last executing test programs: 58.090138472s ago: executing program 2 (id=327): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fadvise64(r0, 0x7f, 0x8, 0x1) (async) fadvise64(r0, 0x7f, 0x8, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000100)='\x00', 0x10100, &(0x7f0000000140)={@align=0x3c, {0x1, 0x9a53, 0xb7f8, 0xa084}}, 0xfffffffc, &(0x7f0000000180), &(0x7f00000001c0)=0x8}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc0d1) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000340)="3cf013349de03bf4e43360f586ea7b90c1594c69ff90bca2692f2783b40555cd99342c27bb51da863963fc8877382d9aa30828361122cd00ecebdb65d45d08c91f903c95eb2b26bda23b4718d96bad67e9f12bae743b6dc9fdaeb861265d8847183b3f9cef1bd468ea2c116efb0c7917018f7701634b6bec41b32a258ccd70abf6512f2a4b2f70e7683a72453f7382ebdfc6c6c77b071c89ed0a3c4a7d7d71010c83ab31", 0xa4) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000400)=0x2, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000400)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x8c, 0x0, &(0x7f0000000500)=[@exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x200}, @fda={0x66646185, 0x2, 0x2, 0x1}, @fda={0x66646185, 0x6, 0x0, 0x3a}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x400}, @decrefs, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x2}, @acquire={0x40046305, 0x1}], 0xd6, 0x0, &(0x7f00000005c0)="4b92a00b73cd05c6598e94b6803da4a1c50008352cd642e0c32df9616c84bc1462c1bfb971f851de285d53367af9ba5729e9b42b824f8d2b336c6a9ce493dc133c4c30d8d5935d49a05a39296323985b7cf9ae6db52ff76eb1e59b6f728203d66415cc05a9244a51a12e4f6bc08fe15cb364959e59fbc0c7f8ecf6f1b6135d47965dcb76ea03f7048835ba7dac0422703a490ed6269c85a93d6b22d86b0b86b19afe2959698c555339c27724efdeaa46385fc79cec577ac9265b640e04e862d0729f7a248c4eb6fad9793c77988e84ebd4114fa0551d"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x34, 0x3, 0x3}, {0x1, 0x5, 0x7, 0x98}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000780)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000007c0)={0x2, 0x1}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f00000007c0)={0x2, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x10400, 0x0) (async) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x10400, 0x0) pread64(r6, &(0x7f0000000840)=""/200, 0xc8, 0x7) (async) pread64(r6, &(0x7f0000000840)=""/200, 0xc8, 0x7) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) write$uinput_user_dev(r1, &(0x7f0000000940)={'syz0\x00', {0xe32, 0x800, 0xffff, 0x1}, 0x1e, [0x0, 0xffffffff, 0x1489, 0xfffffffd, 0x7, 0x7, 0x7, 0x8, 0x9, 0x81, 0x1, 0x3, 0x0, 0xffffffff, 0x0, 0x100, 0xf36, 0xffffffff, 0x42eb, 0xed, 0x9, 0x81, 0x7, 0x7fff, 0x3, 0x7, 0x7fff, 0x3, 0x5, 0x9ee7, 0x9, 0x400, 0x8, 0x9, 0x400, 0x800, 0x7, 0x6, 0x3, 0xffffffff, 0x80000001, 0xd, 0x0, 0x2, 0x1, 0x9, 0x4, 0x78dd, 0x8, 0x5b, 0x6, 0x9, 0x10000, 0x6, 0x2, 0x5, 0x6, 0xe, 0x9, 0xde9, 0x7, 0x7, 0xc, 0x31], [0x7, 0x4, 0x175, 0xffffffff, 0x2, 0x0, 0x2, 0xae8d, 0x2520, 0xa9, 0x1, 0xbcf4, 0x1, 0x2, 0x4, 0xdf59, 0x1, 0x2, 0x9, 0x4, 0x3, 0x6, 0xcc0f, 0x0, 0x3, 0x52, 0x8001, 0x2, 0x1, 0x20000000, 0x7, 0x0, 0x5, 0x9, 0x1, 0x4, 0x78, 0x2, 0x1c0e, 0x5, 0x4, 0x1000, 0xe6, 0x1, 0x2, 0xb9, 0x5, 0x6, 0x1, 0x4, 0x8, 0xffff, 0x4, 0x7, 0x10000, 0x40, 0x5, 0x7, 0x8, 0x6, 0x80, 0x1000000, 0x4, 0xf4], [0x6, 0x7, 0x7fff, 0x3, 0x0, 0x86, 0x6, 0x1ff, 0x3, 0x287, 0x8, 0x8, 0x0, 0x5, 0x2, 0xe422, 0x81, 0x8, 0x4, 0x5, 0xd7b, 0x6, 0x7fff, 0x20cd, 0x2, 0x68c1, 0x6, 0x5, 0x5, 0x2, 0x3, 0x0, 0xd6, 0xa923, 0x3, 0x4, 0x2, 0x7, 0x9, 0x200, 0x8001, 0x2, 0x5, 0x4, 0x3, 0x6, 0x6, 0x5, 0xd, 0x4, 0x10001, 0x100, 0x40, 0x5, 0xbae, 0x80, 0x2, 0x101, 0x7a4b, 0x3, 0x6, 0x4, 0x0, 0xd72], [0x401, 0x9, 0x7, 0xd24b, 0x9, 0x5, 0x5, 0x2, 0x3, 0x9adb, 0x4c, 0x5, 0x6, 0x1ff, 0x6ce, 0x1, 0x5, 0xbb54, 0xcb87, 0x7, 0x0, 0x1, 0x8, 0x64, 0x6, 0x8, 0x100, 0x1, 0x8, 0x1ff, 0x3, 0x401, 0x1, 0xd402, 0x8001, 0x5, 0x6, 0x1, 0x8db, 0x81, 0x4, 0x9, 0x7f, 0x3c18, 0x10, 0x9, 0xfffffffb, 0x200, 0x6, 0x5, 0x1, 0x7f, 0x10001, 0xffffa2d0, 0x4, 0x6, 0xff, 0xca, 0x0, 0x0, 0x2, 0x80000000, 0x7, 0x800]}, 0x45c) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f0000000dc0)={0x401, 0x8000000000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000e00)=0xa4afcf2b29efc007, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f0000000e40), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000e80)=0x1e, 0x4) 58.080421563s ago: executing program 2 (id=328): syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8004, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x30, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x9, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfc, 0x5}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x3e, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x2c4a}}, {0x0, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x380a}}, {0x0, &(0x7f0000000140)=@string={0x0, 0x3, "13a8307faac4f652923637c2b02b1c9b9dd0539ce5333dd5156a779270d494b7dbca0c80863a2608e89dbd26d4c9dc66ca7d7be4f72c9527fb3bfc54168cafc2f13f7e1a640420c2cd93d694498866b7061f487bbc5e96252561bdb51a1c8784784e21e3eb0eb74526a49caab01c08590df8dbeb7dd3c91d69d8cc426db6759ccf03d2748a8657facfa5768c5982e8b3ac28ed4537e6101d47c1fd330989cceb233bb01bcabc2568474c585b8765d22db2657313ad11a3aa8ad1538fcb7933951e"}}]}) 54.98166183s ago: executing program 2 (id=344): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x10, 0x11, 0x1}, 0x10}], 0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 54.599372301s ago: executing program 1 (id=346): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x0, @my=0x0, 0xff01}, 0x10) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x9, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x80082102, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000005c0d04000001000905810300"/49], 0x0) syz_usb_connect$uac2(0x0, 0xdb, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xc, 0x20, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0xb, 0x20, 0x7e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x9, 0x11, 0x5}, [@selector_unit={0x8, 0x24, 0xb, 0xff, 0x3, "4fd088"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x5, 0x6d, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc856, 0x3, 0x7}, @as_header={0x10, 0x24, 0x1, 0x2, 0x8, 0x0, 0x1002, 0x61, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0xff, 0x2, 0x0, 0x1, 0xa4, 0x7fff, 0x4f}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0xc5, "ce77"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x470, 0x5, 0x40, 0x1, {0x8, 0x25, 0x1, 0x0, 0x3, 0x9, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x1, 0x10, "cb0cea1dcb370306"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x76, 0x80, 0xc, {0x8, 0x25, 0x1, 0x82, 0xe, 0x7, 0x81}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x1, 0x2, 0x7, 0xff, 0xf}, 0x48, &(0x7f00000002c0)={0x5, 0xf, 0x48, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfd, 0x5, 0x9, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5a137e18f288f39b8e1ac3c9c53d8ebc"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x7fde, 0xf00, 0x8, [0xf, 0xff3fcf, 0x3f0f, 0xff0000, 0x0, 0x3f0f]}]}, 0x6, [{0xe7, &(0x7f0000000340)=@string={0xe7, 0x3, "626e96bdb771a515cb93afd916103922c6e8c37b3497ad44ad26f1acda24247da10eee4ec05c0b77d1945952ce5d481a87cb709b4a379c01f29ea3cb0ac1108801c396de4ea0efd0ceb0866e61fe6f3c45b597158a394d9dd0887ccae5f6b4a3fbe6388d19ee98dfc98640d6b1a8f76eabae929caa5112c7a71a95482456e77e83b348591e943d5213fe4877abbc18212f7c2df7dfed44d7eb5119cabbe74ffa1fd40e23231cefc48efb1a577d0bbc07bbf24436ad6bdc83b82d52b5d521d38a462545c03bd8df80d367d632aba72da9b9697ae30ac9975ba107f6837fa4bb5460d259d792"}}, {0x59, &(0x7f0000000440)=@string={0x59, 0x3, "e2a8abf0c49e9ff621f0c7a9d223b917d77d71ff6ae8f973517d18498115206e5b593eb42d9ceef65b0080c803eb80e7612a6adf5ebab932bafc7d860f57494277cde43be7e4af3c5a6642aba4df38f4eea58ee36f6edc"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x412}}, {0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="3603a7990779750251d089000001000000000045386213272d8d2328310a00f2e53bd223b857231940d7febfbc2bc81fcbaa21178025b7a892180ffa2567e531ed598c3b3bbf094e63382d490c0b4ae11fdab703fba16eb081efc78f7a6f4c6c6b22615541be637e8db81c2d20dbf8f75a6945bdf30100b360dff36c7c88eee4b5fd53cc13065de01895f5ce5b9945ca5f918cb4b2dfab922a12111192b4d47e83ed1407504889bd97748db9de495270a0a4b72af13a72f6ffe8c3d6296a68b3caa3bdbfaca85c6feff5bbac23ee8a17ebaec552fceab0f2914c4fa88772bb51587947d2"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc1a}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "4bfac1e05c44d9b55bb29de2d168592e7bff1027b58a4bcb0771c5ad32aae51605efe991d2e4a006ed601791e205e641590844b5319b56a8a259b4e1d34f6cd9fde59483aa97be76609108864681e7e6d09b90b02f64323224ccbbc98264b8322cb85529b4ae745171c91abb56564827ab6de97e80b1c93b57f9a6b13b6114ce9ceb216236292fb9e2cca31a2241b8021d2553314677ae4185102bd1b35bd4faa317471633cfcdd35f98bb2af9dd890640fdad5bcf9b797c1454fb0029f9a8d12d770917e50f937145a29114c49dbd6c8c5f72bb6ae80cbf09424f7056a04bdeca9e66"}}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200050926bd7000fddbdf253fdd000000000000fbffffffff060000090000000500000099dd000005000000fe", @ANYRESDEC=r5], 0xae}, 0x1, 0x0, 0x0, 0x22004014}, 0x800) syz_usb_control_io$hid(r3, 0x0, 0x0) clock_getres(0x5, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003020000000223a73432f816ab408c0e03"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) 51.548980057s ago: executing program 1 (id=357): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0xa3, 0x0, 0x0}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="80006455d3800000", 0x8, 0x800, &(0x7f0000000080)={0xa, 0x6f26, 0x805, @mcast1, 0xffffffff}, 0x1c) setxattr(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x8, 0x5, 0x109, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x1, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x7ff, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc68, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x809, 0x4, 0xa7, 0x8, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xffff8001, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x4005, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa776, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0xc, 0x140f2, 0x5396, 0x3, 0x80000001, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x110009, 0xc, 0x3, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x4, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000280)=0x400) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_io_uring_setup(0x420b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x2, 0x8000000, 0x0, 0x0}, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) dup(r3) 51.092786531s ago: executing program 2 (id=360): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) (fail_nth: 2) 51.024463513s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x60) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x1, 0x1, 0x2000000000000, 0x5, 0x2, 0x80000001, 0x1], 0xeeef0000, 0x4fb40}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = dup(r4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x42040}, 0x4011) r6 = socket(0x28, 0x801, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000001280)=@svm={0x1, 0x1, 0x1080, {0x60000}, {"817d97e203e8642fbbc7cbd3413aa5564b6bae01af3fd033e1dbfe546b12f01568732049c6886c95d8a666f1c60266dc092d3d686a81b8f15cca6f2ddbba25eb11983906ad00dd0919d53cbc8d6708aac51440734a55b3b6e1623f16126474c9b6ff9c4acbf62ffd84dd090380f68314e7803d058d02903abcc2ca118d18bda4275a60815dae16af0b241286858bfa41b4cf7905dc190cd9c55691bcd250f24e7a424dfd519939f1f05d44da139557c62f10266630afc70c2ffb6c6b59e8012fc9140f53c614a275ba5b0a57dce89a801de8b0bc25222926a75ff28e7ebecf3e8718d82ea3fab50746c7d14c721038bc2185eb5b6f4cb571fc8a488ccc7c6c7fb9e1990ddfc5ee288334c079fc5bb5ee386941d28824ebf2cd8123eefe5910a9e9d1b007d4e8c097e464e13a7b10cbd51250883ea3461566b540aafd3018f492718d836a058212e82631eac0f6b63cc4ab30e2ace852e0da4af8e7742ea8b5bc939cc021760b4a9e343faa691342501a03e5f6a76e7b40b7454bc2af4859737865cd0c1a3add7d310382eede4f7db3afd43667a27bde37f25b001ddc0c6682637f28adaae793b12b2d2b5ba0113cb8527cfbf5f29038d110557cef266cbba711d7b7cad342847c0b5b906e7426835cf4073894d03d79eced4a0c4e7d8067fb04f7369a6e4bff38ded7fa410e7a889fcc3ed4325adb7fee9535a7cdccd24f167c7d9e058619b1c9421ce3aaa79ee0a289b1763590dbf125bb8e0764c26ade504c01cb6ac54a5e23774d8c8b975232e1c2ee5ade8929e9a4c3c1362cf836ac6409c58c28976687b2570934eb2c3bd11e465f05ed81e7c2cc1d3a7d6d316f4cd0bd424313e5944d819ca116cc29aed3fe0028419e7061463e2b7a3394167c0358b98e232fbd2fda10185eac3d88b1af367da5a336769cf2cedafb72afc9987568c4480e3c14a259e851c897bcab4414114877c09cf7ff9b49938e6c426e0486056f521946c0e8c03655ee5f7f6f1defcf8e9215bd58d5d3bf39cd25a2fb8ce327844f67b9f17f5328f8125d93d4087aa8b0d4713b768757d8fe3468b6135f6dd6190f8bd283f41570def27982e1622916458da3053535e0bef93d894f048f9f106c9dc0c9fba57e67df17995f41ab055e6e34b18790e87384cad7401a0a55217169dbc6888284dff0eb8a93839e096e68858fb1e797e41bf8afe251c0b8a9a750d727f912cc46d5eb4f51fbf7698d253b092683159b0a7f3f4f1ec505ca82be7de7d2d849735921de23905b6d0f2747d96b091661d3034541c65908aa6ea0a542a70b290d3bf8aedaf50be633a580d43914f52bba25678333324ab00cea53fad1a4e538e112024a3a7ed338d655b055a1095548c0b43c29787ca1b00ec7c99168355c9e2ff8355304c2bbbc03f2783f93fcbab60934cfb74583f8303aa03b8bde28d8811b230a398305299008c75018bf5314047d63bcc526c65ae2a0ee9c093beefd577648b9b2ec1989abfd7587ec9418a432910674916bb2ec6616e0a8a60a56a4cf1fd38f21515cc5184f9592f4eeaf3d0d21640172742693586056ee1febe62494370148ae5e15938df85f994c31014d5c8aeebe6b917957b6be6248dd723cd491495ffa2ef78ddbaa5c58fd64816b42b162735dfee4a05abc53a3bc8b519ff731aec85ab69d4bfa4535e53fbfeba1adf8aaf5fdc5cc15727817a3f251927b5709104e72e820d54916d9babe52fbfae683a843594176b4b1674f5259090e2f2d8405f08f4d42d628de38c077000f0dd89214ccea042d00346b859c67e004db0af7cbac8db7080e1bb4db7eb54cd355e874791bbe53cc11726cfe0d4e5588116c5bc56623f21b1425d952bedd6b97cd03bbaf4c1b79ebb93f2ca78958af71e37f5d2310599d897d0f803a1f5b5157dec7e046a72b681f86c47b2bae02680efd3b1091157a715067a01539c27f0465788a2ac96ce107a79b9ee29188ffaab8cfc217582f6c254ba913b6f76967a64ba6ed5c2132d27ef9cfcdf6b4b2796fcd5c32cb33e6524de96f33de5b5c122511e050dec892e353667f9cbbfddf8d8f96139bc0c5f0cbe8151d1169e2a4c82d5ab9ff6ca51bceb1383e9a4fe15c793b39cdd330f702653864060f1f777699327417468f580835d0139bdfd34cd965b9a81a36e6cd0d7ac5f939e667100671a1f5fa07c51c322fc1ea52be279f2e7886f1b88dca877b66f8d29f4a48c2af62ef5fdd5a2d0f01909b6ebcc534a11c4f45a1f36b33b3e59f203ba775431e1fc9ecab2b9a8991f3c79f2082ad4a2175aa397a2f60e30350e0ae6d4917cd437bc7c2bc2302b9744edba038ab494003d6cbbaf262cf0172831ece2130479b57197593c25c01531dcdc0d7d7380f2a97a01072fdf0760d2fb15324dbbee71c8b47a6681e0b6953303458c7747cc79334497cfd0b357587e011414268f90c951a972bbe91e47025ae835c5d626cd4cfcb2a823a6a2f4a49cc9f49c63e14e8f7a7dec0faa67c7e35a354004ad8bfc363c23302ead26c49f557b3bfd21c0ee015b88b98515b5512e0dccbd347db6bb2fe0a0357031d4c0317138f1b4f97346998e25e817381d83c360ee0bddcac8406999b1bb8701f8c625f1d9f4fd272979bfdf4191c5f537a8680ff9de9cd207012fbdf8600cec8b62366361fabd0ad3b3688c8d6c27e8f62a4d9fec1a4adc0e0b515da92d14fd3287ec7209840f7b55e859bffe1426388f51d7f4d8efd0a87605def25b0c9e67742b92564776a4a54e7b8494af2f16750c5d0bcb55a1973ab9f3a13cb8db0b5665a1bfb69aaa6a92e14920155b34de17595603ff4c219e8de07db9e1e1942e38d53fbc8541aa9a7067623cb3833d1cee1588b6c7b9e1e42950c0a9ca9214d8d56d847b11bf6a2e9b90c9d1ec0d45813cb224b12883b062552b9c9def4451b2f64f615d8d1a7b4e864ecd494a3d331b1bc1cb9a832e241538e32834af45b99ba4154083338731822e3bca37e10344e2d88661cba68536f626e526ae7d759d2c4798960548e7a63e20607d823015027f5c8cf7b409965e196236c63d6b7415db3361d2d2c5564ba764c0a2977c43c82312c2d568ec9b033afb37a9227b74f27e357f429d064edae38b1fda37b0eef9c751212cc4b192c178bcc0231d9bff42c6b97b1a8d40d960987bdc26d7e8f924f6cd868139049444bde54775595d8216e40444596d2c313903a1925a233b894ac043f8fa7199615f180e016a1ba6