last executing test programs: 47.108509001s ago: executing program 0 (id=542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x2, 0x7, "50f1ff00"}}) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, 0x0, 0x0, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030825332564aaee7b1d58b9a64411b6bbf44d94f135564cbbf13fb7133740ba6d6546429ff310ff88a49d31d4cf39a06562725e5074898e2c6dc553ac0ed28447077773733f866765f80780ed949929e57b61ac1f193927b65dd411188704af4c4d8aa9ab6b981dba9edcc051c0a5be816e2b79c3b7ccbd54e987bd82b48a1c1fca80adde084cb6857decd17b", 0xb3}], 0x1) 47.040043445s ago: executing program 0 (id=543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000180)=0x800, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x31c000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab", 0x2c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x0, 0x8000, 0x50, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x17828, 0x80, 0x4, 0x2}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x34, r8, 0x301, 0x70bd2b, 0x25dfdbfb, {0x21}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4015}, 0x20004814) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000c2a5b904dc1249087c0302c8b33e7c9f7a3ce647f435b203f7582751e27fe162305643151cfcfe3c0f5c03d7294a629e551145f918165dccef52ccbce83f3047763245542e2c27be828353c91783e31943d50aa9d6385db61a0fda3dbee74d22cca5ff0c4e3b3ee03daf25e732a5ecd4b8b96182c039db95ecc27382753e73377972a19b3e63d4930beef625ba7ac892b9d61296f7b67b8b421348523b", @ANYRES16=r12, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r13, @ANYBLOB="0c0003800400038004000400"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x76, 0x0, 0x200000, 0x8, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1f, 0x0, 0x6ab, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="12002abd7000fcdbdf250b00000044000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003000200000008000300000000006800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f77696669000800030001000000140002006d616373656330000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="3000018008000300010000001400020076657468315f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="58000180080003000300000008000100", @ANYRES32=r13, @ANYBLOB="1400020070696d72656700000000000000000000140002006d6163766c616e3100000000000000000800030003000000140002006261746164765f736c6176655f300000300001801400020076657468310000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r14, @ANYBLOB], 0x178}, 0x1, 0x0, 0x0, 0x814}, 0x24000001) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r15 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r15, 0x4008ae9c, &(0x7f00000005c0)={0x6, 0x5}) 46.868987504s ago: executing program 0 (id=545): r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, r0, 0x3000000, 0x13, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'caif0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4e4c}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x191}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1c6}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf0}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x214, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @empty, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x703}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf0af}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa9f4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000640)={0xea7f, 0x0, 0xa, 0x9, 0xfffffffa}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000740)={0x320, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4b71}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x2b99}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xcb6c}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}, {0x8, 0xb, 0x7fffffff}, {0x6}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xbbb2}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0xb5}, {0x6}, {0x8, 0xb, 0x7f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xe}, {0x5}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}]}, 0x320}, 0x1, 0x0, 0x0, 0x40}, 0x2008000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) getsockname$packet(r4, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000cc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0xff, 0x6, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x700, 0x3, 0x4}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000dc0)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000e80)={'tunl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0xaf, 