last executing test programs: 2m5.458009225s ago: executing program 0 (id=428): r0 = socket(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000001c0)={'veth0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000140)={{0x32, @rand_addr=0x64010101, 0x4e22, 0x1, 'wrr\x00', 0x8, 0xc6, 0x25}, {@broadcast, 0x4e20, 0x2, 0x6d3, 0x9, 0x5}}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22183, 0x84) write$cgroup_int(r3, &(0x7f0000000200)=0x1000009ee8, 0x12) poll(&(0x7f0000000900)=[{r1}], 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) epoll_pwait2(r3, &(0x7f0000000140), 0x0, &(0x7f00000000c0)={r4, r5+10000000}, &(0x7f00000001c0)={[0x1]}, 0x8) 2m5.417475387s ago: executing program 0 (id=429): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x44, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pread64(r2, &(0x7f0000003c40)=""/58, 0x3a, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000240)={0x3ff, 0x2924, 0xffff, 0x9e02, 0xf}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x8, 0xfffffff9, 0x1, 0x13, "0032b3b5c7000000000000000000f7ffffff00"}) r3 = syz_open_pts(r1, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x16) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="400f10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000003000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m2.356993306s ago: executing program 0 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) syz_io_uring_setup(0x376d, &(0x7f00000004c0)={0x0, 0x133e, 0x800, 0x3, 0x1c4, 0x0, r2}, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x48) recvfrom(r1, &(0x7f0000000580)=""/199, 0xc7, 0x103, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101081, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x81105a, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) getsockname$packet(r6, 0x0, &(0x7f0000000640)) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x100000, 0x0) (async, rerun: 32) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=T']) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01070100001079492be69f1a4077b8549b6a7fb8b06fba9db3c74431d9554e904c15422217a1c4413e1c0ed2ef6794b56cc9845dda02423656a9c017c1e6901e5b892ac5526e841da9d741abf9245aba0d33aec5ccb5e583531c10189685defdf2cb524c6519257bc3d9cee5959d67475544c5d3fb8ea3b7fca0ba23816a92779e049d965c942e2a081f359d699dfe89ce81f85961097efeeb24ec4848d725c015c48804e7f8fb36baf53b78fea0662931883b879a22ea17e4832f2a1f33a9883d257a65afc4a7ce8bfd7c8bd7bce628349edd46"], 0x14}}, 0x20000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) getdents64(r8, &(0x7f0000004340)=""/159, 0x9f) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r4) 2m2.356163226s ago: executing program 0 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9901) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) poll(&(0x7f0000000000)=[{r2, 0x62}], 0x1, 0x2) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 2m2.346548906s ago: executing program 0 (id=446): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x3, [0x699000000000000, 0x50, 0x2, 0x80000001, 0xfffffffffffffff7, 0x4]}) write$selinux_validatetrans(r0, &(0x7f0000000080)={'system_u:object_r:syslogd_var_run_t:s0', 0x20, 'system_u:object_r:var_t:s0', 0x20, 0x2, 0x20, '/usr/sbin/ntpd\x00'}, 0x66) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0xd, 0x1}, 0x41, [0x1000, 0xb, 0x1, 0xb60, 0xfffffff9, 0x1000, 0x5, 0xaaa8, 0xeb, 0x7, 0x7, 0x5, 0x7fff, 0x7, 0x5, 0x36, 0x6, 0x9, 0xe731, 0x2, 0xa, 0x3, 0x6, 0x9, 0x46, 0x2, 0x7ff, 0x541, 0x7, 0x7, 0x5314, 0x3, 0x0, 0x9, 0x8, 0x5, 0x5, 0x800, 0x9, 0x0, 0xef7, 0x81, 0x5, 0xfffffffd, 0x24a, 0xff, 0x7fffffff, 0x7, 0x1c00000, 0x8e000000, 0xd8, 0x2, 0x2, 0x50, 0x0, 0xf0, 0x2, 0x2eb7884b, 0x2, 0x8, 0x6, 0x3, 0xf5d], [0x9, 0x9, 0x3, 0x3, 0x100, 0x4, 0x6, 0x9, 0x4, 0x4, 0x9, 0x2209, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x2, 0x401, 0x9, 0x1, 0x1, 0x8, 0x5, 0xe080, 0x1, 0x401, 0x3ff, 0x0, 0x3, 0xc, 0xd7c, 0xff, 0x81, 0x7fff, 0xd, 0x3, 0x6, 0x0, 0x0, 0x5, 0x35b, 0x3, 0xffff, 0x80000001, 0x6662, 0x7, 0x3, 0xc9, 0x800, 0x7fffffff, 0x0, 0xfffffffc, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0xd, 0xfffffff7, 0x3, 0x5, 0x80000000], [0xffffffff, 0x5, 0x4, 0x80000001, 0xfffeffff, 0xac, 0x1, 0x0, 0x7fffffff, 0x2, 0x2, 0x80000000, 0x6, 0x1, 0x2, 0x1ff, 0x800, 0x2, 0x7, 0x660488c, 0x101, 0x81, 0x9, 0x3, 0x8, 0x46d6faec, 0x35e70000, 0x70, 0xd4000000, 0x400, 0x56, 0x3, 0x297f731, 0xfffffff8, 0x3, 0x3, 0x10001, 0x4e6, 0x0, 0x9, 0x9b51, 0x3, 0x4, 0xfffffffd, 0x3, 0x5, 0x0, 0x0, 0x193e0, 0xf, 0x0, 0x8573, 0xf, 0x32c1, 0x6, 0x2, 0xa6, 0x1, 0x9ee2, 0x0, 0xf, 0x4, 0x1, 0xfffffffa], [0x6, 0xf, 0x32fa, 0x9, 0x36e3, 0x5d, 0xb, 0x7, 0xa, 0x5, 0x3, 0x4, 0x3, 0x40, 0x7b, 0x8, 0x80000000, 0x3, 0xfffffffd, 0x41, 0x9, 0x6, 0x4, 0x8, 0x86, 0xfffff1f4, 0x2, 0x5, 0x4, 0x100, 0x5, 0x4, 0x7c86, 0xc, 0x3, 0x3ff, 0x7cbf, 0x400, 0x5, 0xfffffffc, 0x4, 0x2, 0x8, 0x5, 0x8, 0x8, 0x5, 0x1, 0x80000000, 0xbe, 0x7, 0x4, 0x3, 0xa68, 0xffffffc0, 0x7, 0xffff4ded, 0x0, 0xf, 0x7, 0xffffff7f, 0x80000000, 0x8001, 0xbca9]}, 0x45c) pread64(r0, &(0x7f0000000580)=""/44, 0x2c, 0x1) r1 = syz_usb_connect$uac1(0x1, 0x13b, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x129, 0x3, 0x1, 0x9, 0xa0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6cda, 0xb6}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x4, 0x5, [0x5, 0x9, 0x5, 0xa, 0x9], 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x1, 0x6, "92"}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x1, 0x6, [0x3, 0x1, 0x4, 0x9, 0x4, 0x4], 0xc}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x4, 0xff, 0x5, 0x5, 0xe}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x6, 0x6, 0x5, 0x1, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x5, "8b88"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0x5, "03a242", "3bbdd1"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfa, 0x2, 0x8, 0x1, "14a8"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x5, "3f2c9a85280543"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x4, 0x6, "9821c2", '5'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x6, 0x1, "7c498f0381"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x5, 0x5, {0x7, 0x25, 0x1, 0x81, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0x5, "dab6"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3f, 0xa, "733e80ca2fc4"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x2, 0x36}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1001}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x2, 0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x21, 0x8, '4\tr'}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x0, 0x4, {0x7, 0x25, 0x1, 0x81, 0x7, 0x529}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x0, 0x6c, 0x1, 0x2b, 0x10, 0x6}, 0xf, &(0x7f0000000740)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x12, 0x8, 0x6eb}]}, 0x1, [{0x6f, &(0x7f0000000780)=@string={0x6f, 0x3, "4e866d2b5657e6f6bcdace745f57fdeb71e0ccfed75cfe653844d1f3dc2962134207d6136d7160a1fae57dbe82d31c688231bf2ad1dc3510e5201f21fdbf10a85af1511b0e483c5b0b1fd5a80d550fb1f79effbe02835a64fa8d0b4ad4ef8d601f6c0dd0c103df5f3947e31b81"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000a00)={0x14, &(0x7f0000000840)={0x40, 0x5, 0xd9, {0xd9, 0x10, "95097fd6830f7ba518699542af424241ecca1a0454130d7983a3d8c6ca21c642dbdc3345d69cec0ceb59fbcd4a96d3e58e0cacfd65f49772656ec584dc21d74ad6d40da34e2b3eff25e1acf36f28dd89d9b3beab8a3202c3479e507f66162b41e6a4d6f7a8007143608c62c0ee2d988430dce1607494d10a095df8da177ea63e7fe525adb1466cf138ec4f5e96508ec7cac560c09601772ab7651aec89def69ee68249061896f91e7facf97a20c4a5b199a5620b7cefa946a987431afa0812d79d4e6bca888767298f772f98f633f80ea1dfd22de469bb"}}, &(0x7f0000000940)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "1db6435803af836387c43ed6408a91f16b55b34a73990ed21db646b3bbfff365a04a83d202d2b4189194247d99e2bf210805893a9e0f0e743eb649cdf02fbc7e06a877554160089bcf83d7ec2af3f7b06088579670854ef6e0a32a2bb585eb897fc6a7ecfcac49011aad1b5f4225d886860c28869615539401315e874ef602adb6655173e36350f9b5136f68fe"}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x40, 0x0, 0x5f, "623fb79496d52df2da28f1c1ad6c5c03a4e6ad90903f9bf76e4fbbf230aea961033e626e8a59d32aa6b3d76ba46936b3be201b7fe6c5318527ea3ccde0b1c6aa7225022bf238c05e2e7d748ee6f7ab34ac7a152195240c314c2b0f0bd217b1"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b40)={0x20, 0x81, 0x3, "fd833b"}, &(0x7f0000000b80)={0x20, 0x82, 0x2, "d461"}, &(0x7f0000000bc0)={0x20, 0x83, 0x3, "c9e37b"}, &(0x7f0000000c00)={0x20, 0x84, 0x3, "a40e85"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "b7c68d"}}) syz_usb_connect$uac1(0x6, 0xa3, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x3, 0x10, 0x5d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x9}, [@mixer_unit={0x7, 0x24, 0x4, 0x6, 0x2, "4f15"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x4, "be1e63"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0xd9, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x81, 0x4, 0xfc, {0x7, 0x25, 0x1, 0x81, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x10, 0x3, 0x0, 0x2, "dc5cc70e8f13"}, @as_header={0x7, 0x24, 0x1, 0x7, 0xae, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x630, 0x2, 0x4, 0x1, {0x7, 0x25, 0x1, 0x83, 0x4}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x1, 0x8b, 0xb, 0x20, 0x80}, 0x5, &(0x7f0000000e00)={0x5, 0xf, 0x5}, 0x7, [{0x4a, &(0x7f0000000e40)=@string={0x4a, 0x3, "1316d7b71166bd45943e4e5fabc617211acfb5bbd8cf44e78adc291ec778a96a96379a8951c4afb1d5ff973d89586208528e79b4f17237f4bba70c08ccae0d49db3a67f1cd9e8a29"}}, {0x6f, &(0x7f0000000ec0)=@string={0x6f, 0x3, "ad623f5a674ee99f46993727e5afb7e60286596573a7eea8667ecef29ea88dd3843ce2a713edd5157e9ed9c07c53b82f2cf99b7a89f9d85a775e97b0396faf2022bd1860d42497e2b790cd420ca07539d166498822971bb608eb55541478a567483a19d34081d32107c24c5e30"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x1c7d}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x1401}}, {0x7, &(0x7f0000001000)=@string={0x7, 0x3, "fd6364e367"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x443}}]}) r2 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000001340)={0x2c, &(0x7f0000001140)={0x20, 0x4, 0x55, {0x55, 0x2, "5e644181e4f0d1a57f277d96cefe7f9f53507fcb4d8138a322fd77ff4efd2705c0e7ee40ebe745df060b4b7db979cee78250226284db6fc1cd8e2c12f16cfb822ec80cb0819223d8ab12ef9b12909bc9ff0d36"}}, &(0x7f00000011c0)={0x0, 0x3, 0x69, @string={0x69, 0x3, "e5430ba97b2a5ecb3b8537b275290e893b8c46895932abf378a522682f6643a57002aac7cc4888ee464e021488b1619359d4ad12071262954b5c9d90cfffac4b32ae825a0645afa3a4585fd32d631158ca29a61baca9b771e01a2340d53bb85e5ad5af0be65627"}}, &(0x7f0000001240)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x1, [@generic={0x41, 0x10, 0x1, "8285d7cb2755fa07c7c5580ec4daee854a3fc1aa76d6632b1b77e92d5c0c6a5a24a618bdd84912cfac73b05f733bf9deb2b87d19d23890c89135cead125f"}]}}, &(0x7f00000012c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xd, 0x2, "68af9288", "cd90d340"}}, &(0x7f0000001300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x60, 0x5, 0x2, 0x3, 0x5, 0x6a39}}}, &(0x7f0000001780)={0x84, &(0x7f0000001380)={0x0, 0x14, 0x10, "2cbf51ce686b0de79813b424e90f184f"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x32}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000001440)={0x20, 0x0, 0x4}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x20}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0x242d}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x4e}, &(0x7f0000001540)={0x40, 0xb, 0x2, "acd0"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0xfffd}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, &(0x7f0000001600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xbba23f9f27484714}}, &(0x7f0000001640)={0x40, 0x19, 0x2, "f6aa"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x4}}) write$selinux_validatetrans(r0, &(0x7f0000001840)={'system_u:object_r:systemd_logger_exec_t:s0', 0x20, 'system_u:object_r:urandom_device_t:s0', 0x20, 0x6, 0x20, '/usr/sbin/cupsd\x00'}, 0x76) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000018c0)={0x0, 0x6, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001cc0)={r3, 0xfffffffffffffffc, 0x1, 0x1}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xf61, 0x4) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0x800, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002100)={0xaa, 0xf3}) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002180)={0x3, &(0x7f0000002140)=[{0x7, 0x9, 0xf0, 0x4}, {0x20, 0xf2, 0x6, 0x4045}, {0x6, 0x7f, 0x7f, 0x8}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f00000021c0)={0x80, 0x0, 0x6d}) timerfd_create(0x3, 0x80800) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000002240)=0x8000000000000001) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x100010, r5, 0x1af2e000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000002280)={{0x2, 0x4e21, @loopback}, {0x306, @random="62f6a4244180"}, 0x50, {0x2, 0x4e21, @rand_addr=0x64010100}, 'ip6_vti0\x00'}) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002300), 0x384801, 0x0) sendmsg$AUDIT_USER_TTY(r8, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xcc, 0x464, 0x200, 0x70bd27, 0x25dfdbfb, "6fcd2dcf951d8a4581abd0572608c03c4e0598254e8713934698ef6f49b00208c92f86fbd04790d0ac2a2eb4cb477a134d7e9c3520883420a4b23a6be4dfacc72375553172d6ac7bcc5c84261370e2ce340d15c79074e86b74158278e31941e266cf6287301f28c0c8328e075d1e2894837a737c06982d3bf64b16469e47129a5d48680832afba2fca165052767fadcf251353984b658054b6ba7b4481d113915d03ebae21c3c66e4bfc97b6efb72e204a93acd300ab5303ad8e0bf0", ["", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x840}, 0x4010) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x10) 2m2.218947024s ago: executing program 0 (id=447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000c40)={@val={0x0, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @dev={0xac, 0x14, 0x14, 0x33}}, {0xa000, 0x86dd, 0x87, 0x0, @gue={{0x0, 0x1, 0x0, 0xa, 0x0, @void}}}}}}}}, 0x94) (async) write$tun(r0, &(0x7f0000000c40)={@val={0x0, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @dev={0xac, 0x14, 0x14, 0x33}}, {0xa000, 0x86dd, 0x87, 0x0, @gue={{0x0, 0x1, 0x0, 0xa, 0x0, @void}}}}}}}}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) 2m2.189059685s ago: executing program 32 (id=447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000c40)={@val={0x0, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @dev={0xac, 0x14, 0x14, 0x33}}, {0xa000, 0x86dd, 0x87, 0x0, @gue={{0x0, 0x1, 0x0, 0xa, 0x0, @void}}}}}}}}, 0x94) (async) write$tun(r0, &(0x7f0000000c40)={@val={0x0, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @dev={0xac, 0x14, 0x14, 0x33}}, {0xa000, 0x86dd, 0x87, 0x0, @gue={{0x0, 0x1, 0x0, 0xa, 0x0, @void}}}}}}}}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904"], 0x0) 47.798266887s ago: executing program 1 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x1, r3, 0x11}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r3, 0x5}) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x2804cdc, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643de7eb7697ea8441cf9e1db754d3fd077c81ae9c7a26db44f30f91becbb769579e9cf0", @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000400,default_permissions,\x00']) 47.730008661s ago: executing program 1 (id=783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) socket$netlink(0x10, 0x3, 0x0) 47.600545639s ago: executing program 1 (id=784): getpgid(0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x10000) ptrace$setregs(0xd, r0, 0x3, &(0x7f0000000740)="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") r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092eec620ac05c2773aeb010203010902240001000020000904c40142fffd01800905020202000009058202000200000055adfee63bcc404663c1e1cbcb164ed95a0dd4107830732530295436df9ca4d63df1c3c4b7bd40e8c8371dc40dec8baf869b2ed3ac6b8090be6b0d4de1eb524c8ab1dc0000"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x6e0}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x301180, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x320) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x8, 0x0, 0x0) r10 = memfd_secret(0x80000) ftruncate(r10, 0x3) finit_module(r10, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 44.876233797s ago: executing program 3 (id=797): r0 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$rfkill(r1, &(0x7f0000000c80), 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @dev}, &(0x7f0000000100)=0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0xf) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f0000000180)={0x3, 0x5, 0x5, 0x1, 0x1, [0x101, 0x2, 0x5, 0x4]}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010055}]}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=@delqdisc={0x11c, 0x25, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xc, 0xfff3}, {0x0, 0x9}}, [@q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xd}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x33}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2aa5}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) 44.593062174s ago: executing program 4 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = epoll_create1(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x6c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x2}) fcntl$setlease(r1, 0x400, 0x1) waitid$P_PIDFD(0x3, r1, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) fcntl$getflags(r1, 0x11) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000200)=""/11, 0xb}], 0x3}, 0xfffffffd}], 0x1, 0x2, 0x0) 44.253195774s ago: executing program 4 (id=800): close(0xffffffffffffffff) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xcc2c0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r3 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_icreq_pdu(r3, &(0x7f00000000c0)={{0x0, 0x8, 0x80, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x80, 0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/vlan/config\x00') r5 = accept$inet6(r4, 0x0, &(0x7f0000000180)) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000001c0)) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x16) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000200)={[{0x80, 0x6, 0x6, 0x2d, 0x80, 0x1, 0x8, 0x1, 0x7f, 0x59, 0xd0, 0x3, 0x20}, {0x56, 0x4, 0xb1, 0xf9, 0x0, 0x0, 0x1, 0x2, 0xfa, 0x6, 0x5, 0x5, 0xfff}, {0x9, 0x0, 0x2, 0x2, 0x7, 0x81, 0x9, 0x4, 0x2, 0xe, 0x6, 0x0, 0x8}], 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={@multicast1, 0x1, 0x0, 0x50, 0x0, [{@remote}, {@empty}, {@broadcast}, {@broadcast}, {@local}]}}) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000340)=""/241) (async) getsockname$inet6(r5, &(0x7f0000000440), &(0x7f0000000480)=0x1c) (async) timerfd_create(0x0, 0x80000) syz_usb_connect$uac1(0x3, 0xb9, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x3, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xd}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x6, 0x8c, 0x0, 0x2, 0xc9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x33, 0x2, 0x0, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x1, 0x9, "a8c6"}, @as_header={0x7, 0x24, 0x1, 0xff, 0xb, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0xf6, 