last executing test programs: 47.15848157s ago: executing program 0 (id=92): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b000000000300050000000000020000000000000000000000000000000100"], 0x60}, 0x1, 0x7}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x32a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0xfe}}}}}]}}]}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0x1f0, 0x1f0, 0x2d8, 0x2d8, 0x1f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x11, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xfd}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20092b0000002b4fdca0560f820d54f365c5b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 45.763636071s ago: executing program 0 (id=100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000080)={0x2, 0x2, 0x8, 0x7f, 0x3, 0x0, [{0x7, 0x3, 0x5, '\x00', 0x1}, {0x5, 0x3, 0xd94, '\x00', 0x604}, {0xfffffffffffffff7, 0x2, 0x81, '\x00', 0x282}]}) add_key$fscrypt_provisioning(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) lseek(r5, 0x40000007, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="020000020004c7eaff000000000000007d263c76583a67de13b31cf24222ed63295a1f2fcea7d9fa247f54a9d36ae7f782b7a8a78b024e733fa3980e6670e92ce981389b7250f93a142ddb6f972d609b541662e7ab2bf5788d66e399404d66091feda590263bb7f867f9f3e682e6c2fc8189916e48f7babc70ecb33d51f7c478d55a721c380000000000", @ANYRES32, @ANYBLOB="040004000000000010000500000000002000000000000000"], 0x2c, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000d23180000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000070000000030a0500000000000000000002000002080005"], 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r10, 0x5501) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x53, 0xfffc, 0x1000, {0x7, 0x15}, {0x8, 0x8000}, @period={0x5b, 0x298, 0x3, 0x300, 0x3, {0x9, 0xfb, 0xeb}, 0x0, 0x0}}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt(r11, 0x111, 0x5, 0x0, &(0x7f0000000040)) 45.569290055s ago: executing program 0 (id=102): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000040)={0x0, 0x800}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000080)={'custom1\x00'}) syz_usb_connect$midi(0x2, 0x43, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x6, 0x70, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0xea, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x267e, 0x7}], [{{0x9, 0x5, 0x0, 0x3, 0x8, 0x8, 0x4, 0x0, {0x8, 0x25, 0x1, 0x4, "ca4df8ae"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0xb, 0xfb, 0x6, 0x10, 0x2}, 0xe3, &(0x7f0000000280)={0x5, 0xf, 0xe3, 0x2, [@generic={0xd4, 0x10, 0x3, "4ff804bea860b980e86b286aed51ef1aed181f7373957a48d0c53b5e29a887c087e55a89bb2197f285ee482d89a5dfccd2226700369589330c1db30920b899149855d7b20e26c65adea5c3906e93c531837bc951ccc3b2d61a2fa379fc22fd49f34f6ee4223ae81a5f79aa12a02ea0a894e3c3de19697ee4c720163bf611264818063391eb08337549620c61b437f3f2144c5cb2500f90c6b3fb4c1021012ac9070cd4688926a8d41758879190e1daf2446ab1374613e84ae2fe0958b71ac85e8c7e7eea25623f42ca83a84652e30805b4"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x2d, 0xfe8a}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3c8d}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x454}}, {0x63, &(0x7f0000000440)=@string={0x63, 0x3, "4a2e719ae5995a5ded379e4c49f67d27e5f6df73f7a3e10da1204b69ce165099ad188bb9001876392ce68c94079bd5e4911a2661333d3ca889eef63e7492526b5f5caf242a2c582b35f126e05af20713cb96f22c41fc58a79d0642e1a95178e03d"}}]}) r1 = open(&(0x7f0000000540)='./file0\x00', 0x800, 0x5) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x4, 0xa, 0x902, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6575450f}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x47324cea}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a529299}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x800) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000006c0)=0x5) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000000700)={r1, 0x0, 0xfffffffffffffffb, 0x6, 0x8, 0xf}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000780)=0x5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000007c0)) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000b80)={0x2, 0x1, &(0x7f0000000a00)=""/210, &(0x7f0000000b00)=""/42, &(0x7f0000000b40)=""/6, 0xdddd1000}) sendmsg(r1, &(0x7f0000002400)={&(0x7f0000000bc0)=@ax25={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000c40)="56533efb387262bd17fb5921ee62fc022b06511c93790277f07eb94176231524351af261da5b2bc7ca30a2538e6c330911d7e30d944dcec33ec1860e8f7cfb0ad19d35724f317c2103958959213139273279ab83d13e2f39a4a9c62603f64a5c3552b9985e13d84cf9e532a6e01ed368d2d4899541e36918e7bd25a9e4", 0x7d}, {&(0x7f0000000cc0)="7ebde09b4c5eeb6f0838e493f16fe6fd28fee12ec0303dd44defcb2fe0f8d6e984ffe5ad3ac7a80ce2f2692f9008496a0e81e56b09106a3944d219933b823fa0a29e6d0295602552a335a171270fda17b0dcc4d88019ca82e187bb1fb32e6a4a166ed58fc7cc339d89aa264ef2af3a99eb1c79d99dd682446399fc41caf198bbb9f1c4221af3317dbc6a6fde9a373fa3a337ae31024c3df8b0443d567996ff02450cafa29573b6208db45bb25d80d3d554d64689ae71d0635dc5b47f9cd65632cd15addf1372ef9a795dd048cdbd646a2592ed8d75939e64daf6e342c04199615ee58e40bf291872fcd5f8a12320f7d3638ef99f7ac3d2", 0xf7}, {&(0x7f0000000dc0)="80acc59cd3f8fbd0d810b009d41a7ef422d89de128", 0x15}, {&(0x7f0000000e00)="643dff15daef687f802287aef0296398e7d57bfbcb8de3582963edbeb03e7dba1db7bb031747eca5ca824d996f263e18ed7342447a25efc2b6fb0b7350ace3e71d510d2e86fb4239c56dde9e97aa2e43effb4dc5ff5d1193eee12cc66e5e78a4ba3e5907d8282b2dd9e1bfb8e16b3e201139f45b263bc9774b1f99f4b2411c23c5b2fe3e25cc38943622cb7a49cf1e8639a1168f4d51bc2c165e1fa4610409be83e2271a71a746c330d0bf10df5b47919e3879d8ae082c6254fd8f689909815ddc36b2337f35df2b9fdc", 0xca}, {&(0x7f0000000f00)="bbbd648d26ffd751b6603418d2a4bd44c467af0121bac1a108f1b5166fc538442ced56f0d3fba58a9cd7de680e18f9a6e4cfdedd6d5e7fcd13dc", 0x3a}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="3ef06afb93464303e59786fee5570e980bcbef12f92eae83288cae227b47adb53927ddc67a6ab65193218dd841da010b07d1717b401a10e9e90497584368876d16570a9ce5e087a231e67e7a1ac3d2b37318eb1ab7bd44530e301301e5a76c624cdd4f35bc2c1719ca86dc31f3d02c8faf323855d86595161baa3a5dcd754433684dea671ae0834709528268017835f5717c2e0dbc3db12ea259c8c8d68b29fdbad1644a931cf18ee6bed6c8b1d1c02e92c584bfd0c080ba6a5f3e68a83654b3c6026724c9", 0xc5}, {&(0x7f0000002040)="eee84639351049ed8888f7b1b20ec9364a1542c893a00159c7663ae8533e5fd27142cae1ec514817d834ecb896", 0x2d}], 0x8, &(0x7f0000002100)=[{0x38, 0x111, 0xffffff81, "74022165c3b58ce9676053a4fa9b3fae718a764565d0a922f7832f291aefd90739e149da3589"}, {0x58, 0x107, 0x9, "c6983a7817e63af7fa067e6d1f9ba340228d723ddfbdfeddc9c466df70cc8299433ebbf96976898759014a7c16a00238438c6c9075fded46d481c3e9e4c3f316fbf546a59b4b81"}, {0x18, 0x84, 0x4, "9b5270"}, {0x10, 0x108, 0x4}, {0x70, 0x17a, 0xfffffff7, "c94eadc2e91bcf3e5145f035417a8fef3e9fa333d49c8b2a2ac4340daa5bb5bc9bc53b0b87803787692ee641a56b1d6f8ebfc93a4886fb23bbf8898d266f9dd66b3a8a5c235798cb50e86e9a45c6c2ade418ff8e8db190ffc294c1036d40f7"}, {0x50, 0x103, 0x6, "a3f58a260924a9c86836a101c055978117b673721e1af4f886ad8471f599abd95c9ee186ea40838a097b03ec3e1f2e7b97d01c11c2fed886387ccf28"}, {0x90, 0x1, 0x4, "9a4d540434659b8088b0cea5a34e24b48b3a21ca9ddbb4c13e37147c0551cc57d5f651ad6dbdfc8b3686955e6eaabbdc6c23c08739a5018704b07db4c4fd613fbdf30b18332d49dfbd09ecb9793230e88814c2e510b84ab418b033e5eed54e30ad8c58fedffb3ef434d368609b6f9e4805347207f01d3bb76cad71ce878f12"}, {0x88, 0x113, 0x2, "3897d1400a6d41a8988b7a9b9f921a17144adf4863ef216f969acd4fe1e228594c0b53ced8ad6ff80297df02f5b27bb008ef83aa49a776079a158f8187b361c9f873ee0acdef9dc5ab212f9ddbea1493f75489f93e540a6b3c0f5ee271298be554eaf36c7e324d89c9e276ff2ebfa753954f1e6942"}, {0x70, 0x112, 0x0, "c4b4020605b6c50bf5dfb224ae575d1fafb1cbbd7eab8805fd656fabbdde4aaf7930f9a9c54c1764914d0e38e764b70309a4a63102aecc494faa027e85176ec5eee4204a375e409ffab75c81a2bb874b2a3a1f8cbbb276bd5418"}], 0x300}, 0x4008000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETS(r2, 0x5401, &(0x7f0000002440)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000002d80)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002500)={0x824, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}]}]}, @NL80211_ATTR_TID_CONFIG={0x5a0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0x9, 0x18, 0x36, 0x36, 0x22, 0x36, 0x30, 0x60, 0x1, 0x24, 0x16, 0x6c, 0xb, 0x6, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x5, 0x44, 0x48, 0x5, 0x60, 0x6, 0x2, 0x2, 0x9, 0x60, 0x48, 0x60, 0x60, 0x4, 0x12, 0x6, 0x6, 0x3, 0xc, 0xb, 0x16, 0x6, 0x44, 0xc, 0xb, 0x36, 0x2, 0x48, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0xb, 0xff, 0x389, 0x8000, 0x1, 0x7, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x2, 0x8, 0x4, 0x3, 0xa, 0x4]}}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0xb, 0x22, 0xb, 0x9, 0xc, 0x36, 0x48, 0x60, 0x60, 0x6c, 0x36, 0x24, 0x7, 0x3, 0x12, 0x60, 0x18, 0xc, 0x9, 0x1b, 0x1, 0x0, 0x6c, 0x18, 0x48, 0x5, 0x5, 0x3, 0x6, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8000, 0x2, 0xa, 0x6, 0x6, 0xd, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xdef, 0x9, 0x400, 0xda00, 0x6, 0x68, 0xe]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1, 0x3, 0x48, 0x24, 0x30, 0x9, 0x24, 0xb, 0x12]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x1b, 0x1, 0x8abaeb12371237f7, 0x18, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x12, 0xd8, 0x60, 0x9, 0x9, 0x16, 0x2, 0x1, 0x4, 0x16, 0x24, 0x6, 0x30, 0x36, 0x3753707ae9919f04, 0x12, 0xb, 0xc, 0x30, 0x6c, 0x9, 0x30, 0x1b, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x200, 0xffff, 0x5, 0xfffc, 0x3ff, 0x7, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x39, 0x8, 0x5, 0x9, 0x7, 0x1, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0x5, 0x2, 0x6, 0x6, 0x133]}}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9e, 0xd379, 0x101, 0x4, 0xff, 0x5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x1, 0x5, 0x36, 0xb, 0xc, 0x18, 0x1, 0x6, 0x5, 0x48, 0x60, 0xc, 0xc, 0x6, 0x6c, 0x60, 0x18, 0x18, 0x4, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x6, 0x24, 0x3, 0x2, 0x1, 0x2, 0x5, 0x6c, 0x1b, 0x2, 0x1b, 0x12, 0x36, 0x12, 0x6c, 0x5, 0x1b, 0x6c, 0x48, 0xb, 0x4, 0x1, 0x3, 0x18, 0x1b, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xb7c, 0x4, 0x1ff, 0x3, 0x76, 0x5, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x158, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x4, 0x7}, {0x3, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x1, 0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x7}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x1, 0x16, 0x12, 0x36, 0x4, 0xc, 0x36, 0x48, 0x2, 0x30, 0x60, 0x4, 0x16, 0x1b, 0x16, 0x24, 0x36, 0x34, 0xb, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xec2c, 0x5c19, 0x2, 0x7, 0x0, 0x5d, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x6, 0xa}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x7, 0x6}, {}, {0x2, 0x9}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x1}, {0x3, 0x3}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x6}, {0x7}, {0x6, 0x8}, {0x7, 0xa}, {0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0x6}, {}, {0x0, 0x7}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {}, {0x1, 0x5}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x3, 0x5}, {0x5}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x7}, {0x3, 0x5}, {0x6, 0x8}, {}, {0x2}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x3}, {0x1}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb8, 0x1, 0x3, 0x4, 0x8, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x3}, {0x4, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x8}, {0x4, 0x8}, {0x5}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x6, 0x3, 0x3, 0x4, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x5}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x5, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x7}, {0x3}, {0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0x2}, {0x4}, {0x2, 0xa}, {0x5}, {0x6, 0x7}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x5, 0x3}, {}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x9, 0x3, 0x1, 0x8, 0x7f, 0xdfc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x7fff, 0x800, 0x2, 0xf, 0x8000, 0x7]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xd}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x15c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x96}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x7c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xf000, 0x3, 0x6, 0x4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x18, 0x3, 0xb, 0x1b, 0x18, 0x60, 0x18, 0x1, 0x36, 0x12, 0x24, 0x2, 0x24, 0x12, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x5, 0x12, 0x9, 0x60, 0xc, 0x2, 0x6c, 0x6, 0x28, 0x48, 0x24, 0x12, 0x18, 0x30, 0x12, 0x9, 0xb, 0x48, 0x2, 0x12, 0x16, 0x60, 0x1b, 0x3, 0x0, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcd, 0x8, 0xfff, 0x40, 0xe0, 0x4, 0x5, 0xff51]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}]}]}, 0x824}, 0x1, 0x0, 0x0, 0x14}, 0x801) io_setup(0xffffffff, &(0x7f0000002dc0)=0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000003100), 0x0, 0x0) io_submit(r4, 0x5, &(0x7f0000003400)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000002e00)="1b941f64b02455308b97d0ebc16329bbdf12f17e360c29d17d5cc92194163b81ff2139d2c65539cf2730ffb7a6f2be4f88126d389bc1ddc46a8caa300756a20fccd14bc4bafad8bb0960381f8e3d39c3a6749f14528bc284850df5427178bc964c34ab646d474dfc1b4da637b15b26a449bec1357ae72795a0a585a09592102fbf1c419feb6f0192d3fe32ccdc9feb5d55f3af9d097f7d8b342496bfcbc2d6af473610f26b53a62884aa5ad0e6d2d4a4d6a6c0314d487cfab8138061f61b0be1ebffa65767363f816b729f1693aa", 0xce, 0x2, 0x0, 0x3, r1}, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x5, 0x3, r1, &(0x7f0000002f40)="ceae955476bc48d35f944b7c287301270ca887e2faf9677d471c1dac78cbd7f58ee1533a7e9d7c557b250fe5eb1a82be55e6888e7e7a175c3c862facc066490220bbfec9271a5976b112864190ba380d377ff2e17589df0af96c3bc22bdf5edb2f086e56f7a5", 0x66, 0xf, 0x0, 0x2, r1}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x81, r0, &(0x7f0000003000)="617ba9aeaf0ad032af3597bb2a5b8f0e45584e92fb4897fb1fc741ada56da78daaf3d8fb4482340912df62a32a75e45bed4be3d2415f007994b4cdde43dd723038d7745cd9a397fb0c4731f8cfe84e4531505806a37b6366f40c478b98444cd8c512fd5cfa23ffb89df3ed6654fcdee75614669319f53467cf92c8ed4fdbb47eb65dab8913f2df673c335895a55815b387d0f907e572e5df12f74719fff4ac43324be792250f3adec59e1b1b0b8a8f0af10026d01c3092850fe2e63c21db8a841a1e9a702ae71de490eb", 0xca, 0x7b4, 0x0, 0x1, r5}, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000003180)="40c1905cde7e523b43f42ca26f6dbbb78c8c62f0e4a196e75cdd6fb0d1b81db97b805695eca90e52c58b93af9d8291123970e7ab4eaa89c633b362e9fe22b06f47792e9876592c5fbf771b1b0c4872871bff2135f47bdc637ee96212c5cbe8a41bf5e436e67c48c3cccd1b1a22d13cb65b962b0170738ad2c0bcda0ca487e8ada43033f223f09a16eafe57afce29e80b69bfb566b5170fc2a5625b1575d1688c74129937cf7272da0117f72b4631174db90a50b3241850ec7537d1ce6c85d0bf4147f2d1f1e95790b0108103", 0xcc, 0x0, 0x0, 0x4, r1}, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f00000032c0)="ac04101a2cea358e2b33be56e0dd09ab174f9bd8ce071ce39cfe178c8b3fb9854514e8a13994d511033e7576263250206914eea2b32da6988579c3d0afd5eeb0a0bb9c1df37a36ba0235cc70a78727b1615fd54f49634fc6d29157b1e275f18baa409618744dec7cd34801ed176d2d28feb3c38e6e7a97afec28936c7d38731e5cdb6073706438fef3924ac8b2202f40674a84ff7d822d30d83a45d18694c48bcf5a44fbb1fb2a6a6a38491a82f5529f189294ede92d422f0c0ea57e006b42c3505d287c9f38bac91c71", 0xca, 0x4, 0x0, 0x2, r1}]) ioctl$XFS_IOC_INUMBERS(r2, 0x80405880, &(0x7f0000003440)={{0x6, 0x6, 0x6, 0x5, 0x89}, [{0x0, 0x7f, 0x6, 0x8}, {0x8, 0x6, 0x4, 0x5}, {0x81, 0x0, 0x9b, 0x6}, {0x4, 0x7, 0xdc, 0x9}, {0x5, 0x1, 0x6, 0x3}, {0x1, 0xfffffffffffffffa, 0x5, 0x3}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003580), r1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000035c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000003600)={@multicast2, @empty, 0x0}, &(0x7f0000003640)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000003740)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x48, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc085}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003780), 0x121140, 0x0) ioctl$PPPIOCSCOMPRESS(r10, 0x4010744d) 44.336550073s ago: executing program 0 (id=111): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x41}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)={@remote, @empty, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x8000, 0x80, 0x401, 0x0, {{0x6, 0x4, 0x2, 0x3c, 0x18, 0x68, 0x0, 0xc0, 0x63bbc13660e400e7, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, {[@end, @end]}}}}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r4, 0x2f, 0x0, 0x7, 0x8, 0x1, @empty, @empty, 0x7800, 0x40, 0x5, 0xa7fd}}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, 0x3, 0x0, 0x8, 0x400, 0x95e, 0x40010020, r6}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{@fixed}]}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) (async) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x41}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c045}, 0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)={@remote, @empty}, &(0x7f0000000180)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x8000, 0x80, 0x401, 0x0, {{0x6, 0x4, 0x2, 0x3c, 0x18, 0x68, 0x0, 0xc0, 0x63bbc13660e400e7, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, {[@end, @end]}}}}}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r4, 0x2f, 0x0, 0x7, 0x8, 0x1, @empty, @empty, 0x7800, 0x40, 0x5, 0xa7fd}}) (async) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={@mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, 0x3, 0x0, 0x8, 0x400, 0x95e, 0x40010020, r6}) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{@fixed}]}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x35b}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 44.259741234s ago: executing program 0 (id=113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) (async, rerun: 32) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x800006, 0x8, 0x2, 0xf2, 0x8, 0x20, 0x47, 0x6, 0x4f, 0xfe, 0x8, 0x7, 0x1}, {0x5296, 0x411, 0x8, 0xbf, 0x7, 0x1, 0x47, 0xf3, 0x3, 0x0, 0x3, 0x3, 0x5}, {0x7fffffff, 0x4, 0x40, 0xa, 0x5a, 0x2, 0x8, 0xf8, 0xfc, 0x1, 0x0, 0xd2, 0xffffffff7fffffff}], 0x400000a}) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x24001, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000600)=@vmx={0x0, 0x0, 0x2080, {0x26000, 0x60020000000000, {}, 0x0, 0x3}}) (async) write$rfkill(r1, &(0x7f0000000140)={0x1000, 0x2, 0x0, 0x1}, 0x8) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) r5 = open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000400)=0x20) (async) mknodat$null(r5, &(0x7f0000000180)='./file0\x00', 0x4, 0x103) 44.150320846s ago: executing program 0 (id=114): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x13, r3, 0x8000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8c2, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8c2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000000000005001000050001000200000020b3263ae72a3f5b8ce52518f48a3a058c84c70610581964d6a28914a1455bd3f6b89637928ce904779266ba2dff832843230eef68395167cc6d7c0a3c94946c582586868a2918d5a677083bb9071577a0d0983be913500bb1cc87897beca92025426b04d1abafb8ada642aea7f0bec959c120404ce2d865e552b09d2b36c34580903324b0414ca21fc79fd990a88a9e6fd1c2c2078358f493480700"/190], 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x2000888a) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x131}) socket(0x11, 