0x3ff, {{0x13, 0x4, 0x0, 0x3, 0x4c, 0x66, 0x0, 0xf7, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x32, [@dev={0xac, 0x14, 0x14, 0x2b}]}, @end, @end, @lsrr={0x83, 0x17, 0xa, [@dev={0xac, 0x14, 0x14, 0x22}, @local, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x2f, 0x1, 0x9, [{@empty}, {@empty, 0x7}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x0, 0x1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xb, 0x1, 0x4, @remote, @private2, 0x8000, 0x7, 0xace80000, 0x5}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001240)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000001040)={0x198, r7, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4fd730802daee772}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+%*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x90012021}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xe0, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x15}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20008491}, 0x40810) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000001480)=0x0) sendmsg$nl_generic(r5, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x178, 0x17, 0x400, 0x70bd2b, 0x25dfdbfb, {0x1e}, [@typed={0x8, 0x8, 0x0, 0x0, @uid=r18}, @generic="8d5a0a3f1f619f6041aa4e4644fbfa56290ea9b826bd59763dddabb9bd9662b3c9e93dbd07d894a6d2d183431c58e203b6b529128c2d849aaa2192a09033f6d6d86705337af562ce8415816d605b4bd20f9e6c2cfc5ec0fba34a81b4aa8b59ab319bbd3c90b0054945d16d8ec0a52e112f16b06520e8091f6f76abf318777b903ad3a146b6401e46ec1a11728fd0d77142ec70b3fd08589e3d7e95f2c4716dd527804702", @generic="edbb336fb2043b78db4ca664a840ede10203725d66f20b693a132e0bac0474748193ed8ee6a9a7abee96fdef6bd9c51ed94667ec8c509f5a6504dd827de6a3e933f84950393f31006e71c0972b346f525e49de0997e7502bc0306a53910a0cde8a3cc93ab185982563812d3ee53c3ec081869fa2d726bfe5c37501c077dba7c56c3340b8b476ff1a922fe45acf7f6f4a9a7321c03947d8c87534c812538636a34a9317f20cffdcf6bd6f74932f7c4c79ee707f0d82"]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x81) getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000016c0), &(0x7f0000001700)=0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f00000018c0)={&(0x7f0000001740), 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xcc, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000080) 46.780791289s ago: executing program 0 (id=546): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x40000000, 0x9cdeff16}}], 0x18}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0x98df24fb0ee54aca, 0x1ff, 0x7, 0x7d8, 0x800008, 0x5, 0x80}, {0xb, 0x7, 0x1, 0x2, 0xfffff07d, 0x9, 0xe2}, {0x2, 0x5, 0x6, 0x200, 0xffff8001, 0x1, 0x454}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 45.728717933s ago: executing program 3 (id=566): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) setsockopt(r1, 0x1, 0x9, &(0x7f0000000040), 0x29) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdn=', @ANYRESHEX, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) dup2(r5, r6) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xd3, @none, 0x3}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) 45.331005464s ago: executing program 0 (id=568): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121002, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x10000) shutdown(r2, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = accept(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)={0x20, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0x4, 0x15}]}, 0x20}], 0x1}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x800c815, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = socket(0x0, 0x80802, 0x0) r8 = epoll_create1(0x80000) syz_usb_connect(0x0, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a5301124d500000000000000050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r9 = syz_io_uring_setup(0x1dc5, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x20002, 0x1d0}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) pause() ppoll(&(0x7f0000000140)=[{r9, 0x400a}], 0x1, 0x0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="1a040500d3fc03fc010047", 0xb, 0x4400c804, &(0x7f0000000300)={0x11, 0x0, r11, 0x1, 0x6, 0x6, @remote}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1f4, r7, &(0x7f00000000c0)={0x10000019}) 44.974642372s ago: executing program 3 (id=570): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3179f20456257452", "6f3888152b24eb2cb501671b9c0dc7d8", "4b93cb92"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 