last executing test programs: 58.751009195s ago: executing program 2 (id=78): sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="766a93f3f95c46702adb3a1055e28dcfa32011916484e909efbef5ae93f7937c5529fcec570f45f025c0b2a90b97c4015bf290821c3dc0ade602f672035af0ed326d1832a38f05a03541acca0385"], 0x0) 57.955063003s ago: executing program 1 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@favordynmods}]}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10d200, 0x0) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 57.954259393s ago: executing program 1 (id=87): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000580)={r2, 0x4, 0x3, 0xfffffffffffff801}) read$FUSE(r3, &(0x7f0000001980)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0211475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x11, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r1, 0x141601) fcntl$setstatus(r6, 0x4, 0x182400) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) syz_io_uring_setup(0x487, &(0x7f0000000040)={0x0, 0x3d64, 0x2000, 0x3, 0x1a1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_setup(0x2aa5, &(0x7f0000000240)={0x0, 0xd39, 0x40000, 0x1, 0x1}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x48000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x4, 0x52d, 0x0, 0x0, 0x1000, 0xeb3, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000440)) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r11, 0x10e, 0x9, 0x0, &(0x7f0000001940)) ptrace(0x10, r10) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r10, 0x10, &(0x7f0000000640)={0x4}) syz_ublk_add_dev(0xffffffffffffffff, r7, 0x0, r8, &(0x7f00000004c0)={0x2e, 0x63, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0xe27, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x3}}}, &(0x7f0000000540)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x1b) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1bc, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x401}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x62}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9d}, {0x6, 0x11, 0x9}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x440c0}, 0x4004010) bind$netlink(r3, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 56.668354463s ago: executing program 1 (id=96): syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) (async) r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x47ab00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x32) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040392ad33f40000102030109026e0003017fa006080b00020101302309040030000a2401100a000a0000000904010000010230000904010101010230000905010960002503020a2525010400000505"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8) (async) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000580)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX=r11], 0x27) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 56.586589915s ago: executing program 1 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x2f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 56.455024438s ago: executing program 1 (id=98): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x79d04bbeb2116a04) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) setresuid(r0, r0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000000905030200"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xcae, 0x2, 0x103, 0x32}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) 55.730763035s ago: executing program 2 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x9, 0x80, 0x1b, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7, 0x20, 0xee6}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x5, 0xf, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x67, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @local, {[@generic={0x89, 0x5, "1dfab7"}, @timestamp={0x44, 0x24, 0xf2, 0x0, 0x5, [0x9, 0x48131a75, 0x5, 0x3, 0x2, 0xe, 0x101, 0x1]}, @timestamp_prespec={0x44, 0x14, 0x99, 0x3, 0x6, [{@rand_addr=0x64010101, 0x101}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xa1, 0x1, 0xf, [{@broadcast, 0x1}, {@remote, 0x3}, {@loopback, 0x3}, {@private=0xa010100, 0x6}]}, @lsrr={0x83, 0x27, 0x7f, [@local, @rand_addr=0x64010100, @private=0xa010102, @empty, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0xb, 0xc, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast1]}, @end, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0xfffffffe, 0x8, @mcast1, @remote, 0x10, 0x20, 0x1, 0x7cf8}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x40, 0x20, 0x8757, 0x6, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0xdf, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @ra={0x94, 0x4}, @generic={0x44, 0x8, "e0f1ed002f93"}, @timestamp={0x44, 0x24, 0x8e, 0x0, 0x1, [0x3, 0xd6, 0x5, 0x543, 0x200, 0x3, 0x3, 0x9b95]}, @noop, @end, @timestamp={0x44, 0x10, 0x9a, 0x0, 0x0, [0x7, 0xbb0, 0x4]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0xcc, 0x100, {{0x41, 0x4, 0x3, 0x9, 0x104, 0x68, 0x0, 0x73, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x41, 0x3, [{0x5, 0x8, "55b63c8fe214"}, {0x5, 0xe, "5a9ebb998c273bf77c4364f6"}, {0x5, 0xc, "fc529a10a24da52ea055"}, {0x5, 0x3, "1f"}, {0x2, 0xf, "eea9ada3a881ee5dfc0f6d76d6"}, {0x0, 0x7, "8c28a5cae7"}]}, @timestamp_prespec={0x44, 0x44, 0xcf, 0x3, 0x9, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@loopback, 0x1ff}, {@remote, 0x7}, {@multicast2, 0x1a7097b4}, {@remote, 0xffff}, {@remote, 0x1}, {@loopback, 0x6}]}, @timestamp={0x44, 0x8, 0xaa, 0x0, 0x5, [0x200]}, @generic={0x88, 0x10, "747d7022c449ce5a793ab514acfd"}, @timestamp_addr={0x44, 0x24, 0x44, 0x1, 0x3, [{@rand_addr=0x64010101, 0x9}, {@multicast2, 0x1ff}, {@rand_addr=0x64010102, 0x14000}, {@multicast2, 0x3}]}, @rr={0x7, 0x1b, 0x92, [@multicast2, @private=0xa010100, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @multicast1]}, @noop, @rr={0x7, 0x13, 0xb3, [@rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x40, 0x80, 0x80000000, 0xb54, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, {[@rr={0x7, 0x27, 0x85, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010100, @local, @private=0xa010102, @broadcast, @remote, @private=0xa010102]}, @end, @rr={0x7, 0x17, 0x78, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x8, "dfea6145c029"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x7800, 0xfffffff7, 0x0, {{0x20, 0x4, 0x0, 0x5, 0x80, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0x7, [{@multicast2, 0x9}, {@local, 0x3}, {@remote, 0x200}]}, @rr={0x7, 0xf, 0xd6, [@dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @empty]}, @cipso={0x86, 0x1f, 0x3, [{0x7, 0x2}, {0x5, 0x5, "07dded"}, {0x0, 0xa, "a5d35ff6a6ca2e00"}, {0x5, 0x2}, {0x5, 0x6, "43e890bd"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x42, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a40)={0x4a4, r1, 0x401, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x6, 0x9, 0x6}, {0x7f, 0x8, 0x10, 0x5}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8000, 0x0, 0x8, 0x5}, {0x2628, 0x0, 0x3, 0x2}]}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) (async) r18 = socket$packet(0x11, 0x3, 0x300) (async) r19 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r19, 0x8917, &(0x7f0000000f80)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) (async) sendto(r19, &(0x7f0000000fc0)="624960e0390bc59a81eb2af7953bd8bda895b3161fba19bdd34c1e57b071ef64b74b5d143939be828b9ac5c1570dace5b614fc0bef4c00f77f4fe192be7938c5ea4f8cf9e57d0e8faa2b4d79491029549204a9bd66e922b90b62ab277f432df4cbffbec79789e13df19e5d9891d169dd128462dbca14797ed0420929ce6addf14353e9b3ec7a3ad63dd0b259e2f62ee1543e6f1a13a58a6d3be93c852b", 0x9d, 0x20040840, &(0x7f0000001080)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80) r20 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001140), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r20, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000001240)={'bridge_slave_1\x00'}) (async) r21 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_SET_USER_MEMORY_REGION(r21, 0x4020ae46, &(0x7f0000001280)={0x10201, 0x2, 0x70000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r22 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r22, 0xc00c6211, &(0x7f0000001300)) 55.730469645s ago: executing program 2 (id=107): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) symlink(&(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f00000000c0)='./cgroup/../file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x8, 0xe, 0x4, 0x4}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) epoll_create1(0x80000) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x60000000}) close(0x3) 55.726938745s ago: executing program 2 (id=108): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1f, {0x0, 0x0, 0x0, 0x4, 0x5}}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x6cdf) 55.529059149s ago: executing program 0 (id=110): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000280)="6a6844c4b989", 0x6) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) flistxattr(r1, &(0x7f0000001ac0)=""/1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x16}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xea}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0xe470b38d66815191) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000280)="6a6844c4b989", 0x6) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) (async) flistxattr(r1, &(0x7f0000001ac0)=""/1, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r2, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x16}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xea}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xadb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0xe470b38d66815191) (async) 55.48227723s ago: executing program 0 (id=111): mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) unshare(0x2020600) lchown(&(0x7f0000000140)='./bus\x00', 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 54.62014895s ago: executing program 0 (id=113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) keyctl$invalidate(0x15, r1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190019000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}, {@in6=@remote, 0x0, 0x32}, @in=@private=0xa010102, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x9}, {0x7, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x60, 0x2, {{'cbc(twofish)\x00'}, 0xc0, "1a000b000000366a6a849a739045002400001d0002000000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1080}, 0x408d0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@mcast1, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x40, 0x3, 0x4, "a4d66018"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.046682504s ago: executing program 3 (id=114): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = socket$inet6(0xa, 0x5, 0x7) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e3d, 0x280000, @mcast1, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000240000002b0000000000000718"], 0x30}, 0x4000010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) 52.677468136s ago: executing program 1 (id=115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x5a, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x5, 0x4) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000001980)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004005113fd050000000000000021de4d"], 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x10010, 0xffffffffffffffff, 0xec776000) write(r0, &(0x7f0000000400)="36f2325cc5e27366ae7810b5c54497e51860ef0d0f583878400fd0778d76accce9d796430cee4fa484e918106398fc664c216aa4e22688116e1a01dead3bf261297a27d5e57f46bb9341f3185c533149a6e5c917ebced7923da2f50eb2c314436ce0d73278e85949acaab4d9c832fdf743ffcec338d779fd3a51a20d74b14196ff8267884ace0c8c38f1a9dbc4543c8626c9cd9d3b779c21051f2fbf4f4ae9cb9385d66a2c68594720dd547ed0a827094766d7aa3f30922780db6d0c6cedb2e6b0fe6f51b4acd01b958c25eb23dc9c446c07526b522ce9a717e5497c8d3ad23b6fadd5955285cb", 0xe7) syz_clone3(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRES8=r0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x8, &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="bc9f91f9ad8f66ecee328a5d74849e3d30b301911e45cce38289ce5e0c4580fe02b08c7239b4ed846a64df9d9233b635d89d2a85a57b7dab67f554d1350dfe071750621d3f054750c00e09c99201a5e88f73bbc920ecfd34a9892c18333b6554a7f3823d2fad82a591c79edd11e288ec136caf", 