0x1b1/0x380 [ 337.353348][ T6586] ? __cfi_ping_getfrag+0x10/0x10 [ 337.353388][ T6586] ping_v6_sendmsg+0xc1e/0xfc0 [ 337.353419][ T6586] ? __cfi_ping_v6_sendmsg+0x10/0x10 [ 337.353476][ T6586] ? kstrtouint_from_user+0x117/0x170 [ 337.353493][ T6586] ? selinux_socket_sendmsg+0x281/0x380 [ 337.353528][ T6586] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 337.353558][ T6586] ? __kasan_check_write+0x18/0x20 [ 337.353579][ T6586] ? proc_fail_nth_write+0x184/0x220 [ 337.353624][ T6586] ? __fget_files+0x2c5/0x340 [ 337.353643][ T6586] ? inet_send_prepare+0x64/0x4e0 [ 337.353661][ T6586] ? __cfi_ping_v6_sendmsg+0x10/0x10 [ 337.353704][ T6586] inet_sendmsg+0x113/0x120 [ 337.353726][ T6586] ? __cfi_inet_sendmsg+0x10/0x10 [ 337.353764][ T6586] __sys_sendto+0x5ea/0x700 [ 337.353787][ T6586] ? __cfi___sys_sendto+0x10/0x10 [ 337.353811][ T6586] ? __kasan_check_write+0x18/0x20 [ 337.353847][ T6586] ? __cfi_ksys_write+0x10/0x10 [ 337.353868][ T6586] __x64_sys_sendto+0xe9/0x100 [ 337.353902][ T6586] x64_sys_call+0x2c2c/0x2ee0 [ 337.353918][ T6586] do_syscall_64+0x57/0xf0 [ 337.353934][ T6586] ? clear_bhb_loop+0x50/0xa0 [ 337.353956][ T6586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 337.353995][ T6586] RIP: 0033:0x7f3ffc39ce59 [ 337.354013][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.354030][ T6586] RSP: 002b:00007f3ffd1e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 337.354058][ T6586] RAX: ffffffffffffffda RBX: 00007f3ffc615fa0 RCX: 00007f3ffc39ce59 [ 337.354070][ T6586] RDX: 000000000000ffe9 RSI: 0000200000000040 RDI: 0000000000000004 [ 337.354081][ T6586] RBP: 00007f3ffd1e1090 R08: 0000000000000000 R09: 0000000000000000 [ 337.354091][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.354101][ T6586] R13: 00007f3ffc616038 R14: 00007f3ffc615fa0 R15: 00007fffacf5dbb8 [ 337.354129][ T6586] [ 337.682674][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.689610][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.696536][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.703665][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.710770][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.717681][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.724611][ T31] wacom 0003:056A:00CC.004C: unknown main item tag 0x0 [ 337.733709][ T31] wacom 0003:056A:00CC.004C: hidraw0: USB HID v1.01 Device [HID 056a:00cc] on usb-dummy_hcd.1-1/input0 [ 337.908013][ T321] usb 2-1: USB disconnect, device number 18 [ 337.941258][ T64] rtl8150 1-1:1.0: couldn't reset the device [ 337.947360][ T64] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 337.963465][ T64] usb 1-1: USB disconnect, device number 43 [ 338.030309][ T6599] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1715'. [ 338.085404][ T3139] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:88:5a:36:c8:8a [ 338.097576][ T3139] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 338.131846][ T6601] can0: slcan on ttyS3. [ 338.161451][ T6601] can0 (unregistered): slcan off ttyS3. [ 338.292549][ C1] usb 6-1: Rx status -71 [ 338.296887][ C1] usb 6-1: eth1: intr status -71 [ 338.304417][ T151] usb 6-1: device reset failed [ 338.312094][ T3139] usb 6-1: USB disconnect, device number 98 [ 338.719155][ T45] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 338.849165][ T64] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 338.869138][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 338.875839][ T45] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 338.884318][ T45] usb 1-1: config 0 has no interface number 0 [ 338.890598][ T45] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 338.901660][ T36] audit: type=1400 audit(1780059992.280:415): avc: denied { mounton } for pid=6649 comm="syz.5.1726" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.905349][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 338.945025][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.953189][ T45] usb 1-1: Product: syz [ 338.957390][ T45] usb 1-1: Manufacturer: syz [ 338.962085][ T45] usb 1-1: SerialNumber: syz [ 338.967752][ T45] usb 1-1: config 0 descriptor?? [ 338.973023][ T6637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.010166][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 339.017190][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.027510][ T64] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.042080][ T64] usb 3-1: New USB device found, idVendor=04b1, idProduct=3042, bcdDevice= 0.40 [ 339.051186][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.059263][ T64] usb 3-1: Product: syz [ 339.063446][ T64] usb 3-1: Manufacturer: syz [ 339.068050][ T64] usb 3-1: SerialNumber: syz [ 339.182143][ T6637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 339.249129][ T3139] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 339.275843][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.284510][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.293151][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.301783][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.313942][ T64] usb 3-1: MIDIStreaming interface descriptor not found [ 339.324725][ T64] usb 3-1: USB disconnect, device number 22 [ 339.336075][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 339.390012][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 339.400331][ T45] asix 1-1:0.188: probe with driver asix failed with error -32 [ 339.409631][ T3139] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 339.421048][ T3139] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 339.431076][ T3139] usb 6-1: config 1 interface 0 has no altsetting 0 [ 339.439177][ T3139] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 339.448276][ T3139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.456337][ T3139] usb 6-1: Product: syz [ 339.460545][ T3139] usb 6-1: Manufacturer: syz [ 339.465170][ T3139] usb 6-1: SerialNumber: syz [ 339.471735][ T6654] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 339.478971][ T6654] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 339.632150][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 339.835435][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=6681 comm=syz.2.1739 [ 339.886542][ T36] audit: type=1326 audit(1780059993.260:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 339.912664][ T36] audit: type=1326 audit(1780059993.260:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 339.933479][ T6692] FAULT_INJECTION: forcing a failure. [ 339.933479][ T6692] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.939328][ T36] audit: type=1326 audit(1780059993.260:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ffc35d68e code=0x7ffc0000 [ 339.952417][ T6692] CPU: 0 UID: 0 PID: 6692 Comm: syz.2.1743 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 339.952510][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.952545][ T6692] Call Trace: [ 339.952565][ T6692] [ 339.952587][ T6692] __dump_stack+0x21/0x30 [ 339.952730][ T6692] dump_stack_lvl+0x140/0x1c0 [ 339.952823][ T6692] ? __cfi_dump_stack_lvl+0x10/0x10 [ 339.952916][ T6692] dump_stack+0x19/0x20 [ 339.952994][ T6692] should_fail_ex+0x3d7/0x530 [ 339.953058][ T6692] should_fail_alloc_page+0xec/0x110 [ 339.953125][ T6692] __alloc_pages_noprof+0x1c0/0x7e0 [ 339.953219][ T6692] ? __asan_memcpy+0x5a/0x80 [ 339.953281][ T6692] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 339.953364][ T6692] ? __asan_memcpy+0x5a/0x80 [ 339.953428][ T6692] ? nla_put+0xf3/0x150 [ 339.953501][ T6692] ? rtnl_fill_link_af+0x3fa/0x470 [ 339.953655][ T6692] __folio_alloc_noprof+0x14/0x80 [ 339.953749][ T6692] folio_prealloc+0x46/0x220 [ 339.953855][ T6692] do_pte_missing+0x169c/0x4410 [ 339.953940][ T6692] ? pte_marker_clear+0x1b0/0x1b0 [ 339.954031][ T6692] ? __pte_offset_map+0x1b0/0x230 [ 339.954155][ T6692] ? pte_offset_map_rw_nolock+0xba/0x110 [ 339.954213][ T6692] handle_mm_fault+0x11b8/0x1bf0 [ 339.954290][ T6692] ? __cfi_handle_mm_fault+0x10/0x10 [ 339.954355][ T6692] ? find_vma+0xd3/0x120 [ 339.954419][ T6692] ? lock_mm_and_find_vma+0xb8/0x390 [ 339.954492][ T6692] do_user_addr_fault+0x4c9/0x11e0 [ 339.954564][ T6692] exc_page_fault+0x58/0xc0 [ 339.954640][ T6692] asm_exc_page_fault+0x2b/0x30 [ 339.954727][ T6692] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 339.954811][ T6692] Code: 75 f1 e9 d9 6a 03 00 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 339.954861][ T6692] RSP: 0018:ffffc9000fba74b8 EFLAGS: 00050202 [ 339.954913][ T6692] RAX: ffffffff82ae1f01 RBX: ffff88811ad46000 RCX: 0000000000000ba8 [ 339.954956][ T6692] RDX: 0000000000000000 RSI: ffff88811ad46000 RDI: 0000200000001d00 [ 339.954997][ T6692] RBP: ffffc9000fba7610 R08: ffff88811ad46ba7 R09: 1ffff110235a8d74 [ 339.955046][ T6692] R10: dffffc0000000000 R11: ffffed10235a8d75 R12: 0000200000001d00 [ 339.955088][ T6692] R13: 0000000000000000 R14: 0000000000000ba8 R15: ffffc9000fba7d48 [ 339.955133][ T6692] ? _copy_to_iter+0x361/0x1510 [ 339.955206][ T6692] ? _copy_to_iter+0x441/0x1510 [ 339.955269][ T6692] ? __cfi__copy_to_iter+0x10/0x10 [ 339.955332][ T6692] ? __check_object_size+0x527/0x830 [ 339.955429][ T6692] ? __cfi___check_object_size+0x10/0x10 [ 339.955524][ T6692] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 339.955617][ T6692] __skb_datagram_iter+0x103/0x930 [ 339.955702][ T6692] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 339.955794][ T6692] skb_copy_datagram_iter+0x44/0x160 [ 339.955879][ T6692] netlink_recvmsg+0x2d4/0xe60 [ 339.955944][ T6692] ? __cfi_netlink_recvmsg+0x10/0x10 [ 339.956010][ T6692] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 339.956086][ T6692] ? security_socket_recvmsg+0x44/0x130 [ 339.956162][ T6692] ? __cfi_netlink_recvmsg+0x10/0x10 [ 339.956217][ T6692] sock_recvmsg+0x18c/0x1e0 [ 339.956290][ T6692] ____sys_recvmsg+0x1e7/0x4a0 [ 339.956354][ T6692] ? __sys_recvmsg_sock+0x60/0x60 [ 339.956410][ T6692] ? import_iovec+0x80/0xb0 [ 339.956490][ T6692] ___sys_recvmsg+0x216/0x590 [ 339.956545][ T6692] ? __sys_recvmsg+0x290/0x290 [ 339.956608][ T6692] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 339.956654][ T6692] ? selinux_file_permission+0x318/0xb60 [ 339.956757][ T6692] ? __fget_files+0x2c5/0x340 [ 339.956859][ T6692] do_recvmmsg+0x380/0x830 [ 339.956934][ T6692] ? __sys_recvmmsg+0x2a0/0x2a0 [ 339.956995][ T6692] ? __cfi_vfs_write+0x10/0x10 [ 339.957066][ T6692] ? fput+0x1a4/0x240 [ 339.957139][ T6692] __x64_sys_recvmmsg+0x199/0x250 [ 339.957193][ T6692] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 339.957254][ T6692] ? __kasan_check_read+0x15/0x20 [ 339.957316][ T6692] x64_sys_call+0x292c/0x2ee0 [ 339.957369][ T6692] do_syscall_64+0x57/0xf0 [ 339.957431][ T6692] ? clear_bhb_loop+0x50/0xa0 [ 339.957502][ T6692] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 339.957573][ T6692] RIP: 0033:0x7f3ffc39ce59 [ 339.957623][ T6692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.957684][ T6692] RSP: 002b:00007f3ffd1e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 339.957747][ T6692] RAX: ffffffffffffffda RBX: 00007f3ffc615fa0 RCX: 00007f3ffc39ce59 [ 339.957791][ T6692] RDX: 0000000000000006 RSI: 0000200000000b80 RDI: 0000000000000003 [ 339.957826][ T6692] RBP: 00007f3ffd1e1090 R08: 0000000000000000 R09: 0000000000000000 [ 339.957874][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.957915][ T6692] R13: 00007f3ffc616038 R14: 00007f3ffc615fa0 R15: 00007fffacf5dbb8 [ 339.957965][ T6692] [ 340.019183][ T64] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 340.023340][ T36] audit: type=1326 audit(1780059993.260:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 340.189220][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 340.191707][ T36] audit: type=1326 audit(1780059993.260:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 340.201612][ T64] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 340.204164][ T36] audit: type=1326 audit(1780059993.260:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 340.208968][ T64] usb 2-1: config 0 has no interface number 0 [ 340.214139][ T36] audit: type=1326 audit(1780059993.260:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.2.1742" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3ffc39ce59 