0x4, "a76c", "4dbd"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x4, 0x1, 0xb, 0x92, "3c9e", "ed3a1e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x1, "3be1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x4, 0x7, {0x7, 0x25, 0x1, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x5, 0x9, 0x7, 0x40, 0x7}, 0x8, &(0x7f00000005c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xe8ea}}, {0x4b, &(0x7f0000000640)=@string={0x4b, 0x3, "c0f147ebe2060b253e30b30a902b991c8cdc651ff4a67ee6f30a2585fe197e28bdac80bbccb107ed5b107243d56e287401c5db518313c51b355af32cc0b301904835c47da73263b6a9"}}, {0x9, &(0x7f00000006c0)=@string={0x9, 0x3, "29878726efeb00"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x82c}}, {0x63, &(0x7f0000000780)=@string={0x63, 0x3, "9b75f31d62ef1acccb18ccc6e7e0a002031f6d16baf85640ba35f11cd59e6ddeb7cf0a2d1f01e379025bcdb59460da1c888fe6b712e55365f8bfc36041a5d1616f0c25e8b4224b808e841fdbefe2abe1d5a46cfe7f000882cc8ab37be39b3af4ab"}}]}) (async) read$FUSE(r4, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000028c0)={0x50, 0x0, r7, {0x7, 0x2d, 0xffffffff, 0x1000080, 0x9, 0x9, 0x5, 0xff, 0x0, 0x0, 0x1, 0xffff7cf7}}, 0x50) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, &(0x7f0000002940)={0xf574, 0x8e, 0x1, 0x8001, 0x3, 0x6, 0x1e0550ee, 0x4}) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000029c0)=0x990) (async, rerun: 32) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000002a00)) (rerun: 32) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r8, &(0x7f0000002a40)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) (async) write$P9_RREMOVE(r4, &(0x7f0000002a80)={0x7, 0x7b, 0x1}, 0x7) syz_usb_connect(0x2, 0x846, &(0x7f0000002ac0)={{0x12, 0x1, 0x310, 0xbb, 0xfb, 0x9a, 0x8, 0x2040, 0x7060, 0x6b6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x834, 0x3, 0x7f, 0x8, 0xf0, 0x4, [{{0x9, 0x4, 0x5b, 0x4, 0x7, 0x52, 0xee, 0x94, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x40}}, @hid_hid={0x9, 0x21, 0x7a, 0x34, 0x1, {0x22, 0xb89}}], [{{0x9, 0x5, 0x7, 0x9, 0x200, 0x3, 0xeb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x382a}, @generic={0x1c, 0x6, "189abd3fa7f9f40885f9322baabcf043daa500ce625e6b9d8c90"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0x5, 0x0, [@generic={0xd9, 0x7, "cfb37e813e44ebc307c683e6b3f02828e1917c652f01d50a38938386733acec068c368948a41a8e998d86adeafcb0d5b85332644e873adb4fba3f6d68ef6798529fe1c8b407e39d8ebc13affd3dfdc77735cad483fa32a8b5bff612e2b1204267ca86eeaf6aa232e25665b1169388bcc5790ff522e8e689e3afd0c300dfa5ab03edbf0ca436f59a6355a1291403c1737ba57b1ebc695e59fab856aa95fd1da97920d58fe538dd725e63d3581718ed9d11a7b18e2cdd1ec42655c0cd4a2478d24a492ad5f1b5412903b37d7c24d4a02d46bede498f82323"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x40, 0x0, 0x7f}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x8, 0x8, 0x3e, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1e, 0x7, 0x4e, [@generic={0xea, 0x8, "066b0c58639892bc5bc0f144caa5d5160bdac58bf1c599d8e7ecbcdecd240a482551e03bcc6e45e1e1a69392b5bf4d1432493d443b35b7f13607b5e8766b912c12de1275f6726c622fa564725492a1bfa3a2a231d89704a381aabbb46df3f229a1ab7525db248436c9353f87b94942684d4fc2d9c94d386314f46846a88bca0fd34930f91b39d369a692f0461b1a513143e2eaf9e0962db460d186063f72c212544850a1d785fc5b9f1e3d645923a0ed8161f09a062108060339853ed8eb315503481535f419f5eeda0838bb54e9fb3abc4e9c57a7a9816d8fb2e83e1edcb2ddd78be1c011a7a788"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x40, 0xa, 0xb, [@generic={0x26, 0x22, "c1242f4c9dd4c8c8939165f984c850180fe5cc4389f3864fda81d0859449abd4d65681d6"}, @generic={0xf1, 0x3, "36888b4d448db8733c60c776362a0ef37723763f71098a516e233fb2108dba0163d383bdb4c3c91e4aa0c38daec6b0cf21107e5c2bb56e0205252e53129f68703c93e9573cc3fd8e9dca9491a8bdba2ac2583acb07270a0388aa07ff684e463d75b0c579230cdb74f752deeaba8c85b7c43cc0e350ec2562ccbaba52ce47e1839a712dc6e87aa5068248653d5d199375bc169a397c57d7b4031a8d111912519546f2e3823aa6188520e381c27afdba5781bcd867a6d0dceca24cc1b91605153d6127f776836cda06668a096c69f427fee071495018e4a74b94caca23861d5a5a49466f2dbba18b931b79418a171e64"}]}}, {{0x9, 0x5, 0x80, 0x14, 0x20, 0x44, 0xf4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}]}}, {{0x9, 0x4, 0x74, 0x54, 0x5, 0x2, 0x2, 0xff, 0xb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "32fa25fb"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0x8, 0x5}, [@dmm={0x7, 0x24, 0x14, 0xe, 0x7fff}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x5}, @country_functional={0x6, 0x24, 0x7, 0xf7, 0x9}, @dmm={0x7, 0x24, 0x14, 0xe, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x8}, [@mixer_unit={0x5, 0x24, 0x4, 0x6}]}], [{{0x9, 0x5, 0x5, 0xc, 0x40, 0x7, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x67, 0xf4b5}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x9, 0x7, 0x0, [@generic={0x73, 0x10, "b6b5657a991efa1de39cb86d0149d902cef9eb5844f3b696752ab3b77dd0488d73ca04c71b21b97e95d312499660141d462118d8491af11e0353aa0ce0ca239fca5b6983b149258b43f93ca39049b9afd6a3ebc7176c5b706937a8a23aad27f8e90f168c15c60748e6e4f9ad0f1c04481c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0x90, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x5924c1fdc08d3607, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x6, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa, 0x5}]}}]}}, {{0x9, 0x4, 0x78, 0x75, 0xc, 0xff, 0x5, 0x33, 0x8, [@uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xffff, 0x4b4, 0x8, '8'}, @as_header={0x7, 0x24, 0x1, 0x3, 0xe, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0x19}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0x5, 0x4, "bbff2ed5177260"}]}, @hid_hid={0x9, 0x21, 0x5, 0x84, 0x1, {0x22, 0xe68}}], [{{0x9, 0x5, 0x8, 0x10, 0x3bf, 0x9, 0xd, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x38, 0x5c, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0x80, 0xfd, [@generic={0xa, 0x30, "dec84af065c3ab09"}, @generic={0x5, 0x21, "df61ff"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x40, 0x9, 0x0, [@generic={0x92, 0xb, "430926a721b26e955e3905d1168c53844bf6024f39b11a0323934b24de4d11d42b291752fe2fd32501106b72d8e3ca8e8573aa7602d9c7432090b9721f27623a036a80a0c32dc37caff640ef2d256ae4858b6afbc8d7c1e4831ac856889b29dfa9afa6fe1c43652c024c0802b1096f97f71ff78698007ce67735de772f5c04b439feb9bb3b55740e439246a243de11c8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x13, 0xc, 0x0, 0xe, 0xd3, 0x1, [@generic={0x48, 0x8, "4252fb2a8390a6b2ce6e0816a990c29c4a31e1f55876e2e30be1b4fe66995a68aed8983e9f1bbe7183ea7a6a2cf1c45f46f5cbff909c53f6d3f6f53bc706155b7434b47015e4"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x40, 0x1, 0xcb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @generic={0xff, 0x29, "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"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x6, 0xe2, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x5, 0x6, 0x7, [@generic={0x3d, 0x7, "6ffba4f99f923c3e619b22bf594ee9e7bf4786f69448247795df3aef9d777580f4cf73a6bc5e20baa03ebda54a143ea27de217aef97254c73b3814"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xb9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0xbe, 0x9, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x80}, @generic={0xc0, 0x1, "a33f38cd1a4ac1bd593fc99c02d4f88ac337719a913a08c1725b640fbb6f310f83a0eb03d6c17c706d2b5da54d44addb20bf665812734229f78aee6c3f21d833f415d38d07c90701794bbcabfa3af34a5d90b6f29128148f95d33458fd91e6883e7dfff82763ed1d7981dd25a8d35ccf7120e8ba57a7cd4e3aad284f56fbe8406d3e099f142dc8dade3e13e6f77a7390abb66ed709534d449371a91669187e7db17bf0559e517d220e900786527dd3cf52338a08138ba7c87cee77623feb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x7f, 0xf8, 0x74}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x0, 0x7}}]}}]}}]}}, &(0x7f00000035c0)={0xa, &(0x7f0000003340)={0xa, 0x6, 0x310, 0x10, 0x1, 0x8, 0xff, 0x6}, 0x24, &(0x7f0000003380)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "7f1653c49411fa83b78e14565667c734"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xd, 0x4, 0x2, 0x4, 0x5}]}, 0x6, [{0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x92, &(0x7f0000003400)=@string={0x92, 0x3, "c46abc82d57b13a7f73453b7a6922fbcefd4665c6ce54a6068b0f80e6083daa29ec69161913209372a981fae3e7abf77848081c15332645093837374034e055e69ad9096aa415c9ffd29c3f1dfb923b28765243563f8bd9f69f51d65a7ad542fe04a996b8b6ca9f0147baa1eb63bd7ae8229407d241de9dfcd4b4b6ee021f517c6addbfbc62111c971865bb16d1a9f9b"}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000003540)=@lang_id={0x4, 0x3, 0x4ff}}, {0x20, &(0x7f0000003580)=@string={0x20, 0x3, "837748961cc8062621743ff992dc51ca7c13a9298c6effdd6b7c2dfd1298"}}]}) socket$netlink(0x10, 0x3, 0x9) 44.252954424s ago: executing program 4 (id=801): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x29, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, 'R'}, @global=@item_012={0x2, 0x1, 0x7, '+\x00'}]}}, 0x0}, 0x0) 44.252652094s ago: executing program 1 (id=802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x10, {[@global=@item_012={0x2, 0x1, 0x17, "270e"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_4={0x3, 0x1, 0x9, "ea6f8576"}, @global=@item_4={0x3, 0x1, 0x0, "d77d0031"}, @local=@item_012={0x1, 0x2, 0x1, "0e"}]}}, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0xe172) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x3}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, 0x0) 44.252210784s ago: executing program 2 (id=803): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fcntl$dupfd(r0, 0x0, r1) (async) syz_open_dev$MSR(&(0x7f0000000040), 0xf5f, 0x0) 43.297115519s ago: executing program 3 (id=804): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x29, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x7f, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x4, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa4, 0x8, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x430, 0x8, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x8, 0x0, 0x8, 0x6}, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "3fd870feaa962d6e88097c0334ec286d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0xe, 0x2}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x439}}, {0x64, &(0x7f0000000380)=@string={0x64, 0x3, "ccc8e6d46ba94d234e0e2e1f12cf4cf0512c11e407afeb978257d30b456e2b3ed371b95bd20c27307eb6fad63845975fe61377e6273e1064c1c3e77a174a323ec17a2f14092c924e95b83ae515c1a6aff5e1d065392e2468c78967a9b8f5246e312c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x0, 0x1, 0xaa, {0xaa, 0xb, "42a3e61e104f1a4b682187d9e7855d1373c5a696654051efe352ca3d6302088f7e71466b8636f579307c24f3cd3003863c8a086a10735dbf72f157a26eefde3817ca63da6f91878b356ba7c91c87a32793b28465e38355b111ac7586583c7f4210d2bcbcda73a9282d4aac856e6e23a8f7205c06585082bcad5c3508620762998d0034f5e2a89ceb5033eae07d069e4530455e45cabb56d836869b954fcabbf9d831246c1550245b"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000600)={0x40, 0x5c5d2bee05a1cae0, 0x5f, "06aa5c20f2cfb3d25681bb8a35f509f070713ee5d36acca0516552a99033bc3d16a345472b2596581e306d71976db5df7215ac2f3764924b781fcda102cdc2dba16d2f0792d47e1e26e097260681e6e97322512bbde8e058cd6eb7b145c601"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xb, {[@local=@item_012={0x0, 0x2, 0x5, 'W'}, @local=@item_4={0x3, 0x2, 0x9, "949007b8"}, @global=@item_012={0x0, 0x1, 0x7}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0xf1a}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x9, 0x39, "c0ebb3e90b819270591ec5639533e15934235181fb56834d061ae81d44e9c08e2baf980f6846c380c04564119b686ebd4807389ee9f5d970c6"}, &(0x7f0000000000)={0x0, 0xa, 0xfffffffffffffe12, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, 0x0}) 43.033940824s ago: executing program 4 (id=805): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x15c, 0x9, 0x6, 0x503, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '.%\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="7fa6f7df28ad"}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'bridge0\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x99}]}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48a0}, 0xc0) write(r2, &(0x7f0000000100)="97", 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) mmap(&(0x7f00004ee000/0xb000)=nil, 0xb000, 0x1000002, 0x2012, r4, 0xf1275000) 42.578366961s ago: executing program 1 (id=806): syz_usb_connect(0x3, 0x46, &(0x7f0000001d80)={{0x12, 0x1, 0x200, 0x52, 0x8b, 0xf5, 0x8, 0x582, 0xe6ca, 0xd30b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x3, 0x1, 0x60, 0x2, [{{0x9, 0x4, 0x2d, 0x2, 0x2, 0xff, 0x62, 0x29, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0x3}}], [{{0x9, 0x5, 0x1, 0x1, 0x200, 0x3, 0xff, 0x6}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x3, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}]}}]}}]}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) write$tun(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x100, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x1, 0x1, 0x9, 0x50, 0xf3, [{{0x9, 0x4, 0x0, 0xe6, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x8, 0x24, 0x6, 0x0, 0x0, "bc29bb"}, {0x5, 0x24, 0x0, 0x6de}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0x8, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc627, 0x9, 0xc00a}, @mdlm_detail={0x88, 0x24, 0x13, 0x3, "e7a98430056dfb1335727de2a5bc5ec91304214acd466450e72a96f0eb08159d488a6d66d6ddff06044e7a6ce93ba2fadd5151eef157c35d4ec0a7a44f9e2e2f2c7cedd1fa341b31d6d5663f89adec64c32fc15629dccba4320e5f5b9e9e230d4e1e341286ed5cdd27f65511a4ef68e3fbab8568c7fc8d7344056c76f8cbd70d69b590f8"}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x3, [0x0, 0x8, 0x3b, 0xffff, 0x1]}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0xb0, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x7, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0xfd, 0x30, 0x10, 0x9}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x46, 0x2, 0x81, 0x5, 0x6}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c01}}, {0xca, &(0x7f00000001c0)=@string={0xca, 0x3, "bee37bffdca633a1325c91f29faeac0822137b1c758e16072536e81ee2c1c465381f90f5f4f79dbc47146583d3aacc8a3ba463f86f0326691ba6729463a99b464aeb6a1737c85bb5e2a71f101fa79c9ecb11108fa41472561d3c6f37d111d5bcf3329d0ebfa808532c74da9bd81d10d57c459d473f3ad11e9f24e504037f0e8f3ab2afb51367d06f357054499874f5af345abe928b029e785d6cbae04ccb127ec661c13ed6f6b5b5a571ed4a735f8440a5f1b9b7638e5c5b32ca4f2cf14ab55feb5f991c4c79f519"}}, {0x63, &(0x7f0000000400)=ANY=[@ANYBLOB="6303a900b6e3a9e2433a30cc11b946f8148d893f45fe50975d84997d0fb2f6fa7a6fbf99dce683946c7df4ccd2a3a74c038837e63cdf38dfccbd95a04e6a570ecba696cc913cb6d0a41b5f06858a072818c997e17752a91f14396fd00000000000000001a66c7b395eaf8c"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect(0x2, 0x55a, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x31, 0xc8, 0x86, 0x8, 0x1bc7, 0x10a9, 0x7ca6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x548, 0x2, 0xd, 0x8, 0x30, 0x8, [{{0x9, 0x4, 0x2f, 0x3, 0x0, 0xff, 0x63, 0xa4, 0x2f, [@generic={0x8d, 0xef9f098b38177304, "dd0a0f21a9ca28ad303fd7e249e1a78f7b35754b517e5fd10648043955fcb1fde752ee202f4663758316edb317dd63dc07001cac8865f76af750cfcc12dbdaf8ce9da73afec069bbf8e0baa4d21c0156ee866da162f278a8fde831e6d5082173f723d2cd85f750feed5e02f46bf78e35d65d0b153e34c73f4926ac08fb0881119d6a3a5b36d742d976e581"}]}}, {{0x9, 0x4, 0xb, 0x7, 0x10, 0xc7, 0xeb, 0x68, 0x0, [@generic={0x7f, 0x31, "25c00cda1faf469766c29de646ea35dc5080acc1bfe6deafa651ddcebc267fd08189a28b0ff4c0217aac915b8deefa1faa359a5669e295ecf13a509c76c6af96fcbedf99a71f1adc829f12f1da5b6a9a18f3e7e890bcb13af95b2552600b0b17adc2d5a69e79f1905fd17ea65c4815d36bd78c7147be4fe6738115f3b8"}], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x9, 0x5, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x3}]}}, {{0x9, 0x5, 0x2, 0x9, 0x400, 0x8f, 0x81, 0x5, [@generic={0xd0, 0x1e, "c7b1e7ec6afb85429c717c4179b4405d910e4e68feade18feb8f9ec9a85e2bf704e154de5e2a722d56dffb0291cd9a6abaa48018551140cfab63d7e46dc4d4bea83a65af7b6685048115fd7cbe2dc004d7034a5f6ff3eac71134ac41afa5f186dd9bcb9f9598ce3e2c1dab86a7be15aaa0f6edf70d17c3338504994d7d6a94bd03af41d2e160fddc739e91fb96f3f65fc4db8a7890657c8d84084117985135a0ee49cee6a0ec543514d56398edf04809e675cd69daf5673b06833c41df36b8d425e2f0df0d25f99edd619eb6711a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x401}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0x5, 0x8, 0x4, [@generic={0x30, 0x5, "9af93d4d8797f2824062227a00f1a924d326290178ede410143af7eb82511a2887aef478f6ad2c84109294074884"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x80, 0xf0, 0xaf}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xe, 0x8e, 0xb}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe}, @generic={0xa4, 0x23, "f6b19d57454aef371962d0c9cb8d18be4ccf16209d12b64e4d316816765b9490f9b74d64381586d17296272e807388688b968c88c3b851f2234982101923c61b4b1a3c8815aec4c64a4b8df2e537b221af2fee12bb7e32cccf3cb21e03c0604e8e8dd4e85acf70e0bdf43ca83b4580d313b7c41dfd21cdfaa939aee356e825225d8088cf44da1fb3a31da1e69c0417b4774c05c963f4d332d12f5c9559a6e086a550"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x7, 0x76, 0x3}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x6, 0x5, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x7, 0x0, 0x4f, [@generic={0x37, 0x4, "22f2f075a5df241144aebbd87ae3a8ab6e097d753cb3af4e34604b1c6d8da2f7819aef2aeddf2cff0a6cba596b842fdec9b5a30ada"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x7fff}]}}, {{0x9, 0x5, 0x2, 0x0, 0x35a58d1c49035a5a, 0x9, 0x2, 0x5, [@generic={0xa9, 0x0, "89499335333d340e31bee16bd10ae47085cbcdeee87ecc5999c303592ee7acadd984d1515cefa0c2a1415bcac4b29df87b21e1774f759d66e09f1985c8821219461e65bf7f78858f866015a6836c8b80904f4b99fb094d26e7c45348a4fd498d19ec09c818e4a36a7638a00cac9dad4cc372ee06774aa31516129aec5ee863f88ec9bb812776cc4946f8aa0051b1d80b26e2caa74f17318d6cfb29fde8dd0bc50edb133c46773f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x8, 0x1, 0x8, [@generic={0xc1, 0xb, "a02204310c7a8139e6235e2f70c8616db4032c1a5058fa415c58a719c0ab0fee036a419784687fce9ba7b529f8cc77aa496f3694b11172ecf2d429c2bc01ed6023e12aeee2240837a017e72a70947a1d5f0d4ee720cde35ffa3400406eaa1ef46d11977ce2b55d58caaf6e4c37cf6cd6c05d0dc171bd579a1a321c839d75a75d800a4e5567c273a6b2adcb22ca4e28469a6870e98a9a4ea4ce6356cee248973ea809cf6942f6532d49173fd0b60141b6aff50ce93d3797dafc2e0b7f0908b4"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x28, 0x7, 0x74}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x6c, 0x8, 0x80}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x10, 0x2, 0x5, [@generic={0x22, 0x23, "6984b9455dc9e64a114146ff19f0496d968fd53927062be508c1811ab52323e3"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xd, 0x0, 0x3, 0x20, 0x5b}, 0x22, &(0x7f0000000300)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xc3, 0xa5, 0x9, 0x2}, @generic={0x7, 0x10, 0x2, "953773d3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6fb0f5e96751fd85, 0x6, 0x6, 0x0, 0x3}]}, 0x4, [{0x41, &(0x7f0000000a00)=@string={0x41, 0x3, "3fbcae8305998e157de6d2fe06c13e7059d44bc6a457de9960548659d14bc379ed5bc5d05cd2924d2837c019b5fdbb4988e2e14e24767170d64dd777f30da4"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x5c7e}}, {0xf2, &(0x7f0000000ac0)=@string={0xf2, 