0x73, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0xc028ae92, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b44e0c01", @ANYRES16=r6, @ANYBLOB="000027bd7000fedbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="14000201d629eb49cc430e4e9a4a76bcda2a05d61400fe006c0cfb907afcd468d29fbf83bdba794914000201bd0e44481164bd9d79bf674c10e7ab2c1400fe0054ea6a9a8f23b68b36d4d4b9a402fa8d0a00060008021100000000001400fe000419e2fefd5c58154b1981ec1f62c0f51400fe00059e68b815b260c2a99e0358a72c4e501400fe004439d142e778b5a45754a5673af3707b"], 0xb4}}, 0x4008040) 51.890180634s ago: executing program 2 (id=116): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x7ffe, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x5, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x7, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x1, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x84, 0xfffffff9, 0x6d, 0xfffffff9, 0x8, 0x4, 0x1, 0x40], [0x1, 0x8000009, 0x8000012d, 0x8004, 0x5, 0x3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x78, 0xea2, 0x0, 0x3, 0x3, 0x7fef, 0x6, 0x400, 0x402, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0x8, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x4009, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x7, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x2, 0x10000ac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0x40000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x7, 0x25], [0x62, 0xbb33, 0x7, 0xb, 0x5, 0x935, 0x6, 0x6, 0x0, 0x0, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8001, 0xffff, 0xa620, 0x1, 0x788, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x40001, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x7fff, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 51.444218904s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0220be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 50.708436101s ago: executing program 3 (id=118): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r0, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x4004000) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000280)=""/200, 0xc8}], 0x1, 0x3, 0x0) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7ff, 0x2, 0x30, 0xffffffffffffffff, 0x20000000) r4 = mmap$IORING_OFF_PBUF_RING(0x0, 0x7, 0x2, 0x30, 0xffffffffffffffff, 0x81ddc102) syz_ublk_setup_io_uring(0x13f2, &(0x7f0000000000)={0x0, 0x2324, 0x800, 0x3, 0x205}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) fcntl$setpipe(r6, 0x407, 0x10ae) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000340)={0x2e, 0x1, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x39d, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x120}}}, &(0x7f00000003c0)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0xfb87, 0x1, 0x5, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x286, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x109, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x27, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0x3}}) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) 48.263333048s ago: executing program 2 (id=119): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r0, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/237, 0xed}], 0x1, 0x3, 0x0) syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512028240000102030109022e00010118980409040000020103000609018e0b20000fd702052501012709058c0320006df78005250101"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 40.245736325s ago: executing program 0 (id=120): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]}) listen(r0, 0x73d) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) unshare(0x22020600) r1 = socket$inet6(0xa, 0x3, 0x8) sendto(r1, &(0x7f0000000880)="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", 0x1000, 0x4, &(0x7f0000001880)=@nl=@unspec, 0x80) unshare(0x2000800) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001323ab40809050702"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 39.737225056s ago: executing program 3 (id=121): mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) unshare(0x2020600) lchown(&(0x7f0000000140)='./bus\x00', 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') 37.446763949s ago: executing program 32 (id=115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x5a, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x5, 0x4) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000001980)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004005113fd050000000000000021de4d"], 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000007, 0x10010, 0xffffffffffffffff, 0xec776000) write(r0, &(0x7f0000000400)="36f2325cc5e27366ae7810b5c54497e51860ef0d0f583878400fd0778d76accce9d796430cee4fa484e918106398fc664c216aa4e22688116e1a01dead3bf261297a27d5e57f46bb9341f3185c533149a6e5c917ebced7923da2f50eb2c314436ce0d73278e85949acaab4d9c832fdf743ffcec338d779fd3a51a20d74b14196ff8267884ace0c8c38f1a9dbc4543c8626c9cd9d3b779c21051f2fbf4f4ae9cb9385d66a2c68594720dd547ed0a827094766d7aa3f30922780db6d0c6cedb2e6b0fe6f51b4acd01b958c25eb23dc9c446c07526b522ce9a717e5497c8d3ad23b6fadd5955285cb", 0xe7) syz_clone3(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRES8=r0]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x8, &(0x7f0000000180)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="bc9f91f9ad8f66ecee328a5d74849e3d30b301911e45cce38289ce5e0c4580fe02b08c7239b4ed846a64df9d9233b635d89d2a85a57b7dab67f554d1350dfe071750621d3f054750c00e09c99201a5e88f73bbc920ecfd34a9892c18333b6554a7f3823d2fad82a591c79edd11e288ec136caf", 0x73, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r9, 0xc028ae92, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b44e0c01", @ANYRES16=r6, @ANYBLOB="000027bd7000fedbdf257b00000008000300", @ANYRES32=r10, @ANYBLOB="14000201d629eb49cc430e4e9a4a76bcda2a05d61400fe006c0cfb907afcd468d29fbf83bdba794914000201bd0e44481164bd9d79bf674c10e7ab2c1400fe0054ea6a9a8f23b68b36d4d4b9a402fa8d0a00060008021100000000001400fe000419e2fefd5c58154b1981ec1f62c0f51400fe00059e68b815b260c2a99e0358a72c4e501400fe004439d142e778b5a45754a5673af3707b"], 0xb4}}, 0x4008040) 34.737000723s ago: executing program 3 (id=123): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[], 0x98}}, 0x40080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) 31.39510395s ago: executing program 33 (id=119): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r0, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/237, 0xed}], 0x1, 0x3, 0x0) syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000403512028240000102030109022e00010118980409040000020103000609018e0b20000fd702052501012709058c0320006df78005250101"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 30.365647824s ago: executing program 0 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001200)={0x28, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x29, 0x0, 0x0, @fd=r1}]}, 0x28}], 0x1}, 0x0) unshare(0x60000600) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x0, 0x0, 0x5}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r5, &(0x7f0000000280)={0xb, 0x75, 0x2}, 0xb) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24883}, 0x4004000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="b800000000ba008000000f30660b3f0f011b1b670fc75bbe669dd006ec66ba4200eddfd6450fc76ff6430f00d2c402b9980586a34f627a42092e6a00", 0x3c}], 0x1, 0x49, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="201800001000010003000000fedbdf250c000000100000000000000004001180ff170e80f914d5"], 0x1820}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x8000013) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074492e942e94fb70190c190c75a854ff048fa800b6c3f9", 0x3f}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x5}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 20.375413546s ago: executing program 3 (id=126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x300, 0x0, 0x4000000081, 0xfffffffffffffff9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000100)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0xaa, 0x81, 0x5}]}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) 15.93219052s ago: executing program 3 (id=127): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xffff, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x2, 0x3, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x4, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x0, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x8, 0x1000, 0x2, 0x292], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x9, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x4, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x3, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 14.21259722s ago: executing program 34 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001200)={0x28, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x29, 0x0, 0x0, @fd=r1}]}, 0x28}], 0x1}, 0x0) unshare(0x60000600) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x0, 0x0, 0x5}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r5, &(0x7f0000000280)={0xb, 0x75, 0x2}, 0xb) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24883}, 0x4004000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="b800000000ba008000000f30660b3f0f011b1b670fc75bbe669dd006ec66ba4200eddfd6450fc76ff6430f00d2c402b9980586a34f627a42092e6a00", 0x3c}], 0x1, 0x49, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="201800001000010003000000fedbdf250c000000100000000000000004001180ff170e80f914d5"], 0x1820}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0x8000013) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074492e942e94fb70190c190c75a854ff048fa800b6c3f9", 0x3f}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x5}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 0s ago: executing program 35 (id=127): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xffff, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x2, 0x3, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x4, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x0, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x8, 0x1000, 0x2, 0x292], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x9, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x2200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x4, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x3, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 22.226267][ T36] audit: type=1400 audit(1784886191.739:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.227397][ T286] cgroup: Unknown subsys name 'net' [ 22.248907][ T36] audit: type=1400 audit(1784886191.739:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.276244][ T36] audit: type=1400 audit(1784886191.769:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.276408][ T286] cgroup: Unknown subsys name 'devices' [ 22.395818][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.401445][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.514529][ T36] audit: type=1400 audit(1784886192.029:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.536290][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.537722][ T36] audit: type=1400 audit(1784886192.029:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.561288][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.570922][ T36] audit: type=1400 audit(1784886192.029:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.602792][ T36] audit: type=1400 audit(1784886192.059:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.628503][ T36] audit: type=1400 audit(1784886192.059:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.654266][ T36] audit: type=1400 audit(1784886192.069:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.679934][ T36] audit: type=1400 audit(1784886192.069:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.375094][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.382149][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.389606][ T293] bridge_slave_0: entered allmulticast mode [ 23.395969][ T293] bridge_slave_0: entered promiscuous mode [ 