code=0x7ffc0000 [ 340.354657][ T3139] rtl8150 6-1:1.0: couldn't reset the device [ 340.355957][ T321] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 340.361479][ T3139] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 340.365649][ T64] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 340.379466][ T3139] usb 6-1: USB disconnect, device number 99 [ 340.397731][ T64] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 340.620942][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.628962][ T64] usb 2-1: Product: syz [ 340.633204][ T64] usb 2-1: Manufacturer: syz [ 340.637856][ T64] usb 2-1: SerialNumber: syz [ 340.643306][ T64] usb 2-1: config 0 descriptor?? [ 340.648683][ T6679] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.699156][ T321] usb 3-1: Using ep0 maxpacket: 16 [ 340.705499][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.715878][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.725634][ T321] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 340.734763][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.742816][ T321] usb 3-1: SerialNumber: syz [ 340.750967][ T321] usb 3-1: 0:2 : does not exist [ 340.857645][ T6679] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 341.065655][ T64] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 341.075908][ T64] asix 2-1:0.188: probe with driver asix failed with error -61 [ 341.109144][ T3139] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 341.152724][ T321] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 341.162561][ T321] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 341.172114][ T321] usb 3-1: USB disconnect, device number 23 [ 341.180476][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 341.260203][ T3139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.271216][ T3139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.281013][ T3139] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.293983][ T3139] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.303064][ T3139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.311928][ T3139] usb 6-1: config 0 descriptor?? [ 341.494004][ T321] usb 1-1: USB disconnect, device number 44 [ 341.665219][ T6709] overlayfs: missing 'lowerdir' [ 341.739743][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.748004][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.755551][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.762999][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.770698][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.779197][ T3139] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 341.786813][ T3139] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 341.799124][ T321] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 341.807473][ T3139] plantronics 0003:047F:FFFF.004D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 341.970276][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.981559][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.991717][ T321] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 342.001016][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.005135][ T6701] fuse: Bad value for 'fd' [ 342.012445][ T321] usb 1-1: config 0 descriptor?? [ 342.220767][ T6701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.229377][ T6701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.238794][ T45] usb 6-1: USB disconnect, device number 100 [ 342.420954][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.428045][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.435153][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.442323][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.449328][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.456344][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.463357][ T321] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 342.471199][ T321] cp2112 0003:10C4:EA90.004E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 342.620310][ T321] cp2112 0003:10C4:EA90.004E: error requesting version [ 342.627877][ T321] cp2112 0003:10C4:EA90.004E: probe with driver cp2112 failed with error -5 [ 342.760595][ T64] usb 2-1: USB disconnect, device number 19 [ 342.902439][ T6740] can0: slcan on ttyS3. [ 342.930266][ T6740] can0 (unregistered): slcan off ttyS3. [ 342.989180][ T321] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 343.109152][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 343.152749][ T321] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 343.162828][ T321] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 343.172802][ T321] usb 6-1: config 1 interface 0 has no altsetting 0 [ 343.184330][ T321] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 343.193446][ T321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.201513][ T321] usb 6-1: Product: syz [ 343.205677][ T321] usb 6-1: Manufacturer: syz [ 343.210324][ T321] usb 6-1: SerialNumber: syz [ 343.215973][ T6732] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.223272][ T6732] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.259139][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 343.265475][ T64] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.273722][ T64] usb 2-1: config 0 has no interface number 0 [ 343.279880][ T64] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 343.291381][ T64] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 343.300450][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.308446][ T64] usb 2-1: Product: syz [ 343.312650][ T64] usb 2-1: Manufacturer: syz [ 343.317288][ T64] usb 2-1: SerialNumber: syz [ 343.322714][ T64] usb 2-1: config 0 descriptor?? [ 343.328006][ T6734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 343.522937][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.531555][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.539282][ T6734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 343.551183][ T45] usb 1-1: USB disconnect, device number 45 [ 343.566485][ T6798] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1764'. [ 343.604176][ T6801] can0: slcan on ttyS3. [ 343.647823][ T6801] can0 (unregistered): slcan off ttyS3. [ 343.748787][ T64] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 343.759155][ T64] asix 2-1:0.188: probe with driver asix failed with error -32 [ 344.009153][ T45] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 344.062235][ T321] rtl8150 6-1:1.0: couldn't reset the device [ 344.068396][ T321] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 344.082595][ T321] usb 6-1: USB disconnect, device number 101 [ 344.159140][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 344.165592][ T45] usb 1-1: config 7 has an invalid descriptor of length 24, skipping remainder of the config [ 344.176035][ T45] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 228, changing to 11 [ 344.187376][ T45] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 34455, setting to 1024 [ 344.198834][ T45] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.211842][ T45] usb 1-1: config 7 interface 0 has no altsetting 0 [ 344.218552][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 344.228206][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.237723][ T6808] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 344.359036][ T6834] FAULT_INJECTION: forcing a failure. [ 344.359036][ T6834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.372416][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.2.1776 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 344.372451][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.372466][ T6834] Call Trace: [ 344.372474][ T6834] [ 344.372483][ T6834] __dump_stack+0x21/0x30 [ 344.372519][ T6834] dump_stack_lvl+0x140/0x1c0 [ 344.372550][ T6834] ? __cfi_dump_stack_lvl+0x10/0x10 [ 344.372582][ T6834] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 344.372616][ T6834] dump_stack+0x19/0x20 [ 344.372646][ T6834] should_fail_ex+0x3d7/0x530 [ 344.372668][ T6834] should_fail_alloc_page+0xec/0x110 [ 344.372696][ T6834] __alloc_pages_noprof+0x1c0/0x7e0 [ 344.372727][ T6834] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 344.372763][ T6834] ? folio_add_lru+0x116/0x400 [ 344.372892][ T6834] ? __cfi_folio_add_lru+0x10/0x10 [ 344.372919][ T6834] ? __kasan_check_read+0x15/0x20 [ 344.372941][ T6834] __folio_alloc_noprof+0x14/0x80 [ 344.372971][ T6834] folio_prealloc+0x46/0x220 [ 344.373000][ T6834] do_pte_missing+0x169c/0x4410 [ 344.373033][ T6834] ? cgroup_rstat_updated+0x141/0x810 [ 344.373090][ T6834] ? pte_marker_clear+0x1b0/0x1b0 [ 344.373119][ T6834] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 344.373145][ T6834] ? __pte_offset_map+0x1b0/0x230 [ 344.373180][ T6834] ? pte_offset_map_rw_nolock+0xba/0x110 [ 344.373202][ T6834] handle_mm_fault+0x11b8/0x1bf0 [ 344.373232][ T6834] ? __cfi_handle_mm_fault+0x10/0x10 [ 344.373258][ T6834] ? find_vma+0xd3/0x120 [ 344.373290][ T6834] ? lock_mm_and_find_vma+0xb8/0x390 [ 344.373318][ T6834] do_user_addr_fault+0x4c9/0x11e0 [ 344.373344][ T6834] exc_page_fault+0x58/0xc0 [ 344.373373][ T6834] asm_exc_page_fault+0x2b/0x30 [ 344.373398][ T6834] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 344.373432][ T6834] Code: 75 f1 e9 d9 6a 03 00 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 344.373452][ T6834] RSP: 0018:ffffc9000e74f4b8 EFLAGS: 00050202 [ 344.373474][ T6834] RAX: ffffffff82ae1f01 RBX: ffff888114b4e000 RCX: 00000000000008a8 [ 344.373491][ T6834] RDX: 0000000000000000 RSI: ffff888114b4e300 RDI: 0000200000002000 [ 344.373507][ T6834] RBP: ffffc9000e74f610 R08: ffff888114b4eba7 R09: 1ffff11022969d74 [ 344.373523][ T6834] R10: dffffc0000000000 R11: ffffed1022969d75 R12: 0000200000001d00 [ 344.373539][ T6834] R13: 0000000000000000 R14: 0000000000000ba8 R15: ffffc9000e74fd48 [ 344.373556][ T6834] ? _copy_to_iter+0x361/0x1510 [ 344.373584][ T6834] ? _copy_to_iter+0x441/0x1510 [ 344.373610][ T6834] ? __cfi__copy_to_iter+0x10/0x10 [ 344.373634][ T6834] ? __check_object_size+0x527/0x830 [ 344.373657][ T6834] ? __cfi___check_object_size+0x10/0x10 [ 344.373680][ T6834] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 344.373714][ T6834] __skb_datagram_iter+0x103/0x930 [ 344.373747][ T6834] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 344.373779][ T6834] skb_copy_datagram_iter+0x44/0x160 [ 344.373810][ T6834] netlink_recvmsg+0x2d4/0xe60 [ 344.373835][ T6834] ? __cfi_netlink_recvmsg+0x10/0x10 [ 344.373859][ T6834] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 344.373885][ T6834] ? security_socket_recvmsg+0x44/0x130 [ 344.373915][ T6834] ? __cfi_netlink_recvmsg+0x10/0x10 [ 344.373936][ T6834] sock_recvmsg+0x18c/0x1e0 [ 344.373964][ T6834] ____sys_recvmsg+0x1e7/0x4a0 [ 344.373988][ T6834] ? __sys_recvmsg_sock+0x60/0x60 [ 344.374012][ T6834] ? import_iovec+0x80/0xb0 [ 344.374039][ T6834] ___sys_recvmsg+0x216/0x590 [ 344.374062][ T6834] ? __sys_recvmsg+0x290/0x290 [ 344.374084][ T6834] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 344.374106][ T6834] ? selinux_file_permission+0x318/0xb60 [ 344.374142][ T6834] ? __fget_files+0x2c5/0x340 [ 344.374169][ T6834] do_recvmmsg+0x380/0x830 [ 344.374203][ T6834] ? __sys_recvmmsg+0x2a0/0x2a0 [ 344.374225][ T6834] ? __cfi_vfs_write+0x10/0x10 [ 344.374252][ T6834] ? fput+0x1a4/0x240 [ 344.374287][ T6834] __x64_sys_recvmmsg+0x199/0x250 [ 344.374311][ T6834] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 344.374333][ T6834] ? __kasan_check_read+0x15/0x20 [ 344.374357][ T6834] x64_sys_call+0x292c/0x2ee0 [ 344.374380][ T6834] do_syscall_64+0x57/0xf0 [ 344.374402][ T6834] ? clear_bhb_loop+0x50/0xa0 [ 344.374428][ T6834] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 344.374454][ T6834] RIP: 0033:0x7f3ffc39ce59 [ 344.374472][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.374492][ T6834] RSP: 002b:00007f3ffd1e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 344.374514][ T6834] RAX: ffffffffffffffda RBX: 00007f3ffc615fa0 RCX: 00007f3ffc39ce59 [ 344.374531][ T6834] RDX: 0000000000000006 RSI: 0000200000000b80 RDI: 0000000000000003 [ 344.374545][ T6834] RBP: 00007f3ffd1e1090 R08: 0000000000000000 