0x3, "35095f03504ea77e460c562ef0afb0aa357e3981b954722707a972c5403892ad4d4bae833be6bcf55d81c70d253a4f47f6b9a8ae323dfd1347d0eeb9ffcb1d7586df1d6c594361a133a35cc56815c4e4344e8bc748de1895bb4c9562a5453304f220ea5ab20cd03bce240790d9adc191b033c139755812215ba50cca4768d9bf7d430fe8575bcb06de694247f997dcb72579976e0777602ef08d9957ea30efb03763933c247d0c9e84daf3a23edcf62f4c53f297e75c404bf9acf60e1fcc3c39c07a67f11d24f61614cd9d7801d03e11f41ff091dd4429a718f4113a57f8a10210092a0461c7b29750662d2066e23714"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x340a}}]}) 41.918234059s ago: executing program 4 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8b00, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x94) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000b40)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x3, '\x00', {0xb, 0x6, "f93b4d", 0x6, 0x88, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [], "65f880c68a1363ef"}}}}}}}}, 0x72) (async) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000055c0)=""/27, 0x1b}, 0x4}], 0x1, 0x10162, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) sendmmsg$inet6(r8, 0x0, 0x0, 0x20044000) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "0fe0ca4d10bca0e8abd373cc65b9ec1c"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000002400)={0x0, "facd598a54e07b08c79b396aff2ee5cc"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001440)={0x0, 0xfa, 0x1, [0x4, 0x100000001, 0x9, 0xfb, 0x2], [0x8, 0x8, 0x4, 0x8, 0xa5, 0x7, 0x95d9, 0x1, 0xc, 0x8, 0xffffffff00000000, 0x4, 0x100000000000, 0x200, 0x8, 0x400080, 0x7, 0x100000000, 0x3, 0x401, 0xffffffffffffffc0, 0xffffffffffffff43, 0x8, 0x400, 0x3, 0x1ff, 0x800, 0x5, 0x77168000000, 0x2, 0xe000000000000, 0x5, 0xdb4, 0x5, 0x4, 0x3, 0x6, 0x8, 0x6, 0x6, 0x7, 0xd8f2, 0x40, 0x80000000, 0x6, 0x9, 0x4, 0xddd, 0xb7, 0x8000, 0x1, 0x9, 0x5, 0x7f, 0xffffffffffff9b76, 0x1000, 0x8, 0x9, 0x9, 0xb, 0x5, 0x8, 0x3, 0x5, 0x8000000000000001, 0x5, 0xff, 0xbc35, 0x6, 0x4, 0x8, 0x8000000000000000, 0x9, 0x3ff, 0xd9e2, 0x81, 0x8, 0x3, 0x4, 0xcbe, 0xffffffffffff616e, 0x2, 0xf0, 0x100000001, 0x8000, 0x3, 0x5, 0x100000000, 0xfff, 0x8000000000000001, 0xfffffffffffffff6, 0x8, 0x5, 0x1, 0xffff, 0x1f, 0xffffffffffff70f6, 0x43335824, 0x7, 0x4, 0x7, 0x0, 0x7, 0x7, 0xfffffffffffff001, 0x5, 0x2, 0x3, 0x80, 0x8, 0x5, 0x6, 0x100000000, 0x5, 0x66c, 0xfffffffffffffe00, 0xad4, 0x2, 0x26dc000000000, 0x3, 0xd8]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001880)={0x14, 0x0, {0x10001, @struct={0x8000, 0xffff}, r9, 0x3, 0xfffffffffffffff9, 0x10000, 0x3, 0x3, 0x42a, @usage=0x4, 0xa929, 0x0, [0x6, 0x7, 0x800, 0x1, 0x8000]}, {0x648, @struct={0x10000, 0x8}, r10, 0x0, 0x4, 0x101, 0xc, 0x0, 0x64, @struct={0xa, 0x200}, 0xfffffff5, 0x6, [0xffffffffffffffff, 0x9, 0x7, 0x3, 0xda3]}, {0x0, @usage=0x4, r11, 0x10, 0x2, 0x9, 0xffffffffffffffff, 0xc00000000000000, 0x40, @struct={0xd, 0x4}, 0xc, 0x5, [0x6, 0xfff, 0xfffffffffffffff8, 0x3, 0xfffffffffffffff2, 0x7]}, {0xa3d, 0x6, 0x3}}) 41.276082587s ago: executing program 2 (id=808): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xe0200, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x34f) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x7ff, 0xfe, 0x1, &(0x7f0000000140)="f2d4d0c52190229abe7c909d6bc3d084efb12023bb0fc30813ebc6a60517e6a268fef6e8acf29f916e4ebaeafd8a42111b3bbc52c04a21d03c679843cb5b779e98c842eb5f5c45bea3cf09fab8be6eea49197da4eade49a95527ef84df41044ed3c9a274d231e477ce21e4f876a04e1d31525220a43bfa32e69c68c2ab70fd3628c210a7c2235cad1494f0d3021fb616d12e997b0d29ee1e717e23d84da9980b526a2f929a8c4756d3d33fdd55cd63591214c07d2f4604b805d9f5c49ec0c18ce25f4422adaa3f2a38b5d37611c6942ab86f847312555c79fae5e7b458d8007105a095fc03d9f59fdb29ac92e24d9ea35bb3951517cc73ce46e5274d3702"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 40.944863486s ago: executing program 3 (id=809): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c00000000000000000000000d0003"], 0x30}], 0x1}, 0x0) 40.036084289s ago: executing program 3 (id=810): unshare(0x26020480) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) (rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) r4 = getuid() (rerun: 64) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r4}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x3}, 0x0, 0xdbc9, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) (rerun: 32) 39.455223983s ago: executing program 2 (id=811): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d00), 0x260900, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000d40)=""/132) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000004100)=[{0x0}, {&(0x7f0000002b80)=""/86, 0x56}], 0x2}, 0x5}], 0x1, 0x20, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)=@pppol2tpin6, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/230, 0xe6}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/130, 0x82}], 0x4, &(0x7f00000003c0)=""/62, 0x3e}}, {{&(0x7f0000000440)=@hci, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/15, 0xf}], 0x3, &(0x7f00000005c0)=""/185, 0xb9}, 0x7}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1, &(0x7f0000000800)=""/216, 0xd8}, 0x6}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/240, 0xf0}, {&(0x7f0000000a80)=""/51, 0x33}, {&(0x7f0000000ac0)=""/124, 0x7c}], 0x3, &(0x7f0000000b80)=""/87, 0x57}, 0x3}], 0x4, 0x10162, 0x0) (rerun: 32) syz_usb_connect$uac1(0x5, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRES8], 0x0) 36.869064443s ago: executing program 1 (id=812): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001c005f0214fffffffffffff8070000000d00000000005200", 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x1, 0x1200}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xaa042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x6}) r3 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x31, 0x0, &(0x7f0000000040)) syz_usb_connect(0x5, 0x34, &(0x7f0000000080)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 36.606279439s ago: executing program 4 (id=813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='\x18,\x00', &(0x7f0000000200)="999c886897dbc13e57ab42b573f26ddea8c168aaf3e327e7de39e9118337edde9525ea0b4cce28373c276c09835ad3da375cf328652f13c0a131e594f7f6db661087d37915135059a4352794cdea12c18c0be2f3e5f1548452ffb268b60aa9cce68ab2728a45b6d5b4de0a6de188b17917a2076cc736eccd5fe7e4eca2b44849fb768d32bb8580aa99aaa6a488934d1828b1f8acc578cc63a094ca25b8cf3fd75c879e2c8b722ea6fe", 0xa9) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000204f045db600000000000109022d00010000500b090400033e03000300092104000801220522090581030002070d20090502032002000105e735ac4291fe67f9efa353c99642f87c3863924f2125138c108d2656e3d6824a82aa6f402055fb2166"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1c0, 0x4) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="de69dec00fadfee7955e56a8d0ad36b637bb74bddbee4bbd994380ac92c927b0c4b9007fd817092d", 0x28}], 0x1}}], 0x1, 0x840) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x1, @random="93c5cea3880b"}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/drivers\x00', 0x0, 0x0) mknodat(r7, &(0x7f0000000440)='./file0\x00', 0x800, 0x2) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1a2205"], 0x0}, 0x0) 34.376561599s ago: executing program 2 (id=814): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000900)="01000000", 0x4}, {&(0x7f0000000200)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28", 0x1a}, {&(0x7f0000000940)="74739b5832d9f06f8d760a", 0xb}], 0x3, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r3, 0x0) (async) listen(r2, 0x0) (async) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f0000000580)=""/182, 0xb6}], 0x2, 0x9, 0x80000000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYRES16], 0x0) 33.940744194s ago: executing program 3 (id=815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) (async) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x8, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x40041}, 0x1) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x40041}, 0x1) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff1009a662ca40fd07040034860000466abd7b6f1521987ca44eca48c83a9082b99a"], 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff1009a662ca40fd07040034860000466abd7b6f1521987ca44eca48c83a9082b99a"], 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e21, 0x1, @loopback, 0x5}, {0xa, 0x4e22, 0x240, @empty, 0x4}, 0x1, {[0x2, 0x2b, 0x0, 0x2, 0x4, 0x3ff, 0x5, 0x5a]}}, 0x5c) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000002c0)) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000002c0)) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000380)='team0\x00', 0x3b, 0xfdb, 0x8001}) (async) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @multicast2}, 0x280, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000380)='team0\x00', 0x3b, 0xfdb, 0x8001}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) r6 = openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) write(r4, &(0x7f0000000400)="547bbe", 0x3) (async) write(r4, &(0x7f0000000400)="547bbe", 0x3) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) recvmmsg(r2, &(0x7f0000002b00), 0x4, 0x2100, 0x0) (async) recvmmsg(r2, &(0x7f0000002b00), 0x4, 0x2100, 0x0) socket$netlink(0x10, 0x3, 0xf) 21.594088493s ago: executing program 33 (id=812): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001c005f0214fffffffffffff8070000000d00000000005200", 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6c, 0x0, 0x1, 0xfffffffc}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x1, 0x1200}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0xaa042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d12, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x6}) r3 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0x31, 0x0, &(0x7f0000000040)) syz_usb_connect(0x5, 0x34, &(0x7f0000000080)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 21.014349897s ago: executing program 34 (id=813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='\x18,\x00', &(0x7f0000000200)="999c886897dbc13e57ab42b573f26ddea8c168aaf3e327e7de39e9118337edde9525ea0b4cce28373c276c09835ad3da375cf328652f13c0a131e594f7f6db661087d37915135059a4352794cdea12c18c0be2f3e5f1548452ffb268b60aa9cce68ab2728a45b6d5b4de0a6de188b17917a2076cc736eccd5fe7e4eca2b44849fb768d32bb8580aa99aaa6a488934d1828b1f8acc578cc63a094ca25b8cf3fd75c879e2c8b722ea6fe", 0xa9) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000204f045db600000000000109022d00010000500b090400033e03000300092104000801220522090581030002070d20090502032002000105e735ac4291fe67f9efa353c99642f87c3863924f2125138c108d2656e3d6824a82aa6f402055fb2166"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x1, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x1c0, 0x4) sendmmsg$inet6(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="de69dec00fadfee7955e56a8d0ad36b637bb74bddbee4bbd994380ac92c927b0c4b9007fd817092d", 0x28}], 0x1}}], 0x1, 0x840) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @loopback}, {0x1, @random="93c5cea3880b"}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/drivers\x00', 0x0, 0x0) mknodat(r7, &(0x7f0000000440)='./file0\x00', 0x800, 0x2) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1a2205"], 0x0}, 0x0) 20.933775101s ago: executing program 3 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x0, 0xa, 0x0, 0x6, 0xff, 0x0, 0xe, 0x0, 0xfe, 0x0, 0x1}, {0xdddd1000, 0xdddd0000, 0xc, 0x1, 0x42, 0x3, 0x8, 0x3, 0x0, 0x0, 0x0, 0x40}, {0xeeef0000, 0x6000, 0x13, 0x7, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0xdddd1000, 0x1, 0x0, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0x10, 0xf6}, {0x11000, 0x7fffc800, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xfec00000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x0, 0x8000000, 0x9, 0xf0, 0x0, 0xfe, 0x6, 0x0, 0x2}, {0x1, 0x0, 0x0, 0xf9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40}, {0x8080000, 0x400}, {0x1000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x4001, 0x900, [0x5, 0x400001000, 0x0, 0x3fffffffffff]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) 20.353271095s ago: executing program 2 (id=819): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xe0200, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x34f) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x0, 0x1, 0x3, 0x7ff, 0xfe, 0x1, &(0x7f0000000140)="f2d4d0c52190229abe7c909d6bc3d084efb12023bb0fc30813ebc6a60517e6a268fef6e8acf29f916e4ebaeafd8a42111b3bbc52c04a21d03c679843cb5b779e98c842eb5f5c45bea3cf09fab8be6eea49197da4eade49a95527ef84df41044ed3c9a274d231e477ce21e4f876a04e1d31525220a43bfa32e69c68c2ab70fd3628c210a7c2235cad1494f0d3021fb616d12e997b0d29ee1e717e23d84da9980b526a2f929a8c4756d3d33fdd55cd63591214c07d2f4604b805d9f5c49ec0c18ce25f4422adaa3f2a38b5d37611c6942ab86f847312555c79fae5e7b458d8007105a095fc03d9f59fdb29ac92e24d9ea35bb3951517cc73ce46e5274d3702"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 19.392609101s ago: executing program 2 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f00000000c0)) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000084, 0xbc9faef6, 0x7}, {0x4000009b, 0x0, 0x4de}]}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x13) wait4(r6, 0x0, 0xa, &(0x7f00000000c0)) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000300)="0f015a6fc441fae6a100500000264163ccb9800000c00f3235004000000f30470f0010b805000000b9820000000f01c145c0a65ae3bfcbc666410f3881b24aa70e9f0f78bd006000000f09", 0x4b}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.610188504s ago: executing program 35 (id=818): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x0, 0xa, 0x0, 0x6, 0xff, 0x0, 0xe, 0x0, 0xfe, 0x0, 0x1}, {0xdddd1000, 0xdddd0000, 0xc, 0x1, 0x42, 0x3, 0x8, 0x3, 0x0, 0x0, 0x0, 0x40}, {0xeeef0000, 0x6000, 0x13, 0x7, 0x0, 0x0, 0xb, 0x0, 0x4, 0xe, 0x84, 0x3}, {0xdddd1000, 0x1, 0x0, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0x10, 0xf6}, {0x11000, 0x7fffc800, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xfec00000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x0, 0x8000000, 0x9, 0xf0, 0x0, 0xfe, 0x6, 0x0, 0x2}, {0x1, 0x0, 0x0, 0xf9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40}, {0x8080000, 0x400}, {0x1000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x4001, 0x900, [0x5, 0x400001000, 0x0, 0x3fffffffffff]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) 0s ago: executing program 36 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xb66c3409bf854d4a) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f00000000c0)) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000084, 0xbc9faef6, 0x7}, {0x4000009b, 0x0, 0x4de}]}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x13) wait4(r6, 0x0, 0xa, &(0x7f00000000c0)) (async) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000300)="0f015a6fc441fae6a100500000264163ccb9800000c00f3235004000000f30470f0010b805000000b9820000000f01c145c0a65ae3bfcbc666410f3881b24aa70e9f0f78bd006000000f09", 0x4b}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0] usb 4-1: config 0 descriptor?? [ 145.637024][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 145.637040][ T36] audit: type=1400 audit(1786823679.155:396): avc: denied { rename } for pid=2334 comm="syz.4.604" name="file0" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.690586][ T373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.697284][ T373] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 145.706408][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.715618][ T373] usb 2-1: config 0 descriptor?? [ 145.735975][ T36] audit: type=1400 audit(1786823679.255:397): avc: denied { setattr } for pid=2336 comm="syz.4.605" path="socket:[23195]" dev="sockfs" ino=23195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.014629][ T470] hid-steam 0003:28DE:1102.0029: ignoring exceeding usage max [ 146.019629][ T372] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 146.025791][ T470] hid-steam 0003:28DE:1102.0029: item fetching failed at offset 4/5 [ 146.037891][ T470] hid-steam 0003:28DE:1102.0029: steam_probe:parse of hid interface failed [ 146.046531][ T470] hid-steam 0003:28DE:1102.0029: probe with driver hid-steam failed with error -22 [ 146.179622][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 146.185852][ T372] usb 5-1: config 5 has an invalid interface number: 206 but max is 0 [ 146.194090][ T372] usb 5-1: config 5 has no interface number 0 [ 146.200286][ T372] usb 5-1: config 5 interface 206 has no altsetting 0 [ 146.208349][ T372] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 146.219664][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.222250][ T470] usb 4-1: USB disconnect, device number 65 [ 146.227708][ T372] usb 5-1: Product: syz [ 146.238259][ T372] usb 5-1: Manufacturer: syz [ 146.242949][ T372] usb 5-1: SerialNumber: syz [ 146.325311][ T373] usbhid 2-1:0.0: can't add hid device: -71 [ 146.331311][ T373] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.340054][ T373] usb 2-1: USB disconnect, device number 62 [ 146.451150][ T372] usb_ehset_test 5-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 146.461764][ T372] usb 5-1: USB disconnect, device number 20 [ 147.009631][ T372] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 147.093392][ T339] usb 3-1: USB disconnect, device number 63 [ 147.190761][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.200625][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 147.213453][ T372] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 147.222622][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.234402][ T372] usb 4-1: config 0 descriptor?? [ 147.289638][ T470] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.364861][ T2363] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 147.459668][ T339] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 147.470703][ T470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.481753][ T470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.500203][ T470] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.526309][ T470] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.535503][ T36] audit: type=1400 audit(1786823681.045:398): avc: denied { write } for pid=2366 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.554660][ T470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.563369][ T470] usb 5-1: config 0 descriptor?? [ 147.569121][ T470] hub 5-1:0.0: USB hub found [ 147.589629][ T339] usb 3-1: device descriptor read/64, error -71 [ 147.642688][ T372] holtek_mouse 0003:04D9:A072.002A: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input0 [ 147.769856][ T430] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 147.769958][ T470] hub 5-1:0.0: 9 ports detected [ 147.782610][ T470] hub 5-1:0.0: insufficient power available to use all downstream ports [ 147.829630][ T339] usb 3-1: device descriptor read/64, error -71 [ 147.842296][ T366] usb 4-1: USB disconnect, device number 66 [ 147.899613][ T430] usb 2-1: device descriptor read/64, error -71 [ 147.983349][ T470] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 147.991754][ T470] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 148.020373][ T470] usb 5-1: USB disconnect, device number 21 [ 148.069614][ T339] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 