0x2, 0x0) (async) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) (async) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) ioctl$PPPIOCGMRU(r9, 0x80047453, &(0x7f00000006c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x2000, 0x2000002, 0x13, r3, 0x8000000) sendmmsg(r2, &(0x7f0000000680)=[{{&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="7396e182f6f945d7a5cbcfc034a0e6d30968567b5df49fd11dd4b4d0d37199423e46a7bdaf44e20c8f9001d2d6b1cdb0f226ea2d00631296cbf3d7f83e71da37384180d6e01a8b5d44a45b7616ddb7a9a513015115d821553df781576ec2bd7e046ade4b22087a8235d8f2e91313c5619269af5c0bca0d55185895", 0x7b}, {&(0x7f0000000340)="2347971a77a9afd2e36f7ff595e9b75d68cc587d26d8e8c2b89c41815176a110f32a4942e39c12f57a0cc1e0cced564f3202481c1517137fd65469d8d00a4a88ac883ec0765463ab4366147106f309492abfbc148022173146692cec265beb7ef82fb987913d18428ee8d0880058010ef54687ec32b470a90da92e480bf734435b0ae3fa2cf691ad79cfcdc9712eeab648f5af3b0fe2d0c31817074b0ba2d9810fa22f81163b7c1e48f6a4ed487faa693eb3359f25c2a4e14d674c8b58afd8f8eaec0a4431f7957cee91a0f7ac862393b88e68ad4962f69440c5446ee4b603fb02d09e2f4d07de999f28659611e62e11", 0xf0}], 0x2, &(0x7f0000000500)=[{0xd8, 0x84, 0x4, "f761a6797f8e91ecd89f2ed9fcbd52a9fd5f986d2e832bafe302d45969f9a80d6a8f2e66a4855f929d79b95bf48554d25d286d977da636eb03c154617ede6c90859afc92e0aa38dbde71d5a016a14cb135f09c394ab47583bbd5f3de671755bda813d1e8034f659f1f91e8f30870b045fa631902e82515b0da1c36b61df04e7c94a108d3cd0d7a3fedc18e7c8e44ad9f30de524afc915909aa3bbbcec03a0af48a57085f3e75ae89710615d2a4e08b80f8006ea034ea89111ca04b26069f52632395"}], 0xd8}}], 0x1, 0x1) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) dup2(r2, 0xffffffffffffffff) 37.521097409s ago: executing program 1 (id=135): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@nested={0x10, 0x7a, 0x0, 0x1, [@typed={0x4, 0xe6}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=0xee00}]}, @typed={0x4, 0x5d}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004805) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000002400010027bd70000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x8008) 37.510369079s ago: executing program 1 (id=136): syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syz_clone(0x14c041000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 37.47244403s ago: executing program 1 (id=137): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$802154_raw(r0, &(0x7f0000000280)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0x642019809bcb24a1}) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909090702020005cbad092403"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 35.997967073s ago: executing program 2 (id=153): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x8, 0x700, 0x7, 0x14, {{0x26, 0x4, 0x3, 0x4, 0x98, 0x67, 0x0, 0x40, 0x29, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xc, "acc06f7e02010ef3e5ac"}, {0x1, 0xe, "b56efc023be9c690f45b084e"}, {0x6, 0x2}, {0x5, 0x8, "fadbb57f1e9d"}]}, @lsrr={0x83, 0x3, 0x8}, @cipso={0x86, 0x46, 0x3, [{0x7, 0x4, "0522"}, {0x0, 0x4, "c2de"}, {0x1, 0xf, "15d127556f633bbf97d3a1b1b1"}, {0x0, 0x9, "b982fe36d29ac6"}, {0x6, 0xc, "94d48fe8b55dc14d750c"}, {0x1, 0x10, "66503316bae19fd8b9ea754ad6cf"}, {0x2, 0x4, "b1fb"}]}, @timestamp_addr={0x44, 0x4, 0xac, 0x1, 0x2}, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x1, [{@private=0xa010100, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x44, 0x0, 0x400, 0x70fd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40050) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002100010002000000000000020a20"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x199, 0x8, 0x5, 0x20, 0x2, 0x5, 0x9, 0x6}, [{0x4, 0x9, 0xe7b2, 0x8, 0x3, 0x999c, 0x10, 0x969e}, {0x3, 0x7fffffff, 0x1, 0x8, 0xfaa9, 0x73b, 0x7, 0x32e}]}, 0x78) close(r0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x2, 0x1, 0x7, 0x2}, {0x8, 0x9, 0x4, 0x902}, {0x200, 0x1, 0xa, 0x20c000}, {0x2, 0x6, 0x8, 0x7}, {0x4, 0x3, 0x28, 0x2}, {0xff6b, 0xfb, 0x80, 0x8d6}]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000380)=r7) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044055}, 0x8800) (async, rerun: 32) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (rerun: 32) 35.910132864s ago: executing program 2 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6450000000033e010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010f50700014004000000", 0x58}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bridge0\x00', @random="02000136b1ff"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0x4}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x40a02, 0x0) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f6450000000033e010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010f50700014004000000", 0x58}], 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bridge0\x00', @random="02000136b1ff"}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f1, 0x0, 0x4}]}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x40a02, 0x0) (async) write$khugepaged_scan(r5, &(0x7f0000000000), 0x8) (async) syz_usb_connect(0x2, 0x48, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xc2, 0x44, 0x8b, 0x8, 0x584, 0x8, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x8, 0x2, 0x0, 0x3, "", [{{0x9, 0x4, 0x2b, 0x11, 0x3, 0x39, 0xee, 0xa0, 0x4, [], [{{0x9, 0x5, 0x91c46c3e7ac7f8e5, 0x16, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x9, 0x4, 0x4}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x0, 0x7}}]}}, {{0x9, 0x4, 0x23, 0x7, 0x0, 0x9, 0x37, 0x6c, 0xa}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) 35.227799605s ago: executing program 3 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000240)=0x9, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000040)={0x8, 0x81}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xfffffffffffffffd, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xad, 0xffffffffffffffff], 0xffff1000, 0x200}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xfffffffffffffffd, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xad, 0xffffffffffffffff], 0xffff1000, 0x200}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 35.082313787s ago: executing program 3 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)=']\x00', 0x2083, 0x0, 0x1, 0x0, 0x0}) syz_usb_connect$uac3(0x3, 0x85, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e4, 0x17f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0xa, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xf, 0x7}, [@selector_unit={0x5, 0x24, 0xc, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0x14, {0xa, 0x25, 0x25, 0x5, 0x50, 0xff6f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x81, 0x800, {{0x6, 0x4, 0x0, 0x2d, 0x18, 0x68, 0x0, 0x82, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001580)={&(0x7f0000000340), 0xc, &(0x7f0000001540)={&(0x7f0000000440)={0x10e8, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xd, 0x5, "44ffcebfef4c9eaa85"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1038, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}]}, 0x10e8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050007000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x200000a0) 34.955194299s ago: executing program 2 (id=160): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x0, 0x3, 0x500, 0x8, 0x200000, r0}) creat(0x0, 0x109) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xc0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x63}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80340, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$vga_arbiter(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB='lock '], 0x9) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000200)) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mknodat$loop(r1, &(0x7f0000000400)='./cgroup/cgroup.procs\x00', 0x80, 0x1) syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x60, 0x3, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x20000011) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) preadv(r6, &(0x7f0000002540)=[{&(0x7f0000002480)=""/167, 0xa7}], 0x1, 0x5, 0xfffffffc) 34.398545707s ago: executing program 1 (id=161): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d00104000010203010902750003e6061002080b0100010c200009040000000101200009240180ff071500040c2403020503050400ff"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) accept4(r0, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80, 0x800) 33.879151315s ago: executing program 3 (id=162): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') exit(0x3) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x2009020, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 33.60083715s ago: executing program 2 (id=163): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf372, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xff, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xe0, {0xe0, 0x21, "15139b6479dd75d1cb023fae3b969d193a6eea37d4807a32f9a581ad1d0eab37a577c774f93f64da11c82eaa6cd45aa7b31dd3e2e1e04d4dee65f5a2a43b4ade5e1a0ccafd6a5e2eb9a0b0333c4cd5a2d648f8e85c61aafd4be3f3bf7540b2027e06829181d8f12b20cda7be7a1ff7a3386e96e1ee8caa42d741e46c76ddedb59777aa2241c89e4a33a6c8d72cbbe8c416965274932281f02994432a37a115c5ab88da345911ce8fa87dc3c72a28f3aedce8f7da01c4edb5941bf78047d92eb65a73e13d53f1625022ae02ab2a8ae0ba713bc7e7581a95069439a9799524"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}, &(0x7f0000000200)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x6, 0xa, 0xf}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x62, 0x0, 0x8, 0x0, '\x00', "e8207f02"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa9, 0x2, 0x80, 0xf7, 0x7b, 0x2, 0x5}}}, &(0x7f0000000700)={0x84, &(0x7f0000000300)={0x40, 0x3, 0x2d, "4a35af07a4c95f0a8326dfe03276483e5802f3e08b5ab42820557da7263fd4314c4f3059f9385fb5a81609a045"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000003c0)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x1e0, 0x4, [0xf0ff]}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "f1d9"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x5396}, &(0x7f0000000540)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "6cac"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, 0xfffffffffffffffe, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x26}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x6}}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040392ad33f40000102030109026e0003017f5006080b0002012230230904000000170130000a2401100a0009000000090401000001"], 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x400009) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20018050) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="34000000050001002bbd7000df2504004f80040071801c00bc8018002e8014000b00fe8000000000000000000000000000aa00"], 0x34}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f00000007c0)={0x20, 0x7, 0xc0, {0xc0, 0x23, "687c730188d123adb7e5dbb3a2e181a03ad2c0fb967f907796458f639bb63218b18cfbe8a0382170fd3b1db6642232226880bdb5ecdecbe1b6acdeb2d2d6a5f3a385670519c0527af6966b60cf7ae0cbb0e101494a0c2791d11786aa3dbc379766cef253895f95f4af245a4313b7122d9c7e475e2d0259e360e8ff60509ea22e17ec3fb6e4d28836171597cecce6aec969f115603492ee3c56b8789e1fee849cbddbf9fcb28ef237cac5bed2291549533e8b4a95456a0ce0c8358e18a113"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402d}}, &(0x7f0000000900)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x4, "2b9c"}, @local=@item_012={0x1, 0x2, 0x7, ')'}, @local=@item_012={0x1, 0x2, 0x0, 'B'}, @global=@item_4={0x3, 0x1, 0x2, "9ac96da3"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x7b2}}}}, &(0x7f0000000b80)={0x2c, &(0x7f00000009c0)={0x40, 0x0, 0x87, "9be7cc557f05ae25418986adbc7759aa96320839744f6293704fce1a86391e6a75ac9f531402d696fff27ba87d1f0d0e9eb6e945be5824bec5bd77c841f7b1a5359bb5c89901814c2147a2c8f41399a1c22d5b69a7533c30df8818c015d37eee0ef6271c18276fafb011b0acff1f718b67cc55ca1bc650cdc92b056709fadadb171c5dd10eba74"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b00)={0x20, 0x1, 0x1e, "36ad25d2e36fdef1059304766479ac37c3aa4bed8016810e7862bd65cdd8"}, &(0x7f0000000b40)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="00052800000028"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x2711, @local}, 0x10) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) shutdown(r8, 0x0) 32.608386955s ago: executing program 3 (id=164): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000"], 0x1c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x89) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000400)={'custom0\x00'}) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x700}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d00)={&(0x7f0000000540), 0xc, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x704}, 0x1, 0x0, 0x0, 0x40004}, 0x400c801) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) (async) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfe78) (async) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x141, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8) r4 = socket(0x2, 0x3, 0x5) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) recvmmsg(r4, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000001580)) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000001600)={0x1, [0x8], 0x7d}, 0x10) (async) getsockopt(r5, 0x28, 0x0, &(0x7f0000003180)=""/4106, &(0x7f00000000c0)=0x100a) (async) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f00000015c0)={0x0, 0x8}) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000d40)={0x0, 0xb38, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001140)={r7, 0xffffffffffffffff, 0x0, [0x1, 0xfffffffffffffff9, 0x9, 0x1ff, 0x6], [0x236cd0fd, 0x3, 0x7fffffff, 0x9, 0x4, 0x8, 0x2a78f13, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x3, 0x2, 0x2, 0x6, 0x75, 0x400, 0x1ff, 0xc76, 0x8, 0x7, 0x9, 0x6, 0x4, 0x29948, 0x7, 0x6, 0xd1, 0x8, 0x7, 0x5b9, 0x9, 0x2, 0x0, 0x9a7, 0x7fffffff, 0xffffffffffffffff, 0xdc, 0x100000001, 0x95, 0x8000000000000000, 0x1, 0x7c, 0x3, 0x9, 0x3, 0xfffffffffffffff7, 0xfff, 0x4, 0x10000, 0x1, 0x7, 0x4, 0x8, 0x8, 0x3, 0x6e8, 0x80, 0x759, 0x1, 0xffff, 0xc, 0x7894c722, 0xf, 0x400, 0x80, 0xffffffffffffffd9, 0x6, 0x1, 0x0, 0x5, 0xfb, 0xfffffffffffffffd, 0x8, 0xffffffffffff6a51, 0x7, 0xd2e1, 0x7, 0xffffffffffffff1e, 0x6, 0x7, 0xc, 0x4, 0x2, 0x7fff, 0x40, 0x6, 0x101, 0x9c66913, 0x0, 0x3ff, 0x6, 0x1, 0x5, 0x6, 0x8, 0x8001, 0x5, 0x9, 0x5, 0x40, 0x2, 0x2, 0x3, 0x2312, 0x10001, 0x3, 0x100, 0x2, 0x3af4c983, 0x9, 0x7, 0x6, 0x1ff, 0x5, 0x1, 0x101, 0xd, 0x7, 0x7, 0x5, 0x7]}) 30.012073285s ago: executing program 2 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x1000000201005) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000300)=""/201, 0xc9}], 0x3) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000), 0x280c00c, &(0x7f0000000040)={[{@favordynmods}, {@memory_localevents}]}) 27.83363014s ago: executing program 32 (id=114): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x13, r3, 0x8000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8c2, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x8c2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000000000005001000050001000200000020b3263ae72a3f5b8ce52518f48a3a058c84c70610581964d6a28914a1455bd3f6b89637928ce904779266ba2dff832843230eef68395167cc6d7c0a3c94946c582586868a2918d5a677083bb9071577a0d0983be913500bb1cc87897beca92025426b04d1abafb8ada642aea7f0bec959c120404ce2d865e552b09d2b36c34580903324b0414ca21fc79fd990a88a9e6fd1c2c2078358f493480700"/190], 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x2000888a) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0x131}) socket(0x11, 0x2, 0x0) (async) r9 = socket(0x11, 0x2, 0x0) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) (async) setsockopt(r9, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) ioctl$PPPIOCGMRU(r9, 0x80047453, &(0x7f00000006c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x2000, 0x2000002, 0x13, r3, 0x8000000) sendmmsg(r2, &(0x7f0000000680)=[{{&(0x7f0000000240)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="7396e182f6f945d7a5cbcfc034a0e6d30968567b5df49fd11dd4b4d0d37199423e46a7bdaf44e20c8f9001d2d6b1cdb0f226ea2d00631296cbf3d7f83e71da37384180d6e01a8b5d44a45b7616ddb7a9a513015115d821553df781576ec2bd7e046ade4b22087a8235d8f2e91313c5619269af5c0bca0d55185895", 0x7b}, {&(0x7f0000000340)="2347971a77a9afd2e36f7ff595e9b75d68cc587d26d8e8c2b89c41815176a110f32a4942e39c12f57a0cc1e0cced564f3202481c1517137fd65469d8d00a4a88ac883ec0765463ab4366147106f309492abfbc148022173146692cec265beb7ef82fb987913d18428ee8d0880058010ef54687ec32b470a90da92e480bf734435b0ae3fa2cf691ad79cfcdc9712eeab648f5af3b0fe2d0c31817074b0ba2d9810fa22f81163b7c1e48f6a4ed487faa693eb3359f25c2a4e14d674c8b58afd8f8eaec0a4431f7957cee91a0f7ac862393b88e68ad4962f69440c5446ee4b603fb02d09e2f4d07de999f28659611e62e11", 0xf0}], 0x2, &(0x7f0000000500)=[{0xd8, 0x84, 0x4, "f761a6797f8e91ecd89f2ed9fcbd52a9fd5f986d2e832bafe302d45969f9a80d6a8f2e66a4855f929d79b95bf48554d25d286d977da636eb03c154617ede6c90859afc92e0aa38dbde71d5a016a14cb135f09c394ab47583bbd5f3de671755bda813d1e8034f659f1f91e8f30870b045fa631902e82515b0da1c36b61df04e7c94a108d3cd0d7a3fedc18e7c8e44ad9f30de524afc915909aa3bbbcec03a0af48a57085f3e75ae89710615d2a4e08b80f8006ea034ea89111ca04b26069f52632395"}], 0xd8}}], 0x1, 0x1) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) dup2(r2, 0xffffffffffffffff) 26.291321093s ago: executing program 1 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d8df7e23b3b9ce0f0d73aa00b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0020c8220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f3085c79d5351bf16d09bd09be16dc301012202", 0x6b}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x121000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x42, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x4, 0x3, 0x5}}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x42, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x4, 0x3, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x8000000000000001, 0x5, 0x1, 0xa, 0x7ffffffb, 0x4, 0x4000000000000, 0xa, 0x48, 0x7, 0x3, 0x120000, 0xb5a, 0x9, 0x80000006, 0x7], 0x4000, 0x400}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x8000000000000001, 0x5, 0x1, 0xa, 0x7ffffffb, 0x4, 0x4000000000000, 0xa, 0x48, 0x7, 0x3, 0x120000, 0xb5a, 0x9, 0x80000006, 0x7], 0x4000, 0x400}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000280)={@empty, @multicast1, 0x0, 0x2, [@dev={0xac, 0x14, 0x14, 0x14}, @local]}, 0x18) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000280)={@empty, @multicast1, 0x0, 0x2, [@dev={0xac, 0x14, 0x14, 0x14}, @local]}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x80, 0xe8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x72, 0x0, 0x1, {0x7, 0x25, 0x1, 0x4, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x4, 0xf, {0x7, 0x25, 0x1, 0x8, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x5, &(0x7f0000000b40)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) 26.203902515s ago: executing program 3 (id=168): syz_usb_connect(0x6, 0x24, &(0x7f0000000fc0)=ANY=[], 0x0) 25.563824144s ago: executing program 2 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0xc, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x8, 0x2, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000026c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002580)=@polexpire={0xc8, 0x1b, 0x2, 0x70bd2a, 0x25dfdbfd, {{{@in=@remote, @in=@rand_addr=0x64010102, 0x4e22, 0xffff, 0x4e24, 0x7, 0xa, 0x80, 0x80, 0x33, r5, 0xffffffffffffffff}, {0xffffffffffffffff, 