R09: 0000000000000000 [ 344.374559][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.374573][ T6834] R13: 00007f3ffc616038 R14: 00007f3ffc615fa0 R15: 00007fffacf5dbb8 [ 344.374592][ T6834] [ 344.667881][ T45] usbhid 1-1:7.0: can't add hid device: -71 [ 344.868803][ T45] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 344.881770][ T45] usb 1-1: USB disconnect, device number 46 [ 344.916751][ T6844] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1779'. [ 345.019156][ T321] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 345.169949][ T321] usb 3-1: not running at top speed; connect to a high speed hub [ 345.178491][ T321] usb 3-1: config 3 has an invalid interface number: 230 but max is 0 [ 345.186806][ T321] usb 3-1: config 3 has no interface number 0 [ 345.192957][ T321] usb 3-1: config 3 interface 230 has no altsetting 0 [ 345.201378][ T321] usb 3-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 345.210567][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.218585][ T321] usb 3-1: Product: syz [ 345.225594][ T321] usb 3-1: Manufacturer: syz [ 345.230497][ T321] usb 3-1: SerialNumber: syz [ 345.232541][ T3139] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 345.390585][ T3139] usb 6-1: unable to get BOS descriptor or descriptor too short [ 345.399260][ T3139] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 345.412355][ T3139] usb 6-1: string descriptor 0 read error: -22 [ 345.418608][ T3139] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 345.427701][ T3139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.451800][ T321] usb 3-1: Found UVC 0.00 device syz (199e:8002) [ 345.458199][ T321] usb 3-1: No valid video chain found. [ 345.464969][ T321] usb 3-1: USB disconnect, device number 24 [ 345.559153][ T45] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 345.637984][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 345.638004][ T36] audit: type=1400 audit(1780059999.010:430): avc: denied { mount } for pid=6846 comm="syz.5.1780" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 345.710276][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 345.720375][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 345.730348][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 345.738513][ T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 345.747695][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.755761][ T45] usb 1-1: Product: syz [ 345.760041][ T45] usb 1-1: Manufacturer: syz [ 345.764668][ T45] usb 1-1: SerialNumber: syz [ 345.770370][ T6858] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 345.777620][ T6858] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 345.792793][ T551] usb 2-1: USB disconnect, device number 20 [ 345.992064][ T36] audit: type=1326 audit(1780059999.370:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.2.1787" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x0 [ 346.046642][ T36] audit: type=1400 audit(1780059999.420:432): avc: denied { setopt } for pid=6846 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.067187][ T3139] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 346.091431][ T3139] usb 6-1: USB disconnect, device number 102 [ 346.187939][ T6879] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 346.195696][ T6879] SELinux: failed to load policy [ 346.203860][ T6879] syzkaller0: entered promiscuous mode [ 346.209249][ T551] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 346.209430][ T6879] syzkaller0: entered allmulticast mode [ 346.280365][ T36] audit: type=1326 audit(1780059999.660:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.2.1792" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ffc39ce59 code=0x0 [ 346.360344][ T551] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 346.369047][ T551] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 346.377871][ T551] usb 2-1: config 33 has an invalid descriptor of length 172, skipping remainder of the config [ 346.388940][ T551] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 346.400058][ T551] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.409832][ T551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.417883][ T551] usb 2-1: Product: syz [ 346.422284][ T551] usb 2-1: Manufacturer: syz [ 346.442236][ T551] usb 2-1: SerialNumber: syz [ 346.637170][ T36] audit: type=1400 audit(1780060000.010:434): avc: denied { unmount } for pid=3534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 346.799208][ T45] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:ef:43:cb:35:af [ 346.813051][ T45] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 346.979130][ T3139] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 347.010144][ C0] usb 1-1: Rx status -71 [ 347.014653][ C0] usb 1-1: Rx status -71 [ 347.019144][ C0] usb 1-1: Rx status -71 [ 347.023598][ C0] usb 1-1: Rx status -71 [ 347.028031][ C0] usb 1-1: Rx status -71 [ 347.149908][ T3139] usb 6-1: Using ep0 maxpacket: 32 [ 347.167101][ T3139] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 347.189148][ T3139] usb 6-1: config 0 has no interface number 0 [ 347.195353][ T3139] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 347.211072][ T3139] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 347.229486][ T3139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.240851][ T3139] usb 6-1: Product: syz [ 347.249290][ T3139] usb 6-1: Manufacturer: syz [ 347.259289][ T3139] usb 6-1: SerialNumber: syz [ 347.274243][ T3139] usb 6-1: config 0 descriptor?? [ 347.289473][ T6887] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 347.502420][ T6887] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 347.659152][ T321] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 347.710465][ T3139] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 347.720716][ T3139] asix 6-1:0.188: probe with driver asix failed with error -32 [ 347.831953][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.843176][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.853592][ T321] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.867001][ T321] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.876434][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.889513][ T321] usb 3-1: config 0 descriptor?? [ 348.044949][ T151] usb 1-1: device reset failed [ 348.056568][ C0] usb 1-1: eth1: intr status -71 [ 348.057148][ T45] usb 1-1: USB disconnect, device number 47 [ 348.300704][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.308191][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.317955][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.325438][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.332977][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.340437][ T321] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 348.348179][ T321] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 348.366254][ T321] plantronics 0003:047F:FFFF.004F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 348.559977][ T45] usb 3-1: USB disconnect, device number 25 [ 348.618854][ T6926] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 348.629125][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'. [ 348.655243][ T6928] overlayfs: missing 'lowerdir' [ 348.687085][ T6930] can0: slcan on ttyS3. [ 348.729600][ T6930] can0 (unregistered): slcan off ttyS3. [ 348.813730][ T551] usb 2-1: 0:2 : does not exist [ 348.823432][ T551] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 348.837560][ T551] usb 2-1: USB disconnect, device number 21 [ 348.955564][ T6949] 9pnet_fd: Insufficient options for proto=fd [ 349.003478][ T6951] netlink: 'syz.0.1808': attribute type 34 has an invalid length. [ 349.249138][ T321] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 349.329143][ T551] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 349.379146][ T321] usb 1-1: device descriptor read/64, error -71 [ 349.480235][ T551] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 349.490356][ T551] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 349.500334][ T551] usb 3-1: config 1 interface 0 has no altsetting 0 [ 349.508487][ T551] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 349.517602][ T551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.525667][ T551] usb 3-1: Product: syz [ 349.529874][ T551] usb 3-1: Manufacturer: syz [ 349.534489][ T551] usb 3-1: SerialNumber: syz [ 349.540421][ T6955] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.547645][ T6955] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 349.629133][ T321] usb 1-1: device descriptor read/64, error -71 [ 349.695699][ T45] usb 6-1: USB disconnect, device number 103 [ 349.869135][ T321] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 349.989158][ T3139] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 349.999134][ T321] usb 1-1: device descriptor read/64, error -71 [ 350.029406][ T45] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 350.139142][ T3139] usb 2-1: Using ep0 maxpacket: 16 [ 350.145563][ T3139] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 350.156192][ T3139] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.166168][ T3139] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 350.175691][ T3139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.183849][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 350.188940][ T3139] usb 2-1: SerialNumber: syz [ 350.197212][ T3139] usb 2-1: cannot find UAC_HEADER [ 350.203251][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 350.212350][ T45] usb 6-1: config 1 interface 0 altsetting 248 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.224087][ T3139] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 350.234083][ T45] usb 6-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.247275][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 350.249204][ T321] usb 1-1: device descriptor read/64, error -71 [ 350.249438][ T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 350.260985][ T45] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 350.285645][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.293845][ T45] usb 6-1: Product: syz [ 350.298207][ T45] usb 6-1: Manufacturer: syz [ 350.304805][ T45] usb 6-1: SerialNumber: syz [ 350.317634][ T551] rtl8150 3-1:1.0: couldn't reset the device [ 350.323841][ T551] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 350.333478][ T551] usb 3-1: USB disconnect, device number 26 [ 350.379285][ T321] usb usb1-port1: attempt power cycle [ 350.402019][ T31] usb 2-1: USB disconnect, device number 22 [ 350.514431][ T45] usbhid 6-1:1.0: can't add hid device: -71 [ 350.520471][ T45] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 350.529459][ T45] usb 6-1: USB disconnect, device number 104 [ 350.719245][ T321] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 350.740299][ T321] usb 1-1: device descriptor read/8, error -71 [ 350.870411][ T321] usb 1-1: device descriptor read/8, error -71 [ 350.921363][ T6969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49937 sclass=netlink_route_socket pid=6969 comm=syz.1.1816 [ 351.109172][ T321] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 351.130459][ T321] usb 1-1: device descriptor read/8, error -71 [ 351.179140][ T45] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 351.209171][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 351.259205][ T9] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 351.267925][ T321] usb 1-1: device descriptor read/8, error -71 [ 351.329937][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 351.338610][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 4 [ 351.351044][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.360176][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.368198][ T45] usb 2-1: Product: 薧嶫抄ዓš槛‹ඃ暴⯋䶤孻컢⋓ᨉ㇡⮁쓓祥붅卢紛淋む怈ᾩ쐮뇜ꌆ鳩؊梉胷㜤᭭騦膻좱㣹௫巛珌썷謓ќ뮆䲟ᜁ䲋큨立읪䨦攔鵌⤿䆌ꭹ굩⟒曊ꔯ콮摅踨咪惑欎馲༄䲂鍣㠢緕퍎䚺ᕆ貵葨緪薒揕靪蹈阹霴 [ 351.389676][ T321] usb usb1-port1: unable to enumerate USB device [ 351.396849][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 351.408268][ T45] usb 2-1: Manufacturer: ␁ [ 351.413009][ T45] usb 2-1: SerialNumber: syz [ 351.420259][ T9] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 