148.139628][ T430] usb 2-1: device descriptor read/64, error -71 [ 148.199623][ T339] usb 3-1: device descriptor read/64, error -71 [ 148.379613][ T430] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 148.439647][ T339] usb 3-1: device descriptor read/64, error -71 [ 148.509636][ T430] usb 2-1: device descriptor read/64, error -71 [ 148.515299][ T2378] syzkaller0: entered promiscuous mode [ 148.521408][ T2378] syzkaller0: entered allmulticast mode [ 148.549942][ T339] usb usb3-port1: attempt power cycle [ 148.599689][ T372] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 148.749622][ T430] usb 2-1: device descriptor read/64, error -71 [ 148.760714][ T372] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 148.771722][ T372] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.781635][ T372] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 148.794769][ T372] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.801389][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 148.810442][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.818881][ T372] usb 4-1: config 0 descriptor?? [ 148.839622][ T470] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 148.859675][ T430] usb usb2-port1: attempt power cycle [ 148.889598][ T339] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 148.910567][ T339] usb 3-1: device descriptor read/8, error -71 [ 148.990922][ T470] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.999322][ T470] usb 5-1: config index 0 descriptor too short (expected 75, got 59) [ 149.007462][ T470] usb 5-1: config 1 has an invalid descriptor of length 225, skipping remainder of the config [ 149.017766][ T470] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.030679][ T470] usb 5-1: config 1 interface 0 has no altsetting 0 [ 149.039284][ T470] usb 5-1: string descriptor 0 read error: -22 [ 149.045650][ T470] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.054841][ T470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.060656][ T339] usb 3-1: device descriptor read/8, error -71 [ 149.071303][ T470] usb 5-1: bad CDC descriptors [ 149.199636][ T430] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 149.220585][ T430] usb 2-1: device descriptor read/8, error -71 [ 149.242530][ T2374] netlink: 'syz.3.619': attribute type 46 has an invalid length. [ 149.256749][ T372] usbhid 4-1:0.0: can't add hid device: -71 [ 149.267323][ T372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 149.272421][ T470] usb 5-1: USB disconnect, device number 22 [ 149.277930][ T372] usb 4-1: USB disconnect, device number 67 [ 149.302540][ T339] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 149.302930][ T2393] incfs: Backing dir is not set, filesystem can't be mounted. [ 149.317723][ T2393] incfs: mount failed -2 [ 149.331483][ T339] usb 3-1: device descriptor read/8, error -71 [ 149.351953][ T430] usb 2-1: device descriptor read/8, error -71 [ 149.462677][ T339] usb 3-1: device descriptor read/8, error -71 [ 149.589641][ T430] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 149.597599][ T339] usb usb3-port1: unable to enumerate USB device [ 149.620588][ T430] usb 2-1: device descriptor read/8, error -71 [ 149.699605][ T470] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 149.750675][ T430] usb 2-1: device descriptor read/8, error -71 [ 149.849630][ T470] usb 4-1: Using ep0 maxpacket: 16 [ 149.855916][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.859765][ T430] usb usb2-port1: unable to enumerate USB device [ 149.867110][ T470] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 149.882352][ T470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.894276][ T470] usb 4-1: config 0 descriptor?? [ 149.902849][ T2414] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.910140][ T2414] bridge0: port 3(veth0_to_bridge) entered disabled state [ 149.917334][ T2414] veth0_to_bridge: entered allmulticast mode [ 149.923853][ T2414] veth0_to_bridge: entered promiscuous mode [ 149.929852][ T2414] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.942199][ T2414] bridge0: port 3(veth0_to_bridge) entered blocking state [ 149.949310][ T2414] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 150.219746][ T366] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 150.303479][ T470] kye 0003:0458:5016.002B: control desc unexpectedly large [ 150.311597][ T470] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.002B/input/input34 [ 150.329085][ T470] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.002B/input/input35 [ 150.349221][ T470] kye 0003:0458:5016.002B: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 150.381033][ T366] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.395392][ T366] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 150.404586][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 150.412706][ T366] usb 5-1: Product: syz [ 150.416936][ T366] usb 5-1: Manufacturer: syz [ 150.421546][ T366] usb 5-1: SerialNumber: syz [ 150.504725][ T470] usb 4-1: USB disconnect, device number 68 [ 150.510727][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 150.629020][ T36] audit: type=1400 audit(1786823684.145:399): avc: denied { write } for pid=2415 comm="syz.4.633" name="/" dev="incremental-fs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.652100][ T36] audit: type=1400 audit(1786823684.145:400): avc: denied { add_name } for pid=2415 comm="syz.4.633" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.673239][ T366] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 150.673948][ T36] audit: type=1400 audit(1786823684.145:401): avc: denied { create } for pid=2415 comm="syz.4.633" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 150.704719][ T31] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 150.713213][ T31] usb 3-1: config 0 has no interface number 0 [ 150.719300][ T31] usb 3-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=2e.3b [ 150.728429][ T36] audit: type=1400 audit(1786823684.145:402): avc: denied { associate } for pid=2415 comm="syz.4.633" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 150.750552][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.758775][ T36] audit: type=1400 audit(1786823684.185:403): avc: denied { remove_name } for pid=2415 comm="syz.4.633" name="control" dev="incremental-fs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.782488][ T31] usb 3-1: config 0 descriptor?? [ 150.787518][ T36] audit: type=1400 audit(1786823684.185:404): avc: denied { rmdir } for pid=2415 comm="syz.4.633" name="control" dev="incremental-fs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.864418][ T36] audit: type=1400 audit(1786823684.385:405): avc: denied { read write } for pid=2415 comm="syz.4.633" name="lp0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 150.867162][ T2416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.888872][ T36] audit: type=1400 audit(1786823684.385:406): avc: denied { open } for pid=2415 comm="syz.4.633" path="/dev/usb/lp0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 150.897260][ T2416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.939532][ T2416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.948173][ T2416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.019338][ T470] usb 5-1: USB disconnect, device number 23 [ 151.025897][ T470] usblp0: removed [ 151.068180][ T31] usb 3-1: string descriptor 0 read error: -71 [ 151.076557][ T31] ax88179_178a 3-1:0.125: probe with driver ax88179_178a failed with error -22 [ 151.091037][ T31] usb 3-1: USB disconnect, device number 68 [ 151.349621][ T339] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 151.469612][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 151.500426][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 151.507454][ T339] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 151.520285][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.531401][ T339] usb 4-1: config 0 descriptor?? [ 151.629677][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 151.635931][ T31] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 151.646250][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 151.655739][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.664028][ T31] usb 3-1: Product: syz [ 151.668297][ T31] usb 3-1: Manufacturer: syz [ 151.669322][ T2451] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 151.672950][ T31] usb 3-1: SerialNumber: syz [ 151.859618][ T470] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 151.881961][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.890555][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.942014][ T339] chicony 0003:04F2:0418.002C: collection stack underflow [ 151.949787][ T339] chicony 0003:04F2:0418.002C: item 0 1 0 12 parsing failed [ 151.957380][ T339] chicony 0003:04F2:0418.002C: Chicony hid parse failed: -22 [ 151.964890][ T339] chicony 0003:04F2:0418.002C: probe with driver chicony failed with error -22 [ 152.009601][ T470] usb 2-1: Using ep0 maxpacket: 8 [ 152.015719][ T470] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 152.023851][ T470] usb 2-1: config 0 has no interface number 0 [ 152.031445][ T470] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 152.040556][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.048541][ T470] usb 2-1: Product: syz [ 152.052740][ T470] usb 2-1: Manufacturer: syz [ 152.057327][ T470] usb 2-1: SerialNumber: syz [ 152.062507][ T470] usb 2-1: config 0 descriptor?? [ 152.268836][ T2449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.277632][ T2449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.286608][ T470] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 152.293141][ T470] usb 2-1: No streaming interface found for terminal 6. [ 152.300255][ T470] usb 2-1: Failed to create links for entity 5 [ 152.306521][ T470] usb 2-1: Failed to register entities (-22). [ 152.313955][ T470] usb 2-1: USB disconnect, device number 67 [ 152.730087][ T339] usb 4-1: USB disconnect, device number 69 [ 152.805426][ T2456] pim6reg1: entered promiscuous mode [ 152.810755][ T2456] pim6reg1: entered allmulticast mode [ 152.982766][ T2472] netlink: 'syz.1.650': attribute type 27 has an invalid length. [ 153.069623][ T339] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 153.219595][ T339] usb 4-1: Using ep0 maxpacket: 8 [ 153.225697][ T339] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 153.233959][ T339] usb 4-1: config 0 has no interface number 0 [ 153.239606][ T470] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 153.241473][ T339] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b3.78 [ 153.256730][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.264744][ T339] usb 4-1: Product: syz [ 153.268967][ T339] usb 4-1: Manufacturer: syz [ 153.273567][ T339] usb 4-1: SerialNumber: syz [ 153.278736][ T339] usb 4-1: config 0 descriptor?? [ 153.389804][ T470] usb 2-1: Using ep0 maxpacket: 16 [ 153.396356][ T470] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.404732][ T470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.414858][ T470] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.425146][ T470] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.434253][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.442270][ T470] usb 2-1: Product: syz [ 153.446427][ T470] usb 2-1: Manufacturer: syz [ 153.451039][ T470] usb 2-1: SerialNumber: syz [ 153.583549][ T2454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.592125][ T2454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.667830][ T470] usb 2-1: 0:2 : does not exist [ 153.676297][ T470] usb 2-1: USB disconnect, device number 68 [ 153.687383][ T1822] udevd[1822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.703906][ T339] usbserial_generic 4-1:0.155: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.715626][ T339] usbserial_generic 4-1:0.155: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.726664][ T339] usbserial_generic 4-1:0.155: device has no bulk endpoints [ 154.093264][ T470] usb 3-1: USB disconnect, device number 69 [ 154.113749][ T2481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2481 comm=syz.2.652 [ 154.127517][ T2481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2481 comm=syz.2.652 [ 154.469620][ T470] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 154.620926][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.629643][ T470] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 154.637225][ T470] usb 3-1: can't read configurations, error -61 [ 154.769633][ T470] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 154.781782][ T36] audit: type=1400 audit(1786823688.305:407): avc: denied { append } for pid=2491 comm="syz.1.657" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.806523][ T2492] dummy0: entered allmulticast mode [ 154.920896][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.929639][ T470] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 154.937204][ T470] usb 3-1: can't read configurations, error -61 [ 154.943505][ T31] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 154.951242][ T470] usb usb3-port1: attempt power cycle [ 155.099600][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 155.105992][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 155.114225][ T31] usb 5-1: config 0 has no interface number 0 [ 155.120372][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 155.130381][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 155.138535][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 155.147649][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.155680][ T31] usb 5-1: Product: syz [ 155.159884][ T31] usb 5-1: Manufacturer: syz [ 155.164477][ T31] usb 5-1: SerialNumber: syz [ 155.169681][ T31] usb 5-1: config 0 descriptor?? [ 155.176149][ T2490] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 155.289616][ T470] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 155.311280][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.320111][ T470] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 155.327702][ T470] usb 3-1: can't read configurations, error -61 [ 155.459633][ T470] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 155.481214][ T470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.490288][ T470] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 155.497866][ T470] usb 3-1: can't read configurations, error -61 [ 155.504266][ T470] usb usb3-port1: unable to enumerate USB device [ 155.830221][ T470] usb 4-1: USB disconnect, device number 70 [ 156.079657][ T45] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 156.141735][ T31] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 156.150544][ T31] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 156.169704][ T470] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 156.230601][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.246964][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.256929][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.270066][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.272626][ C0] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 156.279107][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.295733][ T45] usb 2-1: config 0 descriptor?? [ 156.475970][ T470] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 156.483704][ T470] usb 4-1: can't read configurations, error -71 [ 156.488010][ T372] usb 5-1: USB disconnect, device number 24 [ 156.520647][ T372] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 156.703833][ T45] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 156.716251][ T45] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 157.027728][ T2541] tipc: Enabling of bearer rejected, failed to enable media [ 157.289622][ T339] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 157.440618][ T339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.450778][ T339] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.463666][ T339] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.478054][ T339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.487148][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.495257][ T339] usb 5-1: Product: syz [ 157.499424][ T339] usb 5-1: Manufacturer: syz [ 157.506102][ T339] usb 5-1: SerialNumber: syz [ 157.512200][ T339] cdc_ncm 5-1:1.0: skipping garbage [ 157.529606][ T470] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 157.559660][ T372] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 157.680597][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.691600][ T470] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.702077][ T470] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 157.710654][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.711156][ T470] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.723667][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.730260][ T470] usb 4-1: Manufacturer: syz [ 157.740117][ T372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.745732][ T470] usb 4-1: config 0 descriptor?? [ 157.762304][ T372] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 157.771483][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.780247][ T372] usb 3-1: config 0 descriptor?? [ 157.925946][ T339] cdc_ncm 5-1:1.0: bind() failure [ 157.934040][ T339] usb 5-1: USB disconnect, device number 25 [ 158.164538][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.171397][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.178193][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.185017][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.189796][ T2548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.191951][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.201115][ T2548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.207435][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.221443][ T470] pyra 0003:1E7D:2CF6.002E: unknown main item tag 0x0 [ 158.228841][ T470] pyra 0003:1E7D:2CF6.002E: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 158.269763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.281907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.294112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.306211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.318289][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.330374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.342455][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.354599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.366721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.378816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 158.421277][ T372] usbhid 3-1:0.0: can't add hid device: -71 [ 158.436724][ T372] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 158.448743][ T372] usb 3-1: USB disconnect, device number 74 [ 158.482226][ T36] audit: type=1400 audit(1786823691.995:408): avc: denied { execmod } for pid=2549 comm="syz.1.670" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 158.769616][ T339] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 158.919599][ T339] usb 5-1: Using ep0 maxpacket: 16 [ 