23.411869][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.418924][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.426111][ T293] bridge_slave_1: entered allmulticast mode [ 23.432373][ T293] bridge_slave_1: entered promiscuous mode [ 23.470565][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.477648][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.484766][ T296] bridge_slave_0: entered allmulticast mode [ 23.490917][ T296] bridge_slave_0: entered promiscuous mode [ 23.497411][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.504470][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.511534][ T296] bridge_slave_1: entered allmulticast mode [ 23.517790][ T296] bridge_slave_1: entered promiscuous mode [ 23.523812][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.530878][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.537961][ T294] bridge_slave_0: entered allmulticast mode [ 23.544159][ T294] bridge_slave_0: entered promiscuous mode [ 23.552973][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.560104][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.567252][ T294] bridge_slave_1: entered allmulticast mode [ 23.573379][ T294] bridge_slave_1: entered promiscuous mode [ 23.595511][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.602556][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.609653][ T295] bridge_slave_0: entered allmulticast mode [ 23.615837][ T295] bridge_slave_0: entered promiscuous mode [ 23.622190][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.629252][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636409][ T295] bridge_slave_1: entered allmulticast mode [ 23.642653][ T295] bridge_slave_1: entered promiscuous mode [ 23.782162][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.789243][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.796569][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.803583][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.812694][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.819757][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.827044][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.834076][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.852567][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.859632][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.866919][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.873978][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.890721][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.897776][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.905036][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.912051][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.949288][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.956624][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.963988][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.971209][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.978499][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.985891][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.993031][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.000346][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.012245][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.019399][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.031879][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.038950][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.046641][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.053691][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.066629][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.073670][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.081261][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.088334][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.096502][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.103537][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.111894][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.118940][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.136341][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.143382][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.179941][ T296] veth0_vlan: entered promiscuous mode [ 24.201433][ T296] veth1_macvtap: entered promiscuous mode [ 24.208227][ T295] veth0_vlan: entered promiscuous mode [ 24.227889][ T295] veth1_macvtap: entered promiscuous mode [ 24.234669][ T294] veth0_vlan: entered promiscuous mode [ 24.254672][ T294] veth1_macvtap: entered promiscuous mode [ 24.267091][ T293] veth0_vlan: entered promiscuous mode [ 24.280636][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.310755][ T293] veth1_macvtap: entered promiscuous mode [ 24.349460][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.369196][ T319] tmpfs: Bad value for 'nr_inodes' [ 24.501992][ T349] process 'syz.0.8' launched './file0' with NULL argv: empty string added [ 24.511143][ T349] Invalid argument reading file caps for ./file0 [ 24.584704][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.633582][ T356] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.654131][ T320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.674097][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.734125][ T313] usb 4-1: Using ep0 maxpacket: 16 [ 24.740664][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.750676][ T313] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice= 0.40 [ 24.759749][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.767942][ T313] usb 4-1: Product: syz [ 24.772091][ T313] usb 4-1: Manufacturer: syz [ 24.776718][ T313] usb 4-1: SerialNumber: syz [ 24.824422][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 24.825394][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.830636][ T320] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 24.840700][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.851846][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.861077][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.872871][ T320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 24.883854][ T314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 24.897464][ T320] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 24.905741][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.915130][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.923397][ T314] usb 3-1: config 0 descriptor?? [ 24.931754][ T320] usb 2-1: config 0 descriptor?? [ 25.189468][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 25.199987][ T314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.210309][ T314] usb 3-1: USB disconnect, device number 2 [ 25.346816][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.355025][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.363102][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.371273][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.379407][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.385634][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.389872][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.397513][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.404810][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.419851][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.428562][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.436795][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.437851][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.445749][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.453612][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.462216][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.499942][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.508371][ T320] logitech-djreceiver 0003:046D:C517.0001: unknown main item tag 0x0 [ 25.524206][ T320] logitech-djreceiver 0003:046D:C517.0001: hidraw0: USB HID v5.40 Device [HID 046d:c517] on usb-dummy_hcd.1-1/input0 [ 25.534104][ T314] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.597877][ T320] usb 2-1: USB disconnect, device number 2 [ 25.635596][ T313] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 25.647266][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.659336][ T313] usb 4-1: USB disconnect, device number 2 [ 25.670424][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.712513][ T375] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14'. [ 25.721921][ T375] mmap: syz.0.14 (375) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 25.724278][ T314] usb 3-1: Using ep0 maxpacket: 8 [ 25.742343][ T314] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 25.751800][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.759840][ T314] usb 3-1: Product: syz [ 25.764475][ T314] usb 3-1: Manufacturer: syz [ 25.769076][ T314] usb 3-1: SerialNumber: syz [ 25.986815][ T314] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 25.996662][ T314] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 26.007866][ T314] usb 3-1: USB disconnect, device number 3 [ 26.017460][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.179624][ T390] rust_binder: Error while translating object. [ 26.179661][ T390] rust_binder: Failure in copy_transaction_data: EINVAL [ 26.186052][ T390] rust_binder: 389:390 transaction to 389 failed: EINVAL [ 26.450522][ T426] incfs: Can't find or create .index dir in ./cgroup [ 26.474158][ T426] incfs: mount failed -22 [ 26.560349][ T435] kvm: pic: non byte write [ 26.904109][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.974086][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.064452][ T45] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 27.087582][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 27.096738][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.104823][ T314] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.114712][ T45] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 27.121664][ T45] usb 1-1: No valid video chain found. [ 27.145262][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.156383][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.165479][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.183888][ T9] usb 3-1: config 0 descriptor?? [ 27.257241][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 27.257257][ T36] audit: type=1400 audit(1784886196.769:162): avc: denied { setopt } for pid=451 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 27.282515][ T314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.293414][ T314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 27.302449][ T314] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.318021][ T314] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.327248][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.328748][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.335713][ T314] usb 4-1: Product: syz [ 27.348125][ T36] audit: type=1400 audit(1784886196.849:163): avc: denied { write } for pid=451 comm="syz.1.37" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.371450][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.379327][ T314] usb 4-1: Manufacturer: syz [ 27.384536][ T314] usb 4-1: SerialNumber: syz [ 27.392977][ T442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.393186][ T314] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 27.404119][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 27.417507][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.418503][ T314] cdc_ncm 4-1:1.0: bind() failure [ 27.426483][ T442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.439674][ T9] usb 3-1: USB disconnect, device number 4 [ 27.458941][ T313] usb 1-1: USB disconnect, device number 2 [ 27.754086][ T314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.804104][ T313] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.854087][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.894092][ T314] usb 2-1: device descriptor read/64, error -71 [ 27.954088][ T313] usb 1-1: Using ep0 maxpacket: 8 [ 27.960776][ T313] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 27.972191][ T313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.978831][ T313] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 27.988408][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.997032][ T313] usb 1-1: config 0 descriptor?? [ 28.015014][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.026005][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 28.035075][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.043623][ T9] usb 3-1: config 0 descriptor?? [ 28.134079][ T314] usb 2-1: device descriptor read/64, error -71 [ 28.284991][ T465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.293690][ T465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.384095][ T314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.494740][ T36] audit: type=1400 audit(1784886198.009:164): avc: denied { write } for pid=446 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.508558][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.520874][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.524074][ T314] usb 2-1: device descriptor read/64, error -71 [ 28.528040][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.541379][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.548518][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.555759][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.562897][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.570051][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.577350][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.584517][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.591637][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.598773][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.605915][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.613018][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.620155][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.627288][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.634415][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.641526][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.648770][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.655909][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x2 [ 28.663013][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.670148][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.677299][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.684444][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.692011][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.699199][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x5 [ 28.706720][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.713869][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.721043][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.728249][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.735419][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.742564][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.749709][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.756837][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x1 [ 28.763937][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.771089][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.778234][ T313] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 28.786274][ T313] logitech 0003:046D:CA04.0002: hidraw0: USB HID v0.81 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 28.794083][ T314] usb 2-1: device descriptor read/64, error -71 [ 28.797652][ T313] logitech 0003:046D:CA04.0002: no inputs found [ 28.816250][ T313] usb 1-1: USB disconnect, device number 3 [ 28.904221][ T314] usb usb2-port1: attempt power cycle [ 28.904584][ T9] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 28.914732][ T447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.924837][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4 [ 28.931960][ T447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.944113][ T36] audit: type=1400 audit(1784886198.439:165): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.966358][ T36] audit: type=1400 audit(1784886198.459:166): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.989634][ T36] audit: type=1400 audit(1784886198.459:167): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=459 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.226387][ T313] usb 3-1: USB disconnect, device number 5 [ 29.226436][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 29.284175][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.305342][ T314] usb 2-1: device descriptor read/8, error -71 [ 29.380696][ T475] ======================================================= [ 29.380696][ T475] WARNING: The mand mount option has been deprecated and [ 29.380696][ T475] and is ignored by this kernel. Remove the mand [ 29.380696][ T475] option from the mount to silence this warning. [ 29.380696][ T475] ======================================================= [ 29.404903][ T476] overlayfs: overlapping lowerdir path [ 29.420810][ T36] audit: type=1400 audit(1784886198.929:168): avc: denied { mount } for pid=474 comm="syz.0.41" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.443672][ T36] audit: type=1400 audit(1784886198.929:169): avc: denied { mounton } for pid=474 comm="syz.0.41" path="/18/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 29.445617][ T314] usb 2-1: device descriptor read/8, error -71 [ 29.466226][ T36] audit: type=1400 audit(1784886198.959:170): avc: denied { mount } for pid=474 comm="syz.0.41" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.472462][ T476] overlayfs: maximum fs stacking depth exceeded [ 29.494059][ T36] audit: type=1400 audit(1784886199.009:171): avc: denied { read } for pid=474 comm="syz.0.41" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 29.734112][ T314] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.755089][ T314] usb 2-1: device descriptor read/8, error -71 [ 29.825166][ T487] tipc: Started in network mode [ 29.830078][ T487] tipc: Node identity ac14140f, cluster identity 4711 [ 29.836963][ T487] tipc: New replicast peer: 255.255.255.255 [ 29.843073][ T487] tipc: Enabled bearer , priority 10 [ 29.895148][ T314] usb 2-1: device descriptor read/8, error -71 [ 29.949762][ T494] SELinux: policydb magic number 0x1fe90001 does not match expected magic number 0xf97cff8c [ 29.960034][ T494] SELinux: failed to load policy [ 29.980615][ T9] usb 4-1: USB disconnect, device number 3 [ 30.005117][ T314] usb usb2-port1: unable to enumerate USB device [ 30.172660][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.181177][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.502755][ T518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 30.784177][ T314] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 30.844108][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.924265][ T314] usb 2-1: device descriptor read/64, error -71 [ 30.956331][ T536] Zero length message leads to an empty skb [ 30.972082][ T320] tipc: Node number set to 2886997007 [ 31.015129][ T31] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 31.028710][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.048111][ T31] usb 1-1: config 0 descriptor?? [ 31.184094][ T314] usb 2-1: device descriptor read/64, error -71 [ 31.224067][ T523] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.354090][ T523] usb 4-1: device descriptor read/64, error -71 [ 31.424100][ T314] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 31.554179][ T314] usb 2-1: device descriptor read/64, error -71 [ 31.624085][ T523] usb 4-1: device descriptor read/64, error -71 [ 31.794080][ T314] usb 2-1: device descriptor read/64, error -71 [ 31.864076][ T523] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.904169][ T314] usb usb2-port1: attempt power cycle [ 31.994077][ T523] usb 4-1: device descriptor read/64, error -71 [ 32.060778][ T31] usb 1-1: Cannot set autoneg [ 32.065544][ T31] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 32.077706][ T31] usb 1-1: USB disconnect, device number 4 [ 32.234090][ T523] usb 4-1: device descriptor read/64, error -71 [ 32.244159][ T314] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 32.265053][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.344163][ T523] usb usb4-port1: attempt power cycle [ 32.395087][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.634102][ T314] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 32.655094][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.684106][ T523] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.691710][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 32.691725][ T36] audit: type=1400 audit(1784886202.199:189): avc: denied { setopt } for pid=544 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.692384][ T550] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.730029][ T523] usb 4-1: device descriptor read/8, error -71 [ 32.785160][ T314] usb 2-1: device descriptor read/8, error -71 [ 32.804092][ T45] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 32.865139][ T523] usb 4-1: device descriptor read/8, error -71 [ 32.894200][ T314] usb usb2-port1: unable to enumerate USB device [ 32.955239][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 32.965820][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1983, setting to 0 [ 32.977002][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 32.987648][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 32.998320][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 8 [ 33.008948][ T45] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 33.019505][ T45] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 33.031533][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 33.040603][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.048810][ T45] usb 1-1: Product: 瀕㊟鴚⣂ [ 33.053758][ T45] usb 1-1: Manufacturer: 鬐忥䩻㢠쟯迠펈颗嵐㺴Ṻꊘ䤝旲ຯ䁎Ɯ캝 [ 33.063005][ T45] usb 1-1: SerialNumber: ఉ [ 33.068685][ T547] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.075955][ T547] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 33.104086][ T523] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.125113][ T523] usb 4-1: device descriptor read/8, error -71 [ 33.255081][ T523] usb 4-1: device descriptor read/8, error -71 [ 33.364165][ T523] usb usb4-port1: unable to enumerate USB device [ 33.435209][ T36] audit: type=1400 audit(1784886202.949:190): avc: denied { read } for pid=553 comm="syz.2.64" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.456213][ T36] audit: type=1400 audit(1784886202.949:191): avc: denied { open } for pid=553 comm="syz.2.64" path="net:[4026532550]" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.485417][ T36] audit: type=1400 audit(1784886202.999:192): avc: denied { read } for pid=555 comm="syz.2.65" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.492602][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.508634][ T36] audit: type=1400 audit(1784886202.999:193): avc: denied { open } for pid=555 comm="syz.2.65" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.522261][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.571547][ T36] audit: type=1400 audit(1784886203.079:194): avc: denied { read } for pid=561 comm="syz.2.66" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.572884][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.594540][ T36] audit: type=1400 audit(1784886203.079:195): avc: denied { open } for pid=561 comm="syz.2.66" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.624953][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.630057][ T36] audit: type=1400 audit(1784886203.109:196): avc: denied { ioctl } for pid=561 comm="syz.2.66" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.647458][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.667141][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.678357][ T36] audit: type=1400 audit(1784886203.189:197): avc: denied { create } for pid=546 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 33.703292][ T45] usb 1-1: USB disconnect, device number 5 [ 33.719537][ T563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.734071][ T36] audit: type=1400 audit(1784886203.239:198): avc: denied { cmd } for pid=566 comm="iou-wrk-567" path="socket:[5820]" dev="sockfs" ino=5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.825966][ T578] netlink: 'syz.1.68': attribute type 7 has an invalid length. [ 33.833618][ T578] netlink: 'syz.1.68': attribute