351.420604][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 351.433490][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 351.441402][ T31] usb 3-1: config 0 has no interface number 0 [ 351.448967][ T9] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 351.454052][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 351.463921][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.476136][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 351.489721][ T9] usb 6-1: config 0 descriptor?? [ 351.491167][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.503406][ T31] usb 3-1: Product: syz [ 351.507630][ T31] usb 3-1: Manufacturer: syz [ 351.512501][ T31] usb 3-1: SerialNumber: syz [ 351.518059][ T31] usb 3-1: config 0 descriptor?? [ 351.523519][ T6975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 351.625927][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 351.633031][ T45] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 351.639516][ T45] usb 2-1: unit 5 not found! [ 351.644224][ T45] usb 2-1: unit 1 not found! [ 351.654820][ T45] usb 2-1: USB disconnect, device number 23 [ 351.666924][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 351.708036][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.717476][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.726605][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.736060][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.738265][ T6975] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 351.952517][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 351.958045][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 351.959689][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 351.971677][ T31] asix 3-1:0.188: probe with driver asix failed with error -32 [ 351.976768][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 351.991062][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 351.997987][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.005122][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.012157][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.019121][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.026024][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.032949][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.040065][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.046976][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.053890][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.060836][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.067711][ T9] ortek 0003:1223:3F07.0050: unknown main item tag 0x0 [ 352.074640][ T9] ortek 0003:1223:3F07.0050: item fetching failed at offset 36/37 [ 352.082723][ T9] ortek 0003:1223:3F07.0050: probe with driver ortek failed with error -22 [ 352.152222][ T36] kauditd_printk_skb: 5830 callbacks suppressed [ 352.152242][ T36] audit: type=1400 audit(1780060005.530:435): avc: denied { write } for pid=6980 comm="syz.1.1822" name="file0" dev="tmpfs" ino=2152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 352.164847][ T6981] hub 7-0:1.0: USB hub found [ 352.185811][ T6981] hub 7-0:1.0: 1 port detected [ 352.195190][ T45] usb 6-1: USB disconnect, device number 105 [ 352.276343][ T6983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 352.439416][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 352.569151][ T551] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 352.590349][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 352.598730][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 352.609108][ T31] usb 2-1: config 220 has no interface number 2 [ 352.615484][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 352.628677][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 352.635490][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 352.642490][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 352.650980][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 352.660090][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.668102][ T31] usb 2-1: Product: syz [ 352.672306][ T31] usb 2-1: Manufacturer: syz [ 352.676919][ T31] usb 2-1: SerialNumber: syz [ 352.730267][ T551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.741288][ T551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.751080][ T551] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.764030][ T551] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.773114][ T551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.782126][ T551] usb 1-1: config 0 descriptor?? [ 352.885536][ T31] usb 2-1: selecting invalid altsetting 0 [ 352.891514][ T31] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 352.897876][ T31] usb 2-1: No valid video chain found. [ 352.906193][ T31] usb 2-1: USB disconnect, device number 24 [ 352.949132][ T9] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 353.099962][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 353.108606][ T9] usb 6-1: config 3 has an invalid interface number: 230 but max is 0 [ 353.116850][ T9] usb 6-1: config 3 has no interface number 0 [ 353.123004][ T9] usb 6-1: config 3 interface 230 has no altsetting 0 [ 353.131475][ T9] usb 6-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 353.140592][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.148603][ T9] usb 6-1: Product: syz [ 353.152830][ T9] usb 6-1: Manufacturer: syz [ 353.157450][ T9] usb 6-1: SerialNumber: syz [ 353.189559][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.198187][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.207707][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.215262][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.222732][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.230234][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.237682][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.245178][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.252632][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.260108][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.267537][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.275010][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.282450][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.289924][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.297362][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.304826][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.313210][ T551] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 353.320868][ T551] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 353.330159][ T551] plantronics 0003:047F:FFFF.0051: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 353.368264][ T9] usb 6-1: Found UVC 0.00 device syz (199e:8002) [ 353.374973][ T9] usb 6-1: No valid video chain found. [ 353.381472][ T9] usb 6-1: USB disconnect, device number 106 [ 353.421762][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1828'. [ 353.739152][ T551] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 353.886110][ T7013] syzkaller0: entered promiscuous mode [ 353.891700][ T7013] syzkaller0: entered allmulticast mode [ 353.893064][ T551] usb 2-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 353.908092][ T551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.916182][ T551] usb 2-1: Product: syz [ 353.920549][ T551] usb 2-1: Manufacturer: syz [ 353.925216][ T551] usb 2-1: SerialNumber: syz [ 353.983818][ T9] usb 3-1: USB disconnect, device number 27 [ 354.004545][ T36] audit: type=1400 audit(1780060007.380:436): avc: denied { read } for pid=7014 comm="syz.5.1833" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.147170][ T551] usb 2-1: USB disconnect, device number 25 [ 354.162933][ T532] udevd[532]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 354.231196][ T7030] overlay: Unknown parameter 'smackfsfloor' [ 354.379146][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 354.451374][ T36] audit: type=1400 audit(1780060007.830:437): avc: denied { lock } for pid=7033 comm="syz.5.1839" path="socket:[52416]" dev="sockfs" ino=52416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 354.479620][ T7034] 9pnet_fd: Insufficient options for proto=fd [ 354.509498][ T9] usb 3-1: device descriptor read/64, error -71 [ 354.601415][ T7044] bridge0: port 3(veth0_to_bridge) entered blocking state [ 354.608603][ T7044] bridge0: port 3(veth0_to_bridge) entered disabled state [ 354.615907][ T7044] veth0_to_bridge: entered allmulticast mode [ 354.622487][ T7044] veth0_to_bridge: entered promiscuous mode [ 354.628701][ T7044] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.641153][ T7044] bridge0: port 3(veth0_to_bridge) entered blocking state [ 354.648325][ T7044] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 354.779144][ T9] usb 3-1: device descriptor read/64, error -71 [ 354.969141][ T45] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 355.019142][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 355.120375][ T45] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 355.128805][ T45] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 355.137745][ T45] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 355.148075][ T45] usb 2-1: config 220 has no interface number 2 [ 355.154404][ T45] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 355.159247][ T9] usb 3-1: device descriptor read/64, error -71 [ 355.167722][ T45] usb 2-1: config 220 interface 0 has no altsetting 0 [ 355.180664][ T45] usb 2-1: config 220 interface 76 has no altsetting 0 [ 355.187557][ T45] usb 2-1: config 220 interface 1 has no altsetting 0 [ 355.195831][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 355.204937][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.213080][ T45] usb 2-1: Product: syz [ 355.217275][ T45] usb 2-1: Manufacturer: syz [ 355.222000][ T45] usb 2-1: SerialNumber: syz [ 355.409136][ T9] usb 3-1: device descriptor read/64, error -71 [ 355.429700][ T7046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 355.442589][ T45] usb 2-1: selecting invalid altsetting 0 [ 355.448940][ T45] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 355.455389][ T45] usb 2-1: No valid video chain found. [ 355.463731][ T45] usb 2-1: USB disconnect, device number 26 [ 355.519274][ T9] usb usb3-port1: attempt power cycle [ 355.699160][ T551] usb 1-1: reset high-speed USB device number 52 using dummy_hcd [ 355.849537][ T551] usb 1-1: device firmware changed [ 355.854907][ T31] usb 1-1: USB disconnect, device number 52 [ 355.869160][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 355.890328][ T9] usb 3-1: device descriptor read/8, error -71 [ 355.989260][ T31] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 356.003440][ T7051] can0: slcan on ttyS3. [ 356.020262][ T9] usb 3-1: device descriptor read/8, error -71 [ 356.050473][ T7051] can0 (unregistered): slcan off ttyS3. [ 356.140299][ T31] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.150403][ T31] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 356.160365][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 356.168653][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 356.177837][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.185879][ T31] usb 1-1: Product: syz [ 356.190089][ T31] usb 1-1: Manufacturer: syz [ 356.194709][ T31] usb 1-1: SerialNumber: syz [ 356.200339][ T7048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.207660][ T7048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 356.259166][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 356.280286][ T9] usb 3-1: device descriptor read/8, error -71 [ 356.369142][ T551] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 356.410260][ T9] usb 3-1: device descriptor read/8, error -71 [ 356.499146][ T551] usb 2-1: device descriptor read/64, error -71 [ 356.519255][ T9] usb usb3-port1: unable to enumerate USB device [ 356.739138][ T551] usb 2-1: device descriptor read/64, error -71 [ 356.979147][ T551] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 357.037013][ T31] rtl8150 1-1:1.0: couldn't reset the device [ 357.043161][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 357.054787][ T31] usb 1-1: USB disconnect, device number 53 [ 357.109193][ T551] usb 2-1: device descriptor read/64, error -71 [ 357.349202][ T551] usb 2-1: device descriptor read/64, error -71 [ 357.459275][ T551] usb usb2-port1: attempt power cycle [ 357.617835][ T36] audit: type=1400 audit(1780060010.990:438): avc: denied { nlmsg_write } for pid=7064 comm="syz.0.