last executing test programs: 3m34.285565209s ago: executing program 0 (id=125): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x26, [0x9, 0x0, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x2, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc7, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x1, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x40000009, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x20000002, 0xffffeffe, 0x9, 0x200c, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200028, 0x8, 0x404, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x102, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x9, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x0, 0x100, 0xf, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c"], 0xac}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) 3m33.309552803s ago: executing program 0 (id=132): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a0103000000000000000001000000080002"], 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m32.354760726s ago: executing program 0 (id=141): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 3m32.343220936s ago: executing program 0 (id=142): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)=@ethtool_link_settings={0x4c, 0x6, 0x4, 0xc0, 0x6, 0x4, 0x1, 0x80, 0xba, 0xf, [0x3ff, 0x101, 0x2, 0x80, 0x1, 0x4, 0x3ff, 0xffffffff]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0xb, 0x6, 0x0, 0x1, 0x3, 0x5, 0x6}, {0x80000008, 0x6, 0x4, 0x2, 0x3, 0x40, 0x549}, {0x80000007, 0x3, 0x2, 0x7, 0x1, 0x77, 0x100}, {0x40000006, 0xbc, 0x6, 0x101, 0x6, 0x6c, 0x4}]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) write$eventfd(r5, &(0x7f00000001c0)=0x3, 0x36) r7 = socket(0x10, 0x803, 0x0) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r4, &(0x7f0000000440)=[{&(0x7f0000000200)="bfd6ee8a20ae43fa4631b9be3c8fd0c72e1a1fbaa6586e6c58f37d032107a867c10a75598f6060dddc34d2bf853c11745d51c338127cce4d8bc257bbf327d2a87c911f58959ba2887336639ba10fa5141a42d493572cd00dd18223402972ff2e5ebbe3cbc008e3cbfd9fdfee34b4c1f1feec0d63cbe74946f92e764ec1", 0x7d}, {&(0x7f0000000280)="c36c83103b4d65e0b8d997", 0xb}, {&(0x7f00000002c0)="7eecdd2c980bf6adf0be1f8ed92dbf30d050cf8be3bf16f50cd0c66b9dfb146af6fd02797f631174c8bd84d8a1609d55a800778b508352d5fff1f27de13291846ce7dd698bf9a25a945c6c53408ad99a3338c4dbf5c1da", 0x57}, {&(0x7f0000000380)="3a8164c4cfd187c6d928f77da2daebeefa43b553e26244bb3e726fab3b8ed0591058b6699cfcc7fdb95ee843238cfee18a5e74054ff3b512cae9767c53ced9455a7d1c4561c9b8ea81c06d170b97b2ae18b2fdd3a1aa2caa832c96d97870d71467f549f6c995e2e3f89fdc898d70f034efe167e0bf42d624b1e61edef4896ca115620a8711a84050b70971ea92527709999e5190432478d08b77c90b687b6ff28b4ca589ba513e919ae62b80ee9adad4b9", 0xb1}], 0x4, 0x3, 0x6, 0x0) write$selinux_create(r8, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r9, 0x80104592, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x69fe, "0f9d0027002020000000b80cf000"}) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x7}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x120, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r9, &(0x7f0000000480)=0x28, r10, &(0x7f0000000640)=0x6, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) 3m32.250913249s ago: executing program 0 (id=143): mlockall(0x3) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x40, 0x6, 0x9, 0x101, 0x151, 0x6, 0xefa}}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r2, 0x9, &(0x7f00000000c0)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d7ffffffd) mlockall(0x3) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000040)=@ethtool_channels={0x3c, 0x40, 0x6, 0x9, 0x101, 0x151, 0x6, 0xefa}}) (async) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) (async) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async) prlimit64(r2, 0x9, &(0x7f00000000c0)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async) brk(0x689d7ffffffd) (async) 3m32.108161192s ago: executing program 0 (id=144): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="00001400010000000000000000000a0000000000"], 0x14}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x5, 0x34, 0x0, 0x3}) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000457000/0x3000)=nil, &(0x7f00004ef000/0x3000)=nil, 0x3000, 0x5a3282c8b707a191}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000457000/0x3000)=nil, &(0x7f00004ef000/0x3000)=nil, 0x3000, 0x5a3282c8b707a191}) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r1}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r1}) 3m16.976852522s ago: executing program 32 (id=144): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="00001400010000000000000000000a0000000000"], 0x14}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x5, 0x34, 0x0, 0x3}) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000457000/0x3000)=nil, &(0x7f00004ef000/0x3000)=nil, 0x3000, 0x5a3282c8b707a191}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000457000/0x3000)=nil, &(0x7f00004ef000/0x3000)=nil, 0x3000, 0x5a3282c8b707a191}) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r1}) (async) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000000)={r1}) 56.533677963s ago: executing program 2 (id=1385): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="080086dd00052800040000"], 0xfdef) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x800) writev(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 56.510251334s ago: executing program 2 (id=1386): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x24, 0x0, 0xa, 0x179}, {0x6, 0xff, 0x0, 0x4}]}) 55.86550024s ago: executing program 4 (id=1391): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x8001) 55.800321891s ago: executing program 4 (id=1392): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 55.799072132s ago: executing program 4 (id=1393): r0 = syz_open_dev$loop(&(0x7f0000000200), 0xd, 0x26302) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x2, {0x0, 0x0, 0x0, 0xfffffffffffffa3f, 0x4000000000000ff9, 0x0, 0x0, 0x1a, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc48f7061a74df2cfc06e89f3d9e234b30c50997d3bef409ff2176ff7bfe55c54a5d83cd4a524bd3ffe70c7f40800b2f7b6aa54cc50a1fcaed1e831fa79a", "71354ac596b7889b1aad0dff0400000400", [0xb, 0xa]}}) 55.798925992s ago: executing program 4 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003b00)={0x0, 0x0, 0x0}, &(0x7f0000003b40)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x48, &(0x7f0000003b80)={[{@gid={'gid', 0x3d, r2}}]}) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x403, 0x100bf28, @loopback, 0xffffffff}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 55.735926493s ago: executing program 4 (id=1395): mount(0x0, 0x0, &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r1, 0x1}, 0x1c}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) creat(&(0x7f0000000000)='./mnt_trace/trace_pipe\x00', 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000207adea107f17540225900102030109021b0001050090893e0aad0101fd43efe20905050c400007c801"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) 55.665256215s ago: executing program 2 (id=1396): r0 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000600)="3903112a065bbdda9b32bbc33a6f3b4b9d", 0x11, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000000) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000680)=ANY=[], 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x39d4, 0x0, 0x1, 0x255, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xada1, 0x4000, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x200, 0x3, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4, 0x0, 0x28f, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa909, 0x8200, 0x1, 0x366}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x4, 0x0, 0x0}}, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r12, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000003c0)={0x6, &(0x7f0000000300)=[{0x6a9, 0x1, 0xb, 0x9}, {0x81, 0x1, 0x8, 0x9}, {0x9, 0x2, 0x13, 0xe636}, {0x9, 0x0, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x10}, {0xbd7, 0x3, 0x3, 0x3}]}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 55.373681191s ago: executing program 2 (id=1397): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 55.370907542s ago: executing program 1 (id=1400): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) timer_create(0x4, &(0x7f0000000140)={0x0, 0x41, 0xa, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10009, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) 55.349910432s ago: executing program 3 (id=1401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, 0x0, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) statx(r1, &(0x7f0000000540)='./file0\x00', 0x100, 0x201, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="00000000350283", 0x7}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='trylock '], 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 55.242924645s ago: executing program 3 (id=1402): futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00000022c0)='user\x00', &(0x7f0000002300)={'syz', 0x1}, &(0x7f0000002340)='\\\x00', 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000020301040000000000000000030000040800044000000020080005400000000008000100010000260800210340000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000280)="6a6844c4b989", 0x6) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000690015"], 0x18}], 0x1}, 0x8000) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="3bf025bd7000ffdbdfccb81004000500030004010000"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000040) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) setpgid(r7, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000000), 0xe8, 0x101082) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000000040)={0xfff, 0x1, 0x2, 0xfff, 0x6, 0xf4}) 54.455979033s ago: executing program 2 (id=1403): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[], 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = inotify_init1(0x800) r3 = fcntl$dupfd(r1, 0x0, r2) accept4$inet(r3, 0x0, 0x0, 0x80800) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) getsockname(r6, 0x0, &(0x7f00000002c0)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid}], [], 0x6b}}) r7 = socket$inet_icmp(0x2, 0x2, 0x1) fchdir(r7) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000080000000800392cdaab4a7322a46a53c138bdc3cd"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x240000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB='=\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r9, @ANYBLOB=',\x00']) close(r9) write$hidraw(r8, 0x0, 0x0) 54.453263944s ago: executing program 4 (id=1404): set_robust_list(&(0x7f00000003c0)={&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000040)}}, 0x6aa, &(0x7f0000000400)={&(0x7f00000001c0)={&(0x7f0000000180)}}}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x5, 0x63, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="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"], 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000040)}}, 0x6aa, &(0x7f0000000400)={&(0x7f00000001c0)={&(0x7f0000000180)}}}, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_usb_connect(0x5, 0x63, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="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"], 0x0) (async) 54.453003034s ago: executing program 1 (id=1405): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in=@dev={0xac, 0x14, 0x14, 0xe}, @in=@broadcast, 0x4e23, 0x591, 0x4e22, 0x2, 0x2, 0x80, 0x0, 0x5c}, {0x0, 0x1, 0x8aa0, 0x2, 0x0, 0x5, 0x1, 0x7}, {0x0, 0x3e77, 0x322, 0x6}, 0xd, 0x6e6bb1, 0x1, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x7f, 0x3c}, 0x2, @in6=@remote, 0x0, 0x1, 0x2, 0x1, 0x7, 0x1, 0x5}}, 0xe8) r2 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3) ioctl$BTRFS_IOC_DEFRAG(r2, 0x4c00, 0x3) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup(r5) read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0xfffffec1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 54.395370325s ago: executing program 3 (id=1406): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='syz_tun\x00'}) syz_usb_connect(0x3, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501"], 0x0) 54.338800316s ago: executing program 1 (id=1407): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket(0xa, 0x3, 0x3a) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010392ad23f40000102030109028d000301fcd007080b0002010620060904000000010120000924010a00451d00f90c240303060306017f0d00"], 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000001c0)={0x7, 'vlan1\x00', {0x4}, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000200)=@generic={0x0, 0x5, 0x1}) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10000}, 0xc) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) (async, rerun: 32) r5 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) (rerun: 32) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) (async) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\'*'}}], [], 0x6b}}) 54.18858695s ago: executing program 1 (id=1408): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17e, 0x9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x3, 0x9bd, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xa}}}, &(0x7f0000000200)=0x0) r3 = syz_ublk_setup_io_uring(0x5427, &(0x7f0000000280)={0x0, 0x11e2, 0x4000, 0x3, 0x23b}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x80111500, 0x0) r6 = syz_open_dev$ublk_chdev(&(0x7f0000000740), 0x0, 0x0) syz_ublk_setup_queues(r1, r2, &(0x7f00000003c0)={0x0, 0x9adf, 0x0, 0x0, 0x1bd, 0x0, r3}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6ef, 0x20000, 0x2, 0x1fa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x86d9, 0x1000, 0x0, 0x1b7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7cbf, 0x4, 0x1, 0x2b4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x75a8, 0x100, 0x3, 0x175, 0x0, r5}}], 0x4, &(0x7f0000001780)={0x2e, 0x55, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xfff4}, 0x0, 0x0, '\x00', {0x3, 0x2, 0x0, &(0x7f0000000780)=@buf_4k="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"}}, &(0x7f0000001800)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x8, 0x2, 0x4, 0xb, 0x44, "8cc5f229d09842dfe10000ffff00000400", 0x40fff, 0x88}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000001840)) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x28, 0x800, 0xfff9, 0x3ff, 0x1, 0x8000, 0x4, 0x1, 0x22, 0x4, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) 53.540055856s ago: executing program 3 (id=1409): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x74) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000980)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000003c40)=ANY=[@ANYBLOB="dc0300001a0001002abd7000fbdbdf250a00fc003a2a5e247b000000100003800c"], 0x3dc}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 53.492775267s ago: executing program 3 (id=1410): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000200)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}) (async, rerun: 32) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$key(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) (rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async, rerun: 32) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000300)=ANY=[@ANYBLOB='size=G']) 53.311669141s ago: executing program 3 (id=1411): r0 = socket(0xb, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffe}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9pr000,\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0x2f0f3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c00018008000100"], 0x68}}, 0xa040) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x3, 0x0, &(0x7f0000000040)) close_range(r1, r0, 0x3f00000000000000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x401) 50.944099728s ago: executing program 1 (id=1412): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xca, 0x0, 0x0) (async) setsockopt$inet6_buf(r2, 0x29, 0xca, 0x0, 0x0) ptrace(0x10, r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) wait4(r1, 0x0, 0x8, 0x0) (async) wait4(r1, 0x0, 0x8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) execveat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={[&(0x7f0000000080)='\x00']}, &(0x7f00000001c0)={[&(0x7f0000000100)='@!