b48a5cebe5766ba1ecfc3f9017d2896e450896c99c02c77e674bd166681a0d1683cd1644940a92b24c97d6f1e5e4ee3761f04ac14d41cc35b2e04175439bb9fbf250d9be1076685477ca9806776292b29b5564037bf89ac8738bdf1e1a71f65b2121f219ad15b736d27258b714f67237370ab2e1a8b6a3c1f61c13e4db805e32659534441cce78fcfb5b578ca8c04453438b5de8c73533b0d134166fb53a4c4937dada2be8e8d732d1982a6474f788740d4ae7a5ddd75286e4dbacfa9c3f982010ebe652b3578026ac4fcc5c6038bfab08173bbce3c8ba795b143c96872d7481060e12395573034288a3b003dd91354761a84f73662c4e361c01d189b7614c8e3817a2447f8b40b91016045689860ebad5db0f6938f141b1538436e983c90f4249405efc7b4bc95228d1deb2bf983f685b61e47f9a97f9eed3db15b76fafd6dfcb80292ff109d70dd04d60b8e7704f4d390f4eef46c74e12465bf3e8c7213d24c7743ad197e71a4a2292276fd7fc5df3a0b26ea43e5e4e4af744d77443a2d5c698e9f0f2430643be4d44a262a224da8b6570a1061fa741a72100943aa4ed7f9a1cef3f63294a78caf263524229ed1b4f9e2ab3508da49f5c69d7bf1f8b2364fe113992704be3103a3d130c1d681e6fad328048734a67612684c5b1f3129da423b0d35aad8fc68e00c4f288fd391ea9c8492920e51ebe5fae45c3aef7acf00cba39dfedceb5f3329d010f8ce153ef123b880f68d361343cd38a88d2c4899721fdfd9c947a73c6321b11ec0003106ba1f867401de58db4505da6d6c7162808e5b17f4f6628c907c42b17e78cb81192db501a9bd4121a7293486cf85b6212f32703c785fb2465a2792b1e75fc1bbb508f723d6e4dc6d45f658185f4089f89d502e1b0b6f6f2bed1108ad2de36cd6931ea37b6d3ab3e440f3bf69e9ec9e5fe6c20ccec3f3ec17c77fbc961b9071bad37900aef70e2bb6bb402fc56c1717cb410383c618034606644eb61dec29ed4060d6aac08c41b3b36efb516564107d79dc640d53276d45531b3645c71dc425ac366f0e7bf0ebc11d2c3875f44db623e378567e1a3234509cde5e13136702813ef356419f51185cb96088a1778be0a1920ec1f33276e522c2af15ae92346e5430d39422a15395978332e3f9d3f5e72872094eca8068979635880f6d90156da94b75d405769ceb2dc45073de03ce96134196e211377bcd043ad6b3bb36e615ee4f811adfcded6ef3425a763dcbf456f8fd4ca92c8c28c5ab9129db18e5364a6b827b93d5e439536919ab8bff465f885a66d3011b5c7e003ac382b1d1c440f47a1664da959dc2b2e8588ca9a32256591ce3cda6c578f1a528a92760e359e7e3159691213d8eec03472ceb49fd2a6a636e286ebc3f385f9c66e317aadf25af8a3b9fc7841b655e37ce40c835a856d0616f74832f10dd6fe71e56c4b8e79b2972d9c1b42c4f61c6673d2ae5d425b08f58fa347543375438791c1bea642b73a74cb6237909941c36fd1ac939c17dfaed54a07e0a16cf30d6fd6d94eb13f049fb84bbb95da5d35d1276e9821b82f3c9ca05e8794c4178a27578d78df77944eefb9dac5133ba9a912e0804177da4eb64c3135d88c1a1fab89634162fa57b285b8bf487feb76b2fa08e061e87d62fb58651a8adeb11d7abc9db9cdff996ee3c7dbe2b0a73948902c419bf21e1edb738a04af616a949d4170dfc75f843801f5b8b811715d1ecc5c99c5ccd136ea07f79429971dbb2e7c03c49fe5c2e343df3f62a0ed73901461237ad731381a7d7d714c8124eea2161d452de594a4f96c084ccc3e6411c43ee84dd08ec9a9dda97f37d53b3413e1bc538f367640c6ea2799cf111d97c985b0a1f03c496ec2c8a163cca908424c69288865dbc897c5135ff7e889bbf1301d6ed1991c01c971a9acc61073eff1f673310dbc005926313c8e12e955acb4c44dbcf8de0cabad231381699f1cfce9d2fba1327ec117750cbb32d2c3720d21744301ce4424d4e2eb749139e4f1d43b367904d82ec9738243ca69643bfcbf3faf323c0164e47b50861306d74f10a13d16ca155a5c07e921dfaf894a9ed1eb5384598c328a1047cf0b752babdea4fe17914617a1852f262085f3d49b965af8d04f45746bca4769d6775dabf3c3a56b3683d0d02626eb5adadd70358a99b54bd8c654efbf771159141a3db4064a7221d0324e9e9b4fccfad1444c43b7a4c6537c8d8d03c03c7e06bab3859eb76c75c7547a406174a586360fdd04334f5627a1bbfc48d17a3ebbcf358bc196ba8d458fd2e888505fef701a73aeedf53b3fd31b0d8e11c605f3c866dcf8df99c06de24b3c680ba1e07e21943d6ed1c9c420d981c85c0a8c4a843220f911a0474ab26257472954f46eb15184abbc2a35c03e74ba2ff6dc43620dffe0d21a657298a0c8ad1dc74406439b8c4c08c9659a9b262eda7bf23a05bf037ef879635779d800db13213c00739bde13838921f5dcee31975446978cbcdaab9e0f9808f356cfe3fb6573af0052ff1867f127c600bc8"}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="448f0000", @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f6873720000000018000380100003800c000180080001000104000004000100"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x70000, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x806, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x0, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x7, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000008, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x800, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8000, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1fc, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1000009ee8, 0x12) ioctl$XFS_IOC_ERROR_INJECTION(r11, 0x40085874, &(0x7f0000000080)={0xffffffffffffffff, 0x8}) 50.615076806s ago: executing program 2 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0x9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x460c0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x1) r2 = socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r3 = inotify_init() r4 = socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2}]}]}, 0x20}}, 0x0) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x42, 0x1, {}, {0x77359400}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x2, 0x1, 0x0, 0x0, "ed44b4c84374ca0f"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x488d0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) unlinkat(0xffffffffffffff9c, 0x0, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "00008baa", "bb10000000000001"}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2b, &(0x7f0000000000)=@string={0x2b, 0x3, "c9c56bf7260a81ecaed49e5a2e038da6cbd8db09594797f0d1684ff6104e2ade403bdfbe9644468aa5"}}]}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000280)) 50.238307198s ago: executing program 3 (id=363): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 50.237909618s ago: executing program 1 (id=364): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001300)={0x2, 0xe21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/83, 0x53, 0x100) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) syz_clone3(&(0x7f0000000340)={0xa1000, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000180), {0x29}, &(0x7f00000001c0)=""/187, 0xbb, &(0x7f0000000280)=""/120, &(0x7f0000000300)=[0x0, 0x0], 0x2, {r2}}, 0x58) syz_open_procfs$namespace(r4, &(0x7f0000000400)='ns/pid_for_children\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 50.234648768s ago: executing program 3 (id=365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x14b203, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0xe}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x78, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x80000001, 0x80201) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000011c0)={0x0, {}, 0x0, {}, 0x9e, 0x3, 0x17, 0x8, "7c4c438854136e31f81d60425059120b85b990aab6a4eabda13790f83db490d6dda534cec9ab2c01fe88dfb8af124db979f9ccfe1af1561cabdd3421df1d342a", "a20755c7eb13ade75e7ee23006e895fefa1382a1151526ce97533fdde17f1dc9", [0x12, 0x2]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 50.16984202s ago: executing program 1 (id=366): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) 50.092916082s ago: executing program 3 (id=367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) r2 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x81) fchdir(r3) rmdir(&(0x7f0000000040)='./bus\x00') bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xfffffffffffffff9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x5}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x5}]}, 0x10) listen(r0, 0x2005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60000600) (async) unshare(0x60000600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1419c2, 0x91) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fdatasync(r7) (async) fdatasync(r7) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac1414300939"], 0x50}}], 0x1, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000540)="6dd5a5adf9b146c7b948e27138dd56263157a9868349731c4a36e444ce4def2eebf33e", 0x23}], 0x1}}], 0x1, 0x48045) 50.051688223s ago: executing program 3 (id=368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x30, 0x200, 0x70bd28, 0x25dfdbfc, {0xd}, [@nested={0xc, 0x51, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x4, 0x50}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 50.029963224s ago: executing program 3 (id=369): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xc}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x61, 0x6e}, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x400, &(0x7f0000000100)=0x4) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x20240000, 0x1, 0x2, 0x7, 0xa15, 0x0, 0x0, 0x80}}, 0x50) r4 = socket(0xb, 0x6, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff00001c000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000140)={0x7, 'veth1_to_hsr\x00', {0x101}, 0x17b}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) 48.046430566s ago: executing program 0 (id=371): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x361, &(0x7f00000004c0)={0x0, 0xbcb3, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',a']) 47.57520758s ago: executing program 0 (id=372): syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0, 0x0) (async) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) lsm_get_self_attr(0x67, 0xfffffffffffffffc, &(0x7f0000000080), 0x1) (async) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x810, r0, 0x70599000) (async) r1 = socket(0x8000000010, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x1, 0x0, 0x4}}, 0x26) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x6, 0x0, [{0x80000019, 0x8, 0x4, 0x5, 0xd74d, 0x6, 0x5}, {0x0, 0xfffffffa, 0x1, 0x30a, 0xaba, 0x85b0, 0x4}, {0x40000000, 0x0, 0x5, 0x3, 0xfffff066, 0x7, 0xa694}, {0x0, 0xfff, 0x2, 0x5, 0x1, 0x1, 0xb}, {0xb, 0x5, 0x3, 0x120, 0x3, 0xf, 0x6}, {0x80000008, 0x6, 0x4, 0x6, 0x2}]}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) (async) write(r1, &(0x7f0000000500)="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", 0xfc) 47.29010121s ago: executing program 2 (id=373): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) write(r0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 45.125109467s ago: executing program 1 (id=374): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 38.186910405s ago: executing program 0 (id=375): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) setresgid(0x0, 0x0, 0xee01) r1 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0x9, 0x0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[]) 34.632498041s ago: executing program 1 (id=376): r0 = fsopen(&(0x7f00000002c0)='proc\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r2, 0x0, &(0x7f0000000640)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) umount2(&(0x7f0000000240)='./file0\x00', 0xc) r5 = socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02040b06020000002abd7008ffdbdf25"], 0x10}}, 0x4000080) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) fchmod(r5, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) r7 = socket(0xa, 0x3, 0x87) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) sendfile(r8, r5, &(0x7f0000000000)=0x80000001, 0xca) fchdir(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000) write(r0, &(0x7f0000000140)="a6ea84dbea9e10f8b3ac4f8ce370235cd0a086ffe9835fcee0917722ed7058e7c0678e1414629d2e9ee2b12533fe7da91dfca4980d47054fc887a47995a261beea36199375a2d0b1813ea02c0168f4a11b6087264933624c2d119db9c4910ab0f82073e3e59de5ab5e9afe997c322a55eeeec0b2ae76b5f56db063daad073ff3a5332ffbe64112ff91b9524633eb5509db3f9f1d1ef0f710d018e92b0ce42e90d3b1a30c7177fdf32b1136d3252f81159d6808a17cc47fbe2709c6dcd69f24be926c16fa4317071da43cd512258ef5c38281be7d20bab61168f79d52380d96f7a1c587020137013513ab", 0xea) 31.121605627s ago: executing program 32 (id=369): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0xc}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x61, 0x6e}, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x400, &(0x7f0000000100)=0x4) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x20240000, 0x1, 0x2, 0x7, 0xa15, 0x0, 0x0, 0x80}}, 0x50) r4 = socket(0xb, 0x6, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff00001c000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000140)={0x7, 'veth1_to_hsr\x00', {0x101}, 0x17b}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) 30.433390319s ago: executing program 33 (id=373): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) write(r0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 29.061745995s ago: executing program 0 (id=379): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) (fail_nth: 4) 26.631873775s ago: executing program 0 (id=380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX=0x0], 0xfdef) 18.531352961s ago: executing program 34 (id=376): r0 = fsopen(&(0x7f00000002c0)='proc\x00', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$packet(r2, 0x0, &(0x7f0000000640)) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) umount2(&(0x7f0000000240)='./file0\x00', 0xc) r5 = socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02040b06020000002abd7008ffdbdf25"], 0x10}}, 0x4000080) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x11, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) fchmod(r5, 0x44) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000100)) r7 = socket(0xa, 0x3, 0x87) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) sendfile(r8, r5, &(0x7f0000000000)=0x80000001, 0xca) fchdir(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000) write(r0, &(0x7f0000000140)="a6ea84dbea9e10f8b3ac4f8ce370235cd0a086ffe9835fcee0917722ed7058e7c0678e1414629d2e9ee2b12533fe7da91dfca4980d47054fc887a47995a261beea36199375a2d0b1813ea02c0168f4a11b6087264933624c2d119db9c4910ab0f82073e3e59de5ab5e9afe997c322a55eeeec0b2ae76b5f56db063daad073ff3a5332ffbe64112ff91b9524633eb5509db3f9f1d1ef0f710d018e92b0ce42e90d3b1a30c7177fdf32b1136d3252f81159d6808a17cc47fbe2709c6dcd69f24be926c16fa4317071da43cd512258ef5c38281be7d20bab61168f79d52380d96f7a1c587020137013513ab", 0xea) 15.84225339s ago: executing program 0 (id=382): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) 0s ago: executing program 35 (id=382): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 71.160228][ T63] usb 2-1: Cannot set autoneg [ 71.165017][ T63] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 71.177665][ T63] usb 2-1: USB disconnect, device number 29 [ 71.187793][ T341] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 71.206552][ T1141] netlink: 'syz.0.233': attribute type 8 has an invalid length. [ 71.214387][ T1141] netlink: 'syz.0.233': attribute type 32 has an invalid length. [ 71.272028][ T1145] loop7: detected capacity change from 0 to 4 [ 71.339461][ T341] usb 4-1: Using ep0 maxpacket: 16 [ 71.353368][ T341] usb 4-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 71.373882][ T341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.398504][ T341] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 71.406522][ T1155] fuse: Unknown parameter 'rootmod00000017þ000000' [ 71.414833][ T341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.423159][ T341] usb 4-1: SerialNumber: syz [ 71.428038][ T1156] fuse: Unknown parameter 'rootmod00000017þ000000' [ 71.440536][ T341] usb 4-1: 0:2 : does not exist [ 71.475650][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 71.681016][ T1165] netlink: 56 bytes leftover after parsing attributes in process `syz.1.240'. [ 71.734849][ T1169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.242'. [ 71.744614][ T1170] netlink: 96 bytes leftover after parsing attributes in process `syz.1.242'. [ 71.827805][ T63] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 71.841672][ T341] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 71.855404][ T341] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 71.860052][ T354] usb 3-1: USB disconnect, device number 25 [ 71.867659][ T341] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 71.880902][ T341] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 71.891755][ T341] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 71.902523][ T36] audit: type=1400 audit(1779138298.904:25486): avc: denied { ioctl } for pid=1173 comm="syz.2.244" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x587c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.910324][ T341] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 71.938332][ T341] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 71.950533][ T341] usb 4-1: USB disconnect, device number 28 [ 71.977826][ T63] usb 1-1: Using ep0 maxpacket: 16 [ 71.984219][ T63] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 71.995214][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.006232][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.016036][ T63] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 72.017935][ T338] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 72.029528][ T63] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 72.045871][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.054896][ T63] usb 1-1: config 0 descriptor?? [ 72.179323][ T338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.189582][ T338] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 72.198756][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.206800][ T338] usb 2-1: Product: syz [ 72.211163][ T338] usb 2-1: Manufacturer: syz [ 72.215793][ T338] usb 2-1: SerialNumber: syz [ 72.222961][ T338] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 72.238015][ T354] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 72.395784][ T354] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.405009][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.413130][ T354] usb 3-1: Product: syz [ 72.417425][ T354] usb 3-1: Manufacturer: syz [ 72.422118][ T354] usb 3-1: SerialNumber: syz [ 72.430198][ T1172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.442283][ T1172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.458623][ T338] usb 2-1: USB disconnect, device number 30 [ 72.470995][ T63] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0017/input/input22 [ 72.486993][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.503216][ T63] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0017/input/input23 [ 72.524455][ T63] kye 0003:0458:5013.0017: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 72.667295][ T1163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.669338][ T339] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 72.677461][ T1163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.718857][ T63] usb 1-1: USB disconnect, device number 34 [ 72.827820][ T339] usb 4-1: Invalid ep0 maxpacket: 64 [ 72.957824][ T339] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 73.107800][ T339] usb 4-1: Invalid ep0 maxpacket: 64 [ 73.113295][ T339] usb usb4-port1: attempt power cycle [ 73.249135][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 73.249341][ T36] audit: type=1400 audit(1779138300.254:25489): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.275615][ T63] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 73.336117][ T36] audit: type=1400 audit(1779138300.334:25490): avc: denied { mounton } for pid=1193 comm="syz.0.252" path="/66/file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 73.377670][ T36] audit: type=1400 audit(1779138300.374:25491): avc: denied { cmd } for pid=1197 comm="iou-wrk-1198" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 73.428392][ T36] audit: type=1400 audit(1779138300.434:25492): avc: denied { map } for pid=1197 comm="syz.0.253" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.451625][ T36] audit: type=1400 audit(1779138300.434:25493): avc: denied { execute } for pid=1197 comm="syz.0.253" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.458451][ T339] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 73.482910][ T63] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 73.491154][ T63] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.501570][ T63] usb 2-1: config 0 has no interface number 0 [ 73.507881][ T339] usb 4-1: Invalid ep0 maxpacket: 64 [ 73.514745][ T63] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 73.523945][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.532056][ T63] usb 2-1: Product: syz [ 73.539237][ T63] usb 2-1: Manufacturer: syz [ 73.543867][ T63] usb 2-1: SerialNumber: syz [ 73.549200][ T63] usb 2-1: config 0 descriptor?? [ 73.555178][ T63] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 73.561644][ T63] usb 2-1: No valid video chain found. [ 73.637879][ T339] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 73.668331][ T339] usb 4-1: Invalid ep0 maxpacket: 64 [ 73.673787][ T339] usb usb4-port1: unable to enumerate USB device [ 73.888116][ T338] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 74.038944][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.049116][ T338] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.059724][ T338] usb 1-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 74.068939][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.077076][ T338] usb 1-1: Product: syz [ 74.081334][ T338] usb 1-1: Manufacturer: syz [ 74.085947][ T338] usb 1-1: SerialNumber: syz [ 74.301223][ T338] usb 1-1: unit 0 not found! [ 74.307703][ T338] usb 1-1: USB disconnect, device number 35 [ 74.318576][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.900310][ T338] usb 3-1: USB disconnect, device number 26 [ 74.970937][ T36] audit: type=1400 audit(1779138301.974:25494): avc: denied { bind } for pid=1214 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.067797][ T339] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 75.217795][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 75.224157][ T339] usb 1-1: config 184 has an invalid interface number: 40 but max is 0 [ 75.232488][ T339] usb 1-1: config 184 has no interface number 0 [ 75.238813][ T339] usb 1-1: config 184 interface 40 altsetting 6 bulk endpoint 0xB has invalid maxpacket 8 [ 75.248817][ T339] usb 1-1: config 184 interface 40 has no altsetting 0 [ 75.257350][ T339] usb 1-1: New USB device found, idVendor=0499, idProduct=2d25, bcdDevice=1c.15 [ 75.266487][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.274601][ T339] usb 1-1: Product: syz [ 75.278828][ T339] usb 1-1: Manufacturer: syz [ 75.283451][ T339] usb 1-1: SerialNumber: syz [ 75.289218][ T1211] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 75.328701][ T338] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 75.416841][ T36] audit: type=1400 audit(1779138302.414:25495): avc: denied { append } for pid=1220 comm="syz.3.260" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.428011][ T1221] input: syz0 as /devices/virtual/input/input24 [ 75.467066][ T36] audit: type=1400 audit(1779138302.464:25496): avc: denied { create } for pid=1222 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 75.486800][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 75.493267][ T338] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 75.504240][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.508595][ T1211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.518634][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.532471][ T1211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.533735][ T1224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.549588][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 75.563569][ T1224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.571543][ T338] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 75.580752][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.589802][ T338] usb 3-1: config 0 descriptor?? [ 75.602742][ T339] usb 1-1: USB disconnect, device number 36 [ 75.612601][ T1227] netlink: 112 bytes leftover after parsing attributes in process `syz.3.262'. [ 75.622452][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:184.40/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.657429][ T1229] bridge0: port 3(veth0_to_bridge) entered blocking state [ 75.664651][ T1229] bridge0: port 3(veth0_to_bridge) entered disabled state [ 75.671879][ T1229] veth0_to_bridge: entered allmulticast mode [ 75.678436][ T1229] veth0_to_bridge: entered promiscuous mode [ 75.684482][ T1229] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 75.696874][ T1229] bridge0: port 3(veth0_to_bridge) entered blocking state [ 75.704068][ T1229] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 76.002817][ T338] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0018/input/input25 [ 76.016280][ T338] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0018/input/input26 [ 76.037062][ T338] kye 0003:0458:5013.0018: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 76.056785][ T341] usb 2-1: USB disconnect, device number 31 [ 76.134113][ T1235] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.265' resets device [ 76.144545][ T1235] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 76.202021][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.212351][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.248428][ T36] audit: type=1400 audit(1779138303.254:25497): avc: denied { getopt } for pid=1245 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.279118][ T338] usb 3-1: USB disconnect, device number 27 [ 76.437812][ T341] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 76.547792][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 76.589050][ T341] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.600715][ T341] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 76.611817][ T341] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 76.623860][ T341] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.633005][ T341] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.641031][ T341] usb 2-1: Manufacturer: syz [ 76.646629][ T1240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.697831][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 76.704231][ T31] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.717227][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 76.725496][ T31] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 76.734733][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.742775][ T31] usb 4-1: Product: 轃뷜탟︻䎻æžå´ŽâŒ¦ï²—Æ뜈ࢻ숦欃쳰꺻㾞ં瓖휎榺쵞쮺镹ཧ긦乨ᡮﳋ䇷棆é¢ç³«é¸žè¬ á“⧖埖éŠè˜…㦋ﮨ꟧奕ëŽëƒžá–žæ•ç“€íˆ”íç‚ت [ 76.761187][ T31] usb 4-1: Manufacturer: 땧巻횤䯦㻫ç„芒쬩ïžï«¼èµªâ¦”å—ˆæ‡î¾›é‹ˆì˜€æ² åµ¶ê›¢àµ—è€î¶—â«à¥½àµ¤ã¼æ­¡è¿‘㩕⑟梬̀快粩幞匽炪潂冀枴衞೴翲ã¯á¦¾æ–¨ç¾á„ªæ¨‚ï©—ë½ë½²ä‡áˆì¾£ì§á‡…厗홧ꊛ锉ê¬â…¦â›°ìŸ«à°žà§™à³™ã³žçŠžç«é»¬á£©êª¤ä«¬ï¬†ê·”㱞ீï­åª›á»·ì‘©ëꂨêµì„¾â˜ë‚«å¢±á˜§å·¿à¡½á«”ﴃⵦæ»ë‰å ¤ë‰œã¾ì¦¡ç¤œî€…붠飞 [ 76.794191][ T31] usb 4-1: SerialNumber: й [ 76.856620][ T1240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.047833][ T339] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 77.078154][ T1240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.091233][ T1240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.200714][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.210813][ T1247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.212332][ T339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.230107][ T1247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.232976][ T339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.249073][ T339] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 77.258696][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.261923][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 77.267691][ T339] usb 3-1: Product: syz [ 77.277707][ T339] usb 3-1: Manufacturer: syz [ 77.282379][ T339] usb 3-1: SerialNumber: syz [ 77.283144][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 77.304819][ T31] usb 4-1: USB disconnect, device number 33 [ 77.508042][ T341] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 77.516080][ T341] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27 [ 77.528148][ T341] usb 2-1: USB disconnect, device number 32 [ 77.534285][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 77.567774][ T354] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 77.607851][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 77.707178][ T339] usb 3-1: 0:1 : does not exist [ 77.719640][ T354] usb 1-1: Using ep0 maxpacket: 8 [ 77.726974][ T339] usb 3-1: USB disconnect, device number 28 [ 77.736232][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.753568][ T354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.757869][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 77.769856][ T354] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 77.779588][ T31] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.782090][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.795317][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 77.810908][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.827493][ T354] usb 1-1: config 0 descriptor?? [ 77.835759][ T31] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 77.845306][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.854325][ T31] usb 4-1: Product: syz [ 77.859585][ T31] usb 4-1: Manufacturer: syz [ 77.864233][ T31] usb 4-1: SerialNumber: syz [ 77.944037][ T1277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 78.047836][ T339] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 78.197801][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 78.204118][ T339] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.215511][ T339] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.225656][ T339] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.232435][ T339] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 78.245537][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x3 [ 78.252502][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.260855][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.267813][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.275220][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.282437][ T339] usb 3-1: config 0 descriptor?? [ 78.291054][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.303469][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.313419][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.326534][ T354] wacom 0003:056A:032A.0019: unknown main item tag 0x0 [ 78.340332][ T354] wacom 0003:056A:032A.0019: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.0-1/input0 [ 78.358655][ T354] usb 1-1: USB disconnect, device number 37 [ 78.380327][ T1282] fido_id[1282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 78.510291][ T339] usbhid 3-1:0.0: can't add hid device: -71 [ 78.516318][ T339] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 78.528945][ T339] usb 3-1: USB disconnect, device number 29 [ 78.657937][ T354] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 78.807797][ T354] usb 1-1: Using ep0 maxpacket: 16 [ 78.814310][ T354] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 78.825384][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.836533][ T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.846413][ T354] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 78.859533][ T354] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 78.868724][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.877887][ T354] usb 1-1: config 0 descriptor?? [ 78.997787][ T332] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 79.043668][ T36] audit: type=1400 audit(1779138306.044:25498): avc: denied { getopt } for pid=1286 comm="syz.2.282" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.147786][ T332] usb 2-1: Using ep0 maxpacket: 8 [ 79.154116][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.165489][ T332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.178655][ T332] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 79.187822][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.196788][ T332] usb 2-1: config 0 descriptor?? [ 79.267478][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 79.273662][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 79.284046][ T1292] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 79.293689][ T31] usb 4-1: USB disconnect, device number 34 [ 79.305528][ T354] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001A/input/input31 [ 79.322982][ T354] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001A/input/input32 [ 79.347641][ T354] kye 0003:0458:5013.001A: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 79.500963][ T1283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.509674][ T1283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.559088][ T354] usb 1-1: USB disconnect, device number 38 [ 79.603717][ T332] hid (null): unknown global tag 0xa3 [ 79.609332][ T332] hid (null): unknown global tag 0xc [ 79.614649][ T332] hid (null): unknown global tag 0xd [ 79.627778][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 79.788856][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.799828][ T31] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 79.810765][ T332] usb 2-1: string descriptor 0 read error: -71 [ 79.817404][ T332] uclogic 0003:5543:0081.001B: failed retrieving string descriptor #200: -71 [ 79.826399][ T332] uclogic 0003:5543:0081.001B: failed retrieving pen parameters: -71 [ 79.834642][ T332] uclogic 0003:5543:0081.001B: failed probing pen v2 parameters: -71 [ 79.842921][ T332] uclogic 0003:5543:0081.001B: failed probing parameters: -71 [ 79.850511][ T332] uclogic 0003:5543:0081.001B: probe with driver uclogic failed with error -71 [ 79.859585][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.869876][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.878091][ T332] usb 2-1: USB disconnect, device number 33 [ 79.886539][ T31] usb 4-1: Product: syz [ 79.891440][ T31] usb 4-1: Manufacturer: syz [ 79.896086][ T31] usb 4-1: SerialNumber: syz [ 79.903258][ T31] cdc_mbim 4-1:1.0: skipping garbage [ 79.975318][ T36] audit: type=1400 audit(1779138306.974:25499): avc: denied { bpf } for pid=1300 comm="syz.2.286" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.102588][ T1292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.257804][ T341] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 80.307844][ T354] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 80.387799][ T341] usb 3-1: device descriptor read/64, error -71 [ 80.435663][ T36] audit: type=1400 audit(1779138307.434:25500): avc: denied { connect } for pid=1307 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.455495][ T36] audit: type=1400 audit(1779138307.434:25501): avc: denied { write } for pid=1307 comm="syz.1.289" laddr=fe80::4c48:fcff:fef4:8f7f lport=1 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.458024][ T354] usb 1-1: Using ep0 maxpacket: 8 [ 80.481897][ T36] audit: type=1400 audit(1779138307.454:25502): avc: denied { read } for pid=1307 comm="syz.1.289" path="socket:[10635]" dev="sockfs" ino=10635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.504663][ T354] usb 1-1: unable to get BOS descriptor or descriptor too short [ 80.523759][ T354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.534056][ T354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.553864][ T354] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 80.562994][ T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.571067][ T354] usb 1-1: Product: syz [ 80.575247][ T354] usb 1-1: Manufacturer: syz [ 80.579983][ T354] usb 1-1: SerialNumber: syz [ 80.647841][ T341] usb 3-1: device descriptor read/64, error -71 [ 80.717733][ T1292] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.725198][ T31] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 80.731786][ T31] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 80.738969][ T31] wwan wwan0: port wwan0mbim0 attached [ 80.746534][ T31] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, e2:e6:44:e7:45:e0 [ 80.788269][ T332] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 80.858248][ T36] audit: type=1400 audit(1779138307.864:25503): avc: denied { write } for pid=1305 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.885469][ T1306] input: syz0 as /devices/virtual/input/input34 [ 80.902148][ T36] audit: type=1400 audit(1779138307.884:25504): avc: denied { write } for pid=1305 comm="syz.0.288" path="socket:[11266]" dev="sockfs" ino=11266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.903952][ T354] usb 1-1: 0:1 : does not exist [ 80.926101][ T341] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 80.941203][ T31] usb 4-1: USB disconnect, device number 35 [ 80.947709][ T31] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 80.950646][ T354] usb 1-1: 0:2 : does not exist [ 80.967779][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 80.978323][ T354] usb 1-1: USB disconnect, device number 39 [ 80.985258][ T332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.998034][ T332] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.024890][ T332] usb 2-1: config 1 interface 0 has no altsetting 0 [ 81.029783][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.035709][ T332] usb 2-1: string descriptor 0 read error: -22 [ 81.064509][ T31] wwan wwan0: port wwan0mbim0 disconnected [ 81.070948][ T332] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 81.080312][ T332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.090353][ T341] usb 3-1: device descriptor read/64, error -71 [ 81.108867][ T332] usblp0: Disabling reads from problematic bidirectional printer [ 81.309710][ T332] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 10 proto 1 vid 0x03F0 pid 0x0004 [ 81.321914][ T332] usb 2-1: USB disconnect, device number 34 [ 81.327932][ T341] usb 3-1: device descriptor read/64, error -71 [ 81.335035][ T332] usblp0: removed [ 81.443431][ T341] usb usb3-port1: attempt power cycle [ 81.456093][ T36] audit: type=1400 audit(1779138308.454:25505): avc: denied { setopt } for pid=1340 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 81.514904][ T36] audit: type=1400 audit(1779138308.514:25506): avc: denied { mount } for pid=1349 comm="syz.0.294" name="/" dev="ramfs" ino=11288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.727810][ T46] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 81.807830][ T341] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 81.829339][ T341] usb 3-1: device descriptor read/8, error -71 [ 81.877793][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 81.884361][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.892138][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 81.900833][ T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 228, changing to 7 [ 81.913745][ T46] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 81.922928][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.931002][ T46] usb 4-1: Product: syz [ 81.935203][ T46] usb 4-1: Manufacturer: syz [ 81.939877][ T46] usb 4-1: SerialNumber: syz [ 81.958920][ T341] usb 3-1: device descriptor read/8, error -71 [ 82.047801][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 82.054233][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 82.065224][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.076276][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.086308][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 82.087895][ T339] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 82.099375][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 82.116178][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.125045][ T31] usb 1-1: config 0 descriptor?? [ 82.162442][ T46] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 82.169408][ T46] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 82.180557][ T46] usb 4-1: USB disconnect, device number 36 [ 82.195505][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.209725][ T341] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 82.238946][ T341] usb 3-1: device descriptor read/8, error -71 [ 82.250600][ T339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.259166][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.269509][ T339] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.278531][ T339] usb 2-1: too many endpoints for config 1 interface 1 altsetting 26: 225, using maximum allowed: 30 [ 82.289486][ T339] usb 2-1: config 1 interface 1 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 82.302771][ T339] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 82.313705][ T339] usb 2-1: config 1 interface 1 has no altsetting 0 [ 82.321855][ T339] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 82.330980][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.339027][ T339] usb 2-1: Product: syz [ 82.343211][ T339] usb 2-1: Manufacturer: 〷 [ 82.347863][ T339] usb 2-1: SerialNumber: syz [ 82.378876][ T341] usb 3-1: device descriptor read/8, error -71 [ 82.487979][ T341] usb usb3-port1: unable to enumerate USB device [ 82.542402][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001C/input/input35 [ 82.556734][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001C/input/input36 [ 82.564556][ T339] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 82.577353][ T339] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 82.588282][ T339] usb 2-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 82.595551][ T339] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 82.596689][ T31] kye 0003:0458:5013.001C: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 82.606092][ T339] usb 2-1: selecting invalid altsetting 0 [ 82.634004][ T339] usb 2-1: selecting invalid altsetting 0 [ 82.640042][ T339] usb 2-1: unit 2 not found! [ 82.644765][ T339] usb 2-1: unit 0 not found! [ 82.654946][ T339] usb 2-1: USB disconnect, device number 35 [ 82.741480][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.750434][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.764513][ T1368] netlink: 5 bytes leftover after parsing attributes in process `syz.3.299'. [ 82.810580][ T31] usb 1-1: USB disconnect, device number 40 [ 82.840083][ T1368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1368 comm=syz.3.299 [ 83.189300][ T341] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 83.197677][ T36] audit: type=1400 audit(1779138310.194:25507): avc: denied { bind } for pid=1396 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.292957][ T1409] netlink: 'syz.1.309': attribute type 11 has an invalid length. [ 83.314318][ T1411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 83.348140][ T341] usb 4-1: device descriptor read/64, error -71 [ 83.407849][ T46] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 83.557912][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 83.563187][ T31] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 83.572114][ T46] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.580390][ T46] usb 3-1: config 0 has no interface number 0 [ 83.588008][ T46] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.597075][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.605146][ T341] usb 4-1: device descriptor read/64, error -71 [ 83.611495][ T46] usb 3-1: Product: syz [ 83.615660][ T46] usb 3-1: Manufacturer: syz [ 83.620307][ T46] usb 3-1: SerialNumber: syz [ 83.625633][ T46] usb 3-1: config 0 descriptor?? [ 83.631535][ T46] smsc95xx v2.0.0 [ 83.667902][ T339] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 83.719255][ T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 83.731045][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.742072][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 83.753020][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 83.766889][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.776045][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.784127][ T31] usb 2-1: SerialNumber: syz [ 83.790052][ T1411] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 83.817798][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 83.824854][ T339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.834683][ T339] usb 1-1: config index 0 descriptor too short (expected 4329, got 233) [ 83.843543][ T339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.853695][ T339] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.857919][ T341] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 83.865653][ T339] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 83.879288][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.887334][ T339] usb 1-1: Product: syz [ 83.891571][ T339] usb 1-1: Manufacturer: syz [ 83.896220][ T339] usb 1-1: SerialNumber: syz [ 83.997845][ T341] usb 4-1: device descriptor read/64, error -71 [ 84.006943][ T31] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 84.014857][ T31] usb 2-1: USB disconnect, device number 36 [ 84.111224][ T339] usb 1-1: USB disconnect, device number 41 [ 84.121051][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.237831][ T341] usb 4-1: device descriptor read/64, error -71 [ 84.347943][ T341] usb usb4-port1: attempt power cycle [ 84.621671][ T36] audit: type=1400 audit(1779138311.624:25508): avc: denied { read } for pid=1432 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.690896][ T341] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 84.718832][ T341] usb 4-1: device descriptor read/8, error -71 [ 84.807819][ T31] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 84.848880][ T341] usb 4-1: device descriptor read/8, error -71 [ 84.959049][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26879, setting to 64 [ 84.967792][ T339] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 84.972727][ T31] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 84.987077][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.995306][ T31] usb 2-1: Product: syz [ 84.999697][ T31] usb 2-1: Manufacturer: syz [ 85.004362][ T31] usb 2-1: SerialNumber: syz [ 85.010410][ T31] usb 2-1: config 0 descriptor?? [ 85.015892][ T1431] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 85.024476][ T31] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 85.031143][ T31] usb 2-1: No valid video chain found. [ 85.097785][ T341] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 85.118863][ T341] usb 4-1: device descriptor read/8, error -71 [ 85.128865][ T339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 85.139822][ T339] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 85.152604][ T339] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 85.161749][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.169993][ T339] usb 1-1: Product: syz [ 85.174191][ T339] usb 1-1: Manufacturer: syz [ 85.179044][ T339] usb 1-1: SerialNumber: syz [ 85.258833][ T341] usb 4-1: device descriptor read/8, error -71 [ 85.367973][ T341] usb usb4-port1: unable to enumerate USB device [ 85.395912][ T1441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.408914][ T1441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.557806][ T339] usb 1-1: Can't get UAC3 power state for id 10 [ 85.565214][ T339] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 85.575130][ T339] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 85.591055][ T339] usb 1-1: USB disconnect, device number 42 [ 85.607071][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.069147][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 86.090407][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.107508][ T46] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 86.122165][ T46] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 86.133885][ T46] usb 3-1: USB disconnect, device number 34 [ 86.161273][ T36] audit: type=1400 audit(1779138313.164:25509): avc: denied { map } for pid=1461 