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 357.686092][ T7079] hub 7-0:1.0: USB hub found [ 357.690919][ T7079] hub 7-0:1.0: 1 port detected [ 357.799151][ T551] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 357.820193][ T551] usb 2-1: device descriptor read/8, error -71 [ 357.849137][ T45] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 357.929170][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 357.950213][ T551] usb 2-1: device descriptor read/8, error -71 [ 357.979171][ T45] usb 6-1: device descriptor read/64, error -71 [ 358.080273][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 358.088557][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 358.098902][ T9] usb 3-1: config 220 has no interface number 2 [ 358.105233][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 358.118469][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 358.125319][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 358.132258][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 358.140499][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 358.149591][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.157591][ T9] usb 3-1: Product: syz [ 358.161814][ T9] usb 3-1: Manufacturer: syz [ 358.166445][ T9] usb 3-1: SerialNumber: syz [ 358.199138][ T551] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 358.219188][ T45] usb 6-1: device descriptor read/64, error -71 [ 358.226524][ T551] usb 2-1: device descriptor read/8, error -71 [ 358.360284][ T551] usb 2-1: device descriptor read/8, error -71 [ 358.375782][ T9] usb 3-1: selecting invalid altsetting 0 [ 358.381739][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 358.388188][ T9] usb 3-1: No valid video chain found. [ 358.401285][ T9] usb 3-1: USB disconnect, device number 32 [ 358.459170][ T45] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 358.469260][ T551] usb usb2-port1: unable to enumerate USB device [ 358.589604][ T45] usb 6-1: device descriptor read/64, error -71 [ 358.689195][ T64] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 358.829163][ T45] usb 6-1: device descriptor read/64, error -71 [ 358.840427][ T64] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 358.850528][ T64] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 358.860511][ T64] usb 1-1: config 1 interface 0 has no altsetting 0 [ 358.868744][ T64] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 358.877878][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.885999][ T64] usb 1-1: Product: syz [ 358.890239][ T64] usb 1-1: Manufacturer: syz [ 358.894871][ T64] usb 1-1: SerialNumber: syz [ 358.901828][ T7085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.910603][ T7085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.939252][ T45] usb usb6-port1: attempt power cycle [ 359.161415][ T7094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 359.219140][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 359.234395][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'. [ 359.279161][ T45] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 359.300254][ T45] usb 6-1: device descriptor read/8, error -71 [ 359.369196][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 359.375335][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 359.383615][ T9] usb 3-1: config 0 has no interface number 1 [ 359.389808][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.400927][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 359.412785][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 359.424168][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 359.434403][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.441087][ T45] usb 6-1: device descriptor read/8, error -71 [ 359.447648][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 359.465391][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12336, setting to 1024 [ 359.476639][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 359.488447][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 359.497586][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.499248][ T31] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 359.505804][ T9] usb 3-1: Product: syz [ 359.517478][ T9] usb 3-1: Manufacturer: syz [ 359.522244][ T9] usb 3-1: SerialNumber: syz [ 359.527843][ T9] usb 3-1: config 0 descriptor?? [ 359.533262][ T7091] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 359.639182][ T31] usb 2-1: device descriptor read/64, error -71 [ 359.689159][ T45] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 359.710280][ T45] usb 6-1: device descriptor read/8, error -71 [ 359.741077][ T64] rtl8150 1-1:1.0: couldn't reset the device [ 359.747267][ T64] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 359.751305][ T551] usb 3-1: USB disconnect, device number 33 [ 359.761683][ T64] usb 1-1: USB disconnect, device number 54 [ 359.840414][ T45] usb 6-1: device descriptor read/8, error -71 [ 359.899188][ T31] usb 2-1: device descriptor read/64, error -71 [ 359.949251][ T45] usb usb6-port1: unable to enumerate USB device [ 360.139167][ T31] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 360.269174][ T31] usb 2-1: device descriptor read/64, error -71 [ 360.345710][ T7107] syzkaller0: entered promiscuous mode [ 360.351299][ T7107] syzkaller0: entered allmulticast mode [ 360.401449][ T7109] cgroup: Name too long [ 360.489128][ T45] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 360.509454][ T31] usb 2-1: device descriptor read/64, error -71 [ 360.624070][ T31] usb usb2-port1: attempt power cycle [ 360.639471][ T551] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 360.649936][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 360.658567][ T45] usb 1-1: config 3 has an invalid interface number: 230 but max is 0 [ 360.666869][ T45] usb 1-1: config 3 has no interface number 0 [ 360.673404][ T45] usb 1-1: config 3 interface 230 has no altsetting 0 [ 360.682065][ T45] usb 1-1: New USB device found, idVendor=199e, idProduct=8002, bcdDevice=bb.31 [ 360.691280][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.699823][ T45] usb 1-1: Product: syz [ 360.704218][ T45] usb 1-1: Manufacturer: syz [ 360.708992][ T45] usb 1-1: SerialNumber: syz [ 360.779145][ T551] usb 3-1: device descriptor read/64, error -71 [ 360.917717][ T45] usb 1-1: Found UVC 0.00 device syz (199e:8002) [ 360.932699][ T45] usb 1-1: No valid video chain found. [ 360.941565][ T45] usb 1-1: USB disconnect, device number 55 [ 360.975725][ T36] audit: type=1400 audit(1780060014.350:439): avc: denied { read } for pid=7116 comm="syz.5.1875" path="socket:[52959]" dev="sockfs" ino=52959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.979291][ T31] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 361.020220][ T31] usb 2-1: device descriptor read/8, error -71 [ 361.029289][ T551] usb 3-1: device descriptor read/64, error -71 [ 361.150313][ T31] usb 2-1: device descriptor read/8, error -71 [ 361.269159][ T551] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 361.389147][ T31] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 361.399122][ T551] usb 3-1: device descriptor read/64, error -71 [ 361.410276][ T31] usb 2-1: device descriptor read/8, error -71 [ 361.540368][ T31] usb 2-1: device descriptor read/8, error -71 [ 361.639164][ T551] usb 3-1: device descriptor read/64, error -71 [ 361.649253][ T31] usb usb2-port1: unable to enumerate USB device [ 361.679132][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 361.716305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.728385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.740545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.752566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.764690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.776678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.788799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.800794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.812903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.824945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.880550][ T551] usb usb3-port1: attempt power cycle [ 361.980097][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 361.999409][ T45] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 362.020094][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 362.058654][ T45] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 362.069140][ T64] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 362.089734][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.097754][ T45] usb 1-1: Product: syz [ 362.120351][ T45] usb 1-1: Manufacturer: syz [ 362.124978][ T45] usb 1-1: SerialNumber: syz [ 362.146273][ T7123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.153764][ T7123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.220913][ T64] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.231208][ T64] usb 6-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 362.240440][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.248456][ T64] usb 6-1: Product: syz [ 362.252935][ T64] usb 6-1: Manufacturer: syz [ 362.257562][ T64] usb 6-1: SerialNumber: syz [ 362.268752][ T64] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 362.276235][ T551] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 362.384968][ T551] usb 3-1: device descriptor read/8, error -71 [ 362.447162][ T36] audit: type=1400 audit(1780060015.820:440): avc: denied { connect } for pid=7128 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.646044][ T551] usb 3-1: device descriptor read/8, error -71 [ 363.653008][ T45] rtl8150 1-1:1.0: couldn't reset the device [ 363.672470][ T45] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 364.275404][ T45] usb 1-1: USB disconnect, device number 56 [ 366.691460][ T64] usb 6-1: USB disconnect, device number 111 [ 366.719111][ C0] net_ratelimit: 179459 callbacks suppressed [ 366.719135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.719167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.725459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.737431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.749558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.761322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.773410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.785205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.797202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.809183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.902357][ T7139] can0: slcan on ttyS3. [ 367.156472][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 371.729120][ C1] net_ratelimit: 200599 callbacks suppressed [ 371.729146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.729183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.735317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.747361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.759324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.771298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.783120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.795220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.807086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.819042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.112007][ T31] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 376.739073][ C0] net_ratelimit: 201239 callbacks suppressed [ 376.739098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.739135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.745372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.757233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.769281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.781259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.793179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.805060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.817134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.828934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 