\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00']}, 0x100) ptrace$poke(0x1, r1, 0x0, 0x180000000000103) 50.00398878s ago: executing program 2 (id=1413): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x7242}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac1414bb000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a0ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000033000000fe80000000000000000000000000000e000000000000000000000000000000000000000000000000fcffffffffffffffffffffbfffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000096070000000000000000000000000002bc0000000000000000000000b0"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x149a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) socket$inet(0x2, 0x3, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 48.039596947s ago: executing program 1 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/self/make-it-fail\x00', 0x1, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000076001f0300000000000000000c00128008002880040001"], 0x6c}], 0x1}, 0x0) (async) write(r0, &(0x7f0000000440)='1', 0x1) 39.252326838s ago: executing program 33 (id=1404): set_robust_list(&(0x7f00000003c0)={&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000040)}}, 0x6aa, &(0x7f0000000400)={&(0x7f00000001c0)={&(0x7f0000000180)}}}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x5, 0x63, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="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"], 0x0) set_robust_list(&(0x7f00000003c0)={&(0x7f0000000140)={&(0x7f00000000c0)={&(0x7f0000000040)}}, 0x6aa, &(0x7f0000000400)={&(0x7f00000001c0)={&(0x7f0000000180)}}}, 0x18) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000313000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_usb_connect(0x5, 0x63, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8=r2, @ANYBLOB="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"], 0x0) (async) 12.659699936s ago: executing program 34 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/self/make-it-fail\x00', 0x1, 0x0) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000076001f0300000000000000000c00128008002880040001"], 0x6c}], 0x1}, 0x0) (async) write(r0, &(0x7f0000000440)='1', 0x1) 4.245986898s ago: executing program 35 (id=1413): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x7242}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000ac1414bb000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a0ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe00000010000000033000000fe80000000000000000000000000000e000000000000000000000000000000000000000000000000fcffffffffffffffffffffbfffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000096070000000000000000000000000002bc0000000000000000000000b0"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x149a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) socket$inet(0x2, 0x3, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 36 (id=1411): r0 = socket(0xb, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffe}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',version=9pr000,\x00']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', 0x0, 0x2f0f3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c00018008000100"], 0x68}}, 0xa040) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) ioctl$KVM_CAP_XEN_HVM(r3, 0x4068aea3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x3, 0x0, &(0x7f0000000040)) close_range(r1, r0, 0x3f00000000000000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x401) kernel console output (not intermixed with test programs): ct, device number 68 [ 154.880009][ T4023] syzkaller1: entered promiscuous mode [ 154.887865][ T4023] syzkaller1: entered allmulticast mode [ 154.896516][ T4030] netlink: 'syz.2.1057': attribute type 25 has an invalid length. [ 155.406350][ T4046] mmap: syz.3.1061 (4046): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 155.510005][ T423] usb 5-1: USB disconnect, device number 54 [ 155.546806][ T4051] netlink: 'syz.4.1063': attribute type 12 has an invalid length. [ 155.922053][ T45] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 156.012038][ T311] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 156.073043][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.084590][ T45] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.093700][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.101681][ T45] usb 5-1: Product: syz [ 156.105889][ T45] usb 5-1: Manufacturer: syz [ 156.110479][ T45] usb 5-1: SerialNumber: syz [ 156.115693][ T45] usb 5-1: config 0 descriptor?? [ 156.122705][ T45] CoreChips 5-1:0.0: probe with driver CoreChips failed with error -22 [ 156.163043][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 156.172876][ T311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.184055][ T311] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 156.193885][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.201875][ T311] usb 3-1: Product: syz [ 156.206059][ T311] usb 3-1: Manufacturer: syz [ 156.210723][ T311] usb 3-1: SerialNumber: syz [ 156.215944][ T311] usb 3-1: config 0 descriptor?? [ 156.221196][ T4087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.228456][ T4087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.228459][ T423] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 156.323234][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.337938][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.354872][ T712] usb 5-1: USB disconnect, device number 55 [ 156.372071][ T423] usb 2-1: device descriptor read/64, error -71 [ 156.436809][ T4087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.445272][ T4092] block device autoloading is deprecated and will be removed. [ 156.455850][ T4087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 156.464345][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.472895][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.612020][ T423] usb 2-1: device descriptor read/64, error -71 [ 156.852014][ T423] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 156.982001][ T423] usb 2-1: device descriptor read/64, error -71 [ 157.029280][ T4101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.038239][ T4101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.171993][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 157.222020][ T423] usb 2-1: device descriptor read/64, error -71 [ 157.301994][ T31] usb 5-1: device descriptor read/64, error -71 [ 157.332088][ T423] usb usb2-port1: attempt power cycle [ 157.542013][ T31] usb 5-1: device descriptor read/64, error -71 [ 157.672008][ T423] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 157.692987][ T423] usb 2-1: device descriptor read/8, error -71 [ 157.759580][ T4103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.768113][ T4103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.782482][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 157.823016][ T423] usb 2-1: device descriptor read/8, error -71 [ 157.942043][ T31] usb 5-1: device descriptor read/64, error -71 [ 158.062037][ T423] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 158.083023][ T423] usb 2-1: device descriptor read/8, error -71 [ 158.181999][ T31] usb 5-1: device descriptor read/64, error -71 [ 158.223053][ T423] usb 2-1: device descriptor read/8, error -71 [ 158.292112][ T31] usb usb5-port1: attempt power cycle [ 158.332067][ T423] usb usb2-port1: unable to enumerate USB device [ 158.632012][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 158.653011][ T31] usb 5-1: device descriptor read/8, error -71 [ 158.774106][ T4117] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1078'. [ 158.779326][ T311] Error reading MAC address [ 158.794426][ T31] usb 5-1: device descriptor read/8, error -71 [ 158.795795][ T4119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.803936][ T311] usb 3-1: USB disconnect, device number 82 [ 158.811296][ T4119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.827251][ T36] audit: type=1400 audit(2000000064.054:24208): avc: denied { read } for pid=4120 comm="syz.2.1079" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.838236][ T4123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.858550][ T4123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.866643][ T36] audit: type=1400 audit(2000000064.054:24209): avc: denied { open } for pid=4120 comm="syz.2.1079" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.052000][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 159.073167][ T31] usb 5-1: device descriptor read/8, error -71 [ 159.202082][ T311] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 159.210568][ T31] usb 5-1: device descriptor read/8, error -71 [ 159.322564][ T31] usb usb5-port1: unable to enumerate USB device [ 159.353045][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 42726, setting to 64 [ 159.364072][ T311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.376915][ T45] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 159.386268][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.395503][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.396941][ T4129] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 159.403807][ T311] usb 3-1: Product: syz [ 159.412541][ T4129] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 159.416585][ T311] usb 3-1: Manufacturer: syz [ 159.429339][ T311] usb 3-1: SerialNumber: syz [ 159.438452][ T4129] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 159.450185][ T4129] overlayfs: overlapping lowerdir path [ 159.466004][ T36] audit: type=1400 audit(2000000064.694:24210): avc: denied { map } for pid=4130 comm="syz.3.1084" path="socket:[34132]" dev="sockfs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.490300][ T36] audit: type=1400 audit(2000000064.694:24211): avc: denied { read } for pid=4130 comm="syz.3.1084" path="socket:[34132]" dev="sockfs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.515620][ T36] audit: type=1400 audit(2000000064.694:24212): avc: denied { map } for pid=4130 comm="syz.3.1084" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 159.538819][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 159.544454][ T4134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.552005][ T36] audit: type=1400 audit(2000000064.694:24213): avc: denied { execute } for pid=4130 comm="syz.3.1084" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 159.553485][ T45] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 159.578109][ T4134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.585317][ T45] usb 2-1: config 0 has no interface number 0 [ 159.599884][ T45] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 159.609021][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.617098][ T45] usb 2-1: Product: syz [ 159.621302][ T45] usb 2-1: Manufacturer: syz [ 159.625919][ T45] usb 2-1: SerialNumber: syz [ 159.630971][ T45] usb 2-1: config 0 descriptor?? [ 159.637287][ T45] smsc95xx v2.0.0 [ 160.037934][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 160.061987][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.122589][ T4142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.131112][ T4142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.271641][ T45] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 160.282762][ T45] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 160.700932][ T36] audit: type=1400 audit(2000000065.924:24214): avc: denied { setattr } for pid=4143 comm="syz.3.1089" name="RFCOMM" dev="sockfs" ino=34171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.753619][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.762751][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.082015][ T712] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 161.232009][ T712] usb 5-1: Using ep0 maxpacket: 8 [ 161.238452][ T712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.247153][ T712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.254780][ T712] usb 5-1: can't read configurations, error -61 [ 161.293317][ T4151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.301781][ T4151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.382012][ T712] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 161.531992][ T712] usb 5-1: Using ep0 maxpacket: 8 [ 161.538356][ T712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.547104][ T712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.554717][ T712] usb 5-1: can't read configurations, error -61 [ 161.561086][ T712] usb usb5-port1: attempt power cycle [ 161.858587][ T45] usb 3-1: USB disconnect, device number 83 [ 161.902036][ T712] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 161.922360][ T712] usb 5-1: Using ep0 maxpacket: 8 [ 161.928758][ T712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.940162][ T712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.947770][ T712] usb 5-1: can't read configurations, error -61 [ 161.987561][ T31] usb 2-1: USB disconnect, device number 73 [ 162.092017][ T712] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 162.112332][ T712] usb 5-1: Using ep0 maxpacket: 8 [ 162.118710][ T712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.127362][ T712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 162.134937][ T712] usb 5-1: can't read configurations, error -61 [ 162.141256][ T712] usb usb5-port1: unable to enumerate USB device [ 162.185658][ T4160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.194512][ T4160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.203406][ T36] audit: type=1400 audit(2000000067.434:24215): avc: denied { create } for pid=4159 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 162.224400][ T36] audit: type=1400 audit(2000000067.434:24216): avc: denied { create } for pid=4159 comm="syz.3.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 162.382025][ T31] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 162.467074][ T36] audit: type=1400 audit(2000000067.694:24217): avc: denied { remount } for pid=4169 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.543004][ T31] usb 2-1: config 1 has an invalid interface number: 225 but max is 2 [ 162.551264][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.561574][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.570460][ T31] usb 2-1: config 1 has no interface number 0 [ 162.576586][ T31] usb 2-1: too many endpoints for config 1 interface 225 altsetting 21: 191, using maximum allowed: 30 [ 162.587669][ T31] usb 2-1: config 1 interface 225 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 191 [ 162.605369][ T31] usb 2-1: config 1 interface 225 has no altsetting 0 [ 162.612850][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 162.621878][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.629925][ T31] usb 2-1: SerialNumber: syz [ 162.732022][ T45] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 162.862006][ T45] usb 3-1: device descriptor read/64, error -71 [ 163.102012][ T45] usb 3-1: device descriptor read/64, error -71 [ 163.342040][ T45] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 163.472013][ T45] usb 3-1: device descriptor read/64, error -71 [ 163.712012][ T45] usb 3-1: device descriptor read/64, error -71 [ 163.822075][ T45] usb usb3-port1: attempt power cycle [ 164.162035][ T45] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 164.183079][ T45] usb 3-1: device descriptor read/8, error -71 [ 164.252011][ T31] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 164.312983][ T45] usb 3-1: device descriptor read/8, error -71 [ 164.382014][ T31] usb 5-1: device descriptor read/64, error -71 [ 164.552005][ T45] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 164.573000][ T45] usb 3-1: device descriptor read/8, error -71 [ 164.622016][ T31] usb 5-1: device descriptor read/64, error -71 [ 164.703025][ T45] usb 3-1: device descriptor read/8, error -71 [ 164.812102][ T45] usb usb3-port1: unable to enumerate USB device [ 164.861999][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 164.992007][ T31] usb 5-1: device descriptor read/64, error -71 [ 165.074681][ T45] usb 2-1: USB disconnect, device number 74 [ 165.091744][ T4181] overlay: Unknown parameter 'appraise' [ 165.107126][ T4183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1104'. [ 165.232010][ T31] usb 5-1: device descriptor read/64, error -71 [ 165.252067][ T36] audit: type=1400 audit(2000000070.484:24218): avc: denied { write } for pid=4188 comm="syz.3.1106" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.277857][ T36] audit: type=1400 audit(2000000070.484:24219): avc: denied { ioctl } for pid=4188 comm="syz.3.1106" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.342081][ T31] usb usb5-port1: attempt power cycle [ 165.682007][ T31] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 165.702988][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.833075][ T31] usb 5-1: device descriptor read/8, error -71 [ 165.862007][ T45] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 166.011989][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 166.018538][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.027059][ T45] usb 3-1: config 9 has an invalid interface number: 58 but max is 0 [ 166.035305][ T45] usb 3-1: config 9 has no interface number 0 [ 166.041377][ T45] usb 3-1: config 9 interface 58 has no altsetting 0 [ 166.049478][ T45] usb 3-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 166.058573][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.066582][ T45] usb 3-1: Product: syz [ 166.070730][ T45] usb 3-1: Manufacturer: syz [ 166.075361][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 166.082942][ T45] usb 3-1: SerialNumber: syz [ 166.103439][ T31] usb 5-1: device descriptor read/8, error -71 [ 166.131393][ T36] audit: type=1400 audit(2000000071.354:24220): avc: denied { nlmsg_read } for pid=4221 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 166.156285][ T36] audit: type=1400 audit(2000000071.384:24221): avc: denied { bind } for pid=4221 comm="syz.3.