comm="syz.2.326" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 86.307941][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 86.367910][ T341] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 86.457797][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 86.464241][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 86.475305][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.486348][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.496151][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 86.509243][ T46] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 86.516783][ T31] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 86.526399][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.535264][ T31] usb 4-1: config 0 descriptor?? [ 86.540275][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 86.547172][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.557525][ T341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.567209][ T341] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 86.576320][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.584443][ T341] usb 1-1: SerialNumber: syz [ 86.591273][ T341] usb 1-1: 0:2 : does not exist [ 86.677782][ T46] usb 3-1: Invalid ep0 maxpacket: 64 [ 86.807838][ T46] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 86.829417][ T36] audit: type=1400 audit(1779138313.834:25510): avc: denied { map } for pid=1459 comm="syz.0.325" path="socket:[10941]" dev="sockfs" ino=10941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 86.901574][ T341] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 86.911740][ T341] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 86.921839][ T341] usb 1-1: USB disconnect, device number 43 [ 86.931736][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.952144][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001D/input/input38 [ 86.963617][ T46] usb 3-1: Invalid ep0 maxpacket: 64 [ 86.970456][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001D/input/input39 [ 86.982284][ T46] usb usb3-port1: attempt power cycle [ 86.991582][ T31] kye 0003:0458:5013.001D: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 87.150240][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.159159][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.208809][ T339] usb 4-1: USB disconnect, device number 41 [ 87.335167][ T46] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 87.358214][ T46] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.435529][ T1477] syz.0.330 uses obsolete (PF_INET,SOCK_PACKET) [ 87.446612][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 87.461033][ T1477] kvm: kvm [1476]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000066) = 0x6 [ 87.471789][ T36] audit: type=1400 audit(1779138314.474:25511): avc: denied { ioctl } for pid=1476 comm="syz.0.330" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.497305][ T46] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 87.518410][ T46] usb 3-1: Invalid ep0 maxpacket: 64 [ 87.523857][ T46] usb usb3-port1: unable to enumerate USB device [ 87.535806][ T354] usb 2-1: USB disconnect, device number 37 [ 87.847854][ T339] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 87.903474][ T1491] block device autoloading is deprecated and will be removed. [ 87.942330][ T36] audit: type=1400 audit(1779138314.944:25512): avc: denied { write } for pid=1495 comm="syz.3.338" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.968199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 87.980420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 87.992585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.004724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.016923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.029315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.041623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.053755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.065924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.078069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 88.126722][ T36] audit: type=1400 audit(1779138315.124:25513): avc: denied { write } for pid=1500 comm="syz.3.339" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 88.149849][ T36] audit: type=1400 audit(1779138315.124:25514): avc: denied { getopt } for pid=1500 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.262205][ T339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.278005][ T339] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.325194][ T339] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 88.347320][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.388786][ T339] usb 1-1: SerialNumber: syz [ 88.414231][ T339] usb 1-1: 0:2 : does not exist [ 88.507789][ T46] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 88.577792][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 88.667806][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 88.674252][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 88.685677][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.696906][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.707170][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 88.720704][ T46] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 88.729955][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.738095][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 88.747946][ T46] usb 4-1: config 0 descriptor?? [ 88.756569][ T31] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.765142][ T31] usb 2-1: config 0 has no interface number 0 [ 88.771433][ T31] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 88.781819][ T31] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 88.792254][ T31] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 88.802515][ T31] usb 2-1: config 0 interface 196 has no altsetting 0 [ 88.811091][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 88.822485][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.830743][ T31] usb 2-1: Product: syz [ 88.835025][ T31] usb 2-1: Manufacturer: syz [ 88.839900][ T31] usb 2-1: SerialNumber: syz [ 88.848211][ T31] usb 2-1: config 0 descriptor?? [ 88.853712][ T1512] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.163646][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001E/input/input40 [ 89.191496][ T46] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001E/input/input41 [ 89.207351][ T46] kye 0003:0458:5013.001E: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 89.263477][ T1512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.290081][ T1512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.341561][ T31] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 89.364017][ T1508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.373907][ T31] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 89.392032][ T1508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.410298][ T31] usb 2-1: USB disconnect, device number 38 [ 89.498671][ T46] usb 4-1: USB disconnect, device number 42 [ 89.650168][ T818] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 89.700420][ T36] audit: type=1400 audit(1779138316.704:25515): avc: denied { read } for pid=1526 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.819597][ T818] usb 3-1: Using ep0 maxpacket: 16 [ 89.848166][ T818] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 89.856297][ T818] usb 3-1: config 0 has no interface number 0 [ 89.878775][ T818] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 89.898234][ T818] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 89.947259][ T818] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 89.968381][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.976424][ T818] usb 3-1: Product: syz [ 89.998122][ T818] usb 3-1: Manufacturer: syz [ 90.002835][ T818] usb 3-1: SerialNumber: syz [ 90.017788][ T46] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 90.026514][ T818] usb 3-1: config 0 descriptor?? [ 90.036927][ T1518] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 90.052122][ T1518] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 90.108854][ T36] audit: type=1400 audit(1779138317.114:25516): avc: denied { map } for pid=1534 comm="syz.3.348" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.179000][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.189877][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.203976][ T46] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 90.213332][ T46] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 90.221533][ T46] usb 2-1: Manufacturer: syz [ 90.227210][ T46] usb 2-1: config 0 descriptor?? [ 90.241629][ T1536] incfs_lookup_dentry err:-4 [ 90.246308][ T1536] incfs: Can't find or create .index dir in ./file0 [ 90.253494][ T1536] incfs: mount failed -4 [ 90.274362][ T1518] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 90.292514][ T1518] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 90.435811][ T1528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.446568][ T1528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.455537][ T36] audit: type=1400 audit(1779138317.454:25517): avc: denied { read write } for pid=1526 comm="syz.1.346" dev="sockfs" ino=11910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.567809][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 90.629813][ T341] usb 1-1: USB disconnect, device number 44 [ 90.669570][ T36] audit: type=1400 audit(1779138317.674:25518): avc: denied { append } for pid=1542 comm="syz.0.350" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.712985][ T1547] FAULT_INJECTION: forcing a failure. [ 90.712985][ T1547] name failslab, interval 1, probability 0, space 0, times 1 [ 90.726951][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 90.735931][ T1547] CPU: 1 UID: 0 PID: 1547 Comm: syz.0.351 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 90.735972][ T1547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.735992][ T1547] Call Trace: [ 90.736000][ T1547] [ 90.736009][ T1547] __dump_stack+0x21/0x30 [ 90.736048][ T1547] dump_stack_lvl+0x140/0x1c0 [ 90.736082][ T1547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 90.736117][ T1547] ? _parse_integer+0x2e/0x40 [ 90.736152][ T1547] ? kstrtoull+0x13b/0x1e0 [ 90.736244][ T1547] dump_stack+0x19/0x20 [ 90.736277][ T1547] should_fail_ex+0x3d7/0x530 [ 90.736306][ T1547] should_failslab+0xac/0x100 [ 90.736336][ T1547] kmem_cache_alloc_noprof+0x42/0x410 [ 90.736361][ T1547] ? getname_flags+0xc5/0x700 [ 90.736388][ T1547] getname_flags+0xc5/0x700 [ 90.736414][ T1547] vfs_fstatat+0xcb/0x1d0 [ 90.736442][ T1547] __se_sys_newfstatat+0x127/0x3c0 [ 90.736473][ T1547] ? __x64_sys_newfstatat+0xc0/0xc0 [ 90.736502][ T1547] ? vfs_write+0x9a4/0xf90 [ 90.736527][ T1547] ? __cfi_vfs_write+0x10/0x10 [ 90.736551][ T1547] ? __kasan_check_write+0x18/0x20 [ 90.736574][ T1547] ? mutex_unlock+0x90/0x240 [ 90.736608][ T1547] ? __cfi_ksys_write+0x10/0x10 [ 90.736634][ T1547] __x64_sys_newfstatat+0x9f/0xc0 [ 90.736664][ T1547] x64_sys_call+0x1821/0x2ee0 [ 90.736688][ T1547] do_syscall_64+0x57/0xf0 [ 90.736711][ T1547] ? clear_bhb_loop+0x50/0xa0 [ 90.736739][ T1547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 90.736767][ T1547] RIP: 0033:0x7feb0ad9ce59 [ 90.736797][ T1547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.736819][ T1547] RSP: 002b:00007feb0bccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 90.736854][ T1547] RAX: ffffffffffffffda RBX: 00007feb0b015fa0 RCX: 00007feb0ad9ce59 [ 90.736873][ T1547] RDX: 0000200000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 90.736891][ T1547] RBP: 00007feb0bccf090 R08: 0000000000000000 R09: 0000000000000000 [ 90.736907][ T1547] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 90.736921][ T1547] R13: 00007feb0b016038 R14: 00007feb0b015fa0 R15: 00007ffe5809b2f8 [ 90.736943][ T1547] [ 90.956762][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.969731][ T31] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 90.978839][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.987933][ T31] usb 4-1: config 0 descriptor?? [ 91.457863][ T341] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 91.499545][ T1556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.509203][ T1556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.592491][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 91.601979][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 91.610098][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 91.617913][ T341] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 91.631101][ T31] usb 4-1: USB disconnect, device number 43 [ 91.648379][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.659848][ T341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.670643][ T341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 91.684065][ T341] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 91.693364][ T341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.705836][ T341] usb 1-1: config 0 descriptor?? [ 92.132688][ T341] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001F/input/input42 [ 92.165394][ T341] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001F/input/input43 [ 92.199018][ T341] kye 0003:0458:5013.001F: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 92.321018][ T1555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.333892][ T1555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.362330][ T341] usb 1-1: USB disconnect, device number 45 [ 92.619792][ T818] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.648583][ T818] asix 3-1:0.34: probe with driver asix failed with error -71 [ 92.660926][ T818] usb 3-1: USB disconnect, device number 39 [ 92.715675][ T46] usb 2-1: USB disconnect, device number 39 [ 92.978004][ C0] net_ratelimit: 68683 callbacks suppressed [ 92.978042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 92.996168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.008315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.020663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 93.032810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.044904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.057294][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 93.069459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.081561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.093999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 93.149325][ T46] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 93.215811][ T36] audit: type=1400 audit(1779138320.214:25519): avc: denied { bind } for pid=1572 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.262960][ T1574] FAULT_INJECTION: forcing a failure. [ 93.262960][ T1574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.302397][ T36] audit: type=1400 audit(1779138320.304:25520): avc: denied { write } for pid=1575 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.334219][ T1574] CPU: 1 UID: 0 PID: 1574 Comm: syz.2.360 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 93.334255][ T1574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 93.334271][ T1574] Call Trace: [ 93.334278][ T1574] [ 93.334288][ T1574] __dump_stack+0x21/0x30 [ 93.334327][ T1574] dump_stack_lvl+0x140/0x1c0 [ 93.334361][ T1574] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.334402][ T1574] dump_stack+0x19/0x20 [ 93.334435][ T1574] should_fail_ex+0x3d7/0x530 [ 93.334458][ T1574] should_fail+0xf/0x20 [ 93.334478][ T1574] should_fail_usercopy+0x1e/0x30 [ 93.334502][ T1574] strncpy_from_user+0x29/0x270 [ 93.334525][ T1574] getname_flags+0x101/0x700 [ 93.334553][ T1574] vfs_fstatat+0xcb/0x1d0 [ 93.334580][ T1574] __se_sys_newfstatat+0x127/0x3c0 [ 93.334611][ T1574] ? __x64_sys_newfstatat+0xc0/0xc0 [ 93.334640][ T1574] ? vfs_write+0x9a4/0xf90 [ 93.334665][ T1574] ? __cfi_vfs_write+0x10/0x10 [ 93.334689][ T1574] ? __kasan_check_write+0x18/0x20 [ 93.334713][ T1574] ? mutex_unlock+0x90/0x240 [ 93.334746][ T1574] ? __cfi_ksys_write+0x10/0x10 [ 93.334773][ T1574] __x64_sys_newfstatat+0x9f/0xc0 [ 93.334804][ T1574] x64_sys_call+0x1821/0x2ee0 [ 93.334827][ T1574] do_syscall_64+0x57/0xf0 [ 93.334850][ T1574] ? clear_bhb_loop+0x50/0xa0 [ 93.334879][ T1574] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.334906][ T1574] RIP: 0033:0x7f6717f9ce59 [ 93.334925][ T1574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.334945][ T1574] RSP: 002b:00007f6718db9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 93.334972][ T1574] RAX: ffffffffffffffda RBX: 00007f6718215fa0 RCX: 00007f6717f9ce59 [ 93.334991][ T1574] RDX: 0000200000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 93.335009][ T1574] RBP: 00007f6718db9090 R08: 0000000000000000 R09: 0000000000000000 [ 93.335025][ T1574] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 93.335041][ T1574] R13: 00007f6718216038 R14: 00007f6718215fa0 R15: 00007ffd01dbfce8 [ 93.335062][ T1574] [ 93.444190][ T36] audit: type=1400 audit(1779138320.334:25521): avc: denied { write } for pid=1575 comm="syz.3.361" name="wireless" dev="proc" ino=4026532479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 93.469557][ T46] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 93.620430][ T46] usb 1-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 93.645078][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.663593][ T36] audit: type=1400 audit(1779138320.634:25522): avc: denied { shutdown } for pid=1575 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.693654][ T46] usb 1-1: Product: syz [ 93.698305][ T46] usb 1-1: Manufacturer: syz [ 93.702937][ T46] usb 1-1: SerialNumber: syz [ 93.940451][ T46] usb 1-1: USB disconnect, device number 46 [ 93.997772][ T332] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 94.127842][ T332] usb 3-1: device descriptor read/64, error -71 [ 94.273935][ T36] audit: type=1400 audit(1779138321.274:25523): avc: denied { create } for pid=1596 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 94.357843][ T341] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 94.508591][ T332] usb 3-1: device descriptor read/64, error -71 [ 94.591960][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 94.654869][ T341] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 94.760672][ T332] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 94.807046][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.011191][ T341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.137171][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 95.166663][ T1601] FAULT_INJECTION: forcing a failure. [ 95.166663][ T1601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.194534][ T341] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 95.206567][ T332] usb 3-1: device descriptor read/64, error -71 [ 95.241407][ T1601] CPU: 1 UID: 0 PID: 1601 Comm: syz.0.370 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 95.241444][ T1601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.241460][ T1601] Call Trace: [ 95.241468][ T1601] [ 95.241477][ T1601] __dump_stack+0x21/0x30 [ 95.241516][ T1601] dump_stack_lvl+0x140/0x1c0 [ 95.241550][ T1601] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.241586][ T1601] ? __kasan_slab_free+0x6a/0x80 [ 95.241616][ T1601] dump_stack+0x19/0x20 [ 95.241648][ T1601] should_fail_ex+0x3d7/0x530 [ 95.241671][ T1601] should_fail+0xf/0x20 [ 95.241691][ T1601] should_fail_usercopy+0x1e/0x30 [ 95.241715][ T1601] _copy_to_user+0x24/0xa0 [ 95.241743][ T1601] __se_sys_newfstatat+0x329/0x3c0 [ 95.241774][ T1601] ? __x64_sys_newfstatat+0xc0/0xc0 [ 95.241803][ T1601] ? vfs_write+0x9a4/0xf90 [ 95.241828][ T1601] ? __kasan_check_write+0x18/0x20 [ 95.241851][ T1601] ? mutex_unlock+0x90/0x240 [ 95.241884][ T1601] ? __cfi_ksys_write+0x10/0x10 [ 95.241910][ T1601] __x64_sys_newfstatat+0x9f/0xc0 [ 95.241941][ T1601] x64_sys_call+0x1821/0x2ee0 [ 95.241964][ T1601] do_syscall_64+0x57/0xf0 [ 95.241986][ T1601] ? clear_bhb_loop+0x50/0xa0 [ 95.242014][ T1601] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.242041][ T1601] RIP: 0033:0x7feb0ad9ce59 [ 95.242061][ T1601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.242081][ T1601] RSP: 002b:00007feb0bccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 95.242113][ T1601] RAX: ffffffffffffffda RBX: 00007feb0b015fa0 RCX: 00007feb0ad9ce59 [ 95.242136][ T1601] RDX: 0000200000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 95.242154][ T1601] RBP: 00007feb0bccf090 R08: 0000000000000000 R09: 0000000000000000 [ 95.242170][ T1601] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 95.242186][ T1601] R13: 00007feb0b016038 R14: 00007feb0b015fa0 R15: 00007ffe5809b2f8 [ 95.242207][ T1601] [ 95.449212][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.128275][ T341] usb 2-1: config 0 descriptor?? [ 96.793024][ T341] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0020/input/input44 [ 96.819390][ T341] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0020/input/input45 [ 96.990769][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.203516][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.987750][ C1] net_ratelimit: 78800 callbacks suppressed [ 97.987771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.987970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 97.994045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.005777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.017895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.029903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.041894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.054223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 98.065826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.077581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.589811][ T341] kye 0003:0458:5013.0020: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 102.478101][ T341] usb 2-1: USB disconnect, device number 40 [ 102.997755][ C1] net_ratelimit: 128293 callbacks suppressed [ 102.997779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.997804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.004170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.016526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 103.028204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.039955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.051995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.063971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.075898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.088270][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 105.550661][ T1604] fido_id[1604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 108.007764][ C1] net_ratelimit: 130799 callbacks suppressed [ 108.007788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.007917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 108.014074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.025970][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.038110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.050096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.061942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.074277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 108.086266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.098130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.317736][ C0] sched: DL replenish lagged too much [ 113.017755][ C1] net_ratelimit: 133393 callbacks suppressed [ 113.017780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.017904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 113.024029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.036065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.048145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.060093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.072020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.084337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 113.096041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.107897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.569335][ T36] audit: type=1400 audit(1779138342.564:25524): avc: denied { mounton } for pid=1630 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 115.998485][ T36] audit: type=1400 audit(1779138342.734:25525): avc: denied { setattr } for pid=1624 comm="syz.1.376" name="KEY" dev="sockfs" ino=11126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.121672][ T1633] FAULT_INJECTION: forcing a failure. [ 116.121672][ T1633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.168230][ T1633] CPU: 1 UID: 0 PID: 1633 Comm: syz.0.379 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 116.168273][ T1633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.168288][ T1633] Call Trace: [ 116.168296][ T1633] [ 116.168305][ T1633] __dump_stack+0x21/0x30 [ 116.168344][ T1633] dump_stack_lvl+0x140/0x1c0 [ 116.168378][ T1633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.168421][ T1633] ? check_stack_object+0x12b/0x150 [ 116.168448][ T1633] dump_stack+0x19/0x20 [ 116.168481][ T1633] should_fail_ex+0x3d7/0x530 [ 116.168505][ T1633] should_fail+0xf/0x20 [ 116.168525][ T1633] should_fail_usercopy+0x1e/0x30 [ 116.168550][ T1633] _copy_to_user+0x24/0xa0 [ 116.168579][ T1633] simple_read_from_buffer+0xed/0x160 [ 116.168611][ T1633] proc_fail_nth_read+0x1aa/0x220 [ 116.168646][ T1633] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 116.168680][ T1633] ? bpf_lsm_file_permission+0xd/0x20 [ 116.168712][ T1633] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 116.168745][ T1633] vfs_read+0x286/0xcb0 [ 116.168771][ T1633] ? __cfi_vfs_read+0x10/0x10 [ 116.168793][ T1633] ? __kasan_check_write+0x18/0x20 [ 116.168817][ T1633] ? mutex_lock+0x97/0x1d0 [ 116.168846][ T1633] ? __cfi_mutex_lock+0x10/0x10 [ 116.168874][ T1633] ? __fget_files+0x2c5/0x340 [ 116.168904][ T1633] ksys_read+0x145/0x260 [ 116.168928][ T1633] ? __cfi_ksys_read+0x10/0x10 [ 116.168952][ T1633] ? __kasan_check_read+0x15/0x20 [ 116.168976][ T1633] __x64_sys_read+0x7f/0x90 [ 116.169000][ T1633] x64_sys_call+0x2638/0x2ee0 [ 116.169024][ T1633] do_syscall_64+0x57/0xf0 [ 116.169047][ T1633] ? clear_bhb_loop+0x50/0xa0 [ 116.169075][ T1633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.169103][ T1633] RIP: 0033:0x7feb0ad5d68e [ 116.169123][ T1633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.169145][ T1633] RSP: 002b:00007feb0bccefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.169170][ T1633] RAX: ffffffffffffffda RBX: 00007feb0bccf6c0 RCX: 00007feb0ad5d68e [ 116.169189][ T1633] RDX: 000000000000000f RSI: 00007feb0bccf0a0 RDI: 0000000000000004 [ 116.169205][ T1633] RBP: 00007feb0bccf090 R08: 0000000000000000 R09: 0000000000000000 [ 116.169221][ T1633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.169236][ T1633] R13: 00007feb0b016038 R14: 00007feb0b015fa0 R15: 00007ffe5809b2f8 [ 116.169258][ T1633] [ 118.027761][ C1] net_ratelimit: 119805 callbacks suppressed [ 118.027795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.027797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.028055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.034136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.046513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 118.058012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.069931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.081812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.094023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.105986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.037744][ C1] net_ratelimit: 132262 callbacks suppressed [ 123.037768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.037853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 123.044014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.055867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.067955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.080084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.092023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.104313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 123.115857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.127759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.047747][ C1] net_ratelimit: 132369 callbacks suppressed [ 128.047771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.048007][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 128.054023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.065866][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.078225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.090183][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.102137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.114434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 128.126012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.137946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.430920][ T339] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 132.821689][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 132.933261][ T339] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 132.957889][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.979035][ T339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.019158][ T339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 133.057214][ T339] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 133.066340][ C1] net_ratelimit: 130650 callbacks suppressed [ 133.066359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066380][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.066435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 133.066662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.066737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.066802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.327839][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.469981][ T339] usb 1-1: config 0 descriptor?? [ 135.019724][ T339] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0021/input/input46 [ 135.050412][ T339] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0021/input/input47 [ 135.139259][ T339] kye 0003:0458:5013.0021: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 135.208953][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.217503][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.361007][ T339] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 136.560901][ T339] usb 1-1: device descriptor read/64, error -32 [ 136.821279][ T339] usb 1-1: device descriptor read/64, error -32 [ 137.090055][ T339] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 137.297961][ T339] usb 1-1: device descriptor read/64, error -32 [ 137.580504][ T339] usb 1-1: device descriptor read/64, error -32 [ 137.774160][ T339] raw-gadget.0 gadget.0: failed to queue resume event [ 137.869907][ T339] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 137.965728][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 137.975446][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 137.984748][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 137.991898][ T339] usb 1-1: device descriptor read/8, error -32 [ 138.067715][ C1] net_ratelimit: 132298 callbacks suppressed [ 138.067739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.067914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 138.073971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.085838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.097967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.109908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.121717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.134118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 