0x4348396a, 0x3, 0xff, 0x800, 0x40, 0xffffffffffffffff, 0x1}, {0x2000000000000007, 0x6, 0x9, 0x839e}, 0xe4e8, 0x0, 0x0, 0x0, 0x1}, 0x5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r3, 0x20, 0x3, r3}) syz_usb_connect(0x4, 0x164, 0x0, 0x0) syz_clone(0x200, &(0x7f0000000000)="0d5879b5d9a8dd18f2ed27009232de13672a13a7ba1c4712635ae515722ce9705a074b2de10c2fa2c6d393c18ae77991f3d390f3cfac04d99ea786300d6e", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r8, &(0x7f0000000040), 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8b, 0x0, 0x6}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect$uac3(0x1, 0x80, &(0x7f00000076c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x40, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0xf834}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xe, 0xb, {0xa, 0x25, 0x25, 0x7, 0x82, 0xd}}}}}}}}]}}, &(0x7f0000007bc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) waitid(0x2, r12, &(0x7f0000000200), 0x20000000, &(0x7f00000024c0)) 19.969843231s ago: executing program 3 (id=170): pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r0, &(0x7f0000000680)={0x18, 0xf, 0x102, {{0x4, 0xffffffff, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x2, 0x79, 0x1}, 0x7) 19.302014551s ago: executing program 1 (id=171): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x81, 0xfffffffffffffff0, 0x1}) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) close_range(r0, r1, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000) r2 = pidfd_getfd(r0, r0, 0x0) getpeername$tipc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz1\x00', {0x6, 0x4, 0x5a17, 0xff}, 0x3f, [0x2b6, 0x0, 0x8, 0x2, 0x973, 0x4, 0xa34, 0x5, 0xfb, 0x80000000, 0x100, 0x5, 0x249, 0x100, 0x0, 0x8, 0x0, 0x5, 0x8, 0x80000001, 0x0, 0x4, 0x2, 0xa, 0xcf, 0x1, 0x9, 0x6, 0x6, 0x100, 0x5, 0x9, 0x7, 0x0, 0x6, 0xffff, 0x5, 0x81, 0x3, 0x6, 0x401, 0x3, 0x8000, 0xa34, 0xf2, 0x6, 0x7, 0x4, 0x5, 0x9, 0x3, 0x2, 0x0, 0x5, 0x9, 0x6, 0x0, 0x0, 0x2a, 0x2, 0x5, 0x7, 0xffffffff, 0x660], [0xffff, 0x5, 0x7, 0x4, 0xffff, 0xd6, 0x0, 0x8, 0x0, 0x5, 0x10000, 0x400, 0x3, 0x7, 0x2, 0x8, 0x6, 0x3, 0x2, 0x800, 0x4, 0x0, 0xfe, 0x18, 0x0, 0x4, 0x80, 0x1, 0x2, 0x975, 0x2, 0x2, 0x218, 0x6, 0x9, 0x3, 0x7, 0x2, 0x8507, 0x7, 0x2f2f, 0x5, 0x401, 0x124c0, 0xa9d, 0x80, 0x4c, 0x6, 0x0, 0x101, 0x9, 0x8, 0x3a, 0x0, 0x2, 0x4, 0x9, 0x8, 0x9, 0x1, 0x7, 0x3, 0x9, 0x56], [0x7, 0xfffffffc, 0x56, 0x5, 0x9, 0x9, 0x1, 0x8000, 0x7, 0x1ff, 0xa2, 0x10000, 0x0, 0x0, 0x9, 0x6, 0x5, 0xd6, 0x3, 0x0, 0xfffffffa, 0x6, 0x6, 0x80000000, 0x3ff, 0x2, 0x8, 0xfffffffb, 0xa, 0x8001, 0x2, 0x8, 0xe7e, 0xffffffff, 0x2, 0x5, 0x4ad, 0x400, 0x7, 0x8, 0x40, 0x200, 0x1, 0xfffffff1, 0xea, 0x6, 0x7fff, 0xba71, 0x7fffffff, 0x7, 0x96, 0x6fe7, 0x7, 0x2, 0x6, 0x813, 0x1, 0x7, 0x7ff, 0x6, 0x5, 0x9, 0x1000, 0x2], [0x2cec1442, 0x8, 0x8c, 0x0, 0x82, 0x8, 0x9, 0x0, 0x200, 0xcc26, 0x7, 0x91, 0x0, 0x9, 0x5, 0x0, 0x6, 0x1, 0x5, 0xb, 0xe7, 0xf8, 0xc5, 0x6, 0x3, 0x8, 0x6, 0x1, 0xd9, 0x9, 0x4, 0x3, 0x5, 0x7fffffff, 0x2, 0x8391, 0x4, 0x3, 0x2764, 0x3, 0x800, 0x31e, 0x8001, 0xf5, 0x2, 0x1000, 0x6, 0x8, 0x7, 0x5, 0x1, 0x8, 0x2, 0x5b11, 0x8, 0x2, 0x5, 0x8, 0x7, 0x8, 0x3, 0xfffffffe, 0x59, 0xfffffffe]}, 0x45c) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000006c0)={0xa9, 0x3, 0x4, 0x7fffffffffffffff, 0x7, 0x5}) (async) sendmsg$sock(r2, &(0x7f0000000ac0)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="b4275e17f44de03aaf8c85c833efdab7a00200e7ef746d00ff11d85db59948685c991d0d673c780d97f3e066fae1aaf8a7641704fe4a629e27721ca166be27a758e21fa2482fef842edc9c4fa23bdef8dafec0189ba1553f10b4fce95770dc", 0x5f}, {&(0x7f0000000800)="bb88b4a124a13e2a1bf9a01927b5a956f95608a8f9a840e27c9c07d81dd1aeea7bfa91a10eee9b2aad2809fb75b225", 0x2f}, {&(0x7f0000000840)="1cd8e1111ee9f4d293fa8f803ab5f39f9340934d7c408a5caa2f7ae34472734af902f5cd994a04e24b5e9b9de0b69376739cb11eeff3de8ef132b342d30bdee9fb7dc76b0c6228dc5abdd0c0a3d989a4d20819f2f686a503e33c4cec0538455bb0aad219ec93d27cbec3b6ca2fbce38e6e909d90f57fc622de4f3b49243a0efc7a335262be3c8773ad08d6cff6c58c2cc1", 0x91}, {&(0x7f0000000900)="c53b5434cb1def8fba80aa", 0xb}, {&(0x7f0000000940)="47089828d3a44df8047c2fbb858633b738af6cd5a7b3766cc9038c7318a5df1e670e15b375a91c3476a44771083ab3b879f99e79c86753957122aec76eaade9c7d992aef2a78125f757322dc065eab58a82d441502335686140db91ab2764d4ae44b2cd118bdcd22522058ac1438abdce66de7253764227cfe31353dda221e81ebd49bb03747", 0x86}], 0x5, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9050}}], 0x18}, 0x1) (async) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x9, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000b40)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000b80)=0x4e5, 0x4) (async) r4 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x800, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000c40)={{r5}, 0x1, &(0x7f0000000c00)=[0x5f5c4171], 0x101, 0xc, 0x1}) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x7, 0x20, 0x101, 0x2, {{0x35, 0x4, 0x0, 0x7, 0xd4, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x3, [0xd13]}, @rr={0x7, 0x1f, 0x15, [@dev={0xac, 0x14, 0x14, 0x30}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x1, 0x8, "aae759f7d5ae"}, {0x5, 0xb, "b50cfcb3efd0002112"}, {0x5, 0x7, "afe321088b"}, {0x5, 0xe, "7b78087f8ddd3e2fb061565e"}, {0x6, 0xb, "1a8cdc2c7db45faba1"}, {0x2, 0xf, "675c2e60423d60afa31d5f3a87"}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x5, 0xd, "bb80badf087e9c190d4be3"}, {0x5, 0xc, "629d2753786753fbb970"}, {0x5, 0xd, "a42a42dc4d19292fbb38d5"}, {0x6, 0xd, "058220adc3a0bea26c1a39"}, {0x1, 0xb, "bf418486f33b2cdf1d"}]}, @generic={0x89, 0x9, "25da3d81523626"}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000e80)={@multicast1, @loopback, 0x0}, &(0x7f0000000ec0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004880}, 0x600c8040) (async) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000001040), &(0x7f0000001080)={0x0, 0xfb, 0xe1, 0x8a3f876bdbba9652, 0x5, "7124e77e42440b34dc86f7aaf71f029a", "063147684cfd2413dd5317a681fcd45769586f4d8a7990f21278076be30fcad52280632c913cd0d80a119ffb5aec52185689623f7f9f5758ff363f5a657fbaf3ffeb336a12802cb087f5f3d37d44198c4818e4eb41e31b1fd41ebfb9f6060209394633be3182ec83cda030f81003fc8e340900cfd36cbde07bdcba55a335458c4318e2ed21097ec59964406996f1c64d81a34b79035bfea57ad39ee293f1c013b0d22fbb1009209f314f18937066ab583595698a0623ed68124c79e912ee4d228e5598b8a730bf45b9117618"}, 0xe1, 0x1) sigaltstack(&(0x7f0000001240)={&(0x7f0000001180)=""/169, 0x1, 0xa9}, &(0x7f0000001340)={&(0x7f0000001280)=""/152, 0x0, 0x98}) (async) write$cgroup_int(r2, &(0x7f0000001380)=0x6, 0x12) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f00000013c0)=0x3, 0x4) write$9p(r9, &(0x7f0000001400)="1694c908126be9b318ca6f391b27c5cd2d7b6a9490014cbd8ab8138f3b14673836dff2fca02feff0baf6268ab8c1b97a7464ea37969058a1b4f2578f98febf2067a67248a023161e5a473b58c08dfc8922b7fde6f2609d9d2666ce53", 0x5c) (async) accept(r1, 0x0, &(0x7f0000001480)) (async) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000014c0), &(0x7f0000001500), 0x2, 0x0) (async) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000001540)) 9.03750623s ago: executing program 33 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0xc, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x8, 0x2, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000026c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002580)=@polexpire={0xc8, 0x1b, 0x2, 0x70bd2a, 0x25dfdbfd, {{{@in=@remote, @in=@rand_addr=0x64010102, 0x4e22, 0xffff, 0x4e24, 0x7, 0xa, 0x80, 0x80, 0x33, r5, 0xffffffffffffffff}, {0xffffffffffffffff, 0x4348396a, 0x3, 0xff, 0x800, 0x40, 0xffffffffffffffff, 0x1}, {0x2000000000000007, 0x6, 0x9, 0x839e}, 0xe4e8, 0x0, 0x0, 0x0, 0x1}, 0x5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r3, 0x20, 0x3, r3}) syz_usb_connect(0x4, 0x164, 0x0, 0x0) syz_clone(0x200, &(0x7f0000000000)="0d5879b5d9a8dd18f2ed27009232de13672a13a7ba1c4712635ae515722ce9705a074b2de10c2fa2c6d393c18ae77991f3d390f3cfac04d99ea786300d6e", 0x3e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r8, &(0x7f0000000040), 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8b, 0x0, 0x6}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect$uac3(0x1, 0x80, &(0x7f00000076c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x40, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0xf834}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0xe, 0xb, {0xa, 0x25, 0x25, 0x7, 0x82, 0xd}}}}}}}}]}}, &(0x7f0000007bc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) waitid(0x2, r12, &(0x7f0000000200), 0x20000000, &(0x7f00000024c0)) 2.658286559s ago: executing program 34 (id=171): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x81, 0xfffffffffffffff0, 0x1}) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) close_range(r0, r1, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000) r2 = pidfd_getfd(r0, r0, 0x0) getpeername$tipc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz1\x00', {0x6, 0x4, 0x5a17, 0xff}, 0x3f, [0x2b6, 0x0, 0x8, 0x2, 0x973, 0x4, 0xa34, 0x5, 0xfb, 0x80000000, 0x100, 0x5, 0x249, 0x100, 0x0, 0x8, 0x0, 0x5, 0x8, 0x80000001, 0x0, 0x4, 0x2, 0xa, 0xcf, 0x1, 0x9, 0x6, 0x6, 0x100, 0x5, 0x9, 0x7, 0x0, 0x6, 0xffff, 0x5, 0x81, 0x3, 0x6, 0x401, 0x3, 0x8000, 0xa34, 0xf2, 0x6, 0x7, 0x4, 0x5, 0x9, 0x3, 0x2, 0x0, 0x5, 0x9, 0x6, 0x0, 0x0, 0x2a, 0x2, 0x5, 0x7, 0xffffffff, 0x660], [0xffff, 0x5, 0x7, 0x4, 0xffff, 0xd6, 0x0, 0x8, 0x0, 0x5, 0x10000, 0x400, 0x3, 0x7, 0x2, 0x8, 0x6, 0x3, 0x2, 0x800, 0x4, 0x0, 0xfe, 0x18, 0x0, 0x4, 0x80, 0x1, 0x2, 0x975, 0x2, 0x2, 0x218, 0x6, 0x9, 0x3, 0x7, 0x2, 0x8507, 0x7, 0x2f2f, 0x5, 0x401, 0x124c0, 0xa9d, 0x80, 0x4c, 0x6, 0x0, 0x101, 0x9, 0x8, 0x3a, 0x0, 0x2, 0x4, 0x9, 0x8, 0x9, 0x1, 0x7, 0x3, 0x9, 0x56], [0x7, 0xfffffffc, 0x56, 0x5, 0x9, 0x9, 0x1, 0x8000, 0x7, 0x1ff, 0xa2, 0x10000, 0x0, 0x0, 0x9, 0x6, 0x5, 0xd6, 0x3, 0x0, 0xfffffffa, 0x6, 0x6, 0x80000000, 0x3ff, 0x2, 0x8, 0xfffffffb, 0xa, 0x8001, 0x2, 0x8, 0xe7e, 0xffffffff, 0x2, 0x5, 0x4ad, 0x400, 0x7, 0x8, 0x40, 0x200, 0x1, 0xfffffff1, 0xea, 0x6, 0x7fff, 0xba71, 0x7fffffff, 0x7, 0x96, 0x6fe7, 0x7, 0x2, 0x6, 0x813, 0x1, 0x7, 0x7ff, 0x6, 0x5, 0x9, 0x1000, 0x2], [0x2cec1442, 0x8, 0x8c, 0x0, 0x82, 0x8, 0x9, 0x0, 0x200, 0xcc26, 0x7, 0x91, 0x0, 0x9, 0x5, 0x0, 0x6, 0x1, 0x5, 0xb, 0xe7, 0xf8, 0xc5, 0x6, 0x3, 0x8, 0x6, 0x1, 0xd9, 0x9, 0x4, 0x3, 0x5, 0x7fffffff, 0x2, 0x8391, 0x4, 0x3, 0x2764, 0x3, 0x800, 0x31e, 0x8001, 0xf5, 0x2, 0x1000, 0x6, 0x8, 0x7, 0x5, 0x1, 0x8, 0x2, 0x5b11, 0x8, 0x2, 0x5, 0x8, 0x7, 0x8, 0x3, 0xfffffffe, 0x59, 0xfffffffe]}, 0x45c) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000006c0)={0xa9, 0x3, 0x4, 0x7fffffffffffffff, 0x7, 0x5}) (async) sendmsg$sock(r2, &(0x7f0000000ac0)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="b4275e17f44de03aaf8c85c833efdab7a00200e7ef746d00ff11d85db59948685c991d0d673c780d97f3e066fae1aaf8a7641704fe4a629e27721ca166be27a758e21fa2482fef842edc9c4fa23bdef8dafec0189ba1553f10b4fce95770dc", 0x5f}, {&(0x7f0000000800)="bb88b4a124a13e2a1bf9a01927b5a956f95608a8f9a840e27c9c07d81dd1aeea7bfa91a10eee9b2aad2809fb75b225", 0x2f}, {&(0x7f0000000840)="1cd8e1111ee9f4d293fa8f803ab5f39f9340934d7c408a5caa2f7ae34472734af902f5cd994a04e24b5e9b9de0b69376739cb11eeff3de8ef132b342d30bdee9fb7dc76b0c6228dc5abdd0c0a3d989a4d20819f2f686a503e33c4cec0538455bb0aad219ec93d27cbec3b6ca2fbce38e6e909d90f57fc622de4f3b49243a0efc7a335262be3c8773ad08d6cff6c58c2cc1", 0x91}, {&(0x7f0000000900)="c53b5434cb1def8fba80aa", 0xb}, {&(0x7f0000000940)="47089828d3a44df8047c2fbb858633b738af6cd5a7b3766cc9038c7318a5df1e670e15b375a91c3476a44771083ab3b879f99e79c86753957122aec76eaade9c7d992aef2a78125f757322dc065eab58a82d441502335686140db91ab2764d4ae44b2cd118bdcd22522058ac1438abdce66de7253764227cfe31353dda221e81ebd49bb03747", 0x86}], 0x5, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9050}}], 0x18}, 0x1) (async) r3 = syz_open_dev$MSR(&(0x7f0000000b00), 0x9, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000b40)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000b80)=0x4e5, 0x4) (async) r4 = open$dir(&(0x7f0000000bc0)='./file0\x00', 0x800, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000c40)={{r5}, 0x1, &(0x7f0000000c00)=[0x5f5c4171], 0x101, 0xc, 0x1}) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), r2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x7, 0x20, 0x101, 0x2, {{0x35, 0x4, 0x0, 0x7, 0xd4, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x3, [0xd13]}, @rr={0x7, 0x1f, 0x15, [@dev={0xac, 0x14, 0x14, 0x30}, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x1, 0x8, "aae759f7d5ae"}, {0x5, 0xb, "b50cfcb3efd0002112"}, {0x5, 0x7, "afe321088b"}, {0x5, 0xe, "7b78087f8ddd3e2fb061565e"}, {0x6, 0xb, "1a8cdc2c7db45faba1"}, {0x2, 0xf, "675c2e60423d60afa31d5f3a87"}]}, @cipso={0x86, 0x44, 0xffffffffffffffff, [{0x5, 0xd, "bb80badf087e9c190d4be3"}, {0x5, 0xc, "629d2753786753fbb970"}, {0x5, 0xd, "a42a42dc4d19292fbb38d5"}, {0x6, 0xd, "058220adc3a0bea26c1a39"}, {0x1, 0xb, "bf418486f33b2cdf1d"}]}, @generic={0x89, 0x9, "25da3d81523626"}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000e80)={@multicast1, @loopback, 0x0}, &(0x7f0000000ec0)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x70, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004880}, 0x600c8040) (async) r9 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000001040), &(0x7f0000001080)={0x0, 0xfb, 0xe1, 0x8a3f876bdbba9652, 0x5, "7124e77e42440b34dc86f7aaf71f029a", "063147684cfd2413dd5317a681fcd45769586f4d8a7990f21278076be30fcad52280632c913cd0d80a119ffb5aec52185689623f7f9f5758ff363f5a657fbaf3ffeb336a12802cb087f5f3d37d44198c4818e4eb41e31b1fd41ebfb9f6060209394633be3182ec83cda030f81003fc8e340900cfd36cbde07bdcba55a335458c4318e2ed21097ec59964406996f1c64d81a34b79035bfea57ad39ee293f1c013b0d22fbb1009209f314f18937066ab583595698a0623ed68124c79e912ee4d228e5598b8a730bf45b9117618"}, 0xe1, 0x1) sigaltstack(&(0x7f0000001240)={&(0x7f0000001180)=""/169, 0x1, 0xa9}, &(0x7f0000001340)={&(0x7f0000001280)=""/152, 0x0, 0x98}) (async) write$cgroup_int(r2, &(0x7f0000001380)=0x6, 0x12) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r10, 0x10e, 0xa, &(0x7f00000013c0)=0x3, 0x4) write$9p(r9, &(0x7f0000001400)="1694c908126be9b318ca6f391b27c5cd2d7b6a9490014cbd8ab8138f3b14673836dff2fca02feff0baf6268ab8c1b97a7464ea37969058a1b4f2578f98febf2067a67248a023161e5a473b58c08dfc8922b7fde6f2609d9d2666ce53", 0x5c) (async) accept(r1, 0x0, &(0x7f0000001480)) (async) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000014c0), &(0x7f0000001500), 0x2, 0x0) (async) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000001540)) 0s ago: executing program 35 (id=170): pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r0, &(0x7f0000000680)={0x18, 0xf, 0x102, {{0x4, 0xffffffff, 0x2}, 0x6}}, 0x18) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x2, 0x79, 0x1}, 0x7) kernel console output (not intermixed with test programs): .391516][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.398652][ T297] bridge_slave_0: entered allmulticast mode [ 31.404940][ T297] bridge_slave_0: entered promiscuous mode [ 31.411600][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.418716][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.425864][ T297] bridge_slave_1: entered allmulticast mode [ 31.432208][ T297] bridge_slave_1: entered promiscuous mode [ 31.485588][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.492648][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.499851][ T295] bridge_slave_0: entered allmulticast mode [ 31.506239][ T295] bridge_slave_0: entered promiscuous mode [ 31.512735][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.519824][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.526930][ T295] bridge_slave_1: entered allmulticast mode [ 31.533157][ T295] bridge_slave_1: entered promiscuous mode [ 31.614021][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.621137][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.628522][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.635588][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.683837][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.690927][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.698248][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.705307][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.726252][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.733336][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.740657][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.747815][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.769623][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.777056][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.785042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.792301][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.799736][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.806989][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.819656][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.826734][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.845552][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852623][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.870977][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.878074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.894666][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.901736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.940313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.947385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.955155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.962181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.991285][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.998357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.006212][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.013266][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.031560][ T296] veth0_vlan: entered promiscuous mode [ 32.050267][ T294] veth0_vlan: entered promiscuous mode [ 32.060301][ T296] veth1_macvtap: entered promiscuous mode [ 32.071992][ T295] veth0_vlan: entered promiscuous mode [ 32.084027][ T294] veth1_macvtap: entered promiscuous mode [ 32.113471][ T297] veth0_vlan: entered promiscuous mode [ 32.135811][ T295] veth1_macvtap: entered promiscuous mode [ 32.145136][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.181935][ T297] veth1_macvtap: entered promiscuous mode [ 32.232887][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.251321][ T321] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 32.267260][ T321] overlayfs: overlapping lowerdir path [ 32.280892][ T320] overlayfs: overlapping lowerdir path [ 32.296245][ T326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.296236][ T323] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 32.296277][ T323] rust_binder: Write failure EINVAL in pid:2 [ 32.322642][ T321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=321 comm=syz.0.1 [ 32.379666][ T324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=324 comm=syz.1.2 [ 32.654438][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.744339][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.804323][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 32.812343][ T310] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 32.821776][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.830266][ T310] usb 1-1: Product: syz [ 32.834819][ T310] usb 1-1: Manufacturer: syz [ 32.839628][ T310] usb 1-1: SerialNumber: syz [ 32.895632][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.904792][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.914966][ T66] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.926739][ T66] usb 4-1: string descriptor 0 read error: -22 [ 32.932982][ T66] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 32.944024][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.955777][ T66] usb 4-1: selecting invalid altsetting 1 [ 32.961841][ T66] usb 4-1: unit 6 not found! [ 33.594275][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.745447][ T45] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 33.756516][ T45] usb 3-1: config 1 interface 0 has no altsetting 0 [ 33.765675][ T45] usb 3-1: string descriptor 0 read error: -22 [ 33.771912][ T45] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.780997][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.962025][ T337] fuse: Bad value for 'user_id' [ 33.967815][ T337] fuse: Bad value for 'user_id' [ 34.015465][ T66] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 34.046397][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 34.047168][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 34.073566][ T310] usb 1-1: USB disconnect, device number 2 [ 34.075264][ T66] usb 4-1: USB disconnect, device number 2 [ 34.089980][ T367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.192958][ T45] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 34.203200][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0001/input/input4 [ 34.293115][ T45] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 34.392814][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.402089][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.410074][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.423094][ T66] usb 3-1: USB disconnect, device number 2 [ 34.444260][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.539290][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 34.539319][ T36] audit: type=1400 audit(1782348566.730:150): avc: denied { create } for pid=404 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 34.554658][ T10] usb 2-1: device descriptor read/64, error -71 [ 34.579377][ T36] audit: type=1400 audit(1782348566.770:151): avc: denied { write } for pid=404 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 34.624356][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 34.632290][ T310] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 34.641757][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.649987][ T310] usb 1-1: Product: syz [ 34.654432][ T310] usb 1-1: Manufacturer: syz [ 34.659066][ T310] usb 1-1: SerialNumber: syz [ 34.666520][ T36] audit: type=1400 audit(1782348566.860:152): avc: denied { bind } for pid=407 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.686939][ T36] audit: type=1400 audit(1782348566.860:153): avc: denied { ioctl } for pid=407 comm="syz.3.21" path="socket:[4926]" dev="sockfs" ino=4926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.712404][ T36] audit: type=1400 audit(1782348566.860:154): avc: denied { bind } for pid=407 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.834290][ T10] usb 2-1: device descriptor read/64, error -71 [ 35.034329][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.084280][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.184302][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 35.190494][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.201440][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.211230][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.224096][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 35.224849][ T10] usb 2-1: device descriptor read/64, error -71 [ 35.233190][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.249138][ T45] usb 4-1: config 0 descriptor?? [ 35.373786][ T36] audit: type=1400 audit(1782348567.560:155): avc: denied { connect } for pid=420 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.394902][ T36] audit: type=1400 audit(1782348567.560:156): avc: denied { ioctl } for pid=420 comm="syz.2.24" path="socket:[4935]" dev="sockfs" ino=4935 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.405236][ T421] Zero length message leads to an empty skb [ 35.477294][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input5 [ 35.491681][ T36] audit: type=1400 audit(1782348567.690:157): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.496726][ T45] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input6 [ 35.525547][ T10] usb 2-1: device descriptor read/64, error -71 [ 35.532933][ T36] audit: type=1400 audit(1782348567.690:158): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.563226][ T36] audit: type=1400 audit(1782348567.740:159): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.576625][ T45] kye 0003:0458:5011.0002: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 35.611376][ T45] usb 4-1: USB disconnect, device number 3 [ 35.634535][ T10] usb usb2-port1: attempt power cycle [ 35.914282][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 35.975030][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.009805][ T10] usb 2-1: device descriptor read/8, error -71 [ 36.065881][ T45] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 36.075394][ T45] usb 4-1: config 0 has no interface number 0 [ 36.081610][ T45] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 36.094821][ T45] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 36.104088][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.112401][ T45] usb 4-1: Product: syz [ 36.117105][ T45] usb 4-1: Manufacturer: syz [ 36.121801][ T45] usb 4-1: SerialNumber: syz [ 36.128376][ T45] usb 4-1: config 0 descriptor?? [ 36.133750][ T427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 36.145377][ T10] usb 2-1: device descriptor read/8, error -71 [ 36.149508][ T45] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, aa:85:f1:9e:51:11 [ 36.342763][ T45] usb 4-1: USB disconnect, device number 4 [ 36.351024][ T45] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 36.397085][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.425477][ T10] usb 2-1: device descriptor read/8, error -71 [ 36.555336][ T10] usb 2-1: device descriptor read/8, error -71 [ 36.601228][ T310] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 36.609586][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.619636][ T310] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 36.627978][ T310] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 36.637717][ T310] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 36.648079][ T310] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 36.658117][ T310] usb 1-1: USB disconnect, device number 3 [ 36.665586][ T10] usb usb2-port1: unable to enumerate USB device [ 36.675072][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.994311][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.094290][ T342] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 37.144284][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 37.150433][ T10] usb 3-1: config 51 has an invalid interface number: 219 but max is 1 [ 37.158946][ T10] usb 3-1: config 51 has an invalid descriptor of length 166, skipping remainder of the config [ 37.170496][ T10] usb 3-1: config 51 has no interface number 0 [ 37.176820][ T10] usb 3-1: config 51 interface 219 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 37.191110][ T10] usb 3-1: too many endpoints for config 51 interface 1 altsetting 241: 201, using maximum allowed: 30 [ 37.202272][ T10] usb 3-1: config 51 interface 1 altsetting 241 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 37.213406][ T10] usb 3-1: config 51 interface 1 altsetting 241 has 1 endpoint descriptor, different from the interface descriptor's value: 201 [ 37.226893][ T10] usb 3-1: config 51 interface 219 has no altsetting 0 [ 37.233902][ T10] usb 3-1: config 51 interface 1 has no altsetting 0 [ 37.243889][ T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=3871, bcdDevice=51.b7 [ 37.254376][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.264155][ T10] usb 3-1: Product: ç¾âŠ•å˜µì£˜è´©Ã¼è©—飺彠븶䌵᳞㒜㢫êƒá·»ï¨æ¬´â¢½é¬žÌ¯ã•îƒ¤èŸžà»¨ê«¶êšµì¸¥ïƒŒç¥„湣⽿ïµí€¦ïœ®è™¥íš—挢㚋鵂ﺅ촻휴ï˜ë‰—çŽë µé”“냮âœãˆžä²¾æ¶šä‡²ã˜®ì¹£ä½‡å¼™è‡½í”´ [ 37.293762][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 37.301211][ T342] usb 4-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 37.310354][ T10] usb 3-1: Manufacturer: n [ 37.315891][ T10] usb 3-1: SerialNumber: и [ 37.321002][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.330948][ T342] usb 4-1: config 0 descriptor?? [ 37.539075][ T10] usb 3-1: USB disconnect, device number 3 [ 37.739568][ T342] logitech 0003:046D:C287.0003: unknown main item tag 0x6 [ 37.747003][ T342] logitech 0003:046D:C287.0003: ignoring exceeding usage max [ 37.756561][ T342] logitech 0003:046D:C287.0003: hidraw0: USB HID v0.18 Device [HID 046d:c287] on usb-dummy_hcd.3-1/input0 [ 37.767991][ T342] logitech 0003:046D:C287.0003: no inputs found [ 37.941440][ T471] can0: slcan on ttyS3. [ 37.970353][ T471] can0 (unregistered): slcan off ttyS3. [ 37.976136][ T471] Falling back ldisc for ttyS3. [ 37.981821][ T342] usb 4-1: USB disconnect, device number 5 [ 38.394274][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.544243][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 38.552507][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.563334][ T310] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.577569][ T310] usb 3-1: New USB device found, idVendor=044b, idProduct=c1f9, bcdDevice=1e.43 [ 38.586807][ T310] usb 3-1: New USB device strings: Mfr=81, Product=0, SerialNumber=0 [ 38.599141][ T310] usb 3-1: Manufacturer: syz [ 38.617093][ T310] usb 3-1: config 0 descriptor?? [ 38.625279][ T543] veth1_to_bond: entered allmulticast mode [ 38.631316][ T543] veth1_to_bond: entered promiscuous mode [ 38.711565][ T543] veth1_to_bond: left promiscuous mode [ 38.717260][ T543] veth1_to_bond: left allmulticast mode [ 38.745515][ T548] 9pnet_fd: Insufficient options for proto=fd [ 38.752289][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 39.184281][ T342] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.338988][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.350227][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.360519][ T342] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.369713][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.379230][ T342] usb 4-1: config 0 descriptor?? [ 39.384266][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 39.528320][ T572] can0: slcan on ttyS3. [ 39.535160][ T10] usb 2-1: no configurations [ 39.539841][ T10] usb 2-1: can't read configurations, error -22 [ 39.567338][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 39.567355][ T36] audit: type=1400 audit(1782348571.760:212): avc: denied { write } for pid=516 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.616546][ T572] can0 (unregistered): slcan off ttyS3. [ 39.622234][ T572] Falling back ldisc for ttyS3. [ 39.634939][ T36] audit: type=1400 audit(1782348571.830:213): avc: denied { accept } for pid=516 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.674324][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 39.684278][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.824278][ T310] usb 1-1: device descriptor read/64, error -71 [ 39.834744][ T10] usb 2-1: no configurations [ 39.839457][ T10] usb 2-1: can't read configurations, error -22 [ 39.846153][ T10] usb usb2-port1: attempt power cycle [ 39.996325][ T36] audit: type=1400 audit(1782348572.190:214): avc: denied { setopt } for pid=556 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.996954][ T342] usb 4-1: language id specifier not provided by device, defaulting to English [ 40.074266][ T310] usb 1-1: device descriptor read/64, error -71 [ 40.184296][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 40.204947][ T10] usb 2-1: no configurations [ 40.209573][ T10] usb 2-1: can't read configurations, error -22 [ 40.225479][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 40.233049][ T342] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71 [ 40.242033][ T342] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 40.249647][ T342] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 40.260047][ T342] usb 4-1: USB disconnect, device number 6 [ 40.314282][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 40.344326][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 40.364976][ T10] usb 2-1: no configurations [ 40.369592][ T10] usb 2-1: can't read configurations, error -22 [ 40.376033][ T10] usb usb2-port1: unable to enumerate USB device [ 40.444496][ T310] usb 1-1: device descriptor read/64, error -71 [ 40.684278][ T310] usb 1-1: device descriptor read/64, error -71 [ 40.775588][ T36] audit: type=1400 audit(1782348572.970:215): avc: denied { block_suspend } for pid=606 comm="syz.3.58" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.797223][ T310] usb usb1-port1: attempt power cycle [ 41.134279][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.144290][ T417] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.155549][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.195124][ T10] usb 3-1: USB disconnect, device number 4 [ 41.274322][ T417] usb 4-1: device descriptor read/64, error -71 [ 41.285488][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.514334][ T417] usb 4-1: device descriptor read/64, error -71 [ 41.524307][ T310] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.534369][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.545689][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.675385][ T310] usb 1-1: device descriptor read/8, error -71 [ 41.685325][ T10] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.696241][ T10] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 41.709084][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.715770][ T10] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 41.724875][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.733536][ T10] usb 3-1: config 0 descriptor?? [ 41.754272][ T417] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.784340][ T310] usb usb1-port1: unable to enumerate USB device [ 41.884265][ T417] usb 4-1: device descriptor read/64, error -71 [ 42.124333][ T417] usb 4-1: device descriptor read/64, error -71 [ 42.140835][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.154279][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.164302][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.171637][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.184271][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.191604][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.211980][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.219521][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.226872][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.234233][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.235052][ T417] usb usb4-port1: attempt power cycle [ 42.241599][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.241661][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.261646][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.269003][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.276355][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.283670][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.291262][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.298619][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.305966][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.313287][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.320633][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.327971][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.335317][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.342655][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.350011][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.357361][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.364968][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.372314][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.379832][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.387232][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.395246][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.402569][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.409941][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.417273][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.424607][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.437622][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.446090][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.453441][ T10] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 42.465172][ T10] dragonrise 0003:0079:0006.0005: hidraw0: USB HID v0.08 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 42.487399][ T10] dragonrise 0003:0079:0006.0005: no inputs found [ 42.493865][ T10] dragonrise 0003:0079:0006.0005: force feedback init failed [ 42.604473][ T417] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.625259][ T417] usb 4-1: device descriptor read/8, error -71 [ 42.634293][ T342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.755454][ T417] usb 4-1: device descriptor read/8, error -71 [ 42.785501][ T342] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 42.795788][ T342] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 42.805929][ T342] usb 2-1: New USB device found, idVendor=ff79, idProduct=e78a, bcdDevice= 0.30 [ 42.815072][ T342] usb 2-1: New USB device strings: Mfr=248, Product=255, SerialNumber=0 [ 42.823448][ T342] usb 2-1: Product: syz [ 42.827688][ T342] usb 2-1: Manufacturer: syz [ 42.832908][ T342] usb 2-1: config 0 descriptor?? [ 42.850602][ T342] usb 3-1: USB disconnect, device number 5 [ 42.990003][ T36] audit: type=1400 audit(1782348575.180:216): avc: denied { ioctl } for pid=629 comm="syz.2.65" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5409 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.015671][ T417] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.023317][ T36] audit: type=1400 audit(1782348575.180:217): avc: denied { read } for pid=629 comm="syz.2.65" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.047601][ T36] audit: type=1400 audit(1782348575.180:218): avc: denied { open } for pid=629 comm="syz.2.65" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.071476][ T36] audit: type=1400 audit(1782348575.180:219): avc: denied { ioctl } for pid=629 comm="syz.2.65" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.097377][ T417] usb 4-1: device descriptor read/8, error -71 [ 43.103755][ T36] audit: type=1400 audit(1782348575.180:220): avc: denied { setopt } for pid=629 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.131887][ T633] tc_dump_action: action bad kind [ 43.225412][ T417] usb 4-1: device descriptor read/8, error -71 [ 43.334270][ T311] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 43.341932][ T417] usb usb4-port1: unable to enumerate USB device [ 43.384273][ T342] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 43.399151][ T36] audit: type=1400 audit(1782348575.590:221): avc: denied { write } for pid=619 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.506270][ T631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.515818][ T631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.554255][ T342] usb 1-1: Using ep0 maxpacket: 16 [ 43.575339][ T342] usb 1-1: unable to get BOS descriptor or descriptor too short [ 