378.732019][ T31] usb 6-1: device descriptor read/64, error -110 [ 379.003811][ T31] usb 6-1: device descriptor read/64, error -32 [ 379.332807][ T31] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 381.749098][ C1] net_ratelimit: 192105 callbacks suppressed [ 381.749122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.749164][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.755316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.767426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.779403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.791346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.803265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.815422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.827139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.839270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.133679][ T31] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 384.631461][ T31] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 384.780207][ T31] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 384.792990][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 385.173165][ T31] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 386.689328][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.697415][ T31] usb 6-1: Product: syz [ 386.759073][ C0] net_ratelimit: 193557 callbacks suppressed [ 386.759098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.759128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.765373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.777372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.789341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.801258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.813452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.825368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.837407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.849230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 388.599771][ T31] usb 6-1: Manufacturer: syz [ 388.604540][ T31] usb 6-1: SerialNumber: syz [ 390.051366][ T31] usb 6-1: can't set config #1, error -71 [ 391.769082][ C1] net_ratelimit: 197659 callbacks suppressed [ 391.769106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.769125][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.775315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.787451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.799774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.811960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.823819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.836256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.848237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.860631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.022002][ T31] usb 6-1: USB disconnect, device number 114 [ 393.364800][ C0] sched: DL replenish lagged too much [ 396.779097][ C1] net_ratelimit: 189906 callbacks suppressed [ 396.779123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.779128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.779370][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.785312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.797479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.809316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.821379][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.833438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.845908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.857819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.789109][ C1] net_ratelimit: 174676 callbacks suppressed [ 401.789138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.789219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.795348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.807349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.819674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.831467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.843513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.855322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.867235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.879304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.799085][ C1] net_ratelimit: 152667 callbacks suppressed [ 406.799111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.799130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.799346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.805668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.817633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.829518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.841575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.853594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.865972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.878055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.809094][ C0] net_ratelimit: 150535 callbacks suppressed [ 411.809121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.809134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.809280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.816457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.833097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.849280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.864145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.882473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.897616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.910511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.253853][ T3139] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 416.819092][ C0] net_ratelimit: 135415 callbacks suppressed [ 416.819119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.819168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.826538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.844404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.858473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.875976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.891330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.906188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.920078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 416.934362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.189733][ T3139] usb 6-1: Using ep0 maxpacket: 32 [ 417.250772][ T3139] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 417.411312][ T3139] usb 6-1: config 0 has no interface number 0 [ 417.556474][ T3139] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 417.624921][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.163410][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.313928][ T3139] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 419.309183][ T7171] bridge_slave_0: entered allmulticast mode [ 419.891148][ T3139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.922940][ T3139] usb 6-1: Product: syz [ 419.927820][ T3139] usb 6-1: Manufacturer: syz [ 419.950349][ T3139] usb 6-1: SerialNumber: syz [ 421.829090][ C0] net_ratelimit: 132867 callbacks suppressed [ 421.829118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.829236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.836184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.850605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.865717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.880277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.892711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.905362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.919378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.932923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.372331][ T3139] usb 6-1: config 0 descriptor?? [ 423.386160][ T3139] usb 6-1: can't set config #0, error -71 [ 423.399939][ T7171] bridge_slave_0: entered promiscuous mode [ 423.424533][ T3139] usb 6-1: USB disconnect, device number 115 [ 423.565678][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.869939][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.923584][ T7171] bridge_slave_1: entered allmulticast mode [ 425.509762][ T7171] bridge_slave_1: entered promiscuous mode [ 426.839094][ C1] net_ratelimit: 144789 callbacks suppressed [ 426.839119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.839120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.839543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.846402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 426.860137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.875648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.890699][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.905855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.921831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 426.936677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.741948][ T7202] FAULT_INJECTION: forcing a failure. [ 427.741948][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 427.844429][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.5.1896 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 427.844478][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.844509][ T7202] Call Trace: [ 427.844518][ T7202] [ 427.844529][ T7202] __dump_stack+0x21/0x30 [ 427.844571][ T7202] dump_stack_lvl+0x140/0x1c0 [ 427.844605][ T7202] ? __cfi_dump_stack_lvl+0x10/0x10 [ 427.844638][ T7202] ? avc_has_perm_noaudit+0x28a/0x360 [ 427.844669][ T7202] dump_stack+0x19/0x20 [ 427.844701][ T7202] should_fail_ex+0x3d7/0x530 [ 427.844725][ T7202] should_failslab+0xac/0x100 [ 427.844756][ T7202] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 427.844783][ T7202] ? __d_alloc+0x42/0x8e0 [ 427.844805][ T7202] __d_alloc+0x42/0x8e0 [ 427.844826][ T7202] ? alloc_inode+0xdb/0x270 [ 427.844856][ T7202] d_alloc_pseudo+0x23/0xc0 [ 427.844878][ T7202] alloc_file_pseudo+0xde/0x1f0 [ 427.844909][ T7202] ? security_inode_init_security_anon+0x3e/0x110 [ 427.844940][ T7202] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 427.844971][ T7202] ? anon_inode_make_secure_inode+0xf5/0x150 [ 427.845106][ T7202] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 427.845141][ T7202] ? kasan_save_alloc_info+0x40/0x50 [ 427.845176][ T7202] ? __kasan_kmalloc+0x96/0xb0 [ 427.845214][ T7202] __anon_inode_getfile+0x12e/0x200 [ 427.845247][ T7202] anon_inode_create_getfile+0x3f/0x50 [ 427.845281][ T7202] io_uring_create+0xc6a/0x13d0 [ 427.845308][ T7202] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 427.845341][ T7202] ? __kasan_check_write+0x18/0x20 [ 427.845364][ T7202] ? __x64_sys_io_uring_setup+0x80/0x80 [ 427.845399][ T7202] ? __kasan_check_read+0x15/0x20 [ 427.845423][ T7202] __x64_sys_io_uring_setup+0x5f/0x80 [ 427.845459][ T7202] x64_sys_call+0x22c0/0x2ee0 [ 427.845482][ T7202] do_syscall_64+0x57/0xf0 [ 427.845508][ T7202] ? clear_bhb_loop+0x50/0xa0 [ 427.845537][ T7202] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 427.845564][ T7202] RIP: 0033:0x7f0d0539ce59 [ 427.845585][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.845605][ T7202] RSP: 002b:00007f0d0628cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 427.845631][ T7202] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f0d0539ce59 [ 427.845649][ T7202] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 000000000000001c [ 427.845666][ T7202] RBP: 0000200000000800 R08: 0000200000001540 R09: 0000000000000000 [ 427.845682][ T7202] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 427.845698][ T7202] R13: 0000200000000890 R14: 00007f0d0628cfd8 R15: 0000000000000000 [ 427.845718][ T7202] [ 431.849109][ C0] net_ratelimit: 131959 callbacks suppressed [ 431.849137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.849148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.849499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.856275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.870546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.884601][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.898789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.916125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 