44.920394135s ago: executing program 3 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x4}, 0x4044890) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xe0000, 0x125) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x2020) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a051701000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0xc0, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x9, 0xed}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0x4, 0x1, {0x8, 0x25, 0x1, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x30, 0x5, 0xa9, 0x9, {0x8, 0x25, 0x1, 0x0, 0x0, 0x10, 0xf}}}}}}}}]}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) syz_usb_connect$uac1(0x1, 0xcc, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000020990423104000010203010902ba0003012401013b39000201020c240203050424070405007fe1282d48a5840d240704050078bf6b46a547e40924040300f032dd7d0904010000010200000904010101010200000724010ab9020009240201040904c68e0904010908000d06ec072501000d0200090402000001020000090402010101020009082402010604fa030924020104044040810a2402011101a7089ce5090582094000027f100725010c010700"], &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x5, 0x80, 0x3, 0x40, 0x4}, 0x40, &(0x7f0000000280)={0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x40, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc, 0x8, 0x1, 0x2, 0xc7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x26, 0x2, 0xf8, 0x5, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "97a05b4d1c33e2c34ff2e4510c0ec8e1"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x6, 0x3}]}, 0x2, [{0xf6, &(0x7f0000000440)=@string={0xf6, 0x3, "b23fbc82914c7bfadded62859d61acc135c1ebbd729b51ba68b53256775d2b95f5eeee8ae04d31d6d1bb21cf3e38184b8d0f79b0498578ff5ccaeb4317c6574b9f4934bdcd1d575593b9652041f3401b6c6fc30877b4942c189f037b77dc3c15b45f8db0e9ea415462ada8a7adeb7d47b4982dbdd2e98b6162ddd876c8dc31a02e55d5ef14c1c7a42b6191072f40da121cc02955051abe7fc9e27f2f9f51d4f394bb972dcf25713732d4867f48654c6d1100830c5605e53ade9d01ab8e352a291bacc089612854d9df767abf0c2a9826365a2928a3ae9fd630df5e759205211f43d1bb8e3c7ae0daa3e2ad4a5ae383086b54ff34"}}, {0xe4, &(0x7f0000000300)=@string={0xe4, 0x3, "fdd917639c46d4212c9730531e7d08bb61e898554e943c52d09f664058f76cf8296950a6ea00bb8e8e750da9c947d483421385afeaa706410252784b5112aae553b718bad33918204ee2f8ee2d254aa0e1d91ae367048bc7455179359179e7200ecdb032f433cc33f93f06fc1d410553eaf75c6b522d6597cd617af537c50ece1209737acf4350f0ad5174b5e6769d734ff661ee75e1803879f2dfc0066ed04688d8d14aa4964926092112d9724262d5040b290c2963ea82d7cfd8d1527654d864c443c337ce434c2dec25331f5269d30fd6e6e6ef329dbb0e5a8156770e45681450"}}]}) 42.260762514s ago: executing program 0 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c9842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x1602}) write$tun(r0, 0x0, 0x32) syz_usb_connect(0x3, 0xfffffffffffffdd3, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xc2, 0x13, 0x89, 0x40, 0x5e3, 0x502, 0x6b02, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x5d, 0x6, 0x0, 0x85, 0x3c, 0xf4, 0x87}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0xd, 0x100000001}) 41.546885781s ago: executing program 3 (id=586): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x40000000, 0x9cdeff16}}], 0x18}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0x98df24fb0ee54aca, 0x1ff, 0x7, 0x7d8, 0x800008, 0x5, 0x80}, {0xb, 0x7, 0x1, 0x2, 0xfffff07d, 0x9, 0xe2}, {0x2, 0x5, 0x6, 0x200, 0xffff8001, 0x1, 0x454}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.126856002s ago: executing program 1 (id=588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000002240)=ANY=[@ANYBLOB="3c0100001a0001002dbd7000fddbdf25fe880000000000000000000000000001ff0100000000000000000000000000014e2400074e22000e0000001087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000000000000000000000000000000000010000000000000000020000000000000007000000000000006401000000000000000000000000000009000000000000002a0c000000000000040000000000000000000000000000000400000000000000040000000000000009000000000000000900000005000000ffffffff29bd7000ff3400000a00037f43000000000000004c001400626c616b6532622d3235362d67656e657269630000000000000000000000000000000000000000000000b2c209a962eda046b7d902be6b085200"/244], 0x13c}, 0x1, 0x0, 0x0, 0x40004}, 0x400) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x400003, 0x13f1d2c8, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0xc25, 