43.584610][ T342] usb 1-1: config 1 has an invalid descriptor of length 201, skipping remainder of the config [ 43.594919][ T342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 43.603830][ T342] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.618186][ T342] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.627285][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.635470][ T342] usb 1-1: Product: syz [ 43.639665][ T342] usb 1-1: Manufacturer: syz [ 43.644480][ T342] usb 1-1: SerialNumber: syz [ 43.856762][ T342] usb 1-1: USB disconnect, device number 8 [ 44.154265][ T342] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.294261][ T342] usb 1-1: device descriptor read/64, error -71 [ 44.534256][ T342] usb 1-1: device descriptor read/64, error -71 [ 44.774256][ T342] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.914276][ T342] usb 1-1: device descriptor read/64, error -71 [ 44.974263][ T479] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 45.114257][ T479] usb 4-1: device descriptor read/64, error -71 [ 45.154263][ T342] usb 1-1: device descriptor read/64, error -71 [ 45.264323][ T342] usb usb1-port1: attempt power cycle [ 45.354603][ T479] usb 4-1: device descriptor read/64, error -71 [ 45.464598][ T45] usb 2-1: USB disconnect, device number 10 [ 45.472611][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.488023][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.497753][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.507015][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.516161][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.525486][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.534509][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.543717][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.552644][ T646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.561919][ T646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.593941][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 45.593955][ T36] audit: type=1400 audit(1782348577.780:223): avc: denied { append } for pid=648 comm="syz.1.71" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.604323][ T479] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 45.644241][ T342] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.675349][ T342] usb 1-1: device descriptor read/8, error -71 [ 45.784271][ T479] usb 4-1: device descriptor read/64, error -71 [ 45.805599][ T342] usb 1-1: device descriptor read/8, error -71 [ 45.971439][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.982759][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 45.991646][ T311] usb 3-1: can't read configurations, error -71 [ 45.998041][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.024287][ T479] usb 4-1: device descriptor read/64, error -71 [ 46.044290][ T342] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 46.065438][ T342] usb 1-1: device descriptor read/8, error -71 [ 46.128696][ T36] audit: type=1400 audit(1782348578.320:224): avc: denied { bind } for pid=654 comm="syz.0.74" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.137042][ T655] rust_binder: 47: no such ref 3 [ 46.148862][ T479] usb usb4-port1: attempt power cycle [ 46.158905][ T36] audit: type=1400 audit(1782348578.320:225): avc: denied { name_bind } for pid=654 comm="syz.0.74" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.180055][ T36] audit: type=1400 audit(1782348578.320:226): avc: denied { node_bind } for pid=654 comm="syz.0.74" saddr=fe80::12 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.186051][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 46.202949][ T36] audit: type=1400 audit(1782348578.320:227): avc: denied { set_context_mgr } for pid=654 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 46.209139][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 46.231911][ T342] usb 1-1: device descriptor read/8, error -71 [ 46.244161][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 46.254688][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 46.266216][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 46.277293][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 46.291373][ T45] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 46.300551][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.308577][ T45] usb 2-1: Product: syz [ 46.312812][ T45] usb 2-1: Manufacturer: syz [ 46.317449][ T45] usb 2-1: SerialNumber: syz [ 46.326443][ T45] usb 2-1: config 0 descriptor?? [ 46.340033][ T45] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 46.350076][ T311] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 46.365374][ T342] usb usb1-port1: unable to enumerate USB device [ 46.514273][ T479] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 46.532325][ T45] usb 2-1: USB disconnect, device number 11 [ 46.539138][ T479] usb 4-1: device descriptor read/8, error -71 [ 46.685386][ T479] usb 4-1: device descriptor read/8, error -71 [ 46.709958][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 46.720806][ T311] usb 3-1: can't read configurations, error -71 [ 46.727490][ T311] usb usb3-port1: attempt power cycle [ 46.934290][ T479] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 46.965380][ T479] usb 4-1: device descriptor read/8, error -71 [ 47.105097][ T479] usb 4-1: device descriptor read/8, error -71 [ 47.121117][ T661] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.214390][ T479] usb usb4-port1: unable to enumerate USB device [ 47.222633][ T36] audit: type=1400 audit(1782348579.410:228): avc: denied { write } for pid=665 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.351052][ T669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.79'. [ 47.374286][ T342] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.544264][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 47.549493][ T479] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 47.558193][ T342] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.569170][ T342] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.579002][ T342] usb 2-1: config 0 interface 0 has no altsetting 0 [ 47.585672][ T342] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 47.594739][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.603531][ T342] usb 2-1: config 0 descriptor?? [ 47.704298][ T479] usb 1-1: Using ep0 maxpacket: 8 [ 47.710422][ T479] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 47.721821][ T479] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 47.734700][ T479] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.741352][ T479] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 47.750460][ T479] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.760036][ T479] usb 1-1: config 0 descriptor?? [ 48.015855][ T342] hid (null): unknown global tag 0xd [ 48.021216][ T342] hid (null): invalid report_count 218908673 [ 48.027247][ T342] hid (null): invalid report_size 64835 [ 48.032834][ T342] hid (null): unknown global tag 0xc [ 48.038538][ T342] hid (null): invalid report_size -44574717 [ 48.170198][ T479] wacom 0003:056A:032A.0007: ignoring exceeding usage max [ 48.179958][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.184368][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 48.186922][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.201354][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.208331][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.215228][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.219385][ T661] overlayfs: missing 'lowerdir' [ 48.222324][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.233914][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.235874][ T45] usb 2-1: USB disconnect, device number 12 [ 48.241116][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.253677][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.260924][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.267975][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.274986][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.281872][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.289057][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.296125][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.303019][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.309942][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.316848][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.323706][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.330641][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.337586][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.344586][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.351488][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.358403][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.365332][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.372210][ T479] wacom 0003:056A:032A.0007: unknown main item tag 0x0 [ 48.374417][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 48.385719][ T479] wacom 0003:056A:032A.0007: hidraw0: USB HID v0.04 Device [HID 056a:032a] on usb-dummy_hcd.0-1/input0 [ 48.396408][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.407880][ T479] usb 1-1: USB disconnect, device number 13 [ 48.413524][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.426882][ T311] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 48.436196][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.447747][ T311] usb 4-1: config 0 descriptor?? [ 48.455064][ T681] fido_id[681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 48.655408][ T680] syz.3.82 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.867934][ T311] hid-picolcd 0003:04D8:C002.0008: unknown global tag 0xc [ 48.875146][ T311] hid-picolcd 0003:04D8:C002.0008: item 0 1 1 12 parsing failed [ 48.882941][ T311] hid-picolcd 0003:04D8:C002.0008: device report parse failed [ 48.890479][ T311] hid-picolcd 0003:04D8:C002.0008: probe with driver hid-picolcd failed with error -22 [ 48.916721][ T36] audit: type=1400 audit(1782348581.110:229): avc: denied { setopt } for pid=682 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.941754][ T36] audit: type=1400 audit(1782348581.130:230): avc: denied { mount } for pid=682 comm="syz.0.83" name="/" dev="configfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.972208][ T36] audit: type=1400 audit(1782348581.160:231): avc: denied { search } for pid=682 comm="syz.0.83" name="/" dev="configfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.018756][ T36] audit: type=1400 audit(1782348581.190:232): avc: denied { read } for pid=682 comm="syz.0.83" name="/" dev="configfs" ino=2213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.042506][ T692] syzkaller1: entered promiscuous mode [ 49.048041][ T692] syzkaller1: entered allmulticast mode [ 49.068721][ T311] usb 4-1: USB disconnect, device number 15 [ 49.644292][ T311] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 49.804300][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 49.810504][ T311] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 49.821709][ T311] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.834627][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.841245][ T311] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 49.850346][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.858569][ T416] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 49.866985][ T311] usb 1-1: config 0 descriptor?? [ 49.914373][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.015431][ T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.026418][ T416] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.036300][ T416] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 50.045446][ T416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.054165][ T416] usb 4-1: config 0 descriptor?? [ 50.064284][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 50.070513][ T45] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 50.083357][ T45] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.090033][ T45] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 50.099160][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.107962][ T45] usb 2-1: config 0 descriptor?? [ 50.290951][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 50.297151][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 50.306186][ T311] usb 1-1: USB disconnect, device number 14 [ 50.462646][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.469687][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.476778][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.483604][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.490424][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.497289][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.504067][ T416] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 50.511572][ T416] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 50.684298][ T479] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 50.796591][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 50.796609][ T36] audit: type=1400 audit(1782348582.990:241): avc: denied { write } for pid=311 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5820 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.837186][ T342] usb 2-1: USB disconnect, device number 13 [ 50.850379][ T36] audit: type=1400 audit(1782348583.040:242): avc: denied { view } for pid=733 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.869346][ T36] audit: type=1400 audit(1782348583.060:243): avc: denied { ioctl } for pid=733 comm="syz.0.100" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.884503][ T734] input: syz1 as /devices/virtual/input/input11 [ 50.896111][ T479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.911560][ T479] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.922676][ T479] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.944537][ T479] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.945659][ T36] audit: type=1400 audit(1782348583.140:244): avc: denied { getopt } for pid=733 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.983655][ T479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.994246][ T479] usb 3-1: config 0 descriptor?? [ 51.000999][ T737] netlink: 'syz.1.101': attribute type 13 has an invalid length. [ 51.008811][ T36] audit: type=1400 audit(1782348583.190:245): avc: denied { read write } for pid=738 comm="syz.0.102" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.033055][ T737] erspan0: refused to change device tx_queue_len [ 51.042737][ T36] audit: type=1400 audit(1782348583.190:246): avc: denied { open } for pid=738 comm="syz.0.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.066655][ T36] audit: type=1400 audit(1782348583.220:247): avc: denied { ioctl } for pid=738 comm="syz.0.102" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf7b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.075671][ T416] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 51.104244][ T416] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 51.111507][ T416] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -32 [ 51.121964][ T36] audit: type=1400 audit(1782348583.320:248): avc: denied { setopt } for pid=740 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.202570][ T724] kvm: kvm [723]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.217592][ T724] kvm: kvm [723]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 51.226783][ T750] capability: warning: `syz.1.107' uses 32-bit capabilities (legacy support in use) [ 51.256884][ T752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.266252][ T752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.284304][ T342] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 51.435780][ T342] usb 1-1: not running at top speed; connect to a high speed hub [ 51.444431][ T342] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.456840][ T342] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 51.466007][ T342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.474031][ T342] usb 1-1: Product: Ñ” [ 51.478186][ T342] usb 1-1: Manufacturer: Ð [ 51.482721][ T342] usb 1-1: SerialNumber: ⹊驱駥嵚㟭䲞â½ï›¥çŸê·à·¡â‚¡æ¥‹á›Žé¥á¢­ë¦‹á €ã¥¶î˜¬é’Œé¬‡î“•áª‘愦㴳꠼㻶鉴歒屟⒯Ⱚ⭘ጇ雋Ⳳï±ê˜Úî…‚å†©î¸ [ 51.488137][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.508211][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.514367][ T66] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.523765][ T36] audit: type=1400 audit(1782348583.710:249): avc: denied { write } for pid=723 comm="syz.2.98" name="config" dev="proc" ino=4026532591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.538188][ T724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.554828][ T724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.610755][ T479] usbhid 3-1:0.0: can't add hid device: -71 [ 51.618052][ T479] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 51.627429][ T479] usb 3-1: USB disconnect, device number 9 [ 51.694247][ T66] usb 2-1: Using ep0 maxpacket: 8 [ 51.700448][ T66] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 51.712047][ T66] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.719734][ T36] audit: type=1400 audit(1782348583.900:250): avc: denied { read } for pid=738 comm="syz.0.102" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.725627][ T66] usb 2-1: config 0 interface 0 has no altsetting 0 [ 51.755804][ T66] usb 2-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 51.765640][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.777960][ T342] usb 1-1: USB disconnect, device number 15 [ 51.784557][ T66] usb 2-1: config 0 descriptor?? [ 51.794686][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.191934][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 52.198395][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.207326][ T66] usb 2-1: USB disconnect, device number 14 [ 52.269058][ T762] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.564267][ T342] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.631863][ T416] usb 4-1: USB disconnect, device number 16 [ 52.680972][ T781] ======================================================= [ 52.680972][ T781] WARNING: The mand mount option has been deprecated and [ 52.680972][ T781] and is ignored by this kernel. Remove the mand [ 52.680972][ T781] option from the mount to silence this warning. [ 52.680972][ T781] ======================================================= [ 52.694446][ T342] usb 3-1: device descriptor read/64, error -71 [ 52.812643][ T789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.812723][ T789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.994311][ T342] usb 3-1: device descriptor read/64, error -71 [ 53.054313][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 53.074288][ T416] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.225734][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 53.234418][ T45] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 53.242621][ T45] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 53.252995][ T416] usb 4-1: Using ep0 maxpacket: 32 [ 53.254386][ T342] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 53.258674][ T45] usb 2-1: config 63 has no interface number 0 [ 53.272339][ T45] usb 2-1: config 63 interface 66 has no altsetting 0 [ 53.279701][ T416] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 53.288112][ T416] usb 4-1: config 0 has no interface number 0 [ 53.295367][ T45] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 