158.930309][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.948152][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.958277][ T339] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 158.961993][ T45] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 158.967909][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.971428][ T339] usb 5-1: config 0 descriptor?? [ 159.020230][ T36] audit: type=1400 audit(1786823692.545:409): avc: denied { shutdown } for pid=2560 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.392683][ T339] apple 0003:05AC:024B.002F: unknown global tag 0xe [ 159.407968][ T339] apple 0003:05AC:024B.002F: item 0 1 1 14 parsing failed [ 159.422781][ T339] apple 0003:05AC:024B.002F: parse failed [ 159.434583][ T339] apple 0003:05AC:024B.002F: probe with driver apple failed with error -22 [ 159.621311][ T45] usb 2-1: device descriptor read/64, error -71 [ 159.636734][ T470] pyra 0003:1E7D:2CF6.002E: couldn't init struct pyra_device [ 159.770537][ T339] usb 5-1: USB disconnect, device number 26 [ 159.828043][ T470] pyra 0003:1E7D:2CF6.002E: couldn't install mouse [ 159.869025][ T470] pyra 0003:1E7D:2CF6.002E: probe with driver pyra failed with error -71 [ 159.896937][ T470] usb 4-1: USB disconnect, device number 72 [ 159.914147][ T2571] fido_id[2571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 159.960282][ T2574] devpts: called with bogus options [ 160.135009][ T2578] netlink: 32 bytes leftover after parsing attributes in process `syz.4.679'. [ 160.146285][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.219638][ T339] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 160.343031][ T2582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2582 comm=syz.3.680 [ 160.391092][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.402130][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.411219][ T45] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 160.412471][ T339] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.433120][ T339] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.442546][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.455298][ T339] usb 3-1: config 0 descriptor?? [ 160.489627][ T372] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 160.581746][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.589924][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 160.641408][ T372] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.649625][ T372] usb 5-1: not running at top speed; connect to a high speed hub [ 160.658277][ T372] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 160.669465][ T372] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.683985][ T372] usb 5-1: string descriptor 0 read error: -22 [ 160.690818][ T372] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.700168][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.710533][ T2580] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.771096][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 160.779453][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 160.790066][ T10] usb 4-1: config 220 has no interface number 2 [ 160.796357][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 160.809892][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 160.816695][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 160.824629][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 160.833169][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 160.842543][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.850770][ T10] usb 4-1: Product: syz [ 160.855247][ T10] usb 4-1: Manufacturer: syz [ 160.860575][ T10] usb 4-1: SerialNumber: syz [ 160.879657][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.885290][ T339] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 160.905611][ T339] plantronics 0003:047F:FFFF.0030: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 161.015216][ T372] cdc_ncm 5-1:1.0: bind() failure [ 161.027765][ T372] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 161.034901][ T372] cdc_ncm 5-1:1.1: bind() failure [ 161.043698][ T372] usb 5-1: USB disconnect, device number 27 [ 161.072699][ T10] usb 4-1: selecting invalid altsetting 0 [ 161.081855][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 161.088220][ T10] usb 4-1: No valid video chain found. [ 161.103736][ T10] usb 4-1: USB disconnect, device number 73 [ 161.131389][ T45] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 161.172855][ T339] usb 3-1: USB disconnect, device number 75 [ 161.210634][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.362100][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.620608][ T45] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 161.665512][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.722294][ T36] audit: type=1400 audit(1786823695.235:410): avc: denied { map } for pid=2593 comm="syz.1.684" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 161.861003][ T2612] can0: slcan on ttyS3. [ 161.864042][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.889933][ T2617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 161.942730][ T2612] netlink: 427 bytes leftover after parsing attributes in process `syz.3.690'. [ 162.062971][ T430] usb 2-1: USB disconnect, device number 69 [ 162.331148][ T36] audit: type=1400 audit(1786823695.855:411): avc: denied { mounton } for pid=2630 comm="syz.4.692" path="/proc/164/task" dev="proc" ino=25379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 162.600476][ T2635] kvm: user requested TSC rate below hardware speed [ 162.611640][ T2635] kvm: user requested TSC rate below hardware speed [ 162.689613][ T430] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 162.850668][ T430] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 162.859095][ T430] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 162.873901][ T430] usb 3-1: config 220 has no interface number 2 [ 162.888644][ T430] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 162.917185][ T430] usb 3-1: config 220 interface 0 has no altsetting 0 [ 162.930274][ T430] usb 3-1: config 220 interface 76 has no altsetting 0 [ 162.949382][ T430] usb 3-1: config 220 interface 1 has no altsetting 0 [ 162.965207][ T430] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 162.974550][ T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.987717][ T430] usb 3-1: Product: syz [ 162.996327][ T430] usb 3-1: Manufacturer: syz [ 163.006394][ T430] usb 3-1: SerialNumber: syz [ 163.222145][ T430] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 163.245174][ T430] usb 3-1: No valid video chain found. [ 163.265912][ T430] usb 3-1: selecting invalid altsetting 0 [ 163.279619][ C1] net_ratelimit: 75097 callbacks suppressed [ 163.279639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.290419][ T2614] can0 (unregistered): slcan off ttyS3. [ 163.297816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.306418][ T430] usb 3-1: USB disconnect, device number 76 [ 163.315382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.333276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.345592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.357864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.370149][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.382413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.394668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.406943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 163.605441][ T36] audit: type=1400 audit(1786823697.125:412): avc: denied { setattr } for pid=2691 comm="syz.1.703" name="/" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 163.780892][ T2696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.781001][ T2696] rust_binder: 635: no such ref 1 [ 163.793583][ T36] audit: type=1400 audit(1786823697.295:413): avc: denied { accept } for pid=2695 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 163.801790][ T2700] binder: Bad value for 'max' [ 163.823934][ T2696] rust_binder: Write failure EINVAL in pid:635 [ 163.827857][ T36] audit: type=1400 audit(1786823697.305:414): avc: denied { execute } for pid=2695 comm="syz.1.704" name="file1" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.859390][ T36] audit: type=1400 audit(1786823697.305:415): avc: denied { execute_no_trans } for pid=2695 comm="syz.1.704" path="/202/file1" dev="tmpfs" ino=1125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.016649][ T2712] 9pnet_fd: p9_fd_create_tcp (2712): problem connecting socket to 127.0.0.1 [ 164.089799][ T2719] netlink: 'syz.1.712': attribute type 33 has an invalid length. [ 164.132119][ T373] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 164.211770][ T2733] kvm: kvm [2732]: vcpu1, guest rIP: 0x912d Unhandled WRMSR(0x11e) = 0xcf25 [ 164.223212][ T2733] kvm: kvm [2732]: vcpu1, guest rIP: 0x912d Unhandled WRMSR(0x186) = 0xef25 [ 164.232326][ T2733] kvm: kvm [2732]: vcpu1, guest rIP: 0x912d Unhandled WRMSR(0x187) = 0x8925 [ 164.243455][ T2733] kvm_intel: kvm [2732]: vcpu1, guest rIP: 0x912d Unhandled WRMSR(0x1d9) = 0xed25 [ 164.279621][ T372] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 164.320439][ T373] usb 5-1: Using ep0 maxpacket: 16 [ 164.336441][ T373] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 164.369607][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 164.389834][ T373] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.409996][ T373] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.429671][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 164.430372][ T373] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.436156][ T372] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.456508][ T372] usb 4-1: config 5 has an invalid interface number: 42 but max is 0 [ 164.465868][ T372] usb 4-1: config 5 has no interface number 0 [ 164.470801][ T373] usb 5-1: config 7 interface 0 has no altsetting 0 [ 164.472170][ T372] usb 4-1: config 5 interface 42 has no altsetting 0 [ 164.478544][ T373] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 164.478569][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.487639][ T372] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=28.48 [ 164.513446][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.521635][ T372] usb 4-1: Product: syz [ 164.525936][ T372] usb 4-1: Manufacturer: syz [ 164.530567][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 164.536205][ T372] usb 4-1: SerialNumber: syz [ 164.542339][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.550993][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.565132][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 164.574614][ T10] usb 3-1: config 1 has no interface number 1 [ 164.580868][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 164.594569][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.607212][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.616575][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.624752][ T10] usb 3-1: Product: syz [ 164.629042][ T10] usb 3-1: Manufacturer: syz [ 164.634046][ T10] usb 3-1: SerialNumber: syz [ 164.830357][ T372] usb 4-1: USB disconnect, device number 74 [ 164.875504][ T2738] netlink: 'syz.1.717': attribute type 27 has an invalid length. [ 164.887658][ T2738] dummy0: left allmulticast mode [ 164.904848][ T2738] veth1_macvtap: entered promiscuous mode [ 165.068369][ T373] hid (null): unknown global tag 0xd [ 165.091561][ T373] hid (null): report_id 0 is invalid [ 165.096923][ T373] hid (null): unknown global tag 0xc [ 165.121339][ T373] hid (null): usage index exceeded [ 165.127114][ T373] hid (null): invalid report_size 12579 [ 165.153742][ T373] hid (null): report_id 5585 is invalid [ 165.183770][ T373] hid (null): invalid report_size 29797 [ 165.189379][ T373] hid (null): invalid report_size 29289 [ 165.189908][ T430] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 165.222522][ T373] hid (null): bogus close delimiter [ 165.242140][ T373] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0031/input/input38 [ 165.300742][ T373] kye 0003:0458:5010.0031: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 165.361041][ T430] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.377219][ T430] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 165.406239][ T430] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 165.427711][ T430] usb 2-1: config 1 has no interface number 3 [ 165.443170][ T430] usb 2-1: too many endpoints for config 1 interface 5 altsetting 9: 245, using maximum allowed: 30 [ 165.466501][ T430] usb 2-1: config 1 interface 5 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 245 [ 165.504671][ T430] usb 2-1: config 1 interface 5 has no altsetting 0 [ 165.519308][ T430] usb 2-1: config 1 interface 1 has no altsetting 0 [ 165.537372][ T430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.558469][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.577019][ T430] usb 2-1: Product: syz [ 165.586065][ T430] usb 2-1: Manufacturer: syz [ 165.596200][ T430] usb 2-1: SerialNumber: syz [ 165.738043][ T373] usb 5-1: USB disconnect, device number 28 [ 165.820299][ T430] usb 2-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 165.835937][ T430] usb 2-1: found format II with max.bitrate = 65535, frame size=7 [ 165.854478][ T430] usb 2-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 165.873121][ T430] usb 2-1: found format II with max.bitrate = 65535, frame size=7 [ 165.885283][ T430] usb 2-1: 2:1: cannot set freq 8674553 to ep 0x82 [ 165.903853][ T430] usb 2-1: USB disconnect, device number 70 [ 166.319013][ T36] audit: type=1400 audit(1786823699.835:416): avc: denied { getopt } for pid=2752 comm="syz.4.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.409858][ T2763] netlink: 'syz.4.723': attribute type 12 has an invalid length. [ 166.611953][ T430] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 166.669679][ T339] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 166.791030][ T372] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 166.802438][ T430] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 166.811962][ T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.827475][ T339] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 166.847911][ T430] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 166.857128][ T339] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.879955][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.889971][ T339] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.911455][ T430] usb 4-1: config 0 descriptor?? [ 166.916476][ T339] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 166.939647][ T339] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.946386][ T339] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 166.959860][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.979028][ T339] usb 5-1: config 0 descriptor?? [ 166.987447][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 166.996255][ T372] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 167.004577][ T372] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.019581][ T372] usb 2-1: config 0 has no interface number 0 [ 167.025769][ T372] usb 2-1: config 0 interface 196 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.049873][ T372] usb 2-1: config 0 interface 196 has no altsetting 0 [ 167.064784][ T372] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 167.079604][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.097855][ T372] usb 2-1: Product: syz [ 167.102227][ T372] usb 2-1: Manufacturer: syz [ 167.106843][ T372] usb 2-1: SerialNumber: syz [ 167.120471][ T372] usb 2-1: config 0 descriptor?? [ 167.129664][ T372] ipheth 2-1:0.196: Unable to find alternate settings interface [ 167.247919][ T10] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 167.264666][ T10] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 167.273372][ T10] usb 3-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 167.280914][ T10] usb 3-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 167.298878][ T10] usb 3-1: USB disconnect, device number 77 [ 167.313298][ T36] audit: type=1400 audit(1786823700.835:417): avc: denied { watch } for pid=2766 comm="syz.2.725" path="/160/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 167.344967][ T430] usbhid 4-1:0.0: can't add hid device: -71 [ 167.381802][ T430] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 167.400396][ T339] ryos 0003:1E7D:3138.0032: unknown main item tag 0x0 [ 167.409759][ T430] usb 4-1: USB disconnect, device number 75 [ 167.415839][ T339] ryos 0003:1E7D:3138.0032: unknown main item tag 0x0 [ 167.428255][ T339] ryos 0003:1E7D:3138.0032: unknown main item tag 0x0 [ 167.435270][ T339] ryos 0003:1E7D:3138.0032: unknown main item tag 0x0 [ 167.442357][ T339] ryos 0003:1E7D:3138.0032: unknown main item tag 0x0 [ 167.454652][ T339] ryos 0003:1E7D:3138.