431.932143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.945848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.859445][ C1] net_ratelimit: 139558 callbacks suppressed [ 436.859478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.859630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.866692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.879434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.892629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.908662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.922843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.941287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 436.953898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 436.969231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.869081][ C0] net_ratelimit: 143363 callbacks suppressed [ 441.869107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.869152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.875950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 441.890120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.902998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.916503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.930610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.943237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.955544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 441.968849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.879105][ C1] net_ratelimit: 141535 callbacks suppressed [ 446.879134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.879180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.885921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.899248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.916352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.929382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.944157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 446.959518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.973445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 446.987432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.361777][ T7170] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 451.889059][ C0] net_ratelimit: 143885 callbacks suppressed [ 451.889086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.889133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.899493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.906343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.920096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.933717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.945470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.958805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.972075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 451.985819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.899136][ C1] net_ratelimit: 129988 callbacks suppressed [ 456.899163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.899227][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.905961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.920176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 456.936156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.948966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.962833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 456.976937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.990333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.004057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.909077][ C1] net_ratelimit: 141206 callbacks suppressed [ 461.909103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.909132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.918210][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.935316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.951501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 461.967388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.983196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.998683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.013796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.028344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 466.919041][ C1] net_ratelimit: 138418 callbacks suppressed [ 466.919066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.919115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.925741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.939636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.955203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.970850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 466.987494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.003900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.019402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 467.033736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.929049][ C1] net_ratelimit: 131654 callbacks suppressed [ 471.929077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.929112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.937309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.953444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.968219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.982535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 471.996709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.011449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.029254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.045763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.939057][ C0] net_ratelimit: 132053 callbacks suppressed [ 476.939084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.939202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.949337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.965521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.979081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 476.992334][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.006364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 477.023582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 477.039812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.055057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.949214][ C0] net_ratelimit: 114164 callbacks suppressed [ 481.949240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.949674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.960841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.977081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 481.995893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.013015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.028068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.046882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 482.065694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.082110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.959088][ C0] net_ratelimit: 139265 callbacks suppressed [ 486.959112][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.959150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.968930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.982136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 486.997232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.014284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.029307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.043172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.058989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.073194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.969051][ C1] net_ratelimit: 145879 callbacks suppressed [ 491.969078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.969088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.969339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.976465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.990801][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.003560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.016205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.030567][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 492.043830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.058314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.979484][ C1] net_ratelimit: 148179 callbacks suppressed [ 496.979511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.979698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 496.987043][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.999630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.013071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.025444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.038106][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.050350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.063638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.075810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.989048][ C1] net_ratelimit: 152818 callbacks suppressed [ 501.989072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.989097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.995896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.009497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.023947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.037104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 502.049386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 502.064624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.079531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.093039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.235851][ T37] INFO: task syz.0.1881:7135 blocked for more than 124 seconds. [ 503.309135][ T37] Not tainted syzkaller #0 [ 503.315673][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.401020][ T36] audit: type=1400 audit(1780060156.780:441): avc: denied { write } for pid=288 comm="syz-executor" path="pipe:[2861]" dev="pipefs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 503.563595][ T37] task:syz.0.1881 state:D stack:0 pid:7135 tgid:7133 ppid:299 flags:0x00004006 [ 503.617136][ T37] Call Trace: [ 503.824218][ T37] [ 503.839782][ T37] __schedule+0x14ce/0x2100 [ 503.845097][ T37] ? __sched_text_start+0x10/0x10 [ 503.965730][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 504.024177][ T37] ? _raw_spin_lock_bh+0x100/0x130 [ 504.035771][ T37] ? __kasan_check_write+0x18/0x20 [ 504.076198][ T37] ? llist_add_batch+0x10f/0x1f0 [ 504.189404][ T37] schedule+0xc5/0x240 [ 504.194028][ T37] schedule_timeout+0xc7/0x3b0 [ 504.335498][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 504.474482][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 504.490321][ T37] ? generic_exec_single+0x1fd/0x500 [ 504.496524][ T37] ? arch_do_signal_or_restart+0xbc/0x760 [ 504.574352][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 504.644618][ T37] wait_for_common+0x369/0x650 [ 504.659214][ T37] ? wait_for_completion+0x40/0x40 [ 504.665073][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 504.875058][ T37] wait_for_completion+0x1c/0x40 [ 504.891152][ T37] rcu_barrier+0x415/0x540 [ 504.896303][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 504.974391][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 505.001478][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 505.007997][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 505.113604][ T37] ? __kasan_check_write+0x18/0x20 [ 505.143173][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 505.245585][ T37] kvm_put_kvm+0xb04/0x12c0 [ 505.260783][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 505.267146][ T37] kvm_vm_release+0x47/0x70 [ 505.296191][ T37] __fput+0x1fb/0xa00 [ 505.354271][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 505.414765][ T37] ____fput+0x20/0x30 [ 505.472239][ T37] task_work_run+0x1e5/0x260 [ 505.477385][ T37] ? __cfi_task_work_run+0x10/0x10 [ 505.546414][ T37] get_signal+0x1302/0x14e0 [ 505.601830][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 505.660703][ T37] ? __fget_files+0x2c5/0x340 [ 505.667323][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 