53.304662][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.312713][ T45] usb 2-1: Product: syz [ 53.317213][ T45] usb 2-1: Manufacturer: syz [ 53.321939][ T45] usb 2-1: SerialNumber: syz [ 53.326830][ T416] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 53.336458][ T416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.347215][ T416] usb 4-1: Product: syz [ 53.351493][ T416] usb 4-1: Manufacturer: syz [ 53.356370][ T416] usb 4-1: SerialNumber: syz [ 53.364442][ T416] usb 4-1: config 0 descriptor?? [ 53.373424][ T416] smsc95xx v2.0.0 [ 53.414294][ T342] usb 3-1: device descriptor read/64, error -71 [ 53.549547][ T45] usb 2-1: Found UVC 0.07 device syz (174f:8acf) [ 53.564608][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 53.585395][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 53.604486][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 53.614645][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 53.634475][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 53.643618][ T45] usb 2-1: No streaming interface found for terminal 29. [ 53.653271][ T45] uvcvideo 2-1:63.66: Entity type for entity Output 5 was not initialized! [ 53.654428][ T342] usb 3-1: device descriptor read/64, error -71 [ 53.683167][ T45] usb 2-1: USB disconnect, device number 15 [ 53.787564][ T416] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 53.794638][ T342] usb usb3-port1: attempt power cycle [ 53.804396][ T416] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 53.813797][ T416] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 53.825096][ T416] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 53.837590][ T416] usb 4-1: USB disconnect, device number 17 [ 54.074287][ T45] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 54.164282][ T342] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 54.195375][ T342] usb 3-1: device descriptor read/8, error -71 [ 54.235799][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.243973][ T45] usb 2-1: not running at top speed; connect to a high speed hub [ 54.252530][ T45] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 54.260831][ T45] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 54.271095][ T45] usb 2-1: config 63 has no interface number 0 [ 54.277382][ T45] usb 2-1: config 63 interface 66 has no altsetting 0 [ 54.286517][ T45] usb 2-1: string descriptor 0 read error: -22 [ 54.292740][ T45] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 54.301959][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.321479][ T45] usb 2-1: Found UVC 0.07 device (174f:8acf) [ 54.325640][ T342] usb 3-1: device descriptor read/8, error -71 [ 54.521854][ T789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.531064][ T789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.574291][ T342] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 54.615287][ T342] usb 3-1: device descriptor read/8, error -71 [ 54.745257][ T342] usb 3-1: device descriptor read/8, error -71 [ 54.864256][ T342] usb usb3-port1: unable to enumerate USB device [ 55.795084][ T721] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 55.810768][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 55.832556][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 55.841972][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 55.851272][ T45] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 55.862085][ T45] usb 2-1: No streaming interface found for terminal 29. [ 55.869257][ T45] uvcvideo 2-1:63.66: Entity type for entity Output 5 was not initialized! [ 55.885414][ T45] usb 2-1: USB disconnect, device number 16 [ 55.952185][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.962319][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.985462][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.994330][ T342] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 55.996798][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.013971][ T721] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.023194][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.035595][ T721] usb 3-1: config 0 descriptor?? [ 56.165293][ T342] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 56.176326][ T342] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.189335][ T342] usb 4-1: config 0 interface 0 has no altsetting 0 [ 56.196032][ T342] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 56.205249][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.215530][ T342] usb 4-1: config 0 descriptor?? [ 56.220980][ T808] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 56.304292][ T45] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 56.465391][ T45] usb 2-1: config 1 has an invalid interface number: 225 but max is 2 [ 56.473754][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.484283][ T45] usb 2-1: config 1 has no interface number 2 [ 56.490458][ T45] usb 2-1: config 1 interface 1 has no altsetting 0 [ 56.498968][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 56.508321][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.516551][ T45] usb 2-1: Product: syz [ 56.520844][ T45] usb 2-1: Manufacturer: syz [ 56.525704][ T45] usb 2-1: SerialNumber: syz [ 56.633365][ T342] elecom 0003:056E:00FC.000B: unknown main item tag 0x2 [ 56.644281][ T342] elecom 0003:056E:00FC.000B: unknown global tag 0xd [ 56.651000][ T342] elecom 0003:056E:00FC.000B: item 0 2 1 13 parsing failed [ 56.652926][ T721] usb 3-1: language id specifier not provided by device, defaulting to English [ 56.658847][ T342] elecom 0003:056E:00FC.000B: probe with driver elecom failed with error -22 [ 56.736058][ T45] usb 2-1: selecting invalid altsetting 0 [ 56.756821][ T45] usb 2-1: USB disconnect, device number 17 [ 56.835299][ T416] usb 4-1: USB disconnect, device number 18 [ 57.256093][ T721] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 57.266934][ T721] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 57.275275][ T721] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 57.283554][ T721] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 57.291615][ T721] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 57.305892][ T721] usb 3-1: USB disconnect, device number 14 [ 57.634320][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 57.654296][ T416] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 57.785112][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 57.791917][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 57.802163][ T45] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 57.822862][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.834332][ T416] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 57.843071][ T416] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 57.863459][ T45] usb 4-1: Product: syz [ 57.867871][ T45] usb 4-1: Manufacturer: îŽê£½ï¼“ﳯèŠî˜›ï®¼â“‚馬åŠê€‡â“¢â”˜ë—ºì¨£æ¯¶Ý¾â‹Šë¢¬ê¿´ê²Ÿê¬†ã„ºç«¬ã‚•ç¹§å‚Ÿë•žîŠšä§Œí€¼ë•˜Æ膾濫좹ꈾí¨ä¤’廄芓暅惖áä±®èµãŠ”鱢æ…䈨î™ëˆ¯çŸ¤à½‹ìŒ›äˆ€ì¼…扥羬Ɀ쎛襲Шã»ì¾ºÝ° [ 57.896832][ T416] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.905838][ T416] usb 2-1: config 1 has no interface number 0 [ 57.911961][ T416] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 57.922833][ T45] usb 4-1: SerialNumber: syz [ 57.928599][ T416] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 57.943722][ T416] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.953066][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.964011][ T416] usb 2-1: Product: syz [ 57.968438][ T416] usb 2-1: Manufacturer: syz [ 57.973188][ T416] usb 2-1: SerialNumber: syz [ 57.980305][ T416] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 57.987346][ T416] cdc_ncm 2-1:1.1: bind() failure [ 58.182814][ T311] usb 2-1: USB disconnect, device number 18 [ 58.214329][ T721] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 58.345580][ T45] usb 4-1: unit 0 not found! [ 58.375597][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.386669][ T721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.397104][ T721] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.410178][ T721] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 58.419430][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.432369][ T721] usb 3-1: config 0 descriptor?? [ 58.760473][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 58.801346][ T45] usb 4-1: unit 0 not found! [ 58.808191][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 58.819221][ T45] usb 4-1: unit 0 not found! [ 58.830794][ T45] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 58.841748][ T721] playstation 0003:054C:09CC.000C: unknown main item tag 0x2 [ 58.851862][ T45] usb 4-1: USB disconnect, device number 19 [ 58.858210][ T721] playstation 0003:054C:09CC.000C: unknown main item tag 0x0 [ 58.868919][ T721] playstation 0003:054C:09CC.000C: item fetching failed at offset 7/9 [ 58.880130][ T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.890372][ T721] playstation 0003:054C:09CC.000C: Parse failed [ 58.904836][ T721] playstation 0003:054C:09CC.000C: probe with driver playstation failed with error -22 [ 58.943697][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 58.943713][ T36] audit: type=1400 audit(1782348591.130:267): avc: denied { getopt } for pid=829 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.970325][ T830] SELinux: failed to load policy [ 58.977356][ T36] audit: type=1400 audit(1782348591.130:266): avc: denied { getopt } for pid=829 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.984550][ T830] ªªªªª»: renamed from tunl0 (while UP) [ 58.997377][ T36] audit: type=1400 audit(1782348591.160:268): avc: denied { load_policy } for pid=829 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.042088][ T821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.052861][ T827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.062299][ T821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.070711][ T827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.080050][ T45] usb 3-1: USB disconnect, device number 15 [ 59.139176][ T36] audit: type=1400 audit(1782348591.330:269): avc: denied { bind } for pid=838 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.374288][ T342] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 59.524274][ T342] usb 2-1: device descriptor read/64, error -71 [ 59.764269][ T342] usb 2-1: device descriptor read/64, error -71 [ 59.896860][ T853] bridge0: port 3(veth0_to_bridge) entered blocking state [ 59.914598][ T36] audit: type=1400 audit(1782348592.110:270): avc: denied { write } for pid=854 comm="syz.2.143" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.937201][ T853] bridge0: port 3(veth0_to_bridge) entered disabled state [ 59.946286][ T853] veth0_to_bridge: entered allmulticast mode [ 59.955115][ T36] audit: type=1400 audit(1782348592.140:271): avc: denied { accept } for pid=852 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.975320][ T853] veth0_to_bridge: entered promiscuous mode [ 59.981358][ T853] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 59.993957][ T853] bridge0: port 3(veth0_to_bridge) entered blocking state [ 60.001131][ T853] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 60.004423][ T342] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 60.057533][ T36] audit: type=1400 audit(1782348592.250:272): avc: denied { write } for pid=858 comm="syz.2.144" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.081181][ T36] audit: type=1400 audit(1782348592.250:273): avc: denied { open } for pid=858 comm="syz.2.144" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.106135][ T36] audit: type=1400 audit(1782348592.270:274): avc: denied { ioctl } for pid=858 comm="syz.2.144" path="/34/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.164270][ T342] usb 2-1: device descriptor read/64, error -71 [ 60.184269][ T66] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 60.254240][ T36] audit: type=1400 audit(1782348592.440:275): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.344251][ T66] usb 4-1: Using ep0 maxpacket: 32 [ 60.356607][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 60.374974][ T66] usb 4-1: config 16 has an invalid interface number: 82 but max is 0 [ 60.383186][ T66] usb 4-1: config 16 has no interface number 0 [ 60.404237][ T66] usb 4-1: config 16 interface 82 has no altsetting 0 [ 60.413118][ T66] usb 4-1: string descriptor 0 read error: -22 [ 60.419401][ T66] usb 4-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=3a.dc [ 60.428663][ T342] usb 2-1: device descriptor read/64, error -71 [ 60.444236][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.461503][ T66] uvcvideo 4-1:16.82: Found Unit with invalid ID 0 [ 60.555169][ T342] usb usb2-port1: attempt power cycle [ 60.621667][ T888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 60.658322][ T892] : renamed from bridge0 (while UP) [ 60.665799][ T853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.675073][ T892] kernel profiling enabled (shift: 63) [ 60.677714][ T853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.680558][ T892] profiling shift: 63 too large [ 60.704936][ T66] usb 4-1: USB disconnect, device number 20 [ 60.904273][ T342] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 60.925392][ T342] usb 2-1: device descriptor read/8, error -71 [ 60.954280][ T721] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 61.055296][ T342] usb 2-1: device descriptor read/8, error -71 [ 61.116595][ T721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.144590][ T721] usb 3-1: not running at top speed; connect to a high speed hub [ 61.164844][ T721] usb 3-1: config 8 has an invalid interface number: 43 but max is 1 [ 61.175330][ T721] usb 3-1: config 8 has an invalid interface number: 35 but max is 1 [ 61.186340][ T721] usb 3-1: config 8 has no interface number 0 [ 61.192466][ T721] usb 3-1: config 8 has no interface number 1 [ 61.198897][ T721] usb 3-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 61.210810][ T721] usb 3-1: config 8 interface 43 has no altsetting 0 [ 61.217818][ T721] usb 3-1: config 8 interface 35 has no altsetting 0 [ 61.226209][ T721] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 61.235479][ T721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.243658][ T721] usb 3-1: Product: syz [ 61.248243][ T721] usb 3-1: Manufacturer: syz [ 61.254230][ T721] usb 3-1: SerialNumber: syz [ 61.304290][ T342] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 61.334774][ T342] usb 2-1: device descriptor read/8, error -71 [ 61.345629][ T903] netlink: 'syz.3.157': attribute type 32 has an invalid length. [ 61.353980][ T904] netlink: 'syz.3.157': attribute type 32 has an invalid length. [ 61.465477][ T342] usb 2-1: device descriptor read/8, error -71 [ 61.566915][ T721] ums-alauda 3-1:8.43: USB Mass Storage device detected [ 61.578410][ T342] usb usb2-port1: unable to enumerate USB device [ 61.605953][ T721] scsi host1: usb-storage 3-1:8.43 [ 61.614065][ T721] hub 3-1:8.35: Invalid hub with more than one config or interface [ 61.624630][ T721] hub 3-1:8.35: probe with driver hub failed with error -22 [ 61.632130][ T721] ums-alauda 3-1:8.35: USB Mass Storage device detected [ 61.656560][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 61.667807][ T919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 61.689306][ T721] usb 3-1: USB disconnect, device number 16 [ 61.764296][ T66] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 61.934266][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 61.956633][ T66] usb 4-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 61.965752][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.973871][ T66] usb 4-1: Product: syz [ 61.978270][ T66] usb 4-1: Manufacturer: syz [ 61.982894][ T66] usb 4-1: SerialNumber: syz [ 62.064308][ T721] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 62.214308][ T66] usb 4-1: Can't get UAC3 power state for id 10 [ 62.216042][ T721] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.233765][ T721] usb 3-1: config 0 interface 0 has no altsetting 0 [ 62.240472][ T66] usb 4-1: BAAD SPEAKERPHONE c_chmask mismatch [ 62.240850][ T721] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 62.256340][ T721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.265646][ T721] usb 3-1: config 0 descriptor?? [ 62.272130][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 62.297838][ T66] usb 4-1: USB disconnect, device number 21 [ 62.323209][ T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.477592][ T721] usbhid 3-1:0.0: can't add hid device: -71 [ 62.483635][ T721] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 62.501861][ T721] usb 3-1: USB disconnect, device number 17 [ 62.574273][ T416] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 62.734276][ T416] usb 2-1: Using ep0 maxpacket: 32 [ 62.741045][ T416] usb 2-1: unable to get BOS descriptor or descriptor too short [ 62.750269][ T416] usb 2-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 62.760784][ T416] usb 2-1: config 230 has 1 interface, different from the descriptor's value: 3 [ 62.771525][ T416] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 62.780765][ T416] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.789528][ T416] usb 2-1: Product: syz [ 62.793873][ T416] usb 2-1: Manufacturer: syz [ 62.798855][ T416] usb 2-1: SerialNumber: syz [ 63.005214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.013243][ T416] usb 2-1: unit 4 not found! [ 63.017584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.017677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.017747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.017816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.017886][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.017955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.018022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 63.023049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.034855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 64.955271][ T342] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 67.336904][ C0] sched: DL replenish lagged too much [ 68.014227][ C0] net_ratelimit: 110796 callbacks suppressed [ 68.014248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.014251][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.014863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.020627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.032920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.044409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 68.056720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.068242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.080646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.092225][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 69.905204][ T416] usb 2-1: unit 0 not found! [ 70.220991][ T416] usb 2-1: USB disconnect, device number 23 [ 70.496262][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:230.