0x0, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x32743ca8, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x3d08ad39, 0x2, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x1, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40, 0x0, 0x74e2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffff62, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcac, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x4000002, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x1, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f01, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x6, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x84, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x8, 0x5, 0xd24, 0x0, 0x8, 0x129432e2, 0xc8, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x73b, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x20000004, 0x100009, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0xf, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x40008ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x3, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x8001, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x4f, 0x8, 0x0, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x2000001, 0x6, 0x1, 0x10000, 0x4, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x365) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000c80)={0x7f, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10}}, {{0xa, 0x4e22, 0xfffffff7, @empty, 0x6}}}, 0x108) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) readv(r1, &(0x7f0000000fc0)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f0000000dc0)=""/15, 0xf}, {&(0x7f0000000e00)=""/230, 0xe6}, {&(0x7f0000000f00)=""/9, 0x9}, {&(0x7f0000000f40)=""/85, 0x55}], 0x5) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c00210000000000000000000700000016000000020000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f00000000c0)={0x11, 0xf8, r5, 0x1, 0x5, 0x6, @random="f472db86a000"}, 0x14) unshare(0x60000600) (async) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x400000000000247, 0x0) (async) close(r8) r10 = openat$cgroup_int(r7, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x3, 0x100) (async) write$cgroup_int(r10, &(0x7f0000000100)=0x3, 0x12) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 41.043345477s ago: executing program 1 (id=589): fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x2, "cc36953b8f18437cd9d905f7ea64d216"}, 0x11, 0x2) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 39.868721508s ago: executing program 3 (id=590): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9b954ba06aefc90ef3016be9c1"}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0670f2417f7ff6d42fb5c33af"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "98b13eb01e"}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40004) socket(0xa, 0x3, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 39.616754591s ago: executing program 1 (id=594): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x79, 0x3c8, {{0xd, 0x4, 0x2, 0x11, 0x34, 0x66, 0x0, 0x10, 0x29, 0x0, @broadcast, @loopback, {[@noop, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x10, 0xfb, 0x0, 0x7, [0x5, 0x100, 0x9]}, @generic={0x0, 0xa, "149614aa557a0c28"}]}}}}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000016c0)={@empty, @remote, 0x0}, &(0x7f0000001700)=0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="d4030a00", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf250a0000004f000300bd2cd28c51c7bcfe51d5ad3baf4d1be63edabce7f6eaad264f2b5ce40f736fe478809a68643dbcfa7956a14f9b7e1947e3e8e2fecdb53081ec6a04db0015e45d254b21f3c8e30bc0ccc82f0021000300c6700b64443296ea5638708bd8d73f7504959438e48e66db37e1c5fc050000004500030002cb0272b064608e8c7e9722fbcfab08c41eeefa536e5b76902f4ed09d8c3f1d641dafbf40a2f2818550cda9f778efca87512a205dabfc80a61ed42af0df661638000000700003007af1c4ee8061ce95b0b7d660890718a34030a1fd04af857016fcfea95cfdec4ada9344ad4ebf384fe087cb1d441a6406db7afc024c3a3ab15f62c811902e509e0acfcdaed8fe05db5183435463b70c863213a64032fb90f819ed59815f3f4590f5f6cd737adee603b521adc64800018008000100", @ANYRES32=r5, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="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"], 0x3d4}, 0x1, 0x0, 0x0, 0x4044801}, 0x45815) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00400001332564aa11f6bbf44d00000000008984", 0x39}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = inotify_init() inotify_add_watch(r11, 0xfffffffffffffffe, 