type 5 has an invalid length. [ 33.841231][ T578] netlink: 17 bytes leftover after parsing attributes in process `syz.1.68'. [ 33.865117][ T580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=580 comm=syz.1.70 [ 33.880436][ T580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=580 comm=syz.1.70 [ 33.894402][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.901806][ T580] netlink: 'syz.1.70': attribute type 1 has an invalid length. [ 33.910153][ T580] netlink: 9 bytes leftover after parsing attributes in process `syz.1.70'. [ 34.070545][ T598] __vm_enough_memory: pid: 598, comm: syz.2.76, bytes: 281479271677952 not enough memory for the allocation [ 34.164099][ T523] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 34.314141][ T523] usb 2-1: Using ep0 maxpacket: 32 [ 34.320528][ T523] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 34.328661][ T523] usb 2-1: config 2 has no interface number 0 [ 34.334100][ T313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.334833][ T523] usb 2-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 34.354110][ T320] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 34.356820][ T523] usb 2-1: config 2 interface 88 has no altsetting 0 [ 34.369600][ T523] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 34.378713][ T523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 34.386776][ T523] usb 2-1: Product: syz [ 34.390928][ T523] usb 2-1: Manufacturer: syz [ 34.395575][ T523] usb 2-1: SerialNumber: syz [ 34.400930][ T584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.454106][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.464176][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.505147][ T320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.515309][ T320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 34.524298][ T320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 34.535097][ T320] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 34.544302][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.554260][ T320] hub 4-1:1.0: bad descriptor, ignoring hub [ 34.560178][ T320] hub 4-1:1.0: probe with driver hub failed with error -5 [ 34.567600][ T320] cdc_wdm 4-1:1.0: skipping garbage [ 34.572801][ T320] cdc_wdm 4-1:1.0: skipping garbage [ 34.578127][ T320] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 34.609209][ T584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.610516][ T612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.616538][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 34.625650][ T612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.631788][ T10] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 34.639458][ T612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.649229][ T10] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.658506][ T612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.670552][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 34.679442][ T612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.686126][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.40 [ 34.693707][ T612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.702061][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.711315][ T612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.726184][ T313] usb 3-1: device descriptor read/64, error -71 [ 34.732663][ T10] usb 1-1: Product: ж [ 34.733587][ T612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.737019][ T10] usb 1-1: Manufacturer: 䐊 [ 34.745909][ T612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.749494][ T10] usb 1-1: SerialNumber: 啚ʰ뢛䋸⑲엹楟۔Ꙑ㝊鑊邸雦ᓛ샾嫽ᕨ吇ꃟ깍튃뿚馫뇾ᛨ싅쐬曠䖞 [ 34.759216][ T612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.794871][ T523] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 34.805309][ T523] asix 2-1:2.88: probe with driver asix failed with error -71 [ 34.816241][ T523] usb 2-1: USB disconnect, device number 11 [ 34.874239][ T320] usb 4-1: USB disconnect, device number 8 [ 34.904953][ T628] new mount options do not match the existing superblock, will be ignored [ 34.964077][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.984990][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 34.990924][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 35.003484][ T10] usb 1-1: USB disconnect, device number 6 [ 35.094119][ T313] usb 3-1: device descriptor read/64, error -71 [ 35.294099][ T523] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 35.334084][ T313] usb 3-1: device descriptor read/64, error -71 [ 35.444297][ T313] usb usb3-port1: attempt power cycle [ 35.445195][ T523] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 35.461306][ T523] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 35.472376][ T523] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 35.484240][ T523] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 35.493284][ T523] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 35.501297][ T523] usb 2-1: Manufacturer: syz [ 35.506735][ T630] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.574161][ T637] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 35.605606][ T641] netlink: 492 bytes leftover after parsing attributes in process `syz.0.90'. [ 35.742081][ T637] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.750536][ T637] usb 4-1: config 128 has an invalid interface number: 226 but max is 2 [ 35.764047][ T637] usb 4-1: config 128 has an invalid interface number: 28 but max is 2 [ 35.768748][ T653] tipc: Started in network mode [ 35.773370][ T637] usb 4-1: config 128 has an invalid interface number: 151 but max is 2 [ 35.777474][ T653] tipc: Node identity e2858d1b4391, cluster identity 4711 [ 35.786681][ T313] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.793433][ T653] tipc: Enabled bearer , priority 0 [ 35.800330][ T637] usb 4-1: config 128 has no interface number 0 [ 35.813555][ T637] usb 4-1: config 128 has no interface number 1 [ 35.820027][ T637] usb 4-1: config 128 has no interface number 2 [ 35.826338][ T637] usb 4-1: config 128 interface 151 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 35.838509][ T637] usb 4-1: config 128 interface 151 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 35.851945][ T637] usb 4-1: config 128 interface 151 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 35.863113][ T313] usb 3-1: device descriptor read/8, error -71 [ 35.869423][ T637] usb 4-1: config 128 interface 151 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 35.869938][ T652] tipc: Disabling bearer [ 35.880711][ T637] usb 4-1: config 128 interface 226 has no altsetting 0 [ 35.893288][ T637] usb 4-1: config 128 interface 28 has no altsetting 0 [ 35.900198][ T637] usb 4-1: config 128 interface 151 has no altsetting 0 [ 35.908608][ T637] usb 4-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=4d.84 [ 35.917677][ T637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.925692][ T637] usb 4-1: Product: syz [ 35.929874][ T637] usb 4-1: Manufacturer: syz [ 35.934653][ T637] usb 4-1: SerialNumber: syz [ 35.947697][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 35.958304][ T655] netlink: 64 bytes leftover after parsing attributes in process `syz.0.95'. [ 35.995059][ T313] usb 3-1: device descriptor read/8, error -71 [ 36.147072][ T637] usb 4-1: USB disconnect, device number 9 [ 36.219136][ T523] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 36.230999][ T523] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 36.232762][ T668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.249013][ T313] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 36.250811][ T523] usb 2-1: USB disconnect, device number 12 [ 36.256527][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 36.269147][ T668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.280262][ T668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.289243][ T668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.297721][ T313] usb 3-1: device descriptor read/8, error -71 [ 36.334840][ T672] overlayfs: cannot append lower layer [ 36.334845][ T673] overlayfs: cannot append lower layer [ 36.425060][ T313] usb 3-1: device descriptor read/8, error -71 [ 36.534166][ T313] usb usb3-port1: unable to enumerate USB device [ 36.713477][ T681] netlink: 9 bytes leftover after parsing attributes in process `syz.3.100'. [ 36.722686][ T681] gretap0: entered promiscuous mode [ 36.734086][ T523] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 36.864171][ T523] usb 2-1: device descriptor read/64, error -71 [ 36.909499][ T686] fuse: Unknown parameter '000000000000000000000x000000000000000a' [ 36.979049][ T688] bridge0: port 3(veth0_to_bridge) entered blocking state [ 36.986262][ T688] bridge0: port 3(veth0_to_bridge) entered disabled state [ 36.993519][ T688] veth0_to_bridge: entered allmulticast mode [ 36.999951][ T688] veth0_to_bridge: entered promiscuous mode [ 37.005977][ T688] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.018435][ T688] bridge0: port 3(veth0_to_bridge) entered blocking state [ 37.025570][ T688] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 37.104071][ T523] usb 2-1: device descriptor read/64, error -71 [ 37.241701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.253942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.266049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.278086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.290211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.302240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.314333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.326385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.338532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.350568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 37.354085][ T523] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 37.494070][ T523] usb 2-1: device descriptor read/64, error -71 [ 37.734102][ T523] usb 2-1: device descriptor read/64, error -71 [ 37.804068][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.844648][ T523] usb usb2-port1: attempt power cycle [ 37.847302][ T313] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 37.954077][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 37.964349][ T45] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 37.973570][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.983667][ T45] usb 4-1: Product: syz [ 37.988636][ T45] usb 4-1: Manufacturer: syz [ 37.993274][ T45] usb 4-1: SerialNumber: syz [ 38.057330][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.084378][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.115130][ T313] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 38.135033][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.154323][ T313] usb 3-1: config 0 descriptor?? [ 38.194105][ T523] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 38.211257][ T45] usb 4-1: Can't get UAC3 power state for id 10 [ 38.218500][ T45] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 38.226691][ T45] usb 4-1: 0:3 : does not exist [ 38.231852][ T45] usb 4-1: 0:4 : does not exist [ 38.238256][ T523] usb 2-1: device descriptor read/8, error -71 [ 38.244754][ T45] usb 4-1: 0:5 : does not exist [ 38.255531][ T45] usb 4-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 38.279363][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.292803][ T45] usb 4-1: USB disconnect, device number 10 [ 38.323948][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.385477][ T523] usb 2-1: device descriptor read/8, error -71 [ 38.620190][ T537] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.722536][ T523] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 39.081217][ T313] usbhid 3-1:0.0: can't add hid device: -32 [ 39.099478][ T537] usb 1-1: Using ep0 maxpacket: 32 [ 39.123833][ T523] usb 2-1: device descriptor read/8, error -71 [ 39.144763][ T313] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 39.218395][ T537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.316105][ T537] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.358612][ T523] usb 2-1: device descriptor read/8, error -71 [ 39.491324][ T523] usb usb2-port1: unable to enumerate USB device [ 40.401178][ T537] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.606051][ T537] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.746471][ T45] usb 3-1: USB disconnect, device number 10 [ 41.054227][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 41.054247][ T36] audit: type=1400 audit(1784886210.519:227): avc: denied { write } for pid=727 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.988281][ T537] usb 1-1: config 0 descriptor?? [ 42.244033][ C1] net_ratelimit: 105406 callbacks suppressed [ 42.244054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 42.244080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.250142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 42.262142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.274201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 42.286157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.298223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 42.310189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.322051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 42.334027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.415073][ T537] usb 1-1: can't set config #0, error -71 [ 42.456339][ T537] usb 1-1: USB disconnect, device number 7 [ 43.349137][ T734] netlink: 'syz.0.117': attribute type 5 has an invalid length. [ 43.487681][ T36] audit: type=1400 audit(1784886212.979:228): avc: denied { name_bind } for pid=735 comm="syz.2.116" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.512168][ T734] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.117'. [ 43.770234][ T734] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 44.314925][ T36] audit: type=1400 audit(1784886213.249:229): avc: denied { read write } for pid=731 comm="syz.1.115" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.549555][ T734] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 46.034701][ T36] audit: type=1400 audit(1784886213.249:230): avc: denied { open } for pid=731 comm="syz.1.115" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.254055][ C1] net_ratelimit: 114976 callbacks suppressed [ 47.254076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 47.254101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.260152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 47.272130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.284135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 47.296146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.308012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 47.320132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.331894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 47.343854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.264058][ C1] net_ratelimit: 117405 callbacks suppressed [ 52.264080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 52.264233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.270339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 52.282323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.294206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 52.306217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.318057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 52.330029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.341967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 52.353943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.566550][ T36] audit: type=1400 audit(1784886213.279:231): avc: denied { unlink } for pid=733 comm="syz.0.117" name="#5" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.456791][ T36] audit: type=1400 audit(1784886213.399:232): avc: denied { write } for pid=735 comm="syz.2.116" name="/" dev="incremental-fs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.230495][ T36] audit: type=1400 audit(1784886213.399:233): avc: denied { add_name } for pid=735 comm="syz.2.116" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.496630][ T36] audit: type=1400 audit(1784886213.399:234): avc: denied { create } for pid=735 comm="syz.2.116" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.981764][ T36] audit: type=1400 audit(1784886213.399:235): avc: denied { associate } for pid=735 comm="syz.2.116" name="memory.current" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.080097][ T36] audit: type=1400 audit(1784886226.019:236): avc: denied { connect } for pid=745 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.168181][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 57.274051][ C1] net_ratelimit: 129207 callbacks suppressed [ 57.274070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 57.274082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.274144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.280128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 57.292194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.304138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 57.315997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.327950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 57.340000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.351772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 57.455097][ T36] audit: type=1326 audit(1784886226.279:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=745 comm="syz.0.120" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd84179de99 code=0x0 [ 57.486284][ T462] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 57.627015][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.654664][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 57.716291][ T462] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.726331][ T36] audit: type=1400 audit(1784886226.429:238): avc: denied { ioctl } for pid=745 comm="syz.0.120" path="socket:[6465]" dev="sockfs" ino=6465 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.134987][ T462] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 58.169843][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 59.116362][ T462] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 59.274216][ T36] audit: type=1400 audit(1784886227.179:239): avc: denied { mounton } for pid=754 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 61.567930][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.871740][ T462] usb 1-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 62.284030][ C1] net_ratelimit: 161700 callbacks suppressed [ 62.284056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 62.284066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.284162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.290137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 62.302134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.314025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 62.325994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.337932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 62.349888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.361851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 62.580755][ C0] sched: DL replenish lagged too much [ 62.617225][ T10] usb 3-1: string descriptor 0 read error: -71 [ 62.623456][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=8202, bcdDevice= 0.40 [ 62.835428][ T462] usb 1-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 0 [ 66.563464][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.579326][ T462] usb 1-1: config 66 interface 0 has no altsetting 0 [ 67.294063][ C1] net_ratelimit: 162558 callbacks suppressed [ 67.294084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 67.294119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.300166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 67.312166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.324104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 67.336098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.348057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 67.360011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.371886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 67.383819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.101643][ T462] usb 1-1: string descriptor 0 read error: -71 [ 71.946647][ T462] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 72.257419][ T462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.274691][ T10] usb 3-1: can't set config #1, error -71 [ 72.304043][ C0] net_ratelimit: 164414 callbacks suppressed [ 72.304063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.304085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 72.310157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.322158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 72.334136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.345994][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 72.357962][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 72.369824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 72.381960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 72.393664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 73.030513][ T462] usb 1-1: can't set config #66, error -71 [ 73.586228][ T10] usb 3-1: USB disconnect, device number 11 [ 73.596177][ T462] usb 1-1: USB disconnect, device number 8 [ 75.986913][ T36] audit: type=1326 audit(1784886245.499:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=764 comm="syz.3.126" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a039de99 code=0x0 [ 77.314054][ C1] net_ratelimit: 154320 callbacks suppressed [ 77.314076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 77.314124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.320138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 77.332180][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.344031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 77.356140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 77.367920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 77.379894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.391773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 77.403755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.324012][ C1] net_ratelimit: 163006 callbacks suppressed [ 82.324032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 82.324078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.330088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 82.342121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.354178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 82.366137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.378007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 82.389956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.401840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 82.413940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.334028][ C1] net_ratelimit: 167023 callbacks suppressed [ 87.334048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 87.334111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.340128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 87.352179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.364005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 87.376126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.387913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 87.399870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 87.411760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 87.423739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.344032][ C1] net_ratelimit: 164915 callbacks suppressed [ 92.344054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 92.344253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.350135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 92.362160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.374040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 92.386121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.397940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 92.409883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 92.421755][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 92.433728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.354025][ C1] net_ratelimit: 162648 callbacks suppressed [ 97.354049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 