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.024231][ C0] net_ratelimit: 109956 callbacks suppressed [ 73.024253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.024640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.030502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.042764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.054342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 73.066718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.078137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.090591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.102163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.114404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.034253][ C0] net_ratelimit: 109898 callbacks suppressed [ 78.034276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.034278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.034945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.040497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 78.053007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.064432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.076794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.088404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.100818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.112145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 83.044213][ C0] net_ratelimit: 107185 callbacks suppressed [ 83.044236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.044274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.050528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.062803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.074360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 83.086768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.098212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.110563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.122187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.134486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.054230][ C0] net_ratelimit: 109638 callbacks suppressed [ 88.054349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 88.054818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.060607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.073060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.084624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.096919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.108402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 88.120716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.132299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.144742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.064270][ C1] net_ratelimit: 111585 callbacks suppressed [ 93.064295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.064322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 93.070988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.082378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.094781][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.107245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.118649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.130150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 93.142500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.154025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.074243][ C0] net_ratelimit: 108303 callbacks suppressed [ 98.074266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 98.074917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.080411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.092545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.104440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 98.117146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.128212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.140182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.152047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 98.165039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.084245][ C0] net_ratelimit: 107744 callbacks suppressed [ 103.084267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.084307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.090528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 103.103321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.114473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.126462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.138518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.150987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.162111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.174198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.094216][ C0] net_ratelimit: 107929 callbacks suppressed [ 108.094240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 108.095140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.100568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.112616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.124523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 108.137155][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.148428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.160426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.172404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.185139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.104229][ C0] net_ratelimit: 107589 callbacks suppressed [ 113.104253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 113.104294][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.110387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.123194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.134570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.146352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.158163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.170960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.182141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 113.194161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.114228][ C1] net_ratelimit: 115331 callbacks suppressed [ 118.114249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.114333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 118.120468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.132357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.145166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.156479][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.168358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.180174][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.192937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.204145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 123.124231][ C0] net_ratelimit: 115697 callbacks suppressed [ 123.124255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.124424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.130472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.142483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.154603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 123.167286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.178297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.190308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.202188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 123.215064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.134192][ C0] net_ratelimit: 109482 callbacks suppressed [ 128.134216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 128.134244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.140513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.152484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.164388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 128.177261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.188217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.200262][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.212226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.224941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.144210][ C0] net_ratelimit: 100992 callbacks suppressed [ 133.144233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.144498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.150428][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.162466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.174457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 133.187025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.198218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.210160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.222152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 133.234872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.154199][ C0] net_ratelimit: 110005 callbacks suppressed [ 138.154220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.154755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.160680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 138.172642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.184559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.197170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.208463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 138.220487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.232312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.245272][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.164198][ C0] net_ratelimit: 111374 callbacks suppressed [ 143.164220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.165053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.170477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.182493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.194520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 143.207138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.218287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.230359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.242230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 143.254986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.174215][ C0] net_ratelimit: 109732 callbacks suppressed [ 148.174238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.174623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.180574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 148.192540][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.204483][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.217278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.228454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.240264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.252178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.265065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.184214][ C0] net_ratelimit: 111865 callbacks suppressed [ 153.184238][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 153.185058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.190706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.202713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.214793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.227453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.238463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.250590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.262647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 153.275328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.194196][ C0] net_ratelimit: 110871 callbacks suppressed [ 158.194220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 158.194662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.200443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.212439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.224511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.237060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.248183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.260215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.272161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 158.284916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.204233][ C0] net_ratelimit: 110023 callbacks suppressed [ 163.204256][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 163.204295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.210434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 163.223207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.234398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.246451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.258289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 163.270988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.282092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.294113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.214167][ C0] net_ratelimit: 108400 callbacks suppressed [ 168.214189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 168.214695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.220363][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.232890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.244425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.256268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.268142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.280926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.292097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 168.304365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.224183][ C1] net_ratelimit: 113706 callbacks suppressed [ 173.224206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.224241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 173.231261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.242257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.254772][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.266361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.278229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.290047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.302899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.313994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 178.234219][ C0] net_ratelimit: 108895 callbacks suppressed [ 178.234242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.234281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.240497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 178.252869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.264312][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.276322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.288319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.300937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.312067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.324486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.244161][ C0] net_ratelimit: 106028 callbacks suppressed [ 183.244184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 183.244265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.250506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.262452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.274449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.287205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.298407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.310570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.322161][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 183.334102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.254176][ C0] net_ratelimit: 106865 callbacks suppressed [ 188.254198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 188.254610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.260477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 188.272858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.284513][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.296519][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.308364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.321264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.332340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.344721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.305313][ T958] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.312394][ T958] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.334469][ T958] bridge_slave_0: entered allmulticast mode [ 190.364692][ T958] bridge_slave_0: entered promiscuous mode [ 190.857324][ T958] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.874742][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.897070][ T958] bridge_slave_1: entered allmulticast mode [ 190.915627][ T958] bridge_slave_1: entered promiscuous mode [ 193.264255][ C0] net_ratelimit: 97990 callbacks suppressed [ 193.264278][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.264317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.270558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.283177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.294313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.306767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.318383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 193.330206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.342135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 193.354895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.274188][ C0] net_ratelimit: 110761 callbacks suppressed [ 198.274211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.274224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.274798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.280417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.292974][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.304477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.317081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.328211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 198.340467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.352065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.284161][ C0] net_ratelimit: 109430 callbacks suppressed [ 203.284186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 203.284205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.290349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.302413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.314398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.327057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.338160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.350549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.362106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 203.373956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.684940][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.692031][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.775317][ T966] bridge_slave_0: entered allmulticast mode [ 206.805707][ T966] bridge_slave_0: entered promiscuous mode [ 206.905070][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.912153][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.945574][ T966] bridge_slave_1: entered allmulticast mode [ 206.966206][ T966] bridge_slave_1: entered promiscuous mode [ 208.294167][ C0] net_ratelimit: 110574 callbacks suppressed [ 208.294189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 208.294792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.300395][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.313090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.324418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.336476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.348388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.364465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.372190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 208.384714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.422168][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.597034][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.615733][ T967] bridge_slave_0: entered allmulticast mode [ 208.645281][ T967] bridge_slave_0: entered promiscuous mode [ 208.737407][ T964] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.875395][ T964] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.888621][ T964] bridge_slave_0: entered allmulticast mode [ 208.924851][ T964] bridge_slave_0: entered promiscuous mode [ 209.087793][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.125155][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.132284][ T967] bridge_slave_1: entered allmulticast mode [ 209.175887][ T967] bridge_slave_1: entered promiscuous mode [ 209.277603][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.304645][ T964] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.311793][ T964] bridge_slave_1: entered allmulticast mode [ 209.354494][ T964] bridge_slave_1: entered promiscuous mode [ 213.304195][ C0] net_ratelimit: 106565 callbacks suppressed [ 213.304219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.304367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.310512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.322517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.334512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.347117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.358231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 213.370722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.382081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.394104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.314180][ C0] net_ratelimit: 110637 callbacks suppressed [ 218.314203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 218.314457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.320500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.332478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.344454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.357367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.368460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.380692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.392210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 218.404298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.324147][ C0] net_ratelimit: 106617 callbacks suppressed [ 223.324170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 223.324191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.330419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 223.343169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.354379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.366711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.378184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.390273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.402176][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.414957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.334171][ C0] net_ratelimit: 111784 callbacks suppressed [ 228.334194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.334230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.340508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.352723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.364311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.376292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.388241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 228.401006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.412098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 228.424744][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.435828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.665020][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.672262][ T973] bridge_slave_0: entered allmulticast mode [ 228.714242][ T973] bridge_slave_0: entered promiscuous mode [ 233.344165][ C0] net_ratelimit: 106896 callbacks suppressed [ 233.344188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 233.344629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.350402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 233.362766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.374433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.386346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.398202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.411040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.422193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.434453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.886817][ T37] INFO: task syz-executor:294 blocked for more than 122 seconds. [ 233.927356][ T37] Not tainted syzkaller #0 [ 233.932366][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.025831][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 234.025854][ T36] audit: type=1400 audit(1782348766.170:285): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1879]" dev="pipefs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 234.436603][ T37] task:syz-executor state:D stack:0 pid:294 tgid:294 ppid:1 flags:0x00004006 [ 236.346738][ T37] Call Trace: [ 236.350088][ T37] [ 236.353069][ T37] __schedule+0x1496/0x20b0 [ 236.526562][ T37] ? __sched_text_start+0x10/0x10 [ 236.531668][ T37] ? __kasan_check_write+0x18/0x20 [ 236.600756][ T37] ? _raw_spin_lock+0x92/0x120 [ 236.708130][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 236.713413][ T37] schedule+0xc5/0x240 [ 236.747948][ T37] schedule_preempt_disabled+0x14/0x30 [ 236.753492][ T37] __mutex_lock+0x902/0x1b90 [ 236.758205][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 236.765026][ T37] ? __kasan_check_write+0x18/0x20 [ 236.770162][ T37] ? _raw_spin_lock+0x92/0x120 [ 236.774953][ T37] ? __kasan_check_write+0x18/0x20 [ 236.780081][ T37] ? wake_up_q+0x10a/0x1c0 [ 236.784530][ T37] ? __mutex_unlock_slowpath+0x48f/0x780 [ 236.790201][ T37] ? mutex_unlock+0x240/0x240 [ 236.794903][ T37] __mutex_lock_slowpath+0xe/0x20 [ 236.799974][ T37] mutex_lock+0x113/0x1d0 [ 236.804343][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 236.809224][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 236.814390][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 236.819532][ T37] rcu_barrier+0x4d/0x580 [ 236.823892][ T37] ? __kasan_slab_free+0x6a/0x80 [ 236.828886][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 236.834025][ T37] netdev_run_todo+0x118/0xce0 [ 236.838828][ T37] ? kvfree+0x39/0x50 [ 236.842846][ T37] ? netdev_state_change+0xaa/0x240 [ 236.848094][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 236.853408][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 236.858606][ T37] rtnl_unlock+0x12/0x20 [ 236.862883][ T37] tun_chr_close+0xc5/0x150 [ 236.867438][ T37] __fput+0x208/0xa30 [ 236.871471][ T37] ____fput+0x20/0x30 [ 236.875507][ T37] task_work_run+0x1e8/0x260 [ 236.880131][ T37] ? __cfi_task_work_run+0x10/0x10 [ 236.885281][ T37] ? __kasan_check_write+0x18/0x20 [ 236.890411][ T37] do_exit+0xa46/0x2850 [ 236.894603][ T37] ? __cfi_do_exit+0x10/0x10 [ 236.899225][ T37] ? do_nanosleep+0x40d/0x550 [ 236.903920][ T37] ? __kasan_check_write+0x18/0x20 [ 236.909074][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 236.914221][ T37] do_group_exit+0x21f/0x2f0 [ 236.918838][ T37] ? __kasan_check_write+0x18/0x20 [ 236.923962][ T37] ? recalc_sigpending+0x184/0x1d0 [ 236.929124][ T37] get_signal+0x134c/0x1490 [ 236.933664][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 236.939272][ T37] ? common_nsleep+0x93/0xb0 [ 236.943892][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 236.950092][ T37] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 236.955944][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 236.961550][ T37] do_syscall_64+0x63/0xf0 [ 236.966011][ T37] ? clear_bhb_loop+0x50/0xa0 [ 236.970711][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 236.976638][ T37] RIP: 0033:0x7f2ae0357fd7 [ 236.981088][ T37] RSP: 002b:00007ffe6c1794f0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 236.989537][ T37] RAX: fffffffffffffdfc RBX: 000055556089e500 RCX: 00007f2ae0357fd7 [ 236.997552][ T37] RDX: 00007ffe6c179530 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.005651][ T37] RBP: 00007ffe6c17959c R08: 0000000000000000 R09: 0000000000000000 [ 237.013676][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 237.021677][ T37] R13: 00000000000927c0 R14: 0000000000016dfb R15: 00007ffe6c1795f0 [ 237.029679][ T37] [ 237.225946][ T37] INFO: task syz-executor:295 blocked for more than 126 seconds. [ 237.233899][ T37] Not tainted syzkaller #0 [ 237.566333][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.702465][ T37] task:syz-executor state:D stack:0 pid:295 tgid:295 ppid:1 flags:0x00004006 [ 237.712839][ T37] Call Trace: [ 237.716176][ T37] [ 237.719171][ T37] __schedule+0x1496/0x20b0 [ 237.723717][ T37] ? __schedule+0x149e/0x20b0 [ 237.728453][ T37] ? __sched_text_start+0x10/0x10 [ 237.733520][ T37] ? wake_nocb_gp+0x10a/0x1b0 [ 237.738262][ T37] ? __sched_text_start+0x10/0x10 [ 237.743327][ T37] ? __kasan_check_write+0x18/0x20 [ 237.748502][ T37] schedule+0xc5/0x240 [ 237.752613][ T37] schedule_timeout+0xc7/0x3b0 [ 237.757427][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 237.762827][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 237.768442][ T37] ? __smp_call_single_queue+0xd8/0x380 [ 237.774111][ T37] ? generic_exec_single+0x1fd/0x500 [ 237.779448][ T37] wait_for_common+0x368/0x650 [ 237.784409][ T37] ? wait_for_completion+0x40/0x40 [ 237.789587][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 237.795095][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 237.800244][ T37] wait_for_completion+0x1c/0x40 [ 237.805234][ T37] rcu_barrier+0x45a/0x580 [ 237.809687][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 237.814857][ T37] netdev_run_todo+0x118/0xce0 [ 237.819660][ T37] ? kvfree+0x39/0x50 [ 237.823676][ T37] ? netdev_state_change+0xaa/0x240 [ 237.828935][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 237.834281][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 237.839442][ T37] rtnl_unlock+0x12/0x20 [ 237.843723][ T37] tun_chr_close+0xc5/0x150 [ 237.848286][ T37] __fput+0x208/0xa30 [ 237.852308][ T37] ____fput+0x20/0x30 [ 237.856342][ T37] task_work_run+0x1e8/0x260 [ 237.860972][ T37] ? __cfi_task_work_run+0x10/0x10 [ 237.866150][ T37] ? free_nsproxy+0x223/0x290 [ 237.870866][ T37] do_exit+0xa46/0x2850 [ 237.875071][ T37] ? __cfi_do_exit+0x10/0x10 [ 237.879741][ T37] ? __kasan_check_write+0x18/0x20 [ 237.884937][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 237.890088][ T37] do_group_exit+0x21f/0x2f0 [ 237.894732][ T37] ? __kasan_check_write+0x18/0x20 [ 237.899886][ T37] ? recalc_sigpending+0x184/0x1d0 [ 237.905055][ T37] get_signal+0x134c/0x1490 [ 237.909607][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 237.915223][ T37] ? do_unlinkat+0x53a/0x5a0 [ 237.919859][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 237.926081][ T37] ? __kasan_check_write+0x18/0x20 [ 237.931228][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 237.936744][ T37] do_syscall_64+0x63/0xf0 [ 237.941186][ T37] ? clear_bhb_loop+0x50/0xa0 [ 237.945925][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 237.951864][ T37] RIP: 0033:0x7fc01ab9bf47 [ 237.956316][ T37] RSP: 002b:00007ffea04a6978 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 237.964787][ T37] RAX: ffffffffffffffff RBX: 0000000000025fc5 RCX: 00007fc01ab9bf47 [ 237.972791][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffea04a6a30 [ 237.980812][ T37] RBP: 00007ffea04a6a30 R08: 0000000000000000 R09: 0000000000000000 [ 237.988829][ T37] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffea04a7ac0 [ 237.996866][ T37] R13: 00007fc01ac322ca R14: 000055556bfc84e8 R15: 0000000000000005 [ 238.004885][ T37] [ 238.008022][ T37] NMI backtrace for cpu 0 [ 238.008041][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 238.008069][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.008082][ T37] Call Trace: [ 238.008089][ T37] [ 238.008097][ T37] __dump_stack+0x21/0x30 [ 238.008133][ T37] dump_stack_lvl+0x140/0x1c0 [ 238.008165][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 238.008195][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 238.008229][ T37] dump_stack+0x19/0x20 [ 238.008258][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 238.008280][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 238.008312][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 238.008334][ T37] ? sched_show_task+0x371/0x530 [ 238.008363][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 238.008393][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 238.008431][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 238.008462][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 238.008486][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 238.008515][ T37] watchdog+0xe45/0xf90 [ 238.008538][ T37] ? __kasan_check_write+0x18/0x20 [ 238.008562][ T37] ? __cfi_watchdog+0x10/0x10 [ 238.008585][ T37] ? __kasan_check_read+0x15/0x20 [ 238.008605][ T37] ? __kthread_parkme+0x12f/0x180 [ 238.008627][ T37] ? schedule+0xc5/0x240 [ 238.008651][ T37] kthread+0x2c7/0x360 [ 238.008675][ T37] ? __cfi_watchdog+0x10/0x10 [ 238.008699][ T37] ? __cfi_kthread+0x10/0x10 [ 238.008724][ T37] ret_from_fork+0x67/0xa0 [ 238.008755][ T37] ? __cfi_kthread+0x10/0x10 [ 238.008780][ T37] ret_from_fork_asm+0x1a/0x30 [ 238.008804][ T37] [ 238.008812][ T37] Sending NMI from CPU 0 to CPUs 1: [ 238.217600][ C1] NMI backtrace for cpu 1 [ 238.217612][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 8ee30d9df144bc892052d3af75bf7ae355cbcd4b [ 238.217632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.217643][ C1] RIP: 0010:ip6_rcv_finish+0x11/0x3c0 [ 238.217670][ C1] Code: cc cc cc cc cc cc cc cc cc b8 d2 49 5e a9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 <48> 89 d3 49 89 fe e8 44 6b 91 fc 48 85 db 0f 84 93 00 00 00 49 bc [ 238.217688][ C1] RSP: 0018:ffffc90000230508 EFLAGS: 00000246 [ 238.217703][ C1] RAX: ffffffff84f60a49 RBX: ffff8881023c6a80 RCX: ffff888103661300 [ 238.217716][ C1] RDX: ffff888132625640 RSI: 0000000000000001 RDI: ffff8881023c6a80 [ 238.217745][ C1] RBP: ffffc90000230530 R08: ffff888103661300 R09: 0000000000000004 [ 238.217756][ C1] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000001 [ 238.217766][ C1] R13: dffffc0000000000 R14: ffff888132625640 R15: 1ffff920000460ac [ 238.217778][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 238.217792][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.217802][ C1] CR2: 0000555b5905c1f0 CR3: 000000010c3fc000 CR4: 00000000003526b0 [ 238.217817][ C1] Call Trace: [ 238.217823][ C1] [ 238.217830][ C1] ipv6_rcv+0xf1/0x240 [ 238.217851][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 238.217870][ C1] ? br_dev_queue_push_xmit+0x571/0x710 [ 238.217894][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 238.217914][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 238.217929][ C1] ? __kasan_check_write+0x18/0x20 [ 238.217945][ C1] ? __skb_clone+0x453/0x6d0 [ 238.217968][ C1] netif_receive_skb+0x146/0x7b0 [ 238.217990][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 238.218011][ C1] ? br_flood+0x66d/0x720 [ 238.218026][ C1] br_pass_frame_up+0x126/0x1b0 [ 238.218043][ C1] br_handle_frame_finish+0x1178/0x1620 [ 238.218059][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 238.218076][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 238.218095][ C1] br_handle_frame+0x5a5/0xba0 [ 238.218113][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 238.218129][ C1] __netif_receive_skb_core+0xfc1/0x3a70 [ 238.218151][ C1] ? __kfree_skb+0x18f/0x210 [ 238.218171][ C1] ? ip6_mc_input+0x433/0x680 [ 238.218192][ C1] ? ip6_mc_input+0x433/0x680 [ 238.218212][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 238.218232][ C1] ? __asan_memset+0x39/0x50 [ 238.218247][ C1] ? qdisc_run_end+0x120/0x120 [ 238.218267][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 238.218287][ C1] ? ip6_rcv_finish+0x341/0x3c0 [ 238.218307][ C1] ? ipv6_rcv+0xf1/0x240 [ 238.218326][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 238.218345][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 238.218365][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 238.218385][ C1] process_backlog+0x40b/0xaf0 [ 238.218410][ C1] __napi_poll+0xd0/0x600 [ 238.218430][ C1] net_rx_action+0x5dc/0xd70 [ 238.218454][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 238.218475][ C1] ? sched_clock+0x44/0x60 [ 238.218497][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 238.218522][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 238.218545][ C1] handle_softirqs+0x1aa/0x620 [ 238.218562][ C1] ? __cfi_rcu_free_slab+0x10/0x10 [ 238.218582][ C1] __do_softirq+0xf/0x16 [ 238.218600][ C1] do_softirq+0xb8/0x110 [ 238.218614][ C1] [ 238.218619][ C1] [ 238.218625][ C1] ? __cfi_do_softirq+0x10/0x10 [ 238.218640][ C1] ? __cfi_rcu_free_slab+0x10/0x10 [ 238.218658][ C1] ? __free_slab+0xb2/0x110 [ 238.218676][ C1] __local_bh_enable_ip+0x74/0x80 [ 238.218692][ C1] rcu_do_batch+0x590/0xcb0 [ 238.218709][ C1] ? rcu_core+0xcc0/0xcc0 [ 238.218723][ C1] ? __kasan_check_write+0x18/0x20 [ 238.218738][ C1] ? _raw_spin_lock+0x92/0x120 [ 238.218754][ C1] ? __kasan_check_read+0x15/0x20 [ 238.218769][ C1] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 238.218785][ C1] rcu_nocb_cb_kthread+0x533/0xb60 [ 238.218803][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 238.218820][ C1] ? __kasan_check_write+0x18/0x20 [ 238.218835][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 238.218851][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 238.218867][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 238.218898][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 238.218915][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 238.218945][ C1] ? __kasan_check_read+0x15/0x20 [ 238.218960][ C1] ? __kthread_parkme+0x12f/0x180 [ 238.218976][ C1] ? schedule+0xc5/0x240 [ 238.218993][ C1] kthread+0x2c7/0x360 [ 238.219010][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 238.219026][ C1] ? __cfi_kthread+0x10/0x10 [ 238.219043][ C1] ret_from_fork+0x67/0xa0 [ 238.219064][ C1] ? __cfi_kthread+0x10/0x10 [ 238.219081][ C1] ret_from_fork_asm+0x1a/0x30 [ 238.219097][ C1] [ 238.354305][ C0] net_ratelimit: 90662 callbacks suppressed [ 238.354347][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 238.359226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.364772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.369937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.375795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.381670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.385618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.390869][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.396012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 238.400287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.364170][ C0] net_ratelimit: 104288 callbacks suppressed [ 243.364191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 243.364729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.370485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:9e:be:53:b9:96, vlan:0) [ 243.382864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.394419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.406506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.418311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.431235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.442340][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.454822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)