0x700008c0) sendto$packet(r10, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0x5e0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001400)={'sit0\x00', 0x0, 0x7, 0x10, 0x8, 0x5, {{0x1e, 0x4, 0x1, 0x9, 0x78, 0x64, 0x0, 0x9c, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast1, 0xf}, {@multicast1, 0x8}, {@multicast1, 0xfc}, {@loopback, 0x5}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x1, [{@loopback, 0x6}, {@empty, 0x6}, {@broadcast, 0x6}]}, @lsrr={0x83, 0xb, 0x95, [@private=0xa010100, @empty]}]}}}}}) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001380)=[{&(0x7f0000000080)="1b29432340154192488151c2a29103de129d0735cbea5e313927a8fb00dac8e3b9461cb9927e1615a7b09e7b6950d8f8b843a294e81ba67bb16e4d00bc64fd82ae51612af95ad23f433712831a44357547590471749b9ecf0dc9781ba016d1d8e8088fc6fc5e476deaadb86b1b73cbebfa5cc45b63fe045990a96c42", 0x7c}, {&(0x7f0000000100)="f5ed7521f5438da30f68", 0xa}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="3707b23797bcbaf88f675d50f1d8e0da5618c4a4ab3dec04b7472fb1d05da8b62814539ce08924968bdf3df0ec7fd8d1c1b705df5599de037a106041831d495c1ad001bd25af6585a5468f9f464a4a6f4bb9188c08a1cdfeba40072dc98422e9b79f6d736d95b59da56eb41c6191d85bfa96238ee5f727eb0d883168e77f13fb192fb3f8783fe72b5759f28c080c61d684d49c5690e49eab2ca719682f25c869dbb172212aa5a78f5d417d1b442c194b6cfd79ef5ee4a29e0595d6030d4e712e", 0xc0}, {&(0x7f0000001200)="c5efc79618d86df12d62e7f5831683705b50206c442ab39f5c5f3a273c14e60ba9e3d3433efbae1e0977c056946ebfd0bf41fa8ac70c1d599bff713d7019646d1f718c00f2df677406823bcd2911b58b7790d5bb315803bf1d14a64637b9c3a98b", 0x61}, {&(0x7f0000001280)="e0d2f36195461a7e0f4c9a159ba68dac1132cfaa526269ef4700cba41e9f182dac3b7b70b77d89d2b45e397c", 0x2c}, {&(0x7f0000001740)="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", 0x189}], 0x7, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3fd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @empty}}}], 0x58}, 0x10) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 39.020860682s ago: executing program 3 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x305, 0x4, 0x0, 0x101, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000240)="670f353e660f618e0018baf80c66b83cd9098066efbafc0cb80040ef0f3566b94d02000066b80080000066ba000000000f30660f38147f8eb800008ec8640fa20f01d1b827098ed8", 0x48}], 0x1, 0x5d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38.032704493s ago: executing program 1 (id=599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x400}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x80000001, 0x9}, 0x100, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-'}, 0x16, 0x3) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000002c0)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) accept(r3, 0x0, &(0x7f0000000300)) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000340)=0x8, 0x4) read$ptp(r1, &(0x7f0000000380)=""/90, 0x5a) r4 = fsmount(r1, 0x0, 0xf8) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000400)={@local, 0x1, 0x0, 0x80, 0x0, [{@loopback}, {@loopback}, {@local}, {@remote}, {@broadcast}, {@loopback}, {@loopback}, {@multicast1}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000500)={0x0, 0x7, 0x10001}) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000540)=0x2, &(0x7f0000000580)=0x1) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000005c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x7119c0, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000640)=""/69, &(0x7f00000006c0)=0x45) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000700)=0x2, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000740), 0x0, 0x101101) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r5) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000780)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='hybla', 0x5) read$rfkill(0xffffffffffffffff, &(0x7f0000000800), 0x8) statx(r4, &(0x7f0000000840)='./file1\x00', 0x0, 0x40, &(0x7f0000000880)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980), 0x28000, 0x0) 38.032231284s ago: executing program 1 (id=600): r0 = open(&(0x7f0000000000)='./file0\x00', 0xa2, 0x112) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x1, 0xc1, "cc0ae6df380c3cb464761643896fc84ebab06d21f445c76f8e73cb2d665bb358824e57de0b02064478f9c481848e2ae60501f31e3a9e8c698fb457a9918a7a8b627f969f1e0ca86b565814e646fc746ef950df93bbb82af9a1804b82eee623df26ab9db0cb4c9bd26a98c2cc8428c9409ca21239c02a62cacead68409cf0ba3d4854ca6935f04618988da1c44835d9707301a9dddf75bd07037601b42290c68b7f6dcd7f7b00b9a4c29cedc7d3231233988cec3791a769f25271a80afacc9678e8"}}) capset(&(0x7f00000010c0)={0x19980330}, &(0x7f0000001100)={0x2, 