138.146137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.157951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.223665][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.234923][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.246306][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.253645][ T339] usb 1-1: device descriptor read/8, error -32 [ 138.383653][ T339] raw-gadget.0 gadget.0: failed to queue suspend event [ 138.412526][ T339] raw-gadget.0 gadget.0: failed to queue reset event [ 138.492711][ T339] raw-gadget.0 gadget.0: failed to queue resume event [ 138.589200][ T339] usb 1-1: reset high-speed USB device number 47 using dummy_hcd [ 138.634969][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.647833][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.658902][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.666191][ T339] usb 1-1: device descriptor read/8, error -32 [ 138.826375][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.839221][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.850676][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 138.857983][ T339] usb 1-1: device descriptor read/8, error -32 [ 138.975020][ T339] raw-gadget.0 gadget.0: failed to queue suspend event [ 139.004083][ T354] usb 1-1: USB disconnect, device number 47 [ 143.077737][ C1] net_ratelimit: 134836 callbacks suppressed [ 143.077762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.077764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 143.077879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.084041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.096032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.108034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.120854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 143.131771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.143768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.155756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.485680][ T1638] raw-gadget.0 gadget.0: failed to queue disconnect event [ 148.087728][ C1] net_ratelimit: 132143 callbacks suppressed [ 148.087752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.088064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 148.094083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.106285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.118205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.130261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.142177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.154634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 148.166140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.178080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.097774][ C1] net_ratelimit: 133977 callbacks suppressed [ 153.097800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.098049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 153.104074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.116340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 153.127948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.139982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.151991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.163975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.175842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.188308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 158.107743][ C1] net_ratelimit: 139229 callbacks suppressed [ 158.107768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.107933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 158.114121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.126134][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 158.138255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.150273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.162182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.174146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.186050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.198372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 163.117735][ C1] net_ratelimit: 137216 callbacks suppressed [ 163.117760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.118187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.124025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.136072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.147940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.159818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 163.171857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.183698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 163.195935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.207753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.127718][ C1] net_ratelimit: 130363 callbacks suppressed [ 168.127742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.127767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.133995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.146073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.157852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.169753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 168.181797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.193768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 168.205733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.217593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.137735][ C1] net_ratelimit: 132985 callbacks suppressed [ 173.137760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.138607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.144019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.156032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.167947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.179772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 173.191739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.203659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 173.215693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.227523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.147718][ C0] net_ratelimit: 127142 callbacks suppressed [ 178.147741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 178.147783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.154043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.165967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.177983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.189934][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.202609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.213976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.226148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.238046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.157743][ C1] net_ratelimit: 129972 callbacks suppressed [ 183.157767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.158290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.163993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.175991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.187907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.199890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 183.211753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.223741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 183.235760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.247648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.167727][ C1] net_ratelimit: 123689 callbacks suppressed [ 188.167750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.167948][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.174032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.186112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 188.198213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.210167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 188.222231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.234259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.246297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.258343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.177732][ C1] net_ratelimit: 127566 callbacks suppressed [ 193.177757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.178243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.184037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.196030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.207879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.219919][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 193.231841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.243762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 193.255692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.267541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.187730][ C1] net_ratelimit: 121857 callbacks suppressed [ 198.187753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.188199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.194019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.205982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.218042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.229823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 198.241891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.253692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 198.265713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.277551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.197711][ C0] net_ratelimit: 129087 callbacks suppressed [ 203.197734][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.197825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.204162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.215963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.227951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 203.239902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.251904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 203.263921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.275852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.287949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.207728][ C1] net_ratelimit: 128659 callbacks suppressed [ 208.207753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.208135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.214077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.226024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.237904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.249921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 208.261913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.273838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 208.286004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.297912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.217725][ C1] net_ratelimit: 131428 callbacks suppressed [ 213.217749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.218588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.224041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.235947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.247939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.259785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 213.271804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.283703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 213.295781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.307625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.227732][ C1] net_ratelimit: 133060 callbacks suppressed [ 218.227756][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.227798][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 218.234053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.246000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.258109][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.269985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.281891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.294551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.306441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.318503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.237722][ C1] net_ratelimit: 131375 callbacks suppressed [ 223.237752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.238314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.244018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.256028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.267948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.279806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 223.291776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.303691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 223.315669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.327513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.247722][ C1] net_ratelimit: 126539 callbacks suppressed [ 228.247746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.247818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.254025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.265962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.277863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.289762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 228.301820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.314034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 228.326023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.337888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.257693][ C1] net_ratelimit: 132949 callbacks suppressed [ 233.257717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.257999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.263927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.275915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.287830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.299822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 233.311798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.323718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 233.335689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.347711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.267682][ C0] net_ratelimit: 129483 callbacks suppressed [ 238.267707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.267711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.267876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.274123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.288399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.298965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.310088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.322012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.334138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.346264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 243.277707][ C1] net_ratelimit: 127186 callbacks suppressed [ 243.277731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.277733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.277997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.283953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.295982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 243.307850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.319897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 243.331776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.343723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.355686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 246.260928][ T442] bridge_slave_1: left allmulticast mode [ 246.329322][ T442] bridge_slave_1: left promiscuous mode [ 246.369821][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.468099][ T442] bridge_slave_0: left allmulticast mode [ 246.499333][ T442] bridge_slave_0: left promiscuous mode [ 246.778639][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.009556][ T442] bridge_slave_1: left allmulticast mode [ 247.117730][ T442] bridge_slave_1: left promiscuous mode [ 247.139486][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.208974][ T442] bridge_slave_0: left allmulticast mode [ 247.228726][ T442] bridge_slave_0: left promiscuous mode [ 247.247743][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.379170][ T442] bridge_slave_1: left allmulticast mode [ 248.287682][ C1] net_ratelimit: 127471 callbacks suppressed [ 248.287707][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.287715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.287902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 248.293999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.305868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:56:1e:a6:ab:25:4d, vlan:0) [ 248.317838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.329808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.341794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.353789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.365632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.413555][ T442] bridge_slave_1: left promiscuous mode [ 248.449803][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.318819][ T442] bridge_slave_0: left allmulticast mode [ 249.331308][ T442] bridge_slave_0: left promiscuous mode [ 249.358644][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.429187][ T442] veth0_to_bridge: left allmulticast mode [ 249.447842][ T442] veth0_to_bridge: left promiscuous mode [ 249.479056][ T442] bridge0: port 3(veth0_to_bridge) entered disabled state [ 249.486834][ T442] bridge_slave_1: left allmulticast mode [ 249.492702][ T442] bridge_slave_1: left promiscuous mode [ 249.498391][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.505940][ T442] bridge_slave_0: left allmulticast mode [ 249.512247][ T442] bridge_slave_0: left promiscuous mode [ 249.517920][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.848854][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.856048][ T1656] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.863335][ T1656] bridge_slave_0: entered allmulticast mode [ 249.869851][ T1656] bridge_slave_0: entered promiscuous mode [ 249.899607][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.906669][ T1656] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.913833][ T1656] bridge_slave_1: entered allmulticast mode [ 249.920329][ T1656] bridge_slave_1: entered promiscuous mode [ 249.944075][ T442] veth1_macvtap: left promiscuous mode [ 249.949803][ T442] veth0_vlan: left promiscuous mode [ 249.955889][ T442] veth1_macvtap: left promiscuous mode [ 249.961472][ T442] veth0_vlan: left promiscuous mode [ 249.967290][ T442] veth1_macvtap: left promiscuous mode [ 249.973169][ T442] veth0_vlan: left promiscuous mode [ 249.978776][ T442] veth1_macvtap: left promiscuous mode [ 249.984322][ T442] veth0_vlan: left promiscuous mode [ 250.415039][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.422866][ T1669] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.432801][ T1669] bridge_slave_0: entered allmulticast mode [ 250.439264][ T1669] bridge_slave_0: entered promiscuous mode [ 250.468020][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.475104][ T1669] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.483039][ T1669] bridge_slave_1: entered allmulticast mode [ 250.492188][ T1669] bridge_slave_1: entered promiscuous mode [ 250.519558][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.526636][ T1681] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.533855][ T1681] bridge_slave_0: entered allmulticast mode [ 250.540396][ T1681] bridge_slave_0: entered promiscuous mode [ 250.552065][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.559496][ T1681] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.566614][ T1681] bridge_slave_1: entered allmulticast mode [ 250.573372][ T1681] bridge_slave_1: entered promiscuous mode [ 250.585617][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.592967][ T1680] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.600265][ T1680] bridge_slave_0: entered allmulticast mode [ 250.606672][ T1680] bridge_slave_0: entered promiscuous mode [ 250.629614][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.636710][ T1680] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.644203][ T1680] bridge_slave_1: entered allmulticast mode [ 250.650831][ T1680] bridge_slave_1: entered promiscuous mode [ 250.681759][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.689110][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.696240][ T1688] bridge_slave_0: entered allmulticast mode [ 250.703510][ T1688] bridge_slave_0: entered promiscuous mode [ 250.743771][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.750869][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.757978][ T1688] bridge_slave_1: entered allmulticast mode [ 250.764341][ T1688] bridge_slave_1: entered promiscuous mode [ 250.879422][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.886515][ T1681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.893852][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.901002][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.913542][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.920905][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.928264][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.935314][ T1669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.949348][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.957285][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.964949][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.972346][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.042566][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.049670][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.070056][ T433] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.077142][ T433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.085616][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.092681][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.113854][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.120957][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.150304][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.157395][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.166443][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.173505][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.181880][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.188969][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.201790][ T433] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.208892][ T433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.233528][ T1669] veth0_vlan: entered promiscuous mode [ 251.241226][ T1681] veth0_vlan: entered promiscuous mode [ 251.267611][ T1669] veth1_macvtap: entered promiscuous mode [ 251.284635][ T1681] veth1_macvtap: entered promiscuous mode [ 251.305933][ T1688] veth0_vlan: entered promiscuous mode [ 251.314566][ T442] ------------[ cut here ]------------ [ 251.320156][ T442] WARNING: CPU: 0 PID: 442 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 251.330250][ T442] Modules linked in: [ 251.334179][ T442] CPU: 0 UID: 0 PID: 442 Comm: kworker/u8:24 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 251.346044][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.356241][ T442] Workqueue: netns cleanup_net [ 251.361105][ T442] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 251.367151][ T442] Code: e8 81 fa d2 fc 4b 83 3c 3e 00 75 19 e8 b5 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 a7 6e 7a fc 49 83 c7 08 eb c9 e8 9c 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 251.386869][ T442] RSP: 0018:ffffc9000dc57b90 EFLAGS: 00010293 [ 251.393193][ T442] RAX: ffffffff850d5504 RBX: ffff88812eaa91c0 RCX: ffff8881153bdf00 [ 251.394391][ T36] audit: type=1400 audit(1779138478.404:25526): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1520]" dev="pipefs" ino=1520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 251.401274][ T442] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810475c000 [ 251.401295][ T442] RBP: ffffc9000dc57bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 251.401315][ T442] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 251.448883][ T442] R13: dffffc0000000000 R14: ffff88810475c000 R15: 0000000000000000 [ 251.456892][ T442] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.466305][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.473021][ T442] CR2: 00007ffe13c28008 CR3: 000000013d50a000 CR4: 00000000003526b0 [ 251.481059][ T442] Call Trace: [ 251.484363][ T442] [ 251.487318][ T442] cleanup_net+0x6c0/0xc90 [ 251.491831][ T442] ? __cfi_cleanup_net+0x10/0x10 [ 251.496815][ T442] process_scheduled_works+0x7d4/0x1020 [ 251.502445][ T442] worker_thread+0xc51/0x1370 [ 251.507190][ T442] kthread+0x2c9/0x370 [ 251.511340][ T442] ? __cfi_worker_thread+0x10/0x10 [ 251.516502][ T442] ? __cfi_kthread+0x10/0x10 [ 251.521182][ T442] ret_from_fork+0x67/0xa0 [ 251.525628][ T442] ? __cfi_kthread+0x10/0x10 [ 251.530371][ T442] ret_from_fork_asm+0x1a/0x30 [ 251.535182][ T442] [ 251.538269][ T442] ---[ end trace 0000000000000000 ]--- [ 251.546219][ T442] ------------[ cut here ]------------ [ 251.551758][ T442] WARNING: CPU: 0 PID: 442 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 251.561938][ T442] Modules linked in: [ 251.565866][ T442] CPU: 0 UID: 0 PID: 442 Comm: kworker/u8:24 Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 251.579158][ T442] Tainted: [W]=WARN [ 251.582991][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.593290][ T442] Workqueue: netns cleanup_net [ 251.598170][ T442] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 251.604290][ T442] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 52 6e 7a fc 49 83 c7 08 eb c5 e8 47 6e 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 6e 7a fc 5b 41 5c 41 5e 41 [ 251.624060][ T442] RSP: 0018:ffffc9000dc57b90 EFLAGS: 00010293 [ 251.630198][ T442] RAX: ffffffff850d5559 RBX: ffff88810475c800 RCX: ffff8881153bdf00 [ 251.638229][ T442] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810475c810 [ 251.646232][ T442] RBP: ffffc9000dc57bb0 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 251.654305][ T442] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: dffffc0000000000 [ 251.662581][ T442] R13: dffffc0000000000 R14: ffff88810475c000 R15: 0000000000000010 [ 251.670710][ T442] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 251.679774][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.686480][ T442] CR2: 00007ffe13c28008 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 251.694549][ T442] Call Trace: [ 251.697893][ T442] [ 251.700848][ T442] cleanup_net+0x6c0/0xc90 [ 251.705366][ T442] ? __cfi_cleanup_net+0x10/0x10 [ 251.710381][ T442] process_scheduled_works+0x7d4/0x1020 [ 251.715965][ T442] worker_thread+0xc51/0x1370 [ 251.720755][ T442] kthread+0x2c9/0x370 [ 251.724857][ T442] ? __cfi_worker_thread+0x10/0x10 [ 251.730198][ T442] ? __cfi_kthread+0x10/0x10 [ 251.734829][ T442] ret_from_fork+0x67/0xa0 [ 251.739326][ T442] ? __cfi_kthread+0x10/0x10 [ 251.743954][ T442] ret_from_fork_asm+0x1a/0x30 [ 251.748809][ T442] [ 251.751853][ T442] ---[ end trace 0000000000000000 ]--- [ 251.773357][ T442] ------------[ cut here ]------------ [ 251.779005][ T442] WARNING: CPU: 0 PID: 442 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 251.788598][ T442] Modules linked in: [ 251.792545][ T442] CPU: 0 UID: 0 PID: 442 Comm: kworker/u8:24 Tainted: G W syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 251.805898][ T442] Tainted: [W]=WARN [ 251.809809][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.819939][ T442] Workqueue: netns cleanup_net [ 251.824767][ T442] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 251.830470][ T442] Code: 3c 20 00 74 08 48 89 df e8 ef c6 ed fc 48 8b 3b e8 b7 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 eb b7 00 cc e8 12 3b 95 fc <0f> 0b e9 b0 fd ff ff e8 06 3b 95 fc 0f 0b e9 18 fe ff ff e8 fa 3a [ 251.850159][ T442] RSP: 0018:ffffc9000dc57b70 EFLAGS: 00010293 [ 251.856286][ T442] RAX: ffffffff84f2888e RBX: ffff88812eaa91c0 RCX: ffff8881153bdf00 [ 251.864428][ T442] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881153bdf00 [ 251.872466][ T442] RBP: ffffc9000dc57b98 R08: ffffffff87d49147 R09: 1ffffffff0fa9228 [ 251.880554][ T442] R10: dffffc0000000000 R11: fffffbfff0fa9229 R12: 1ffffffff0fa8f78 [ 251.888652][ T442] R13: dffffc0000000000 R14: ffff88812eaa9dc0 R15: dffffc0000000000 [ 251.896662][ T442] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 251.905755][ T442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.912420][ T442] CR2: 00007ffe13c28008 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 251.920462][ T442] Call Trace: [ 251.923781][ T442] [ 251.926736][ T442] xfrm_net_exit+0x31/0x80 [ 251.931229][ T442] cleanup_net+0x6c0/0xc90 [ 251.935726][ T442] ? __cfi_cleanup_net+0x10/0x10 [ 251.940946][ T442] process_scheduled_works+0x7d4/0x1020 [ 251.946539][ T442] worker_thread+0xc51/0x1370 [ 251.951278][ T442] kthread+0x2c9/0x370 [ 251.955387][ T442] ? __cfi_worker_thread+0x10/0x10 [ 251.960665][ T442] ? __cfi_kthread+0x10/0x10 [ 251.965299][ T442] ret_from_fork+0x67/0xa0 [ 251.969913][ T442] ? __cfi_kthread+0x10/0x10 [ 251.974559][ T442] ret_from_fork_asm+0x1a/0x30 [ 251.979392][ T442] [ 251.982440][ T442] ---[ end trace 0000000000000000 ]--- [ 252.128282][ T442] bridge_slave_1: left allmulticast mode [ 252.134022][ T442] bridge_slave_1: left promiscuous mode [ 252.139979][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.148604][ T442] bridge_slave_0: left allmulticast mode [ 252.154288][ T442] bridge_slave_0: left promiscuous mode [ 252.160192][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.589920][ T442] bridge_slave_1: left allmulticast mode [ 252.595791][ T442] bridge_slave_1: left promiscuous mode [ 252.601688][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.609405][ T442] bridge_slave_0: left allmulticast mode [ 252.615055][ T442] bridge_slave_0: left promiscuous mode [ 252.620885][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.628825][ T442] bridge_slave_1: left allmulticast mode [ 252.634474][ T442] bridge_slave_1: left promiscuous mode [ 252.640290][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.647987][ T442] bridge_slave_0: left allmulticast mode [ 252.653636][ T442] bridge_slave_0: left promiscuous mode [ 252.659419][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.667155][ T442] bridge_slave_1: left allmulticast mode [ 252.672948][ T442] bridge_slave_1: left promiscuous mode [ 252.678640][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.686132][ T442] bridge_slave_0: left allmulticast mode [ 252.692217][ T442] bridge_slave_0: left promiscuous mode [ 252.698045][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.705813][ T442] bridge_slave_1: left allmulticast mode [ 252.711590][ T442] bridge_slave_1: left promiscuous mode [ 252.717229][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.724834][ T442] bridge_slave_0: left allmulticast mode [ 252.730586][ T442] bridge_slave_0: left promiscuous mode [ 252.736219][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.125730][ T442] veth0_vlan: left promiscuous mode [ 253.131115][ T442] veth1_macvtap: left promiscuous mode [ 253.136609][ T442] veth0_vlan: left promiscuous mode [ 253.142196][ T442] veth1_macvtap: left promiscuous mode [ 253.147801][ T442] veth0_vlan: left promiscuous mode