97.354075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.360103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 97.372102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.384000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 97.395947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.407899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 97.420073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 97.431786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 97.443785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.364025][ C1] net_ratelimit: 160057 callbacks suppressed [ 102.364046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 102.364047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.364093][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.370095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 102.382130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.394058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 102.405946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.417904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 102.429875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 102.441829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.374007][ C1] net_ratelimit: 161792 callbacks suppressed [ 107.374028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.374182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.380085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.392058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.403934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.415991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.427849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.439797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.451778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 107.463773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.383995][ C0] net_ratelimit: 167097 callbacks suppressed [ 112.384016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.384036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 112.390264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.401965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 112.413969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.425829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 112.437931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.449731][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 112.461686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.473563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.393995][ C1] net_ratelimit: 161314 callbacks suppressed [ 117.394017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.394087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.400090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.412103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.423965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.436038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.447866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.459823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.471686][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 117.483878][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.404005][ C1] net_ratelimit: 161841 callbacks suppressed [ 122.404028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 122.404107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.410091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 122.422157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.434062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 122.446326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.458131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 122.470064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.481939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 122.493949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.414023][ C1] net_ratelimit: 159200 callbacks suppressed [ 127.414044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 127.414047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.414102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 127.420115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.432112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 127.444107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.456045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 127.467918][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.479856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 127.491740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.424030][ C1] net_ratelimit: 156952 callbacks suppressed [ 132.424051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 132.424182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.430129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 132.442168][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.454020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 132.466153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.477960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 132.489916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.501771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 132.513776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.433993][ C1] net_ratelimit: 158104 callbacks suppressed [ 137.434014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 137.434059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.440068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 137.452076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.463918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 137.475874][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.487931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 137.500106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.511671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 137.523725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.444016][ C1] net_ratelimit: 159787 callbacks suppressed [ 142.444035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 142.444074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.450089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 142.462091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.473952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 142.485909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.497896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 142.509893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.521718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 142.533693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.945226][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.952288][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.984373][ T771] bridge_slave_0: entered allmulticast mode [ 143.014727][ T771] bridge_slave_0: entered promiscuous mode [ 143.114226][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.121295][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.145555][ T771] bridge_slave_1: entered allmulticast mode [ 143.164321][ T771] bridge_slave_1: entered promiscuous mode [ 144.634152][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.641208][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.704713][ T773] bridge_slave_0: entered allmulticast mode [ 144.745822][ T773] bridge_slave_0: entered promiscuous mode [ 147.454025][ C1] net_ratelimit: 157902 callbacks suppressed [ 147.454047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 147.454133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 147.460112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 147.472120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.484021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 147.495978][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.507823][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 147.519770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 147.531732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 147.543821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.464012][ C0] net_ratelimit: 174297 callbacks suppressed [ 152.464031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.465255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 152.470117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.482119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 152.494116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.505978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 152.517924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.529937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 152.542141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.554143][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 157.474001][ C1] net_ratelimit: 175212 callbacks suppressed [ 157.474023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 157.474024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.474070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.480085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 157.492110][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.504140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 157.516003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.528002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 157.540153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.551916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.484008][ C1] net_ratelimit: 165251 callbacks suppressed [ 162.484030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.484054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.490135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.502158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.514014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.526001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.537939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.549957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.561898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 162.573862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.493983][ C1] net_ratelimit: 170243 callbacks suppressed [ 167.494005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 167.494020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.494072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.500057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 167.512201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.523923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 167.535808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.547770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 167.559737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.571735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.503982][ C1] net_ratelimit: 169370 callbacks suppressed [ 172.504004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.504033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.510074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.522065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.534050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.546013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.557893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.569908][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.581750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 172.593710][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.513965][ C1] net_ratelimit: 168240 callbacks suppressed [ 177.513986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 177.514022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.520041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 177.532047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.543920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 177.555867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.567855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 177.579845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.591676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 177.603659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.523976][ C1] net_ratelimit: 164349 callbacks suppressed [ 