505.755363][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 505.772328][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 505.952991][ T37] do_syscall_64+0x63/0xf0 [ 505.958121][ T37] ? clear_bhb_loop+0x50/0xa0 [ 506.025626][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 506.080745][ T37] RIP: 0033:0x7f98d2b9ce59 [ 506.086646][ T37] RSP: 002b:00007f98d39c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.158075][ T37] RAX: fffffffffffffff2 RBX: 00007f98d2e16090 RCX: 00007f98d2b9ce59 [ 506.255886][ T37] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 506.289429][ T37] RBP: 00007f98d2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 506.334516][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.371887][ T37] R13: 00007f98d2e16128 R14: 00007f98d2e16090 R15: 00007ffc8775b878 [ 506.411891][ T37] [ 506.417088][ T37] INFO: task syz.2.1880:7139 blocked for more than 127 seconds. [ 506.462021][ T37] Not tainted syzkaller #0 [ 506.467486][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.512569][ T37] task:syz.2.1880 state:D stack:0 pid:7139 tgid:7138 ppid:300 flags:0x00004004 [ 506.542255][ T37] Call Trace: [ 506.546368][ T37] [ 506.560575][ T37] __schedule+0x14ce/0x2100 [ 506.565443][ T37] ? __sched_text_start+0x10/0x10 [ 506.601101][ T37] ? check_preempt_wakeup_fair+0x81e/0xb10 [ 506.608309][ T37] ? __kasan_check_write+0x18/0x20 [ 506.643088][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 506.671332][ T37] ? __kasan_check_write+0x18/0x20 [ 506.677944][ T37] ? trace_contention_begin+0xc0/0xc0 [ 506.702356][ T37] schedule+0xc5/0x240 [ 506.706919][ T37] schedule_preempt_disabled+0x14/0x30 [ 506.740316][ T37] __mutex_lock+0x960/0x1bc0 [ 506.746801][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 506.789572][ T37] ? __kasan_check_write+0x18/0x20 [ 506.796434][ T37] ? _raw_spin_lock+0x92/0x120 [ 506.831931][ T37] ? __kasan_check_write+0x18/0x20 [ 506.837809][ T37] ? wake_up_q+0x10f/0x1c0 [ 506.863314][ T37] ? __mutex_unlock_slowpath+0x4b7/0x780 [ 506.884594][ T37] ? mutex_unlock+0x240/0x240 [ 506.899990][ T37] ? slcan_close+0x82/0x150 [ 506.906485][ T37] ? __tty_hangup+0x585/0x810 [ 506.942766][ T37] ? tty_ioctl+0x7c9/0xec0 [ 506.947543][ T37] ? __se_sys_ioctl+0x132/0x1b0 [ 506.999035][ C0] net_ratelimit: 118413 callbacks suppressed [ 506.999061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.999078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.006129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.020045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.032956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.049290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.065455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.081730][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.096931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.111232][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 507.154942][ T37] __mutex_lock_slowpath+0xe/0x20 [ 507.209835][ T37] mutex_lock+0x113/0x1d0 [ 507.214456][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 507.225099][ T37] rcu_barrier+0x4d/0x540 [ 507.252577][ T37] netdev_run_todo+0x118/0xce0 [ 507.301124][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 507.307218][ T37] ? mutex_lock+0x97/0x1d0 [ 507.331272][ T37] ? __kasan_check_write+0x18/0x20 [ 507.336759][ T37] rtnl_unlock+0x12/0x20 [ 507.360584][ T37] unregister_netdev+0x166/0x1d0 [ 507.366039][ T37] ? __cfi_unregister_netdev+0x10/0x10 [ 507.392829][ T37] unregister_candev+0x19/0x30 [ 507.397966][ T37] slcan_close+0x82/0x150 [ 507.423022][ T37] ? __cfi_slcan_close+0x10/0x10 [ 507.428854][ T37] tty_ldisc_hangup+0x4dc/0x6e0 [ 507.453843][ T37] __tty_hangup+0x585/0x810 [ 507.472109][ T37] ? bpf_lsm_capable+0xd/0x20 [ 507.477078][ T37] tty_ioctl+0x7c9/0xec0 [ 507.510874][ T37] ? __cfi_tty_ioctl+0x10/0x10 [ 507.516063][ T37] __se_sys_ioctl+0x132/0x1b0 [ 507.542606][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 507.547821][ T37] x64_sys_call+0x1878/0x2ee0 [ 507.591856][ T37] do_syscall_64+0x57/0xf0 [ 507.596998][ T37] ? clear_bhb_loop+0x50/0xa0 [ 507.615026][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 507.642512][ T37] RIP: 0033:0x7f3ffc39ce59 [ 507.647384][ T37] RSP: 002b:00007f3ffd1e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.672225][ T37] RAX: ffffffffffffffda RBX: 00007f3ffc615fa0 RCX: 00007f3ffc39ce59 [ 507.700191][ T37] RDX: 0000000004000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 507.708512][ T37] RBP: 00007f3ffc432d6f R08: 0000000000000000 R09: 0000000000000000 [ 507.740301][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.772725][ T37] R13: 00007f3ffc616038 R14: 00007f3ffc615fa0 R15: 00007fffacf5dbb8 [ 507.802489][ T37] [ 507.806221][ T37] NMI backtrace for cpu 0 [ 507.806244][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 507.806274][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.806289][ T37] Call Trace: [ 507.806297][ T37] [ 507.806308][ T37] __dump_stack+0x21/0x30 [ 507.806346][ T37] dump_stack_lvl+0x140/0x1c0 [ 507.806384][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 507.806430][ T37] dump_stack+0x19/0x20 [ 507.806462][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 507.806487][ T37] ? rcu_read_unlock_special+0x14d/0x440 [ 507.806521][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 507.806544][ T37] ? sched_show_task+0x371/0x530 [ 507.806657][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 507.806691][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 507.806758][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 507.806786][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 507.806812][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 507.806845][ T37] watchdog+0xdad/0xf00 [ 507.806898][ T37] ? __kasan_check_write+0x18/0x20 [ 507.807067][ T37] ? __cfi_watchdog+0x10/0x10 [ 507.807119][ T37] ? __kasan_check_read+0x15/0x20 [ 507.807143][ T37] ? __kthread_parkme+0x137/0x180 [ 507.807166][ T37] ? schedule+0xc5/0x240 [ 507.807190][ T37] kthread+0x2c9/0x370 [ 507.807308][ T37] ? __cfi_watchdog+0x10/0x10 [ 507.807331][ T37] ? __cfi_kthread+0x10/0x10 [ 507.807357][ T37] ret_from_fork+0x67/0xa0 [ 507.807377][ T37] ? __cfi_kthread+0x10/0x10 [ 507.807404][ T37] ret_from_fork_asm+0x1a/0x30 [ 507.807451][ T37] [ 507.807463][ T37] Sending NMI from CPU 0 to CPUs 1: [ 508.150930][ C1] NMI backtrace for cpu 1 [ 508.150972][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 93eddc1838258aeaad15fa2c6edda141fca4db6a [ 508.151030][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.151042][ C1] RIP: 0010:__skb_get_hash_symmetric_net+0x13a/0x1e0 [ 508.151154][ C1] Code: 66 43 c7 44 2c 10 f8 f8 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 00 00 4b c7 44 2c 08 00 00 00 00 4b c7 44 2c 10 00 00 00 00 <65> 48 8b 0c 25 28 00 00 00 48 3b 8c 24 c0 00 00 00 75 14 48 8d 65 [ 508.151169][ C1] RSP: 0018:ffffc90000230220 EFLAGS: 00000286 [ 508.151186][ C1] RAX: 000000009b5111d4 RBX: ffffc90000230260 RCX: f8f8f8f8f8f8f8f8 [ 508.151200][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 508.151211][ C1] RBP: ffffc90000230338 R08: ffff888103663900 R09: 0000000000000003 [ 508.151299][ C1] R10: 0000000000000008 R11: 0000000000000100 R12: 1ffff92000046044 [ 508.151320][ C1] R13: dffffc0000000000 R14: ffff88813c5bfc80 R15: 0000000000000000 [ 508.151335][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 508.151351][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.151365][ C1] CR2: 00007fb912218a42 CR3: 000000010cf50000 CR4: 00000000003526b0 [ 508.151383][ C1] Call Trace: [ 508.151391][ C1] [ 508.151401][ C1] ? __cfi___skb_get_hash_symmetric_net+0x10/0x10 [ 508.151434][ C1] ? __dev_queue_xmit+0x267/0x3680 [ 508.151460][ C1] packet_rcv_fanout+0x268/0x4f0 [ 508.151603][ C1] ? __cfi_packet_rcv_fanout+0x10/0x10 [ 508.151622][ C1] __netif_receive_skb_core+0x2de0/0x3ab0 [ 508.151649][ C1] ? ret_from_fork+0x67/0xa0 [ 508.151671][ C1] ? qdisc_run_end+0x120/0x120 [ 508.151701][ C1] ? br_dev_queue_push_xmit+0x55c/0x700 [ 508.151720][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 508.151739][ C1] netif_receive_skb+0xe0/0x7b0 [ 508.151766][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 508.151791][ C1] ? br_flood+0x67e/0x730 [ 508.151811][ C1] br_pass_frame_up+0x126/0x1b0 [ 508.151833][ C1] br_handle_frame_finish+0x120c/0x17a0 [ 508.151855][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 508.151875][ C1] ? __kasan_check_write+0x18/0x20 [ 508.151894][ C1] ? sk_skb_reason_drop+0x9b/0x310 [ 508.151921][ C1] ? packet_rcv+0x180/0x1670 [ 508.151948][ C1] br_handle_frame+0x5a6/0xba0 [ 508.151968][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 508.151987][ C1] __netif_receive_skb_core+0xfae/0x3ab0 [ 508.152016][ C1] ? qdisc_run_end+0x120/0x120 [ 508.152041][ C1] ? sched_balance_update_blocked_averages+0x1360/0x1360 [ 508.152066][ C1] ? calc_wheel_index+0x13a/0x8f0 [ 508.152128][ C1] ? timer_update_keys+0xd0/0xd0 [ 508.152152][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 508.152173][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 508.152191][ C1] ? __kasan_check_write+0x18/0x20 [ 508.152209][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 508.152227][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 508.152245][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 508.152269][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 508.152603][ C1] process_backlog+0x3e5/0xad0 [ 508.152654][ C1] __napi_poll+0xd3/0x610 [ 508.152676][ C1] net_rx_action+0x5ea/0xd80 [ 508.152702][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 508.152724][ C1] ? sched_clock+0x44/0x60 [ 508.152751][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 508.152870][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 508.152895][ C1] handle_softirqs+0x1aa/0x630 [ 508.152938][ C1] __do_softirq+0xf/0x16 [ 508.152958][ C1] do_softirq+0xb8/0x110 [ 508.152975][ C1] [ 508.152982][ C1] [ 508.152988][ C1] ? __cfi_do_softirq+0x10/0x10 [ 508.153005][ C1] ? dst_destroy+0x37d/0x460 [ 508.153022][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 508.153041][ C1] __local_bh_enable_ip+0x74/0x80 [ 508.153060][ C1] rcu_do_batch+0x5d9/0xd40 [ 508.153214][ C1] ? rcu_core+0xd30/0xd30 [ 508.153246][ C1] ? __kasan_check_write+0x18/0x20 [ 508.153264][ C1] ? _raw_spin_lock+0x92/0x120 [ 508.153319][ C1] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 508.153339][ C1] ? __kasan_check_read+0x15/0x20 [ 508.153355][ C1] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 508.153374][ C1] rcu_nocb_cb_kthread+0x524/0xb30 [ 508.153394][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 508.153412][ C1] ? __kasan_check_write+0x18/0x20 [ 508.153429][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 508.153447][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 508.153465][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 508.153483][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 508.153503][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 508.153523][ C1] ? __kasan_check_read+0x15/0x20 [ 508.153539][ C1] ? __kthread_parkme+0x137/0x180 [ 508.153558][ C1] ? schedule+0xc5/0x240 [ 508.153585][ C1] kthread+0x2c9/0x370 [ 508.153605][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 508.153623][ C1] ? __cfi_kthread+0x10/0x10 [ 508.153642][ C1] ret_from_fork+0x67/0xa0 [ 508.153658][ C1] ? __cfi_kthread+0x10/0x10 [ 508.153678][ C1] ret_from_fork_asm+0x1a/0x30 [ 508.153698][ C1] [ 512.009063][ C1] net_ratelimit: 118980 callbacks suppressed [ 512.009090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.009116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.018964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:fe:29:cb:78:23, vlan:0) [ 512.032482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.048736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.063334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 512.082104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.097597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.112343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.126108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)