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.234151][ T31] usb 5-1: device descriptor read/8, error -71 [ 166.291726][ T45] usb-storage 3-1:9.58: USB Mass Storage device detected [ 166.299903][ T45] usb-storage 3-1:9.58: device ignored [ 166.325502][ T45] usb 3-1: USB disconnect, device number 88 [ 166.352107][ T31] usb usb5-port1: unable to enumerate USB device [ 166.502003][ T311] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 166.651992][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 166.658549][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.671567][ T311] usb 2-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 166.686108][ T311] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 166.695265][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.703324][ T311] usb 2-1: Product: syz [ 166.704627][ T4231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.708466][ T311] usb 2-1: Manufacturer: syz [ 166.717070][ T4231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.721071][ T311] usb 2-1: SerialNumber: syz [ 166.737511][ T4231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.746056][ T4231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.812005][ T4233] Unsupported ieee802154 address type: 0 [ 166.812229][ T4234] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 166.907515][ T4249] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 166.915544][ T4249] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 166.925080][ T4249] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 166.933065][ T4249] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 166.943840][ T36] audit: type=1400 audit(2000000072.174:24222): avc: denied { name_bind } for pid=4226 comm="syz.1.1117" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 167.315196][ T4276] netlink: 'syz.3.1127': attribute type 46 has an invalid length. [ 167.351298][ T36] audit: type=1400 audit(2000000072.574:24223): avc: denied { map } for pid=4277 comm="syz.3.1128" path="socket:[35413]" dev="sockfs" ino=35413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.448887][ T4291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.458039][ T4291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.531331][ T311] usb 2-1: 0:9 : does not exist [ 167.545491][ T311] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 167.557074][ T311] usb 2-1: USB disconnect, device number 75 [ 167.562586][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 167.862045][ T311] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 168.011992][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 168.018241][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.024953][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 168.034030][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.042589][ T311] usb 2-1: config 0 descriptor?? [ 168.347436][ T4309] syzkaller1: entered promiscuous mode [ 168.352975][ T4309] syzkaller1: entered allmulticast mode [ 168.467982][ T311] usb 2-1: string descriptor 0 read error: -71 [ 168.476270][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 168.482334][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.491045][ T311] usb 2-1: USB disconnect, device number 76 [ 168.582521][ T31] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 168.712475][ T31] usb 5-1: device descriptor read/64, error -71 [ 168.772227][ T712] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 168.923701][ T712] usb 3-1: config 1 interface 0 altsetting 43 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.934774][ T712] usb 3-1: config 1 interface 0 altsetting 43 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 168.945764][ T712] usb 3-1: config 1 interface 0 has no altsetting 0 [ 168.953765][ T712] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 168.961996][ T31] usb 5-1: device descriptor read/64, error -71 [ 168.962976][ T712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.977191][ T712] usb 3-1: Product: syz [ 168.986450][ T712] usb 3-1: Manufacturer: à° [ 168.991236][ T712] usb 3-1: SerialNumber: syz [ 169.202001][ T31] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 169.331996][ T31] usb 5-1: device descriptor read/64, error -71 [ 169.401102][ T712] usbhid 3-1:1.0: can't add hid device: -71 [ 169.407093][ T712] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 169.416259][ T712] usb 3-1: USB disconnect, device number 89 [ 169.572006][ T31] usb 5-1: device descriptor read/64, error -71 [ 169.682154][ T31] usb usb5-port1: attempt power cycle [ 169.698104][ T4336] rust_binder: 748: no such ref 0 [ 169.703200][ T4336] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.703213][ T4336] rust_binder: Read failure Err(EFAULT) in pid:748 [ 169.711599][ T4336] rust_binder: 748: no such ref 0 [ 169.723242][ T4336] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.723262][ T4336] rust_binder: Read failure Err(EFAULT) in pid:748 [ 169.753116][ T36] audit: type=1326 audit(2000000074.984:24224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.1.1146" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ede19df99 code=0x7ffc0000 [ 169.785501][ T36] audit: type=1326 audit(2000000074.984:24225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.1.1146" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ede19df99 code=0x7ffc0000 [ 169.811365][ T36] audit: type=1326 audit(2000000074.984:24226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.1.1146" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ede19df99 code=0x7ffc0000 [ 169.837149][ T36] audit: type=1326 audit(2000000074.984:24227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.1.1146" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ede19df99 code=0x7ffc0000 [ 169.872517][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.915555][ T4351] input: syz1 as /devices/virtual/input/input8 [ 170.022023][ T31] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 170.043418][ T31] usb 5-1: device descriptor read/8, error -71 [ 170.132007][ T712] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 170.173492][ T31] usb 5-1: device descriptor read/8, error -71 [ 170.212008][ T311] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 170.262018][ T712] usb 2-1: device descriptor read/64, error -71 [ 170.363590][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.371659][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 170.380129][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.390284][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.400532][ T311] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 170.409597][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.417646][ T31] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 170.425238][ T311] usb 3-1: Product: syz [ 170.429403][ T311] usb 3-1: Manufacturer: syz [ 170.434604][ T311] usb 3-1: SerialNumber: syz [ 170.453668][ T31] usb 5-1: device descriptor read/8, error -71 [ 170.458970][ T4356] bridge0: port 3(veth0_to_bridge) entered blocking state [ 170.467155][ T4356] bridge0: port 3(veth0_to_bridge) entered disabled state [ 170.474376][ T4356] veth0_to_bridge: entered allmulticast mode [ 170.480756][ T4356] veth0_to_bridge: entered promiscuous mode [ 170.486797][ T4356] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.499121][ T4356] bridge0: port 3(veth0_to_bridge) entered blocking state [ 170.506250][ T4356] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 170.511991][ T712] usb 2-1: device descriptor read/64, error -71 [ 170.582879][ T31] usb 5-1: device descriptor read/8, error -71 [ 170.645376][ T311] usb 3-1: USB disconnect, device number 90 [ 170.692543][ T31] usb usb5-port1: unable to enumerate USB device [ 170.752013][ T712] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 170.882001][ T712] usb 2-1: device descriptor read/64, error -71 [ 171.056736][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.065301][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.122036][ T712] usb 2-1: device descriptor read/64, error -71 [ 171.232604][ T712] usb usb2-port1: attempt power cycle [ 171.348881][ T4370] fuse: blksize only supported for fuseblk [ 171.433391][ T4380] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 171.549959][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 171.549976][ T36] audit: type=1400 audit(2000000076.774:24229): avc: denied { write } for pid=4386 comm="syz.4.1161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.580285][ T712] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 171.603161][ T712] usb 2-1: device descriptor read/8, error -71 [ 171.645629][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.654679][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.695957][ T36] audit: type=1400 audit(2000000076.924:24230): avc: denied { module_load } for pid=4400 comm="syz.4.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 171.695970][ T4401] Invalid ELF header type: 2 != 1 [ 171.733270][ T712] usb 2-1: device descriptor read/8, error -71 [ 171.862022][ T423] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 171.972022][ T712] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 171.992036][ T423] usb 3-1: device descriptor read/64, error -71 [ 171.999167][ T712] usb 2-1: device descriptor read/8, error -71 [ 172.012016][ T311] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 172.133388][ T712] usb 2-1: device descriptor read/8, error -71 [ 172.161990][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 172.168095][ T311] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 172.176235][ T311] usb 5-1: config 2 has no interface number 0 [ 172.182545][ T311] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 172.194472][ T311] usb 5-1: config 2 interface 88 has no altsetting 0 [ 172.202647][ T311] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 172.211673][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 172.221963][ T311] usb 5-1: Product: syz [ 172.226124][ T311] usb 5-1: Manufacturer: syz [ 172.230691][ T311] usb 5-1: SerialNumber: syz [ 172.236246][ T4403] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 172.252023][ T423] usb 3-1: device descriptor read/64, error -71 [ 172.258457][ T712] usb usb2-port1: unable to enumerate USB device [ 172.444586][ T4403] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 172.491996][ T423] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 172.622027][ T423] usb 3-1: device descriptor read/64, error -71 [ 172.862005][ T423] usb 3-1: device descriptor read/64, error -71 [ 172.972105][ T423] usb usb3-port1: attempt power cycle [ 173.033425][ T4414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.042700][ T4414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.053482][ T311] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.064307][ T311] asix 5-1:2.88: probe with driver asix failed with error -71 [ 173.072804][ T311] usb 5-1: USB disconnect, device number 72 [ 173.302389][ T712] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 173.312018][ T423] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 173.332920][ T423] usb 3-1: device descriptor read/8, error -71 [ 173.451994][ T712] usb 2-1: Using ep0 maxpacket: 8 [ 173.458435][ T712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.466893][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 173.477838][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.487527][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 173.498628][ T423] usb 3-1: device descriptor read/8, error -71 [ 173.504814][ T712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 173.514742][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 173.524406][ T712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 173.534042][ T712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 173.545057][ T712] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 173.554138][ T712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.567782][ T712] usb 2-1: Product: syz [ 173.572328][ T712] usb 2-1: Manufacturer: syz [ 173.577648][ T712] usb 2-1: SerialNumber: syz [ 173.586588][ T4419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 173.596083][ T712] usb 2-1: config 0 descriptor?? [ 173.601330][ T4410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 173.616436][ T712] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 173.640403][ T4425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.641199][ T696] udevd[696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 173.649195][ T4425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.742030][ T423] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 173.763042][ T423] usb 3-1: device descriptor read/8, error -71 [ 173.861998][ T311] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 173.892971][ T423] usb 3-1: device descriptor read/8, error -71 [ 174.002117][ T423] usb usb3-port1: unable to enumerate USB device [ 174.013019][ T311] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 174.024121][ T311] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 174.035453][ T311] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 174.044674][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.254926][ T311] usb 5-1: string descriptor 0 read error: -71 [ 174.261323][ T311] hub 5-1:32.0: bad descriptor, ignoring hub [ 174.267407][ T311] hub 5-1:32.0: probe with driver hub failed with error -5 [ 174.292398][ T311] usb 5-1: USB disconnect, device number 73 [ 174.305172][ T36] audit: type=1400 audit(2000000079.534:24231): avc: denied { nlmsg_write } for pid=4428 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 174.308479][ T4429] netlink: 'syz.3.1178': attribute type 4 has an invalid length. [ 174.334243][ T423] usb 2-1: USB disconnect, device number 81 [ 174.339347][ T4429] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1178'. [ 174.448408][ T36] audit: type=1400 audit(2000000079.674:24232): avc: denied { ioctl } for pid=4450 comm="syz.3.1187" path="uts:[4026532388]" dev="nsfs" ino=4026532388 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.474086][ T36] audit: type=1400 audit(2000000079.674:24233): avc: denied { setattr } for pid=4452 comm="syz.1.1186" name="/" dev="configfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.504425][ T36] audit: type=1400 audit(2000000079.734:24234): avc: denied { append } for pid=4455 comm="syz.3.1189" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 174.505511][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.541166][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.549766][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.551393][ T36] audit: type=1400 audit(2000000079.734:24235): avc: denied { map } for pid=4454 comm="syz.1.1188" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 174.558753][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.589922][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.598465][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.607652][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.619175][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.628049][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.637282][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.647645][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.658433][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.675151][ T4466] syzkaller1: entered promiscuous mode [ 174.680620][ T4466] syzkaller1: entered allmulticast mode [ 174.859854][ T4484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4484 comm=syz.4.1199 [ 174.904697][ T423] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 175.012015][ T311] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 175.062001][ T423] usb 2-1: Using ep0 maxpacket: 16 [ 175.070479][ T423] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 175.080788][ T423] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.096190][ T423] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 175.111741][ T423] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 616, setting to 64 [ 175.122736][ T423] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 175.136719][ T423] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 175.149050][ T423] usb 2-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 175.162092][ T423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.170309][ T423] usb 2-1: Product: Ћ [ 175.177175][ T423] usb 2-1: Manufacturer: 鎞䒵갶íªUéšå‡ˆè ªï¨É¢â³žæ¤é²ÐªíŠŽæ±²é·³â—”騿줊꜎逸糛傩볼씵ਚ貎㓲è©é¶¬ï¼©î“ºïˆïƒ’ܸ냗㱲ë좆㴹뼗ëŠå´æ±¬ç‘˜å´˜å ¬æ’¨á¦±é«“å—¶âçµ¹í‰ä›„ః勿ᵅï«ã¥´ï’Ĭ롞 [ 175.192850][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.211840][ T4468] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 175.217759][ T311] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 175.230380][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.36 [ 175.239758][ T311] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 175.247918][ T311] usb 3-1: Product: syz [ 175.252235][ T311] usb 3-1: Manufacturer: syz [ 175.256892][ T311] usb 3-1: SerialNumber: syz [ 175.431697][ T423] usb 2-1: MIDIStreaming interface descriptor not found [ 175.441654][ T423] usb 2-1: too many endpoints [ 175.463776][ T423] usb 2-1: USB disconnect, device number 82 [ 175.471584][ T4480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.484962][ T4480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.504349][ T311] usb 3-1: USB disconnect, device number 95 [ 175.833857][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.842395][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.851533][ T4506] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1205'. [ 176.032060][ T423] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 176.182004][ T31] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 176.183658][ T423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.200676][ T423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.210443][ T423] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 176.219529][ T423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.228088][ T423] usb 5-1: config 0 descriptor?? [ 176.251988][ T63] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 176.333032][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.344053][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.353811][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.366795][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.376087][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.389383][ T31] usb 2-1: config 0 descriptor?? [ 176.411974][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 176.420527][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.431213][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.443711][ T63] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.452897][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.460921][ T63] usb 3-1: Product: syz [ 176.465360][ T63] usb 3-1: Manufacturer: syz [ 176.469992][ T63] usb 3-1: SerialNumber: syz [ 176.687834][ T63] usb 3-1: 0:2 : does not exist [ 176.697569][ T63] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 176.710618][ T63] usb 3-1: USB disconnect, device number 96 [ 176.723575][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.798433][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 176.825750][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.842548][ T423] usbhid 5-1:0.0: can't add hid device: -71 [ 176.856587][ T423] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.872054][ T423] usb 5-1: USB disconnect, device number 74 [ 177.104034][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.112680][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.254808][ T4534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1213'. [ 177.329645][ T4543] futex_wake_op: syz.3.1215 tries to shift op by -1; fix this program [ 177.423506][ T4553] x_tables: unsorted underflow at hook 4 [ 177.468512][ T4559] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1222'. [ 177.579336][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.598880][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.771985][ T423] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 177.919515][ T4572] ªªªªªª: renamed from vlan0 (while UP) [ 177.925189][ T423] usb 5-1: Using ep0 maxpacket: 16 [ 177.934606][ T423] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.944792][ T423] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.955296][ T423] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.975258][ T423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.983510][ T423] usb 5-1: Product: syz [ 177.987849][ T423] usb 5-1: Manufacturer: syz [ 177.992499][ T423] usb 5-1: SerialNumber: syz [ 178.033713][ T36] audit: type=1400 audit(2000000083.264:24236): avc: denied { getattr } for pid=4575 comm="syz.2.1228" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=37482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.078820][ T4578] incfs: Options parsing error. -22 [ 178.084128][ T4578] incfs: mount failed -22 [ 178.090905][ T4578] netlink: 'syz.2.1229': attribute type 1 has an invalid length. [ 178.098938][ T4578] netlink: 'syz.2.1229': attribute type 32 has an invalid length. [ 178.106828][ C1] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1 [ 178.188363][ T36] audit: type=1400 audit(2000000083.414:24237): avc: denied { create } for pid=4591 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 178.263830][ T423] usb 5-1: 0:2 : does not exist [ 178.281882][ T423] usb 5-1: USB disconnect, device number 75 [ 178.306839][ T4612] syzkaller0: entered promiscuous mode [ 178.313987][ T4612] syzkaller0: entered allmulticast mode [ 178.336626][ T4616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.345969][ T4616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.441992][ T63] usb 2-1: reset high-speed USB device number 83 using dummy_hcd [ 178.612388][ T63] usb 2-1: device firmware changed [ 178.617777][ T311] usb 2-1: USB disconnect, device number 83 [ 178.712058][ T423] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 178.752010][ T311] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 178.881993][ T423] usb 3-1: Using ep0 maxpacket: 32 [ 178.888224][ T423] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.899526][ T423] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.904353][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.910546][ T423] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 178.920381][ T311] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.930255][ T423] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 178.939322][ T4628] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1245'. [ 178.939820][ T4629] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1245'. [ 178.948050][ T423] usb 3-1: Product: syz [ 178.972103][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.976930][ T423] usb 3-1: Manufacturer: syz [ 178.981381][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.990471][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.001819][ T311] usb 2-1: Product: syz [ 179.004956][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.008129][ T311] usb 2-1: Manufacturer: syz [ 179.030181][ T423] hub 3-1:4.0: USB hub found [ 179.031420][ T311] usb 2-1: SerialNumber: syz [ 179.043513][ T4638] input: syz0 as /devices/virtual/input/input9 [ 179.052424][ T311] cdc_mbim 2-1:1.0: skipping garbage [ 179.063172][ T4638] netlink: 'syz.3.1248': attribute type 27 has an invalid length. [ 179.207188][ T4647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.216199][ T4647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.235679][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.244331][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.253094][ T4587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.260271][ T423] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 179.463764][ T311] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 179.481982][ T311] cdc_mbim 2-1:1.0: bind() failure [ 179.487997][ T311] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 179.496238][ T311] cdc_ncm 2-1:1.1: bind() failure [ 179.622094][ T423] usb 3-1: USB disconnect, device number 97 [ 179.982206][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.990670][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.142012][ T311] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 180.291989][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 180.298131][ T311] usb 5-1: config 3 has an invalid interface number: 127 but max is 0 [ 180.306490][ T311] usb 5-1: config 3 has no interface number 0 [ 180.312706][ T311] usb 5-1: config 3 interface 127 altsetting 42 bulk endpoint 0xC has invalid maxpacket 16 [ 180.322755][ T311] usb 5-1: config 3 interface 127 has no altsetting 0 [ 180.330854][ T311] usb 5-1: New USB device found, idVendor=0582, idProduct=f1a4, bcdDevice=77.d8 [ 180.339963][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.347983][ T311] usb 5-1: Product: syz [ 180.352176][ T311] usb 5-1: Manufacturer: syz [ 180.356774][ T311] usb 5-1: SerialNumber: syz [ 180.362276][ T4667] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 180.564367][ T4674] tipc: Started in network mode [ 180.569309][ T4674] tipc: Node identity 0a696ab77fc6, cluster identity 4711 [ 180.576845][ T4674] tipc: Enabled bearer , priority 0 [ 180.594842][ T311] usb 5-1: USB disconnect, device number 76 [ 180.612923][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.851989][ T423] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 180.981994][ T423] usb 3-1: device descriptor read/64, error -71 [ 181.222017][ T423] usb 3-1: device descriptor read/64, error -71 [ 181.225355][ T311] usb 2-1: USB disconnect, device number 84 [ 181.382001][ T45] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 181.481988][ T423] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 181.543255][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.553422][ T45] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.572651][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.581702][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.601121][ T45] usb 5-1: SerialNumber: syz [ 181.612022][ T423] usb 3-1: device descriptor read/64, error -71 [ 181.618785][ T45] usb 5-1: bad CDC descriptors [ 181.691982][ T45] tipc: Node number set to 1974430391 [ 181.771643][ T4721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.780311][ T4721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.819834][ T63] usb 5-1: USB disconnect, device number 77 [ 181.852017][ T423] usb 3-1: device descriptor read/64, error -71 [ 181.962068][ T423] usb usb3-port1: attempt power cycle [ 182.116683][ T4723] overlay: ./file0 is not a directory [ 182.302017][ T423] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 182.323067][ T423] usb 3-1: device descriptor read/8, error -71 [ 182.382024][ T63] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 182.452939][ T423] usb 3-1: device descriptor read/8, error -71 [ 182.531973][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 182.539385][ T63] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 182.548494][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.556519][ T63] usb 2-1: Product: syz [ 182.560683][ T63] usb 2-1: Manufacturer: syz [ 182.565376][ T63] usb 2-1: SerialNumber: syz [ 182.691991][ T423] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 182.712944][ T423] usb 3-1: device descriptor read/8, error -71 [ 182.771516][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.780043][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.790221][ T63] usb 2-1: MIDIStreaming interface descriptor not found [ 182.799299][ T63] usb 2-1: USB disconnect, device number 85 [ 182.842975][ T423] usb 3-1: device descriptor read/8, error -71 [ 182.936568][ T4744] rust_binder: 4743:4744 transaction to 0 failed: EINVAL [ 182.937054][ T4744] syzkaller1: entered promiscuous mode [ 182.949715][ T4744] syzkaller1: entered allmulticast mode [ 182.952058][ T423] usb usb3-port1: unable to enumerate USB device [ 183.044215][ T36] audit: type=1400 audit(2000000088.274:24238): avc: granted { setsecparam } for pid=4745 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 183.702008][ T63] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 183.732862][ T4774] netlink: 'syz.2.1285': attribute type 4 has an invalid length. [ 183.742759][ T4774] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1285'. [ 183.752661][ T4774] input: syz0 as /devices/virtual/input/input11 [ 183.851983][ T63] usb 2-1: Using ep0 maxpacket: 32 [ 183.858439][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.868248][ T63] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 183.877329][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.885512][ T63] usb 2-1: Product: syz [ 183.889665][ T63] usb 2-1: Manufacturer: syz [ 183.894284][ T63] usb 2-1: SerialNumber: syz [ 184.011981][ T423] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 184.105026][ T63] usb 2-1: USB disconnect, device number 86 [ 184.162415][ T423] usb 3-1: Using ep0 maxpacket: 16 [ 184.168573][ T423] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.178697][ T423] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 184.181982][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 184.189507][ T423] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 184.210777][ T423] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 184.219834][ T423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.228421][ T423] usb 3-1: config 0 descriptor?? [ 184.341983][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 184.348212][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 184.359222][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.368985][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 184.381972][ T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 184.391004][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.400242][ T45] usb 5-1: config 0 descriptor?? [ 184.688614][ T4776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4776 comm=syz.2.1286 [ 184.796010][ T423] usb 3-1: string descriptor 0 read error: -71 [ 184.804191][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.807126][ T423] usb 3-1: USB disconnect, device number 102 [ 184.823980][ T45] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 184.830869][ T45] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 184.837882][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.846904][ T45] wacom 0003:056A:0023.0012: unknown main item tag 0x0 [ 184.854198][ T45] wacom 0003:056A:0023.0012: item fetching failed at offset 10/21 [ 184.862371][ T45] wacom 0003:056A:0023.0012: parse failed [ 184.868205][ T45] wacom 0003:056A:0023.0012: probe with driver wacom failed with error -22 [ 184.921986][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 185.027708][ T45] usb 5-1: USB disconnect, device number 78 [ 185.062041][ T9] usb 2-1: device descriptor read/64, error -71 [ 185.301990][ T9] usb 2-1: device descriptor read/64, error -71 [ 185.302404][ T4796] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1292'. [ 185.317449][ T4796] gretap0: entered promiscuous mode [ 185.326668][ T4796] loop5: detected capacity change from 0 to 7 [ 185.551991][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 185.641997][ T45] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 185.681988][ T9] usb 2-1: device descriptor read/64, error -71 [ 185.791980][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 185.797163][ T31] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 185.806248][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 185.816509][ T45] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 185.825586][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.833599][ T45] usb 3-1: Product: syz [ 185.837741][ T45] usb 3-1: Manufacturer: syz [ 185.842334][ T45] usb 3-1: SerialNumber: syz [ 185.921984][ T9] usb 2-1: device descriptor read/64, error -71 [ 185.951968][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 185.958156][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 185.969347][ T31] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 185.978457][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.986465][ T31] usb 5-1: Product: syz [ 185.990674][ T31] usb 5-1: Manufacturer: syz [ 185.995291][ T31] usb 5-1: SerialNumber: syz [ 186.000686][ T4806] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 186.032054][ T9] usb usb2-port1: attempt power cycle [ 186.071614][ T45] usb 3-1: USB disconnect, device number 103 [ 186.211463][ T31] usb 5-1: MIDIStreaming interface descriptor not found [ 186.222134][ T31] usb 5-1: USB disconnect, device number 79 [ 186.372052][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 186.393835][ T9] usb 2-1: device descriptor read/8, error -71 [ 186.475947][ T4828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.484579][ T4828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.535764][ T9] usb 2-1: device descriptor read/8, error -71 [ 186.781982][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 186.802938][ T9] usb 2-1: device descriptor read/8, error -71 [ 186.932951][ T9] usb 2-1: device descriptor read/8, error -71 [ 186.961998][ T423] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 187.042048][ T9] usb usb2-port1: unable to enumerate USB device [ 187.083272][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.091776][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.113000][ T423] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.123154][ T423] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.133398][ T423] usb 5-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 187.142466][ T423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.150450][ T423] usb 5-1: Product: syz [ 187.154659][ T423] usb 5-1: Manufacturer: syz [ 187.159249][ T423] usb 5-1: SerialNumber: syz [ 187.191987][ T31] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 187.343353][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.351709][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.363829][ T31] usb 3-1: string descriptor 0 read error: -22 [ 187.365598][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.370113][ T31] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 187.379300][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.388148][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.397034][ T4841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.414299][ T4836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.414824][ T4841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.423760][ T4836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.616292][ T36] audit: type=1326 audit(2000000092.844:24239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4842 comm="syz.3.1306" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe136d9df99 code=0x0 [ 188.077087][ T31] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 188.085171][ T423] usb 5-1: unknown interface protocol 0x26, assuming v1 [ 188.092662][ T423] usb 5-1: cannot find UAC_HEADER [ 188.099121][ T423] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 188.106809][ T31] usb 3-1: USB disconnect, device number 104 [ 188.116046][ T423] usb 5-1: USB disconnect, device number 80 [ 188.123580][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 188.321997][ T45] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 188.421986][ T423] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 188.459344][ T4858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.468230][ T4858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.476023][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 188.485631][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.496328][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.506782][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.517229][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 188.523421][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.531334][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.535528][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.543079][ T45] usb 2-1: Product: syz [ 188.554725][ T45] usb 2-1: Manufacturer: syz [ 188.559753][ T45] usb 2-1: SerialNumber: syz [ 188.561388][ T4866] netlink: 'syz.3.1314': attribute type 28 has an invalid length. [ 188.572278][ T423] usb 5-1: Using ep0 maxpacket: 16 [ 188.578436][ T423] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 188.586591][ T423] usb 5-1: config 0 has no interface number 0 [ 188.592700][ T423] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 188.602914][ T423] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 188.615335][ T423] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 188.625891][ T423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.634280][ T423] usb 5-1: Product: syz [ 188.635034][ T4869] tipc: Enabling of bearer rejected, already enabled [ 188.638492][ T423] usb 5-1: Manufacturer: syz [ 188.651516][ T423] usb 5-1: SerialNumber: syz [ 188.657124][ T423] usb 5-1: config 0 descriptor?? [ 188.665492][ T4853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.672726][ T4853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.743874][ T4873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 188.769586][ T45] usb 2-1: 0:1 : does not exist [ 188.774896][ T45] usb 2-1: 0:230 : does not exist [ 188.784648][ T45] usb 2-1: USB disconnect, device number 91 [ 188.797128][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 188.882725][ T4853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 188.889902][ T4853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.097720][ T423] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 189.176542][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.185186][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.293308][ T4885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=4885 comm=syz.1.1321 [ 189.306068][ T423] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 113 [ 189.317562][ T4889] netlink: 'syz.1.1322': attribute type 27 has an invalid length. [ 189.367164][ T4890] netlink: 'syz.1.1322': attribute type 27 has an invalid length. [ 189.375297][ T4889] netlink: 'syz.1.1322': attribute type 27 has an invalid length. [ 189.390115][ T36] audit: type=1400 audit(2000000094.614:24240): avc: denied { read } for pid=4893 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 189.420823][ T4889] veth0_vlan: left promiscuous mode [ 189.426980][ T4889] veth0_vlan: entered promiscuous mode [ 189.672007][ T712] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 189.823023][ T712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.834049][ T712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.843839][ T712] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 189.853100][ T712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.861919][ T712] usb 3-1: config 0 descriptor?? [ 190.070815][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.078876][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.086089][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.093269][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.100216][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.107212][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.114613][ T712] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 190.122749][ T712] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 190.192181][ T712] cp2112 0003:10C4:EA90.0013: error requesting version [ 190.199966][ T712] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 190.210515][ T712] usb 3-1: USB disconnect, device number 105 [ 190.307203][ T4922] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1331'. [ 190.501993][ T712] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 190.663290][ T712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.671730][ T712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 190.682862][ T712] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 190.695415][ T712] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 190.705042][ T712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.713040][ T712] usb 3-1: Product: syz [ 190.717194][ T712] usb 3-1: Manufacturer: syz [ 190.721764][ T712] usb 3-1: SerialNumber: syz [ 190.930749][ T712] usb 3-1: unit 9 not found! [ 190.939197][ T712] usb 3-1: USB disconnect, device number 106 [ 190.949283][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 191.050351][ T31] usb 5-1: USB disconnect, device number 81 [ 191.453591][ T36] audit: type=1400 audit(2000000096.684:24241): avc: denied { write } for pid=4938 comm="syz.2.1337" name="max_speed" dev="configfs" ino=39636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 191.476749][ T36] audit: type=1400 audit(2000000096.684:24242): avc: denied { open } for pid=4938 comm="syz.2.1337" path="/339/config/usb_gadget/g1/max_speed" dev="configfs" ino=39636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 191.542890][ T311] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 191.617485][ T4958] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1345'. [ 191.672664][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.681454][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.693173][ T311] usb 2-1: config 4 has an invalid interface number: 29 but max is 0 [ 191.701468][ T311] usb 2-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 191.711969][ T311] usb 2-1: config 4 has no interface number 0 [ 191.718083][ T311] usb 2-1: config 4 interface 29 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.733581][ T311] usb 2-1: New USB device found, idVendor=0bda, idProduct=c811, bcdDevice=b0.13 [ 191.742810][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.750828][ T311] usb 2-1: Product: syz [ 191.755862][ T311] usb 2-1: Manufacturer: syz [ 191.760488][ T311] usb 2-1: SerialNumber: syz [ 191.963790][ T36] audit: type=1400 audit(2000000097.194:24243): avc: denied { rename } for pid=4972 comm="syz.4.1349" name="file5" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 191.992102][ T36] audit: type=1400 audit(2000000097.224:24244): avc: denied { append } for pid=4932 comm="syz.1.1335" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.164382][ T4981] tmpfs: Invalid uid '0x00000000ffffffff' [ 192.192338][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.206285][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.212816][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.219077][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.226244][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.232654][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.238994][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.245570][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.251839][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.258655][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.278657][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.285436][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.291996][ T712] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 192.292178][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.305890][ T36] audit: type=1400 audit(2000000097.544:24245): avc: denied { map } for pid=4991 comm="syz.3.1354" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.331851][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.339616][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.347439][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.353825][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.360080][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.366749][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.373748][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.379992][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.386511][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.394902][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.401154][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.416766][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.424015][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.440969][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.449519][ T4998] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1356'. [ 192.450240][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.458636][ T712] usb 5-1: Using ep0 maxpacket: 16 [ 192.464961][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.476042][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.483002][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.483069][ T4998] 0ªî{X¹¦: entered promiscuous mode [ 192.489283][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.501060][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.507370][ T712] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 192.507512][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.516042][ T712] usb 5-1: config 0 has no interface number 0 [ 192.526533][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.533240][ T5002] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.537762][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.549011][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.551988][ T712] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 192.555558][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.565162][ T5002] overlayfs: missing 'lowerdir' [ 192.571675][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.576666][ T712] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 192.582561][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.598522][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.605210][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.615176][ T712] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 192.620360][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.624658][ T712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.631143][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.645460][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.645765][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.651701][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.663030][ T712] usb 5-1: Product: syz [ 192.666945][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.671957][ T712] usb 5-1: Manufacturer: syz [ 192.676512][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.680779][ T712] usb 5-1: SerialNumber: syz [ 192.687172][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.692331][ T712] usb 5-1: config 0 descriptor?? [ 192.702348][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.705514][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.708692][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.722352][ T4979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.732349][ T4979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.741329][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.747816][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.754291][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.760596][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.768004][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.774275][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.780604][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.788483][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.794790][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.801068][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.807470][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.813766][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.820035][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.826340][ T4986] 9pnet_fd: Insufficient options for proto=fd [ 192.941441][ T4979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 192.948678][ T4979] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 193.102165][ T63] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 193.156361][ T712] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 193.251963][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 193.253960][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.259024][ T63] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.266165][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.277119][ T63] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.293941][ T63] usb 3-1: config 0 interface 0 has no altsetting 0 [ 193.300563][ T63] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 193.309608][ T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.318257][ T63] usb 3-1: config 0 descriptor?? [ 193.728005][ T63] hid (null): unknown global tag 0xd [ 193.733401][ T63] hid (null): report_id 0 is invalid [ 193.738721][ T63] hid (null): unknown global tag 0xe [ 193.744101][ T63] hid (null): unknown global tag 0xe [ 193.749427][ T63] hid (null): unknown global tag 0xc [ 193.755118][ T63] hid (null): global environment stack underflow [ 193.761485][ T63] hid (null): unknown global tag 0xc [ 193.767375][ T63] hid (null): report_id 0 is invalid [ 193.772744][ T63] hid (null): unknown global tag 0xe6 [ 193.778142][ T63] hid (null): invalid report_size 2048325794 [ 193.784169][ T63] hid (null): invalid report_count 27902 [ 193.789838][ T63] hid (null): unknown global tag 0xc [ 193.807094][ T5015] 9pnet_fd: p9_fd_create_unix (5015): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 193.833740][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.933437][ T45] usb 3-1: USB disconnect, device number 107 [ 193.941958][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.948002][ T712] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 193.964932][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.965658][ T712] asix 5-1:0.34: probe with driver asix failed with error -71 [ 193.975680][ T5022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1365'. [ 193.983790][ T712] usb 5-1: USB disconnect, device number 82 [ 193.991629][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.013487][ T311] usb 2-1: USB disconnect, device number 92 [ 194.104153][ T5024] kvm: kvm [5023]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 194.112930][ T5024] kvm: kvm [5023]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 194.321998][ T712] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 194.473030][ T712] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.484084][ T712] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 194.491976][ T311] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 194.497110][ T712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.511063][ T712] usb 5-1: New USB device found, idVendor=05ac, idProduct=021b, bcdDevice= 0.00 [ 194.520090][ T712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.528528][ T712] usb 5-1: config 0 descriptor?? [ 194.585010][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.593785][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.602249][ T5031] cgroup: subsys name conflicts with all [ 194.651973][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 194.658186][ T311] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.669267][ T311] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.685385][ T311] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.692955][ T467] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 194.700649][ T311] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 194.709996][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.718656][ T311] usb 2-1: config 0 descriptor?? [ 194.853010][ T467] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.861803][ T467] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.872035][ T467] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.880994][ T467] usb 3-1: config 1 has no interface number 1 [ 194.887150][ T467] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.900019][ T467] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.914684][ T467] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.924019][ T467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.932586][ T467] usb 3-1: Product: syz [ 194.936866][ T467] usb 3-1: Manufacturer: syz [ 194.937801][ T712] apple 0003:05AC:021B.0015: unknown main item tag 0x2 [ 194.942029][ T467] usb 3-1: SerialNumber: syz [ 194.949083][ T712] apple 0003:05AC:021B.0015: global environment stack underflow [ 194.958542][ T311] hid (null): unknown global tag 0xd [ 194.960892][ T712] apple 0003:05AC:021B.0015: item 0 4 1 11 parsing failed [ 194.966860][ T311] hid (null): report_id 0 is invalid [ 194.973513][ T712] apple 0003:05AC:021B.0015: parse failed [ 194.980176][ T311] hid (null): unknown global tag 0xe [ 194.984325][ T712] apple 0003:05AC:021B.0015: probe with driver apple failed with error -22 [ 194.989519][ T311] hid (null): unknown global tag 0xe [ 195.003452][ T311] hid (null): unknown global tag 0xc [ 195.008942][ T311] hid (null): global environment stack underflow [ 195.015347][ T311] hid (null): unknown global tag 0xc [ 195.020697][ T311] hid (null): report_id 0 is invalid [ 195.026248][ T311] hid (null): unknown global tag 0xe6 [ 195.031644][ T311] hid (null): invalid report_size 2048325794 [ 195.037668][ T311] hid (null): invalid report_count 27902 [ 195.043354][ T311] hid (null): unknown global tag 0xc [ 195.158430][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.167784][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.175709][ T712] usb 5-1: USB disconnect, device number 83 [ 195.255721][ T467] usb 3-1: MIDIStreaming interface descriptor not found [ 195.267465][ T467] usb 3-1: USB disconnect, device number 108 [ 195.300625][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.309191][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.831771][ T36] audit: type=1400 audit(2000000101.054:24246): avc: denied { mount } for pid=5049 comm="syz.2.1376" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 195.912602][ T36] audit: type=1400 audit(2000000101.144:24247): avc: denied { accept } for pid=5057 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.951247][ T5068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.973627][ T5068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.104541][ T36] audit: type=1326 audit(2000000101.334:24248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.2.1386" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd14bd9df99 code=0x0 [ 196.503537][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.512575][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.664278][ T5089] syzkaller1: entered promiscuous mode [ 196.669781][ T5089] syzkaller1: entered allmulticast mode [ 196.687149][ T36] audit: type=1400 audit(2000000101.914:24249): avc: denied { create } for pid=5092 comm="syz.4.1389" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 196.708089][ T36] audit: type=1400 audit(2000000101.914:24250): avc: denied { read } for pid=5092 comm="syz.4.1389" name="c_mute_present" dev="configfs" ino=40607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 196.788254][ T36] audit: type=1400 audit(2000000102.014:24251): avc: denied { getopt } for pid=5103 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.788417][ T5104] bpf: Bad value for 'gid' [ 196.948722][ T5109] ±ÿ: renamed from lo [ 197.111975][ T467] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 197.201248][ T63] usb 2-1: USB disconnect, device number 93 [ 197.261987][ T467] usb 5-1: Using ep0 maxpacket: 16 [ 197.276773][ T467] usb 5-1: config 5 has an invalid descriptor of length 62, skipping remainder of the config [ 197.294385][ T467] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 197.313007][ T467] usb 5-1: New USB device found, idVendor=177f, idProduct=0254, bcdDevice=90.25 [ 197.322094][ T467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.330530][ T467] usb 5-1: Product: syz [ 197.334714][ T467] usb 5-1: Manufacturer: syz [ 197.341967][ T467] usb 5-1: SerialNumber: syz [ 197.371156][ T5141] futex_wake_op: syz.3.1402 tries to shift op by 144; fix this program [ 197.384908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.397038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.409132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.421147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.433322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.445364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.457460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.469465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.481551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.493590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.076597][ T467] usb 5-1: USB disconnect, device number 84 [ 198.133130][ T36] audit: type=1400 audit(2000000103.354:24252): avc: denied { accept } for pid=5145 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.331966][ T311] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 198.491977][ T311] usb 3-1: device descriptor read/64, error -71 [ 198.528699][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.538109][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.561991][ T467] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 198.691990][ T467] usb 5-1: device descriptor read/64, error -71 [ 198.731995][ T311] usb 3-1: device descriptor read/64, error -71 [ 198.738333][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 198.893397][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.904481][ T31] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 198.921359][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.931373][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.943721][ T467] usb 5-1: device descriptor read/64, error -71 [ 198.950027][ T31] usb 2-1: Product: syz [ 198.954550][ T31] usb 2-1: Manufacturer: syz [ 198.959265][ T31] usb 2-1: SerialNumber: syz [ 198.979269][ T31] cdc_mbim 2-1:1.0: skipping garbage [ 198.984621][ T311] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 199.086286][ T5167] netlink: 'syz.3.1409': attribute type 3 has an invalid length. [ 199.094245][ T5167] netlink: 944 bytes leftover after parsing attributes in process `syz.3.1409'. [ 199.128835][ T36] audit: type=1400 audit(2000000104.354:24253): avc: denied { setattr } for pid=5168 comm="syz.3.1410" name="RAW" dev="sockfs" ino=40876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.161892][ T311] usb 3-1: device descriptor read/64, error -71 [ 199.185765][ T5163] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 199.256093][ T467] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 199.535396][ T311] usb 3-1: device descriptor read/64, error -71 [ 199.546639][ T467] usb 5-1: device descriptor read/64, error -71 [ 199.856434][ T311] usb usb3-port1: attempt power cycle [ 199.935533][ T5163] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 199.950538][ T31] cdc_mbim 2-1:1.0: setting tx_max = 60 [ 200.032809][ T467] usb 5-1: device descriptor read/64, error -71 [ 200.062164][ T31] cdc_mbim 2-1:1.0: cdc-wdm1: USB WDM device [ 200.198491][ T467] usb usb5-port1: attempt power cycle [ 200.224344][ T31] wwan wwan1: port wwan1mbim0 attached [ 200.306440][ T31] cdc_mbim 2-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, b2:dd:27:94:96:e1 [ 200.585504][ T311] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 200.647289][ T31] usb 2-1: USB disconnect, device number 94 [ 200.673932][ T31] cdc_mbim 2-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 200.723028][ T467] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 200.753633][ T311] usb 3-1: device descriptor read/8, error -71 [ 201.013607][ T467] usb 5-1: device descriptor read/8, error -71 [ 201.192626][ T311] usb 3-1: device descriptor read/8, error -71 [ 201.444946][ T467] usb 5-1: device descriptor read/8, error -71 [ 202.391970][ C1] net_ratelimit: 98907 callbacks suppressed [ 202.391992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.392024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.398014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 202.409901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.421834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.433807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.445788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.457661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.469505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 202.481592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.401955][ C1] net_ratelimit: 122370 callbacks suppressed [ 207.401976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.402055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.408085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.420068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.432278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.444232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.456243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 207.468094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.479937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.491966][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.411974][ C1] net_ratelimit: 93962 callbacks suppressed [ 212.411995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.412032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.418197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 212.429934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.441763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.453741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.465719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.477566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.489517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.501494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.421956][ C1] net_ratelimit: 95011 callbacks suppressed [ 217.421978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.421991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.422078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.427975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 217.439949][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.452151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 217.463909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.475753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.487664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.499721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.901939][ C1] sched: DL replenish lagged too much [ 222.431945][ C0] net_ratelimit: 97442 callbacks suppressed [ 222.431967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.432014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.438093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.449986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.461860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.473818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.485785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.497950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 222.509626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.521493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.441933][ C0] net_ratelimit: 97755 callbacks suppressed [ 227.441954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.441991][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 227.447948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.459928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.471939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.483820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.495688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.507517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.519693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.531657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 232.451971][ C0] net_ratelimit: 93204 callbacks suppressed [ 232.451992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.452202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 232.458038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.469956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.481973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.493953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.505776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.517762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.529744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.541801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 237.461932][ C1] net_ratelimit: 98136 callbacks suppressed [ 237.461952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.462004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.467948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.479970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.492033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 237.503712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.515641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.527610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.539595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.551460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.471928][ C1] net_ratelimit: 91629 callbacks suppressed [ 242.471949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.472033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.477976][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.489842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.501816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 242.513807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.525852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 242.537535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.549463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.561420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.481930][ C1] net_ratelimit: 95952 callbacks suppressed [ 247.481951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.482030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.488209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 247.499914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.511937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.523860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.535922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.547919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.559772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.571733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.491922][ C0] net_ratelimit: 89905 callbacks suppressed [ 252.491944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.492261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 252.497973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.509834][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.521814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.533796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.545626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.557594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 252.569552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.581672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 252.664237][ T1544] batadv_slave_1: left promiscuous mode [ 253.795178][ T423] usb 4-1: USB disconnect, device number 33 [ 253.801460][ T423] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 257.501965][ C0] net_ratelimit: 92427 callbacks suppressed [ 257.501986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.502136][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 257.507993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.519876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.531907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.543749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.555648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.567619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 257.579603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.591637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 262.511928][ C1] net_ratelimit: 96960 callbacks suppressed [ 262.511949][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 262.511984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.517929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.529944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.541934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.553774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.565731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 262.577700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.589749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 262.601458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.457797][ T110] udevd[110]: worker [325] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 267.521916][ C0] net_ratelimit: 96350 callbacks suppressed [ 267.521938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.521942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.522042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.528065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.539935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.551901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.564037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 267.575665][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.587530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.599547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.531915][ C1] net_ratelimit: 97651 callbacks suppressed [ 272.531937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.531941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.532010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.537926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 272.549952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.562114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 272.573816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.585641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.597510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.609485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.541974][ C0] net_ratelimit: 107096 callbacks suppressed [ 277.541995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.541997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 277.542151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 277.548119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.560015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.571953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.583923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.595905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.607739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.619605][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.551935][ C0] net_ratelimit: 109711 callbacks suppressed [ 282.551958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.552050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 282.558059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.570142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 282.582008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.593974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.605947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.617815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 282.629709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.641642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.561991][ C0] net_ratelimit: 102309 callbacks suppressed [ 287.562012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.562055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.568079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.580075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.592074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.603917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 287.615892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.627946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 287.639694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.651774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 292.571946][ C1] net_ratelimit: 98660 callbacks suppressed [ 292.571967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.572030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.577971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.589862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.602015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.613706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.625585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.637568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.649410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 292.661374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.581987][ C0] net_ratelimit: 97302 callbacks suppressed [ 297.582008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.582067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.588097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.600087][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.612091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.623909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.635911][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.647960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 297.659712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.671778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 302.591905][ C0] net_ratelimit: 99908 callbacks suppressed [ 302.591934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.591962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 302.597928][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.609921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.621935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.633770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.645649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.657590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.669445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.681620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.601931][ C1] net_ratelimit: 95826 callbacks suppressed [ 307.601952][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 307.601960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.602063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.607955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.619843][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.631934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.643748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.655585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.667445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.679413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.611899][ C0] net_ratelimit: 100417 callbacks suppressed [ 312.611922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.611970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 312.618035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.630088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 312.642051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.653835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.665852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.677788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 312.689674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.701626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.621905][ C1] net_ratelimit: 90737 callbacks suppressed [ 317.621926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.622022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.628097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.639823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.651776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.663734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.675689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.687660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.699619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 317.711414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.631913][ C1] net_ratelimit: 93639 callbacks suppressed [ 322.631934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.631972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.637936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.649814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.662010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.673678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.685533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.697548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.709357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.721320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.641894][ C0] net_ratelimit: 89025 callbacks suppressed [ 327.641920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.641979][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.647992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.659910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.671923][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.683863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 327.695761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.707678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 327.719545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.731598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.285553][ T37] INFO: task kworker/1:0:31 blocked for more than 123 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.502105][ T36] audit: type=1400 audit(2000000237.674:24254): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2838]" dev="pipefs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 332.651956][ C0] net_ratelimit: 94824 callbacks suppressed [ 332.651977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.651997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 332.657966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.669947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.681945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.693783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.705657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.717636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.729486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.741699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.905004][ T37] Not tainted syzkaller #0 [ 332.909993][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.500484][ T37] task:kworker/1:0 state:D stack:0 pid:31 tgid:31 ppid:2 flags:0x00004000 [ 333.510731][ T37] Workqueue: usb_hub_wq hub_event [ 333.515835][ T37] Call Trace: [ 333.519122][ T37] [ 333.522079][ T37] __schedule+0x1496/0x20b0 [ 333.526600][ T37] ? __sched_text_start+0x10/0x10 [ 333.531635][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 333.536777][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 333.542368][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 333.548187][ T37] ? wake_nocb_gp+0x120/0x1b0 [ 333.552906][ T37] ? kick_pool+0xb9/0x540 [ 333.557260][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 333.562515][ T37] ? wq_worker_sleeping+0x197/0x260 [ 333.567724][ T37] schedule+0xc5/0x240 [ 333.571800][ T37] schedule_timeout+0xc7/0x3b0 [ 333.576589][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 333.581963][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 333.587505][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 333.592631][ T37] ? generic_exec_single+0x206/0x500 [ 333.597910][ T37] wait_for_common+0x368/0x650 [ 333.602691][ T37] ? wait_for_completion+0x40/0x40 [ 333.607792][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 333.613252][ T37] wait_for_completion+0x1c/0x40 [ 333.618180][ T37] rcu_barrier+0x45a/0x580 [ 333.622602][ T37] netdev_run_todo+0x118/0xce0 [ 333.627362][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 333.632647][ T37] ? mutex_lock+0x97/0x1d0 [ 333.637056][ T37] rtnl_unlock+0x12/0x20 [ 333.641285][ T37] unregister_netdev+0x166/0x1d0 [ 333.646229][ T37] ? __cfi_unregister_netdev+0x10/0x10 [ 333.651682][ T37] usbnet_disconnect+0xd8/0x3b0 [ 333.656535][ T37] usb_unbind_interface+0x2b0/0xa40 [ 333.661725][ T37] ? __cfi_usb_unbind_interface+0x10/0x10 [ 333.667450][ T37] device_release_driver_internal+0x525/0x830 [ 333.673524][ T37] device_release_driver+0x1d/0x30 [ 333.678628][ T37] bus_remove_device+0x34f/0x370 [ 333.683565][ T37] device_del+0x583/0xcf0 [ 333.687891][ T37] ? kfree_const+0x3d/0x50 [ 333.692308][ T37] ? __cfi_device_release+0x10/0x10 [ 333.697491][ T37] ? __cfi_device_del+0x10/0x10 [ 333.702344][ T37] ? kobject_put+0x238/0x2a0 [ 333.706928][ T37] ? device_unregister+0x2b/0x40 [ 333.711873][ T37] usb_disable_device+0x3af/0x770 [ 333.716888][ T37] usb_disconnect+0x331/0x950 [ 333.721555][ T37] hub_event+0x1ad5/0x4360 [ 333.725987][ T37] ? __cfi_hub_event+0x10/0x10 [ 333.730744][ T37] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 333.736114][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 333.741218][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 333.746765][ T37] ? kick_pool+0xad/0x540 [ 333.751086][ T37] process_scheduled_works+0x7f7/0x1060 [ 333.756631][ T37] worker_thread+0xc99/0x13f0 [ 333.761300][ T37] kthread+0x2c7/0x360 [ 333.765403][ T37] ? __cfi_worker_thread+0x10/0x10 [ 333.770504][ T37] ? __cfi_kthread+0x10/0x10 [ 333.775097][ T37] ret_from_fork+0x67/0xa0 [ 333.779510][ T37] ? __cfi_kthread+0x10/0x10 [ 333.784106][ T37] ret_from_fork_asm+0x1a/0x30 [ 333.788860][ T37] [ 333.835605][ T37] INFO: task syz.4.1404:5152 blocked for more than 125 seconds. [ 333.867643][ T37] Not tainted syzkaller #0 [ 333.872647][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.881313][ T37] task:syz.4.1404 state:D stack:0 pid:5152 tgid:5150 ppid:3292 flags:0x00004002 [ 333.891518][ T37] Call Trace: [ 333.894814][ T37] [ 333.897748][ T37] __schedule+0x1496/0x20b0 [ 333.902284][ T37] ? __sched_text_start+0x10/0x10 [ 333.907320][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 333.912894][ T37] ? kvm_tdp_mmu_put_root+0x1fa/0x300 [ 333.918275][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x5a8/0x730 [ 333.924802][ T37] ? kvm_mmu_uninit_tdp_mmu+0x185/0x210 [ 333.930355][ T37] ? kvm_mmu_uninit_vm+0x27/0x60 [ 333.935328][ T37] ? __kasan_check_write+0x18/0x20 [ 333.940449][ T37] ? _raw_spin_lock+0x92/0x120 [ 333.945239][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 333.950448][ T37] schedule+0xc5/0x240 [ 333.954544][ T37] schedule_preempt_disabled+0x14/0x30 [ 333.960011][ T37] __mutex_lock+0x902/0x1b90 [ 333.964645][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 333.971419][ T37] ? __call_rcu_common+0x53c/0x710 [ 333.976560][ T37] __mutex_lock_slowpath+0xe/0x20 [ 333.981595][ T37] mutex_lock+0x113/0x1d0 [ 333.985950][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 333.990820][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 333.997356][ T37] rcu_barrier+0x4d/0x580 [ 334.001693][ T37] ? __kasan_check_write+0x18/0x20 [ 334.006821][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 334.011956][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 