182.523997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 182.524099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.530060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 182.542037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.554015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 182.566019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.577864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 182.589815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.601789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 182.614118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.844581][ T37] INFO: task syz.1.115:731 blocked for more than 122 seconds. [ 185.852097][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.533968][ C1] net_ratelimit: 165600 callbacks suppressed [ 187.533989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 187.533997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.534058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.540064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 187.552034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.564017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 187.575992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.587958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 187.599797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.611768][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.483469][ T36] audit: type=1400 audit(1784886355.559:241): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[3015]" dev="pipefs" ino=3015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 192.526162][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 192.534922][ T37] task:syz.1.115 state:D stack:0 pid:731 tgid:731 ppid:294 flags:0x00004004 [ 192.545131][ C1] net_ratelimit: 164306 callbacks suppressed [ 192.545147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.545216][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.545277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.551205][ T37] Call Trace: [ 192.563307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.575247][ T37] [ 192.587322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.590483][ T37] __schedule+0x1496/0x20b0 [ 192.602592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.605434][ T37] ? lock_timer_base+0x261/0x280 [ 192.617441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.621854][ T37] ? __sched_text_start+0x10/0x10 [ 192.633915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.638758][ T37] ? swake_up_one_online+0x4d/0xf0 [ 192.650842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.655738][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 192.667797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4a:26:12:dc:4a:d0, vlan:0) [ 192.672875][ T37] ? rcu_barrier_entrain+0x382/0x530 [ 192.706891][ T37] schedule+0xc5/0x240 [ 192.710960][ T37] schedule_timeout+0xc7/0x3b0 [ 192.715728][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 192.721104][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 192.726680][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 192.731812][ T37] ? generic_exec_single+0x206/0x500 [ 192.737107][ T37] ? call_rcu+0x14/0x20 [ 192.741253][ T37] wait_for_common+0x368/0x650 [ 192.746027][ T37] ? wait_for_completion+0x40/0x40 [ 192.751134][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 192.756601][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 192.763098][ T37] wait_for_completion+0x1c/0x40 [ 192.768036][ T37] rcu_barrier+0x45a/0x580 [ 192.772445][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 192.777840][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 192.782600][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 192.787725][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 192.793352][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 192.798993][ T37] kvm_put_kvm+0xadf/0x12d0 [ 192.803502][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 192.808634][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 192.813834][ T37] kvm_vm_release+0x47/0x70 [ 192.818362][ T37] __fput+0x20b/0xa30 [ 192.822367][ T37] ____fput+0x20/0x30 [ 192.826358][ T37] task_work_run+0x1e8/0x260 [ 192.830949][ T37] ? __cfi_task_work_run+0x10/0x10 [ 192.836068][ T37] ? __kasan_check_write+0x18/0x20 [ 192.841169][ T37] resume_user_mode_work+0x35/0x50 [ 192.846307][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 192.851782][ T37] do_syscall_64+0x63/0xf0 [ 192.856206][ T37] ? clear_bhb_loop+0x50/0xa0 [ 192.860876][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.866797][ T37] RIP: 0033:0x7fdfd099de99 [ 192.871204][ T37] RSP: 002b:00007ffc38c3c4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 192.879624][ T37] RAX: 0000000000000000 RBX: 00007ffc38c3c5a0 RCX: 00007fdfd099de99 [ 192.887592][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 192.895561][ T37] RBP: 000000000000a714 R08: 0000000000000001 R09: 0000000000000000 [ 192.903521][ T37] R10: 0000001b2e220000 R11: 0000000000000246 R12: 00007ffc38c3c5e0 [ 192.911510][ T37] R13: 00007fdfd0c25fac R14: 000000000000ab5e R15: 00007fdfd0c25fa0 [ 192.919661][ T37] [ 194.236195][ T37] NMI backtrace for cpu 0 [ 194.236219][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 194.236247][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.236260][ T37] Call Trace: [ 194.236266][ T37] [ 194.236275][ T37] __dump_stack+0x21/0x30 [ 194.236302][ T37] dump_stack_lvl+0x140/0x1c0 [ 194.236327][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.236354][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 194.236384][ T37] dump_stack+0x19/0x20 [ 194.236408][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 194.236430][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 194.236456][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 194.236476][ T37] ? sched_show_task+0x371/0x530 [ 194.236502][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 194.236528][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 194.236554][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 194.236579][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 194.236601][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 194.236626][ T37] watchdog+0xe45/0xf90 [ 194.236647][ T37] ? __kasan_check_write+0x18/0x20 [ 194.236669][ T37] ? __cfi_watchdog+0x10/0x10 [ 194.236689][ T37] ? __kasan_check_read+0x15/0x20 [ 194.236707][ T37] ? __kthread_parkme+0x12f/0x180 [ 194.236728][ T37] ? schedule+0xc5/0x240 [ 194.236751][ T37] kthread+0x2c7/0x360 [ 194.236771][ T37] ? __cfi_watchdog+0x10/0x10 [ 194.236798][ T37] ? __cfi_kthread+0x10/0x10 [ 194.236819][ T37] ret_from_fork+0x67/0xa0 [ 194.236845][ T37] ? __cfi_kthread+0x10/0x10 [ 194.236867][ T37] ret_from_fork_asm+0x1a/0x30 [ 194.236887][ T37] [ 194.236895][ T37] Sending NMI from CPU 0 to CPUs 1: [ 194.446448][ C1] NMI backtrace for cpu 1 [ 194.446462][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 194.446483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.446492][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0xc/0x90 [ 194.446516][ C1] Code: 89 44 11 20 5d e9 94 89 1e 04 cc 0f 1f 00 b8 e5 4d 4b 8d 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 <65> 48 8b 15 4c 76 7d 7e 65 8b 0d 4d 76 7d 7e 81 e1 00 01 ff 00 74 [ 194.446530][ C1] RSP: 0018:ffffc90000230168 EFLAGS: 00000246 [ 194.446544][ C1] RAX: ffffffff84f9cca3 RBX: 0000000000000017 RCX: dffffc0000000000 [ 194.446555][ C1] RDX: ffff88810367a600 RSI: 0000000000000017 RDI: 0000000000000032 [ 194.446566][ C1] RBP: ffffc90000230168 R08: ffffc90000230540 R09: ffffc90000230550 [ 194.446577][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: 0000000000000032 [ 194.446588][ C1] R13: ffff8881313668c0 R14: 0000000000000003 R15: 0000000000000001 [ 194.446599][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 194.446612][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.446623][ C1] CR2: 00007f6f74dc84c0 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 194.446637][ C1] Call Trace: [ 194.446642][ C1] [ 194.446648][ C1] rt6_score_route+0x83/0x880 [ 194.446668][ C1] ? __napi_poll+0xd0/0x600 [ 194.446688][ C1] ? net_rx_action+0x5dc/0xd70 [ 194.446708][ C1] ? handle_softirqs+0x1aa/0x620 [ 194.446723][ C1] ? __do_softirq+0xf/0x16 [ 194.446741][ C1] ? do_softirq+0xb8/0x110 [ 194.446754][ C1] ? __local_bh_enable_ip+0x74/0x80 [ 194.446769][ C1] ? rcu_do_batch+0x590/0xcb0 [ 194.446783][ C1] ? rcu_nocb_cb_kthread+0x533/0xb60 [ 194.446797][ C1] ? kthread+0x2c7/0x360 [ 194.446814][ C1] ? ret_from_fork+0x67/0xa0 [ 194.446837][ C1] find_match+0x176/0x10d0 [ 194.446855][ C1] __find_rr_leaf+0x249/0x840 [ 194.446872][ C1] ? rt6_check_expired+0x250/0x250 [ 194.446888][ C1] ? __flow_hash_from_keys+0x440/0x6e0 [ 194.446909][ C1] ? fib6_node_lookup+0x4ee/0x520 [ 194.446928][ C1] fib6_table_lookup+0x2d0/0x980 [ 194.446950][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 194.446970][ C1] ? ipv6_rcv+0xf1/0x240 [ 194.446989][ C1] ip6_pol_route+0x17a/0x1370 [ 194.447008][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 194.447025][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 194.447044][ C1] ? netif_receive_skb+0x160/0x7b0 [ 194.447066][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 194.447086][ C1] ? br_flood+0x66d/0x720 [ 194.447101][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 194.447118][ C1] ip6_pol_route_input+0x5a/0x80 [ 194.447139][ C1] fib6_rule_lookup+0x4f1/0x6d0 [ 194.447156][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 194.447176][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 194.447194][ C1] ? ip6t_do_table+0x1d2/0x1510 [ 194.447216][ C1] ip6_route_input+0x60d/0x8d0 [ 194.447236][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 194.447257][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 194.447285][ C1] ? __asan_memset+0x39/0x50 [ 194.447299][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 194.447315][ C1] ip6_rcv_finish+0x15a/0x3c0 [ 194.447335][ C1] ipv6_rcv+0xf1/0x240 [ 194.447353][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 194.447372][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 194.447391][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 194.447409][ C1] process_backlog+0x472/0xaf0 [ 194.447432][ C1] __napi_poll+0xd0/0x600 [ 194.447451][ C1] net_rx_action+0x5dc/0xd70 [ 194.447473][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 194.447493][ C1] ? sched_clock+0x44/0x60 [ 194.447512][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 194.447534][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 194.447555][ C1] handle_softirqs+0x1aa/0x620 [ 194.447570][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 194.447586][ C1] __do_softirq+0xf/0x16 [ 194.447602][ C1] do_softirq+0xb8/0x110 [ 194.447616][ C1] [ 194.447621][ C1] [ 194.447626][ C1] ? __cfi_do_softirq+0x10/0x10 [ 194.447640][ C1] ? dst_destroy+0x376/0x460 [ 194.447655][ C1] ? __cfi_dst_destroy_rcu+0x10/0x10 [ 194.447671][ C1] __local_bh_enable_ip+0x74/0x80 [ 194.447685][ C1] rcu_do_batch+0x590/0xcb0 [ 194.447700][ C1] ? rcu_core+0xcc0/0xcc0 [ 194.447713][ C1] ? __kasan_check_write+0x18/0x20 [ 194.447728][ C1] ? __kasan_check_read+0x15/0x20 [ 194.447743][ C1] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 194.447757][ C1] rcu_nocb_cb_kthread+0x533/0xb60 [ 194.447774][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 194.447790][ C1] ? __kasan_check_write+0x18/0x20 [ 194.447803][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 194.447820][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 194.447836][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 194.447853][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 194.447869][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 194.447885][ C1] ? __kasan_check_read+0x15/0x20 [ 194.447899][ C1] ? __kthread_parkme+0x12f/0x180 [ 194.447914][ C1] ? schedule+0xc5/0x240 [ 194.447931][ C1] kthread+0x2c7/0x360 [ 194.447947][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 194.447962][ C1] ? __cfi_kthread+0x10/0x10 [ 194.447979][ C1] ret_from_fork+0x67/0xa0 [ 194.447999][ C1] ? __cfi_kthread+0x10/0x10 [ 194.448015][ C1] ret_from_fork_asm+0x1a/0x30 [ 194.448030][ C1]