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 167.726906][ T2781] __vm_enough_memory: pid: 2781, comm: syz.2.730, bytes: 18014402804453376 not enough memory for the allocation [ 167.805567][ T2784] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 167.827204][ T2786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 167.838428][ T2786] x_tables: unsorted underflow at hook 2 [ 167.844723][ T2786] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 167.853014][ T2786] x_tables: duplicate underflow at hook 1 [ 167.928634][ T36] audit: type=1400 audit(1786823701.445:418): avc: denied { read write } for pid=2793 comm="syz.2.736" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.955954][ T36] audit: type=1400 audit(1786823701.475:419): avc: denied { open } for pid=2793 comm="syz.2.736" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.980954][ T36] audit: type=1400 audit(1786823701.475:420): avc: denied { ioctl } for pid=2793 comm="syz.2.736" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.116739][ T10] usb 5-1: USB disconnect, device number 29 [ 168.174675][ T36] audit: type=1400 audit(1786823701.695:421): avc: denied { mount } for pid=2799 comm="syz.4.739" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 168.202585][ T430] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 168.289738][ C1] net_ratelimit: 54271 callbacks suppressed [ 168.289762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.307758][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.319819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.331950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 168.344228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.356277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.368332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.380460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 168.390725][ T430] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.392684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.414475][ T430] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 168.414535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.428581][ T430] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.449427][ T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 168.464900][ T430] usb 3-1: SerialNumber: syz [ 168.497797][ T430] usb 3-1: bad CDC descriptors [ 168.699968][ T2794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.709277][ T2794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.719484][ T430] usb 3-1: USB disconnect, device number 78 [ 168.825038][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 168.825056][ T36] audit: type=1400 audit(1786823702.345:425): avc: denied { map } for pid=2808 comm="syz.4.742" path="socket:[27672]" dev="sockfs" ino=27672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.181148][ T2816] netlink: 'syz.3.745': attribute type 4 has an invalid length. [ 169.305759][ T2822] syzkaller1: entered promiscuous mode [ 169.311368][ T2822] syzkaller1: entered allmulticast mode [ 169.329686][ T430] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 169.468460][ T372] usb 2-1: USB disconnect, device number 71 [ 169.480415][ T430] usb 5-1: Using ep0 maxpacket: 16 [ 169.498635][ T430] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 169.512175][ T430] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.520625][ T430] usb 5-1: Product: syz [ 169.524834][ T430] usb 5-1: Manufacturer: syz [ 169.529456][ T430] usb 5-1: SerialNumber: syz [ 169.538856][ T430] usb 5-1: config 0 descriptor?? [ 169.547561][ T430] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 169.558053][ T430] usb 5-1: Detected FT4233HP [ 169.660087][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 169.819607][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 169.826004][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.836992][ T372] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 169.844659][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.856198][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 169.869579][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 169.878685][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.888484][ T10] usb 3-1: config 0 descriptor?? [ 170.006400][ T430] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 170.014895][ T372] usb 2-1: Using ep0 maxpacket: 32 [ 170.025296][ T372] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 170.033756][ T430] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 170.041829][ T372] usb 2-1: config 0 has no interface number 0 [ 170.049408][ T430] usb 5-1: USB disconnect, device number 30 [ 170.058138][ T372] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.078105][ T430] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 170.087961][ T372] usb 2-1: config 0 interface 85 has no altsetting 0 [ 170.095388][ T430] ftdi_sio 5-1:0.0: device disconnected [ 170.110640][ T372] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 170.124614][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 170.142106][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.151917][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.161650][ T2832] usb usb8: usbfs: process 2832 (syz.2.750) did not claim interface 63 before use [ 170.174255][ T372] usb 2-1: Product: syz [ 170.178438][ T372] usb 2-1: Manufacturer: syz [ 170.183166][ T10] usb 3-1: USB disconnect, device number 79 [ 170.202252][ T372] usb 2-1: SerialNumber: syz [ 170.213865][ T372] usb 2-1: config 0 descriptor?? [ 170.226932][ T2834] incfs_lookup_dentry err:-13 [ 170.231996][ T2834] incfs: Can't find or create .index dir in ./bus [ 170.238509][ T2834] incfs: mount failed -13 [ 170.425616][ T2829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.437810][ T2829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.446461][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 170.458886][ T372] usb 2-1: USB disconnect, device number 72 [ 170.579690][ T10] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 170.742322][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 170.750889][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 170.761057][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 170.774512][ T10] usb 3-1: string descriptor 0 read error: -22 [ 170.780940][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.790316][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.800073][ T2836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.809996][ T2836] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.839605][ T430] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 170.994259][ T2844] rust_binder: Write failure EINVAL in pid:665 [ 170.994682][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.012344][ T2844] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 171.025082][ T10] usb 3-1: USB disconnect, device number 80 [ 171.031859][ T2844] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.046505][ T430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.056622][ T430] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.075383][ T430] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.094761][ T430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.115631][ T430] usb 5-1: config 0 descriptor?? [ 171.198026][ T36] audit: type=1400 audit(1786823704.715:426): avc: denied { bind } for pid=2845 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.459713][ T36] audit: type=1400 audit(1786823704.985:427): avc: denied { connect } for pid=2851 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.537594][ T430] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 171.566204][ T430] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 171.683255][ T36] audit: type=1400 audit(1786823705.205:428): avc: denied { create } for pid=2860 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.706101][ T2861] netlink: 182 bytes leftover after parsing attributes in process `syz.1.762'. [ 171.725301][ T36] audit: type=1400 audit(1786823705.225:429): avc: denied { write } for pid=2860 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.757604][ T36] audit: type=1400 audit(1786823705.225:430): avc: denied { nlmsg_write } for pid=2860 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.809605][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 171.871653][ T2864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.881130][ T2864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.979593][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 171.987519][ T10] usb 3-1: config 251 has an invalid interface number: 138 but max is 1 [ 171.996068][ T430] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 172.003763][ T10] usb 3-1: config 251 has an invalid interface number: 127 but max is 1 [ 172.014135][ T10] usb 3-1: config 251 has no interface number 0 [ 172.020897][ T10] usb 3-1: config 251 has no interface number 1 [ 172.027348][ T10] usb 3-1: config 251 interface 138 has no altsetting 0 [ 172.034783][ T10] usb 3-1: config 251 interface 127 has no altsetting 0 [ 172.043601][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1604, bcdDevice=94.22 [ 172.053037][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.061577][ T10] usb 3-1: Product: syz [ 172.065915][ T10] usb 3-1: Manufacturer: syz [ 172.070800][ T10] usb 3-1: SerialNumber: syz [ 172.173411][ T430] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.184696][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.193142][ T430] usb 2-1: Product: syz [ 172.197391][ T430] usb 2-1: Manufacturer: syz [ 172.202303][ T430] usb 2-1: SerialNumber: syz [ 172.293159][ T10] usb 3-1: USB disconnect, device number 81 [ 172.589596][ T65] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 172.623100][ T430] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 172.636633][ T430] cdc_ncm 2-1:1.0: bind() failure [ 172.650665][ T430] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 172.666474][ T430] cdc_ncm 2-1:1.1: bind() failure [ 172.681510][ T430] usb 2-1: USB disconnect, device number 73 [ 172.723488][ T2875] netlink: 188 bytes leftover after parsing attributes in process `syz.1.767'. [ 172.754903][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.767824][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 172.782295][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.814536][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.839525][ T65] usb 4-1: string descriptor 0 read error: -22 [ 172.847055][ T65] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.863042][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.883292][ T65] usb 4-1: 0:2 : does not exist [ 173.299640][ C1] net_ratelimit: 78290 callbacks suppressed [ 173.299659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.317593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.329672][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.341813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 173.354013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.366029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.378056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.390158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 173.402322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.414359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.529652][ T430] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 173.540307][ T2897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2897 comm=syz.4.774 [ 173.553422][ T10] usb 5-1: USB disconnect, device number 31 [ 173.589631][ T372] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 173.682735][ T430] usb 2-1: Using ep0 maxpacket: 32 [ 173.700208][ T2866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.712360][ T430] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 173.721871][ T2866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.736276][ T430] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 173.749770][ T372] usb 3-1: Using ep0 maxpacket: 32 [ 173.769902][ T372] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 173.779658][ T430] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.801621][ T372] usb 3-1: config 0 has no interface number 0 [ 173.808092][ T65] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.829535][ T430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.850466][ T372] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=fb.a8 [ 173.859710][ T65] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 173.867264][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.875598][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.884014][ T430] usb 2-1: Product: syz [ 173.889472][ T372] usb 3-1: Product: syz [ 173.897417][ T430] usb 2-1: Manufacturer: syz [ 173.903828][ T65] usb 4-1: USB disconnect, device number 77 [ 173.912572][ T372] usb 3-1: Manufacturer: syz [ 173.917187][ T372] usb 3-1: SerialNumber: syz [ 173.929579][ T430] usb 2-1: SerialNumber: syz [ 173.954300][ T372] usb 3-1: config 0 descriptor?? [ 173.969320][ T372] ftdi_sio 3-1:0.133: FTDI USB Serial Device converter detected [ 173.981091][ T372] ftdi_sio ttyUSB0: unknown device type: 0xfba8 [ 174.042035][ T36] audit: type=1400 audit(1786823707.565:431): avc: denied { map } for pid=2912 comm="syz.4.780" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.085125][ T36] audit: type=1400 audit(1786823707.565:432): avc: denied { execute } for pid=2912 comm="syz.4.780" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.151258][ T430] usb 2-1: 0:2 : does not exist [ 174.159264][ T430] usb 2-1: USB disconnect, device number 74 [ 174.179636][ T36] audit: type=1400 audit(1786823707.695:433): avc: denied { read } for pid=2890 comm="syz.2.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.204657][ T65] usb 3-1: USB disconnect, device number 82 [ 174.214980][ T65] ftdi_sio 3-1:0.133: device disconnected [ 174.260928][ T2918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2918 comm=syz.3.779 [ 174.274872][ T2918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 174.519596][ T372] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 174.679584][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 174.698292][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.713004][ T2922] fuse: Bad value for 'group_id' [ 174.718345][ T2922] fuse: Bad value for 'group_id' [ 174.719577][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.760607][ T372] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 174.787968][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.796705][ T2927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42677 sclass=netlink_route_socket pid=2927 comm=syz.2.782 [ 174.820725][ T372] usb 4-1: config 0 descriptor?? [ 174.861987][ T2924] netlink: 120 bytes leftover after parsing attributes in process `syz.2.782'. [ 174.873618][ T2926] 9pnet: p9_errstr2errno: server reported unknown error 1i›”¦\â [ 174.890506][ T2924] netlink: 96 bytes leftover after parsing attributes in process `syz.2.782'. [ 175.040001][ T372] usbhid 4-1:0.0: can't add hid device: -71 [ 175.045987][ T372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.088763][ T372] usb 4-1: USB disconnect, device number 78 [ 175.179605][ T430] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 175.259605][ T65] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 175.357537][ T430] usb 2-1: Using ep0 maxpacket: 32 [ 175.365398][ T430] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 175.381613][ T430] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 175.412280][ T430] usb 2-1: config 0 has no interface number 0 [ 175.420124][ T430] usb 2-1: too many endpoints for config 0 interface 196 altsetting 1: 66, using maximum allowed: 30 [ 175.441651][ T65] usb 3-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 175.476446][ T65] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.485589][ T430] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 2 [ 175.506131][ T2942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.788'. [ 175.519590][ T65] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.528724][ T430] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 175.549744][ T2942] netlink: 'syz.3.788': attribute type 3 has an invalid length. [ 175.559202][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.573975][ T430] usb 2-1: config 0 interface 196 has no altsetting 0 [ 175.589687][ T65] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 175.625375][ T430] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 175.647811][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.656134][ T65] usb 3-1: no configuration chosen from 1 choice [ 175.672682][ T430] usb 2-1: Product: syz [ 175.677031][ T430] usb 2-1: Manufacturer: syz [ 175.682028][ T430] usb 2-1: SerialNumber: syz [ 175.688685][ T430] usb 2-1: config 0 descriptor?? [ 175.694276][ T2930] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 175.905916][ T2930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.784'. [ 175.953488][ T430] ipheth 2-1:0.196: Unable to find endpoints [ 176.039621][ T65] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 176.119612][ T339] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 176.156245][ T36] audit: type=1400 audit(1786823709.675:434): avc: denied { module_load } for pid=2929 comm="syz.1.784" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=28835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 176.209641][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 176.216947][ T65] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 176.227449][ T65] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.238919][ T65] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.248996][ T65] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.262242][ T65] usb 4-1: config 7 interface 0 has no altsetting 0 [ 176.268864][ T65] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 176.279652][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.288582][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.300534][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.316011][ T339] usb 5-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00 [ 176.326885][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.340888][ T339] usb 5-1: config 0 descriptor?? [ 176.716038][ T2951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.725506][ T2951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.734290][ T2951] netlink: 'syz.3.791': attribute type 64 has an invalid length. [ 176.742157][ T2951] netlink: 5 bytes leftover after parsing attributes in process `syz.3.791'. [ 176.758568][ T65] hid (null): unknown global tag 0xd [ 176.764273][ T339] hid-generic 0003:046D:0026.0034: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.4-1/input0 [ 176.779607][ T65] hid (null): report_id 0 is invalid [ 176.784942][ T65] hid (null): unknown global tag 0xc [ 176.793212][ T65] hid (null): usage index exceeded [ 176.801912][ T65] hid (null): report_id 5585 is invalid [ 176.815603][ T65] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0035/input/input40 [ 176.845908][ T65] kye 0003:0458:5010.0035: input,hiddev96,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 176.954745][ T339] usb 5-1: USB disconnect, device number 32 [ 176.978795][ T65] usb 4-1: USB disconnect, device number 79 [ 177.585835][ T2969] netlink: 104 bytes leftover after parsing attributes in process `syz.4.796'. [ 177.594903][ T36] audit: type=1400 audit(1786823711.105:435): avc: denied { nlmsg_read } for pid=2968 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.616990][ T2971] netlink: 104 bytes leftover after parsing attributes in process `syz.4.796'. [ 177.923989][ T36] audit: type=1400 audit(1786823711.445:436): avc: denied { setopt } for pid=2980 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.945162][ T339] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 178.002495][ T65] usb 2-1: USB disconnect, device number 75 [ 178.027464][ T430] usb 3-1: USB disconnect, device number 83 [ 178.109822][ T339] usb 4-1: Using ep0 maxpacket: 8 [ 178.116762][ T339] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.126646][ T339] usb 4-1: config 0 has no interface number 0 [ 178.134678][ T339] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.144068][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.152259][ T339] usb 4-1: Product: syz [ 178.156571][ T339] usb 4-1: Manufacturer: syz [ 178.162682][ T339] usb 4-1: SerialNumber: syz [ 178.169807][ T339] usb 4-1: config 0 descriptor?? [ 178.269798][ T372] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 178.309605][ C1] net_ratelimit: 76071 callbacks suppressed [ 178.309626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.327596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.339745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 178.352004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.364031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.369584][ T65] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 178.376097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.384766][ T430] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 178.395688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 178.404715][ T339] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 178.415406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.423205][ T339] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 