334.017338][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 334.022129][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 334.027253][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 334.032914][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 334.038553][ T37] kvm_put_kvm+0xadf/0x12d0 [ 334.043100][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 334.048224][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 334.053466][ T37] kvm_vm_release+0x47/0x70 [ 334.057979][ T37] __fput+0x208/0xa30 [ 334.061990][ T37] ____fput+0x20/0x30 [ 334.065984][ T37] task_work_run+0x1e8/0x260 [ 334.070581][ T37] ? __cfi_task_work_run+0x10/0x10 [ 334.075719][ T37] ? __kasan_check_write+0x18/0x20 [ 334.080835][ T37] do_exit+0xa46/0x2850 [ 334.085015][ T37] ? __kasan_check_read+0x15/0x20 [ 334.090050][ T37] ? futex_wake+0x627/0x950 [ 334.094575][ T37] ? futex_setup_timer+0xb4/0xd0 [ 334.099521][ T37] ? __cfi_do_exit+0x10/0x10 [ 334.104134][ T37] ? futex_wait+0x2b8/0x7c0 [ 334.108638][ T37] ? __cfi_futex_wait+0x10/0x10 [ 334.113521][ T37] ? __kasan_check_write+0x18/0x20 [ 334.118635][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 334.123769][ T37] do_group_exit+0x21f/0x2f0 [ 334.128367][ T37] ? __kasan_check_write+0x18/0x20 [ 334.133498][ T37] ? recalc_sigpending+0x16c/0x1d0 [ 334.138616][ T37] get_signal+0x134c/0x1490 [ 334.143145][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 334.148694][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 334.154876][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 334.160363][ T37] do_syscall_64+0x63/0xf0 [ 334.164849][ T37] ? clear_bhb_loop+0x50/0xa0 [ 334.169541][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 334.175473][ T37] RIP: 0033:0x7f03a3b9df99 [ 334.179895][ T37] RSP: 002b:00007f03a4a750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.188346][ T37] RAX: 0000000000000000 RBX: 00007f03a3e25fa8 RCX: 00007f03a3b9df99 [ 334.196340][ T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03a3e25fa8 [ 334.204334][ T37] RBP: 00007f03a3e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 334.212326][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.220300][ T37] R13: 00007f03a3e26038 R14: 00007ffc14a04eb0 R15: 00007ffc14a04f98 [ 334.228298][ T37] [ 334.955354][ T37] INFO: task syz.3.1411:5175 blocked for more than 126 seconds. [ 335.001838][ T37] Not tainted syzkaller #0 [ 335.019269][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.661970][ C0] net_ratelimit: 85410 callbacks suppressed [ 337.661992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.662127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:41:3a:da:03:d7, vlan:0) [ 337.667985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.679976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.691968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.703846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.715753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.727592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.739438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.751604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.865049][ T37] task:syz.3.1411 state:D stack:0 pid:5175 tgid:5173 ppid:294 flags:0x00004004 [ 337.992004][ T37] Call Trace: [ 337.995321][ T37] [ 337.998259][ T37] __schedule+0x1496/0x20b0 [ 338.936621][ T37] ? __sched_text_start+0x10/0x10 [ 338.941720][ T37] ? __kasan_record_aux_stack+0xb2/0xd0 [ 339.696080][ T37] ? kvm_tdp_mmu_put_root+0x1fa/0x300 [ 339.701511][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x5a8/0x730 [ 339.708075][ T37] ? kvm_mmu_uninit_tdp_mmu+0x185/0x210 [ 339.713651][ T37] ? kvm_mmu_uninit_vm+0x27/0x60 [ 339.718674][ T37] ? __kasan_check_write+0x18/0x20 [ 339.723821][ T37] ? _raw_spin_lock+0x92/0x120 [ 339.728594][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 339.733842][ T37] schedule+0xc5/0x240 [ 339.737924][ T37] schedule_preempt_disabled+0x14/0x30 [ 339.743406][ T37] __mutex_lock+0x902/0x1b90 [ 339.748011][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 339.754811][ T37] ? __call_rcu_common+0x53c/0x710 [ 339.759933][ T37] __mutex_lock_slowpath+0xe/0x20 [ 339.764996][ T37] mutex_lock+0x113/0x1d0 [ 339.769340][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 339.774223][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 339.780739][ T37] rcu_barrier+0x4d/0x580 [ 339.785089][ T37] ? __kasan_check_write+0x18/0x20 [ 339.790207][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 339.795350][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 339.800728][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 339.805547][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 339.810675][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 339.816337][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 339.821995][ T37] kvm_put_kvm+0xadf/0x12d0 [ 339.826516][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 339.831633][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 339.836857][ T37] kvm_vm_release+0x47/0x70 [ 339.841369][ T37] __fput+0x208/0xa30 [ 339.845377][ T37] ____fput+0x20/0x30 [ 339.849370][ T37] task_work_run+0x1e8/0x260 [ 339.853983][ T37] ? __cfi_task_work_run+0x10/0x10 [ 339.859106][ T37] ? __kasan_check_write+0x18/0x20 [ 339.864236][ T37] resume_user_mode_work+0x35/0x50 [ 339.869387][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 339.874879][ T37] do_syscall_64+0x63/0xf0 [ 339.879308][ T37] ? clear_bhb_loop+0x50/0xa0 [ 339.884021][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 339.889923][ T37] RIP: 0033:0x7fe136d9df99 [ 339.894353][ T37] RSP: 002b:00007fe137c19028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 339.902785][ T37] RAX: 0000000000000000 RBX: 00007fe137026090 RCX: 00007fe136d9df99 [ 339.910761][ T37] RDX: 3f00000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 339.918750][ T37] RBP: 00007fe136e34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 339.926733][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.934717][ T37] R13: 00007fe137026128 R14: 00007fe137026090 R15: 00007ffc183e7878 [ 339.942715][ T37] [ 340.458552][ T37] NMI backtrace for cpu 1 [ 340.458574][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 340.458602][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 340.458615][ T37] Call Trace: [ 340.458622][ T37] [ 340.458630][ T37] __dump_stack+0x21/0x30 [ 340.458662][ T37] dump_stack_lvl+0x140/0x1c0 [ 340.458687][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 340.458713][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 340.458743][ T37] dump_stack+0x19/0x20 [ 340.458767][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 340.458789][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 340.458815][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 340.458836][ T37] ? sched_show_task+0x371/0x530 [ 340.458862][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 340.458887][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.458921][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.458947][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 340.458970][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 340.458995][ T37] watchdog+0xe45/0xf90 [ 340.459015][ T37] ? __kasan_check_write+0x18/0x20 [ 340.459038][ T37] ? __cfi_watchdog+0x10/0x10 [ 340.459059][ T37] ? __kasan_check_read+0x15/0x20 [ 340.459077][ T37] ? __kthread_parkme+0x12f/0x180 [ 340.459097][ T37] ? schedule+0xc5/0x240 [ 340.459121][ T37] kthread+0x2c7/0x360 [ 340.459142][ T37] ? __cfi_watchdog+0x10/0x10 [ 340.459163][ T37] ? __cfi_kthread+0x10/0x10 [ 340.459184][ T37] ret_from_fork+0x67/0xa0 [ 340.459211][ T37] ? __cfi_kthread+0x10/0x10 [ 340.459233][ T37] ret_from_fork_asm+0x1a/0x30 [ 340.459253][ T37] [ 340.459261][ T37] Sending NMI from CPU 1 to CPUs 0: [ 340.688237][ C0] NMI backtrace for cpu 0 [ 340.688252][ C0] CPU: 0 UID: 0 PID: 5203 Comm: syz-executor Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 340.688274][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 340.688284][ C0] RIP: 0010:unwind_next_frame+0x54a/0x6b0 [ 340.688310][ C0] Code: 06 00 00 48 8b 45 b0 42 0f b6 04 30 84 c0 0f 85 a8 00 00 00 c7 03 00 00 00 00 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc c6 05 9a ad a0 06 01 48 8b 45 c0 42 80 3c 30 00 [ 340.688324][ C0] RSP: 0018:ffffc90000006c40 EFLAGS: 00000292 [ 340.688339][ C0] RAX: 1ffff92000000d01 RBX: ffffc90000006d00 RCX: 0000000000000d01 [ 340.688351][ C0] RDX: ffffc90000007fe8 RSI: 1ffff92000000d8a RDI: ffffc90000006c70 [ 340.688363][ C0] RBP: ffffc90000006cd0 R08: ffffc90000006d10 R09: ffffc90000006d08 [ 340.688375][ C0] R10: 0000000000000013 R11: ffffffff81759ed0 R12: ffff888132a2b900 [ 340.688387][ C0] R13: 0000000001931f01 R14: ffffffff81759ed0 R15: ffffc90000006c48 [ 340.688399][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 340.688413][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.688424][ C0] CR2: 0000560647ed3008 CR3: 000000015912a000 CR4: 00000000003526b0 [ 340.688443][ C0] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.688453][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 340.688463][ C0] Call Trace: [ 340.688469][ C0] [ 340.688476][ C0] ? arch_stack_walk+0x138/0x170 [ 340.688492][ C0] ? do_softirq+0xb8/0x110 [ 340.688508][ C0] stack_trace_save+0xaa/0x100 [ 340.688525][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 340.688541][ C0] ? stack_depot_save_flags+0x38/0x800 [ 340.688561][ C0] ? kasan_save_track+0x4f/0x80 [ 340.688578][ C0] kasan_save_track+0x3e/0x80 [ 340.688594][ C0] ? kasan_save_track+0x3e/0x80 [ 340.688610][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 340.688632][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 340.688649][ C0] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 340.688665][ C0] ? dst_alloc+0x13c/0x240 [ 340.688681][ C0] ? ip_route_input_rcu+0x18d4/0x26b0 [ 340.688698][ C0] ? ip_route_input_noref+0xd4/0x150 [ 340.688713][ C0] ? arp_process+0x905/0x1810 [ 340.688733][ C0] ? NF_HOOK+0x181/0x1e0 [ 340.688750][ C0] ? arp_rcv+0x2f8/0x490 [ 340.688768][ C0] ? netif_receive_skb+0x228/0x7b0 [ 340.688790][ C0] ? br_pass_frame_up+0x126/0x1b0 [ 340.688807][ C0] ? br_handle_frame_finish+0x1178/0x1620 [ 340.688825][ C0] ? br_handle_frame+0x5a5/0xba0 [ 340.688841][ C0] ? __netif_receive_skb_core+0xfc1/0x3a70 [ 340.688862][ C0] ? process_backlog+0x40b/0xaf0 [ 340.688882][ C0] ? __napi_poll+0xd0/0x600 [ 340.688901][ C0] ? net_rx_action+0x5dc/0xd70 [ 340.688921][ C0] ? handle_softirqs+0x1aa/0x620 [ 340.688936][ C0] ? __do_softirq+0xf/0x16 [ 340.688959][ C0] kasan_save_alloc_info+0x3a/0x50 [ 340.688981][ C0] __kasan_slab_alloc+0x73/0x90 [ 340.688998][ C0] kmem_cache_alloc_noprof+0x1bf/0x410 [ 340.689013][ C0] ? make_kuid+0x1e4/0x670 [ 340.689030][ C0] ? dst_alloc+0x13c/0x240 [ 340.689046][ C0] dst_alloc+0x13c/0x240 [ 340.689061][ C0] ip_route_input_rcu+0x18d4/0x26b0 [ 340.689078][ C0] ? ip_route_input_noref+0x150/0x150 [ 340.689095][ C0] ? __kasan_check_read+0x15/0x20 [ 340.689110][ C0] ? dev_hard_start_xmit+0x6ba/0x730 [ 340.689131][ C0] ? arpt_do_table+0x77a/0x1e10 [ 340.689150][ C0] ? __asan_memcpy+0x5a/0x80 [ 340.689165][ C0] ip_route_input_noref+0xd4/0x150 [ 340.689181][ C0] ? __cfi_ip_route_input_noref+0x10/0x10 [ 340.689197][ C0] ? arpt_do_table+0x228/0x1e10 [ 340.689217][ C0] ? __asan_memcpy+0x5a/0x80 [ 340.689231][ C0] arp_process+0x905/0x1810 [ 340.689252][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689272][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689290][ C0] NF_HOOK+0x181/0x1e0 [ 340.689308][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689327][ C0] ? arp_xmit+0x200/0x200 [ 340.689345][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689364][ C0] ? br_dev_queue_push_xmit+0x571/0x710 [ 340.689381][ C0] arp_rcv+0x2f8/0x490 [ 340.689400][ C0] ? __cfi_arp_rcv+0x10/0x10 [ 340.689419][ C0] netif_receive_skb+0x228/0x7b0 [ 340.689445][ C0] ? __cfi_netif_receive_skb+0x10/0x10 [ 340.689466][ C0] ? br_flood+0x66d/0x720 [ 340.689482][ C0] br_pass_frame_up+0x126/0x1b0 [ 340.689499][ C0] br_handle_frame_finish+0x1178/0x1620 [ 340.689518][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 340.689537][ C0] br_handle_frame+0x5a5/0xba0 [ 340.689554][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 340.689571][ C0] ? __cfi_packet_rcv+0x10/0x10 [ 340.689585][ C0] __netif_receive_skb_core+0xfc1/0x3a70 [ 340.689607][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689627][ C0] ? qdisc_run_end+0x120/0x120 [ 340.689646][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689665][ C0] ? NF_HOOK+0x181/0x1e0 [ 340.689682][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689701][ C0] ? arp_xmit+0x200/0x200 [ 340.689718][ C0] ? __kasan_check_read+0x15/0x20 [ 340.689733][ C0] ? __cfi_arp_process+0x10/0x10 [ 340.689752][ C0] ? __kasan_check_write+0x18/0x20 [ 340.689768][ C0] process_backlog+0x40b/0xaf0 [ 340.689791][ C0] __napi_poll+0xd0/0x600 [ 340.689811][ C0] net_rx_action+0x5dc/0xd70 [ 340.689833][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 340.689854][ C0] ? sched_clock+0x44/0x60 [ 340.689873][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 340.689895][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 340.689916][ C0] handle_softirqs+0x1aa/0x620 [ 340.689932][ C0] __do_softirq+0xf/0x16 [ 340.689950][ C0] do_softirq+0xb8/0x110 [ 340.689963][ C0] [ 340.689969][ C0] [ 340.689975][ C0] ? __cfi_do_softirq+0x10/0x10 [ 340.689988][ C0] ? _raw_spin_lock_bh+0x96/0x130 [ 340.690005][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 340.690021][ C0] ? preempt_schedule_thunk+0x1a/0x40 [ 340.690039][ C0] __local_bh_enable_ip+0x74/0x80 [ 340.690054][ C0] _raw_spin_unlock_bh+0x54/0x60 [ 340.690070][ C0] addrconf_ifdown+0x60d/0x1970 [ 340.690087][ C0] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 340.690103][ C0] ? addrconf_cleanup+0x150/0x150 [ 340.690118][ C0] ? __kasan_check_write+0x18/0x20 [ 340.690133][ C0] ? mutex_unlock+0x90/0x240 [ 340.690153][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 340.690172][ C0] ? macsec_notify+0x111/0x4f0 [ 340.690191][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 340.690211][ C0] addrconf_notify+0x17a/0xeb0 [ 340.690228][ C0] ? ip6mr_device_event+0x1f4/0x230 [ 340.690242][ C0] ? __cfi_addrconf_notify+0x10/0x10 [ 340.690259][ C0] notifier_call_chain+0x106/0x2b0 [ 340.690275][ C0] raw_notifier_call_chain+0x31/0x40 [ 340.690291][ C0] unregister_netdevice_many_notify+0xde1/0x1be0 [ 340.690313][ C0] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 340.690334][ C0] ? add_timer_global+0x84/0xb0 [ 340.690351][ C0] ? __queue_delayed_work+0x1b0/0x240 [ 340.690372][ C0] ? __kasan_check_read+0x15/0x20 [ 340.690386][ C0] unregister_netdevice_queue+0x302/0x350 [ 340.690405][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 340.690424][ C0] ? linkwatch_fire_event+0x212/0x260 [ 340.690470][ C0] __tun_detach+0xc98/0x1450 [ 340.690486][ C0] ? __cfi_tun_chr_close+0x10/0x10 [ 340.690500][ C0] tun_chr_close+0x93/0x150 [ 340.690514][ C0] __fput+0x208/0xa30 [ 340.690534][ C0] ____fput+0x20/0x30 [ 340.690552][ C0] task_work_run+0x1e8/0x260 [ 340.690571][ C0] ? __cfi_task_work_run+0x10/0x10 [ 340.690589][ C0] ? free_nsproxy+0x223/0x290 [ 340.690611][ C0] do_exit+0xa46/0x2850 [ 340.690630][ C0] ? __kasan_check_write+0x18/0x20 [ 340.690645][ C0] ? netlink_unicast+0x91a/0xa70 [ 340.690666][ C0] ? __kasan_check_write+0x18/0x20 [ 340.690681][ C0] ? __cfi_do_exit+0x10/0x10 [ 340.690699][ C0] ? netlink_sendmsg+0x80d/0xad0 [ 340.690715][ C0] ? __kasan_check_write+0x18/0x20 [ 340.690729][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 340.690746][ C0] do_group_exit+0x21f/0x2f0 [ 340.690765][ C0] ? __kasan_check_write+0x18/0x20 [ 340.690779][ C0] ? recalc_sigpending+0x184/0x1d0 [ 340.690797][ C0] get_signal+0x134c/0x1490 [ 340.690817][ C0] ? __cfi___sys_sendto+0x10/0x10 [ 340.690840][ C0] arch_do_signal_or_restart+0xbc/0x700 [ 340.690855][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 340.690872][ C0] syscall_exit_to_user_mode+0x57/0xb0 [ 340.690894][ C0] do_syscall_64+0x63/0xf0 [ 340.690910][ C0] ? clear_bhb_loop+0x50/0xa0 [ 340.690930][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 340.690950][ C0] RIP: 0033:0x7fec49f59117 [ 340.690962][ C0] Code: Unable to access opcode bytes at 0x7fec49f590ed. [ 340.690971][ C0] RSP: 002b:00007ffcd1ebd5c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 340.690986][ C0] RAX: 0000000000000054 RBX: 00005555693b0500 RCX: 00007fec49f59117 [ 340.690997][ C0] RDX: 0000000000000054 RSI: 00007fec4ad54670 RDI: 0000000000000003 [ 340.691007][ C0] RBP: 0000000000000001 R08: 00007ffcd1ebd624 R09: 000000000000000c [ 340.691017][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 340.691027][ C0] R13: 0000000000000000 R14: 00007fec4ad54670 R15: 0000000000000000 [ 340.691039][ C0]