178.433505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.442068][ T372] usb 5-1: Using ep0 maxpacket: 8 [ 178.454007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.462057][ T372] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.495687][ T339] usb 4-1: USB disconnect, device number 80 [ 178.511854][ T372] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.518587][ T372] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 178.527995][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.540908][ T372] usb 5-1: config 0 descriptor?? [ 178.580980][ T430] usb 3-1: device descriptor read/64, error -71 [ 178.600718][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.611811][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.622421][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.635611][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.644853][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.657322][ T65] usb 2-1: config 0 descriptor?? [ 178.753794][ T372] logitech-hidpp-device 0003:046D:C086.0036: unbalanced collection at end of report description [ 178.766117][ T372] logitech-hidpp-device 0003:046D:C086.0036: hidpp_probe:parse failed [ 178.774767][ T372] logitech-hidpp-device 0003:046D:C086.0036: probe with driver logitech-hidpp-device failed with error -22 [ 178.819613][ T430] usb 3-1: device descriptor read/64, error -71 [ 178.953034][ T372] usb 5-1: USB disconnect, device number 33 [ 179.059595][ T430] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 179.071187][ T65] plantronics 0003:047F:FFFF.0037: invalid report_size 3623 [ 179.078794][ T65] plantronics 0003:047F:FFFF.0037: item 0 2 1 7 parsing failed [ 179.087653][ T65] plantronics 0003:047F:FFFF.0037: parse failed [ 179.094568][ T65] plantronics 0003:047F:FFFF.0037: probe with driver plantronics failed with error -22 [ 179.199637][ T430] usb 3-1: device descriptor read/64, error -71 [ 179.275287][ T372] usb 2-1: USB disconnect, device number 76 [ 179.459601][ T430] usb 3-1: device descriptor read/64, error -71 [ 179.481491][ T65] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 179.593644][ T430] usb usb3-port1: attempt power cycle [ 179.642740][ T36] audit: type=1400 audit(1786823713.155:437): avc: denied { map } for pid=2996 comm="syz.4.805" path="socket:[29127]" dev="sockfs" ino=29127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 179.738441][ T65] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 179.830896][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.837552][ T65] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 179.864341][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.035539][ T430] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 180.103321][ T430] usb 3-1: device descriptor read/8, error -71 [ 180.121344][ T65] usb 4-1: config 0 descriptor?? [ 180.264000][ T430] usb 3-1: device descriptor read/8, error -71 [ 180.452289][ T45] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 180.552984][ T430] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 180.743892][ T65] wacom 0003:056A:0029.0038: unknown main item tag 0x0 [ 180.791716][ T430] usb 3-1: device descriptor read/8, error -71 [ 180.903782][ T65] wacom 0003:056A:0029.0038: unknown main item tag 0x0 [ 180.957282][ T430] usb 3-1: device descriptor read/8, error -71 [ 180.979003][ T65] wacom 0003:056A:0029.0038: unknown main item tag 0x0 [ 181.071527][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 181.083476][ T430] usb usb3-port1: unable to enumerate USB device [ 181.135151][ T3003] netlink: 'syz.4.807': attribute type 12 has an invalid length. [ 181.185196][ T45] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 181.203866][ T45] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 181.291552][ T45] usb 2-1: config 3 has no interface number 0 [ 181.644536][ T45] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.016251][ T45] usb 2-1: config 3 interface 45 has no altsetting 0 [ 182.326996][ T65] wacom 0003:056A:0029.0038: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 182.339213][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 182.339245][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.339267][ T45] usb 2-1: Product: syz [ 182.339282][ T45] usb 2-1: Manufacturer: syz [ 182.339297][ T45] usb 2-1: SerialNumber: syz [ 182.730821][ T3000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.283478][ T3000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.319575][ C1] net_ratelimit: 116400 callbacks suppressed [ 183.319597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.319646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.325690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 183.337674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.349782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.361590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.373556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.385431][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.397324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.409169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.010399][ T45] usb 2-1: USB disconnect, device number 77 [ 184.246340][ T1874] udevd[1874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.613686][ T65] wacom 0003:056A:0029.0038: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.3-1/input0 [ 186.928231][ T65] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0029.0038/input/input41 [ 188.245968][ T65] usb 4-1: USB disconnect, device number 81 [ 188.329614][ C0] net_ratelimit: 128168 callbacks suppressed [ 188.329635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.329702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.335717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.347701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.359615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.371668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.383513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.395397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 188.407369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.419362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.932222][ C0] sched: DL replenish lagged too much [ 193.339564][ C0] net_ratelimit: 135784 callbacks suppressed [ 193.339585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.339695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.345690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.357665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.369555][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.381505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.393351][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.405330][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 193.417306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.429315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.349601][ C1] net_ratelimit: 138042 callbacks suppressed [ 198.349622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 198.349647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.355849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.367705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.379684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.391550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.403426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.415287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.427227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 198.439235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.541237][ T3034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.323528][ T65] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 200.435665][ T3034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.359608][ C0] net_ratelimit: 129707 callbacks suppressed [ 203.359630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.359662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.365729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.377596][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.389568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.401358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.413235][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.425190][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 203.437143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.449192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.369570][ C0] net_ratelimit: 137707 callbacks suppressed [ 208.369592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.369628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.375667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.387568][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.399439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.411306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 208.423297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.435260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.447112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.459065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.379611][ C0] net_ratelimit: 138086 callbacks suppressed [ 213.379634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.379644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.379705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.385723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.397724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 213.409617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.421709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.433499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.445449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.457349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.389594][ C1] net_ratelimit: 128702 callbacks suppressed [ 218.389616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.389670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.395681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.407590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.419565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.431440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.443301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 218.455266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.467274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.479145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.399570][ C1] net_ratelimit: 121205 callbacks suppressed [ 223.399591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.399639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.405652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.417587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.429490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.441353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.453302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 223.465269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.477386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 223.489180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.409580][ C0] net_ratelimit: 126834 callbacks suppressed [ 228.409604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.409712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 228.415684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.427627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.439604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.451415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.463309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.475256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.487117][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.499120][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 233.419571][ C1] net_ratelimit: 132399 callbacks suppressed [ 233.419593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.419637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.425670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.437622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.449671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 233.461628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.473722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 233.485462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.497349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.509305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.429552][ C0] net_ratelimit: 140431 callbacks suppressed [ 238.429574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.429760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 238.435654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.447654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.459617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.471574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.483416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.495385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.507259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.519127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.439555][ C0] net_ratelimit: 138324 callbacks suppressed [ 243.439576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.439618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 243.445627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.457662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.469622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.481495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.493370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.505234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.517122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.528968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.449570][ C0] net_ratelimit: 133232 callbacks suppressed [ 248.449606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.449646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.455672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.467681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.479577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.491441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.503331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.515174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.527070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.538921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.459578][ C0] net_ratelimit: 136248 callbacks suppressed [ 253.459599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.459648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.465686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.477585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.489467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.501327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.513240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.525080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.536963][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.548940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.469534][ C0] net_ratelimit: 137444 callbacks suppressed [ 258.469558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.469599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.475639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.487621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 258.499595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.511774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 258.523526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.535440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.547359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.559221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.479555][ C0] net_ratelimit: 126669 callbacks suppressed [ 263.479577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.479722][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 263.485687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.497583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.509543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.521392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.533347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.545191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.557096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.569015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.489545][ C0] net_ratelimit: 143076 callbacks suppressed [ 268.489566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.489602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.495655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.507541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.519418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.531275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.543295][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.555115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 268.567084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.579184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 273.499533][ C1] net_ratelimit: 133348 callbacks suppressed [ 273.499556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.499565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.499648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.505634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.517551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.529405][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.541381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.553323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 273.565291][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.577443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 277.673824][ T3066] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.691793][ T3066] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.698881][ T3066] bridge_slave_0: entered allmulticast mode [ 277.740472][ T3066] bridge_slave_0: entered promiscuous mode [ 277.872410][ T3066] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.879468][ T3066] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.930081][ T3066] bridge_slave_1: entered allmulticast mode [ 278.170768][ T3066] bridge_slave_1: entered promiscuous mode [ 278.299970][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.307034][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.330997][ T3067] bridge_slave_0: entered allmulticast mode [ 278.354110][ T3067] bridge_slave_0: entered promiscuous mode [ 278.509549][ C1] net_ratelimit: 136997 callbacks suppressed [ 278.509570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.509612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.515635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.527655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.539518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 278.551452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.563605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 278.575359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.587352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.599267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.969630][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.976685][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.000486][ T3067] bridge_slave_1: entered allmulticast mode [ 279.030013][ T3067] bridge_slave_1: entered promiscuous mode [ 280.110001][ T3071] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.117068][ T3071] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.160073][ T3071] bridge_slave_0: entered allmulticast mode [ 280.173237][ T3071] bridge_slave_0: entered promiscuous mode [ 280.459948][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.467017][ T3071] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.490975][ T3071] bridge_slave_1: entered allmulticast mode [ 280.550427][ T3071] bridge_slave_1: entered promiscuous mode [ 282.799231][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.811132][ T3070] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.818226][ T3070] bridge_slave_0: entered allmulticast mode [ 282.857158][ T3070] bridge_slave_0: entered promiscuous mode [ 283.160183][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.167251][ T3070] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.202263][ T3070] bridge_slave_1: entered allmulticast mode [ 283.237093][ T3070] bridge_slave_1: entered promiscuous mode [ 283.519563][ C1] net_ratelimit: 133686 callbacks suppressed [ 283.519583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.519663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.525649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.537606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.549574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.561426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.573356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.585219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.597195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.609072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.529528][ C1] net_ratelimit: 136068 callbacks suppressed [ 288.529550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.529570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.535619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.547528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.559522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.571347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.583327][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.595297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.607151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 288.619118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.539574][ C1] net_ratelimit: 142464 callbacks suppressed [ 293.539596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 293.539633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.545686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.557640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.569624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.581498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.593365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.605236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.617125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.629000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.549615][ C1] net_ratelimit: 139317 callbacks suppressed [ 298.549635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 298.551214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.555750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.567719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.579594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.591517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.603325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.615216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.627152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.639031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.559527][ C0] net_ratelimit: 134490 callbacks suppressed [ 303.559549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.559576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 303.565627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.577783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 303.589561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.601570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.613504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.625391][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.637294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.649237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.569535][ C0] net_ratelimit: 138231 callbacks suppressed [ 308.569556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.569592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.575652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.587636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 308.599623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.611751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 308.623519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.635519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.647469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.659323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.579533][ C1] net_ratelimit: 144219 callbacks suppressed [ 313.579556][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.579569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.579633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.585614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.597618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.609570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 313.621501][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.633668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 313.645442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.657842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.589518][ C1] net_ratelimit: 134774 callbacks suppressed [ 318.589539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 318.589554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.589618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.595771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 318.607633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.619530][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.631358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.643298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.655258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.667113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.599533][ C1] net_ratelimit: 134514 callbacks suppressed [ 323.599554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.599600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.605616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.617542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.629404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 323.641285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.653226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.665123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.677080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 323.688914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.609519][ C1] net_ratelimit: 136051 callbacks suppressed [ 328.609541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 328.609579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.615836][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 328.627632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.639551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.651464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.663417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.675294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.687255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.699110][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.431671][ T37] INFO: task syz.3.818:3047 blocked for more than 123 seconds. [ 330.439279][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.601740][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.633697][ T37] task:syz.3.818 state:D stack:0 pid:3047 tgid:3047 ppid:289 flags:0x00004004 [ 330.643976][ T37] Call Trace: [ 330.647256][ T37] [ 330.650209][ T37] __schedule+0x134f/0x1ea0 [ 330.654747][ T37] ? __sched_text_start+0x10/0x10 [ 330.659792][ T37] ? rcu_segcblist_entrain+0x69/0x2b0 [ 330.665175][ T37] ? __kasan_check_write+0x18/0x20 [ 330.670328][ T37] ? llist_add_batch+0x10f/0x1f0 [ 330.675278][ T37] schedule+0xc5/0x240 [ 330.679343][ T37] schedule_timeout+0xc7/0x3b0 [ 330.684125][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 330.689523][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.695074][ T37] ? generic_exec_single+0x1fd/0x500 [ 330.700393][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 330.706041][ T37] wait_for_common+0x369/0x650 [ 330.710824][ T37] ? wait_for_completion+0x40/0x40 [ 330.715932][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 330.722449][ T37] ? xa_find+0x145/0x170 [ 330.726783][ T37] wait_for_completion+0x1c/0x40 [ 330.731742][ T37] rcu_barrier+0x415/0x540 [ 330.736156][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 330.741546][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 330.746310][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 330.751444][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 330.757084][ T37] ? __kasan_check_write+0x18/0x20 [ 330.762217][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 330.767851][ T37] kvm_put_kvm+0xb04/0x12c0 [ 330.772370][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 330.777490][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 330.782705][ T37] kvm_vm_release+0x47/0x70 [ 330.787211][ T37] __fput+0x1fe/0xa00 [ 330.791216][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 330.796767][ T37] ____fput+0x20/0x30 [ 330.800767][ T37] task_work_run+0x1e5/0x260 [ 330.805358][ T37] ? __cfi_task_work_run+0x10/0x10 [ 330.810488][ T37] ? __kasan_check_write+0x18/0x20 [ 330.815603][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 330.821263][ T37] resume_user_mode_work+0x35/0x50 [ 330.826382][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 330.831862][ T37] do_syscall_64+0x63/0xf0 [ 330.836280][ T37] ? clear_bhb_loop+0x50/0xa0 [ 330.840979][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 330.846876][ T37] RIP: 0033:0x7f9d2859aeb9 [ 330.851319][ T37] RSP: 002b:00007ffdca65f238 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 330.859749][ T37] RAX: 0000000000000000 RBX: 00007f9d28817da0 RCX: 00007f9d2859aeb9 [ 330.867722][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 330.875716][ T37] RBP: 00007f9d28817da0 R08: 00007f9d28816128 R09: 0000000000000000 [ 330.883714][ T37] R10: 00000000003ffc34 R11: 0000000000000246 R12: 0000000000031764 [ 330.891699][ T37] R13: 00007f9d2881618c R14: 000000000003171b R15: 00007f9d28816180 [ 330.899688][ T37] [ 331.039044][ T36] audit: type=1400 audit(1786823864.055:438): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1494]" dev="pipefs" ino=1494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 331.180433][ T37] NMI backtrace for cpu 0 [ 331.180460][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 331.180487][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.180499][ T37] Call Trace: [ 331.180506][ T37] [ 331.180515][ T37] __dump_stack+0x21/0x30 [ 331.180544][ T37] dump_stack_lvl+0x140/0x1c0 [ 331.180566][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 331.180589][ T37] dump_stack+0x19/0x20 [ 331.180610][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 331.180635][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 331.180657][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 331.180680][ T37] ? sched_show_task+0x371/0x530 [ 331.180701][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 331.180723][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.180744][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 331.180766][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 331.180791][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 331.180813][ T37] watchdog+0xdad/0xf00 [ 331.180837][ T37] ? __kasan_check_write+0x18/0x20 [ 331.180861][ T37] ? __cfi_watchdog+0x10/0x10 [ 331.180886][ T37] ? __kasan_check_read+0x15/0x20 [ 331.180906][ T37] ? __kthread_parkme+0x137/0x180 [ 331.180931][ T37] ? schedule+0xc5/0x240 [ 331.180948][ T37] kthread+0x2c9/0x370 [ 331.180965][ T37] ? __cfi_watchdog+0x10/0x10 [ 331.180989][ T37] ? __cfi_kthread+0x10/0x10 [ 331.181007][ T37] ret_from_fork+0x67/0xa0 [ 331.181030][ T37] ? __cfi_kthread+0x10/0x10 [ 331.181048][ T37] ret_from_fork_asm+0x1a/0x30 [ 331.181074][ T37] [ 331.181081][ T37] Sending NMI from CPU 0 to CPUs 1: [ 331.393760][ C1] NMI backtrace for cpu 1 [ 331.393780][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 001c7e68fa735976e9f6b7ad125989e1d2b10b0e [ 331.393800][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.393810][ C1] RIP: 0010:fib6_table_lookup+0x69/0x9e0 [ 331.393833][ C1] Code: 48 89 84 24 20 01 00 00 49 bf 00 00 00 00 00 fc ff df 48 c7 84 24 e0 00 00 00 b3 8a b5 41 48 c7 84 24 e8 00 00 00 63 be 08 87 <48> c7 84 24 f0 00 00 00 70 16 f5 84 4c 8d a4 24 e0 00 00 00 49 c1 [ 331.393846][ C1] RSP: 0018:ffffc900001f6ce0 EFLAGS: 00000282 [ 331.393860][ C1] RAX: b9c96f4be030a600 RBX: ffffc900001f7200 RCX: ffffc900001f7200 [ 331.393872][ C1] RDX: 000000000000000d RSI: ffff888110354e00 RDI: ffff88812c546a80 [ 331.393883][ C1] RBP: ffffc900001f6e50 R08: ffffc900001f6f50 R09: 0000000000000003 [ 331.393894][ C1] R10: ffffc900001f6f50 R11: fffff5200003edee R12: 0000000000000003 [ 331.393904][ C1] R13: ffff888110354e00 R14: ffffc900001f6f50 R15: dffffc0000000000 [ 331.393916][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 331.393929][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.393940][ C1] CR2: 00007f3cca9f84c0 CR3: 00000001076e2000 CR4: 00000000003526b0 [ 331.393954][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 331.393963][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 331.393973][ C1] Call Trace: [ 331.393978][ C1] [ 331.393986][ C1] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 331.394003][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 331.394023][ C1] ? __asan_set_shadow_00+0x12/0x20 [ 331.394038][ C1] ? rt6_multipath_hash+0xd7c/0x1570 [ 331.394053][ C1] ? __cfi_rt6_multipath_hash+0x10/0x10 [ 331.394067][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 331.394085][ C1] ? enqueue_to_backlog+0x786/0xbe0 [ 331.394101][ C1] ? skb_network_protocol+0x529/0x780 [ 331.394117][ C1] ip6_pol_route+0x17a/0x1360 [ 331.394132][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 331.394147][ C1] ? skb_scrub_packet+0x26a/0x3d0 [ 331.394162][ C1] ? __dev_forward_skb2+0x4ad/0x770 [ 331.394188][ C1] ? veth_xmit+0x790/0xb20 [ 331.394208][ C1] ip6_pol_route_input+0x5a/0x80 [ 331.394223][ C1] fib6_rule_lookup+0x4ee/0x6d0 [ 331.394243][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 331.394259][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 331.394279][ C1] ? ip6t_do_table+0x1e0/0x14d0 [ 331.394296][ C1] ip6_route_input+0x62e/0x8f0 [ 331.394311][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 331.394327][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 331.394345][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 331.394363][ C1] ip6_rcv_finish+0x15a/0x3e0 [ 331.394378][ C1] ipv6_rcv+0xf1/0x240 [ 331.394393][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 331.394407][ C1] ? br_dev_queue_push_xmit+0x55c/0x700 [ 331.394425][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 331.394441][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 331.394459][ C1] netif_receive_skb+0x147/0x7b0 [ 331.394476][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 331.394491][ C1] ? br_flood+0x67e/0x730 [ 331.394509][ C1] br_pass_frame_up+0x126/0x1b0 [ 331.394527][ C1] br_handle_frame_finish+0x1317/0x1760 [ 331.394548][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 331.394569][ C1] br_handle_frame+0x5a6/0xba0 [ 331.394588][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 331.394606][ C1] __netif_receive_skb_core+0xfae/0x3ab0 [ 331.394622][ C1] ? ip6_mc_input+0x516/0x6c0 [ 331.394637][ C1] ? sk_skb_reason_drop+0xd8/0x310 [ 331.394654][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 331.394669][ C1] ? qdisc_run_end+0x120/0x120 [ 331.394684][ C1] ? ip6_rcv_finish+0x363/0x3e0 [ 331.394699][ C1] ? ipv6_rcv+0xf1/0x240 [ 331.394713][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 331.394728][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 331.394742][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 331.394759][ C1] ? __call_rcu_common+0x43b/0x720 [ 331.394780][ C1] process_backlog+0x3e5/0xad0 [ 331.394798][ C1] __napi_poll+0xd3/0x610 [ 331.394813][ C1] net_rx_action+0x5ea/0xd80 [ 331.394828][ C1] ? _raw_spin_unlock_irq+0x45/0x70 [ 331.394847][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 331.394865][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 331.394882][ C1] handle_softirqs+0x1aa/0x630 [ 331.394901][ C1] run_ksoftirqd+0x20/0x30 [ 331.394914][ C1] smpboot_thread_fn+0x48f/0x8b0 [ 331.394932][ C1] kthread+0x2c9/0x370 [ 331.394945][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 331.394962][ C1] ? __cfi_kthread+0x10/0x10 [ 331.394975][ C1] ret_from_fork+0x67/0xa0 [ 331.394991][ C1] ? __cfi_kthread+0x10/0x10 [ 331.395004][ C1] ret_from_fork_asm+0x1a/0x30 [ 331.395024][ C1] [ 332.332128][ T3087] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 333.619547][ C0] net_ratelimit: 119319 callbacks suppressed [ 333.619570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.619776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 333.628529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.634537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.646482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.658429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.670361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.682269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.694215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.706099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.629515][ C0] net_ratelimit: 133533 callbacks suppressed [ 338.629538][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.629558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 338.635623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.647899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:b6:bd:a7:0d:2f:70, vlan:0) [ 338.659567][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.671545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 338.683457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.695444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.707317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.719175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)