0x6, 0x0, 0x3, 0x200, 0x9}) socket(0x10, 0x5, 0x4) prctl$PR_GET_SECCOMP(0x15) r1 = socket$inet6(0xa, 0x1, 0x0) close(r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 38.018598824s ago: executing program 1 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0xd, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="b974052d3f7418acb9174a3ca93e1c666b1a31c7eac6e071df90db52d3ba69fd56120ee4134a5fef0899c4e8ec3ce848a084b99705aeb82a13887bb217f32a69e5484b4f4227835c8b9afdf1d0264b658ca30b1d2a4c4cfa98631fec5fee17e9d82b7c201b5993a84db15fbd39e3aeba80f14cc2b00596a52cc7120bfc0e8e01155922aca0365219ff3f1f5fc2149c9cf43c368a8a3380fd", 0x98}, {&(0x7f0000000180)}, {&(0x7f0000000280)="23e67983aca87c83a540de96b24c08b0636150ba88cd34632ac89f7b101ecaaa6223c1f5bd4570e06deaddc49d35fa46167652e65c4611a4a363bd6e1ef0c33e2d89f07a43ff675b85d68966944a94ec4422483edb6d409717d81e0af151b4ba9330b11fdc3560fce4cce38cb97a65b0a25804cb3178bf61c0add7dfedda1fe4f5caa8fcdfec71fef9b9d9db34c5522d75b77b5eda6b5e87af28b15e7bc91cd321ec321634a02b764e01578dd18c2fc1e4d0009b1dfcd5d2588e063a0b4b6b052d6d28866f85f3c9abed7c16ca6abb673fab5873f03d", 0xd6}, {&(0x7f0000000380)="f394f1271acf22b272998e4e3b1cc2f700690314b324ce511e317ca74343a44977256c4ccbf6423873fcfd0739b565ec36e2d8d0cf484515c6afe068ae93e256fbac02e9fc1e7782d9826e49e6db2c0e0331da33bb7bc21ca63056f9fafff8cacecdc5de4ea0d65cc29175a8ea29677a1eab24b790540d175270dbfeab85376d3050da6622decfe4a936a26187be7451dd7ed75f5245b953369aceb4cdec77b04a88b5fa788347a94f1c76e386350237ebe4207e7b10", 0xb6}, {&(0x7f0000000500)="c0c29ccb6fa16a6178b3c71faace4664e5ce79127c42ede4ed0abf2d5820f36aa1828d2664dccbdf0bac3d98926d599e4505c95d70ed7f11a55177b48a876b9988594d594cd33a8a7d57699e24256495bd66570387cdc8bf8c59d91457b76b52f7532554e9d5ec0a89e5b52ca64f3736677dccea6bc701d412235d1cf142a7c517081b3185015f859902c430bd5f2feef22c018307268ba4ac0bbf22e0cd3103cbcf31faec72d23bca44e530ca09c33200530399315212ca0eed25a0623c7251fec8ff321ea9655c7995a79c6777f491d51c847a2e2a774cc702276ed241313564bf6f95ebe93df1598ef52afda7dc142c57", 0xf2}], 0x5, &(0x7f0000000680)=[{0x48, 0xff, 0x401, "79bcf52bd966f559021042b93dc77e6c04c10327f477f3c80cfd5b0ceff08ea2c13bbaa9941b0ceedf5c73e8eb50a5897eb7ee2348"}, {0xd0, 0x6, 0xd, "58458d1365b11dbccb99dcdff498d2b58b37f67a1d0822f6e778a49d682bf351ca38d644985a71e5ee8b2038d28579a1bdc355080f1d6ec9211fafd04b868d0efa30efdb9c636c8097fd0b8862e269705cbe1a1f95d4268e45923fcb91190a4ebde3723b3edff809fe1b28f5aea896463e7ac938365ab81ce29baf6f4f0601b4980ae048344a64f0e27d3ea3713dcb185d8425234eb0ff45e6551bb3a4aea64bc2faed6ecb8d4a71ec1a4e0d6b2552131d78282f53ec748bcb1c5c4f71de"}, {0x78, 0x10e, 0x3, "4fd19038596aaf473a9525c8cd2f2edb2bf19927310348fa2ffa7299e34d31a12c3c22eb733e4ba365d3923164663daae9f284e1d44dfeb38bf51c7e766f0e3cd5267113d63232b460c2a706c62cd0c78a12fdc1ad6eab4ff8791be484dc367b16dbe246"}, {0xe8, 0x0, 0x5, "f30452472a653d9be2ea8f3cd4fb5a87d1f8518db8372999e0d9e235ba6c33050291a5fb93c9efb9e6f03d247da6786fe97d46b0e5361eb76df423aaedfb21f40c9f59355290727b92020e404edb5b9476aa5e8a60c6776b3887b6f7907a4af97a2250126c30cf73c1d23fe928d22f0dd3df121858e783d6a992bd9435b8b3b0bd157aaf4c4e606fbf83653042371d788cd7c73e6e5b187111818fc20271a8c2adfadc44626654dee5dd72b2e1eccbf49e011d5c26fde7a19934e46cebcb28d9772f4909514e428763f9fdc861a0584f5bfd44a7ee"}, {0x98, 0x102, 0x5, "87b2c87a9da4dd1798355aa9d8b57012c388ddb67ba1a082e92854e4138509c3e0501e6667816cc4d6e475a0d64583a617773b3818a693dcbb24a11a2a93c68f861e6a78a3a14e9f6f58381f7048201d50c1cd2a82db8762c16f7128349e9aaf9b65d1f6ea4d4e621209382cf9ef865692dafa2b796d2415ec1c4fc563495ef8ca"}, {0x48, 0x84, 0x3, "b8a5d32cddb77a12205b9ace1339e31d905908bea7559c197252e3ea018e24677530d07398abbabb30a3a4fbf6f7b5fefd2e"}, {0xc0, 0x10d, 0x7e73, "8c700b37bc0db290781be8d4a420f6436298d52f9dca3984573810cbac8dec5b2ed2dbb758734a644a9717bc74959a817225f8b48cccdb271aa0f75f98bd769fcf8404058714ec029a0ad5fe48c6df70efcea0829f419fb3ce4fa2d2a4cbe4574f56ad6857f5817d5a8952f4ab107a4a483208a9eae4c2612ebdf97ae0da6eaf9637a80a369dc3f390e9b67880d124b8fbc7760f4cee184ce0284388f50d1168ea43182277e5167cad"}, {0x70, 0x113, 0x1000, "4a962c423edfabc0f8d6ac8c995fa3e5cac3ae26824684462edf5c6873120732df48200db3248a88f92a21410e00812d91d3e2c9578802a16e83478206000000000000000ac40c087ff2f9d33e252899a1dc000000000000000000"}, {0xc8, 0x10d, 0xe0, "4865f2362c8b6b053d70a94c9daf1f93a15520aaf0638a8e671688c51397e6782b3318ffb1b45d152c19a4a26688fb0fd0a93e0662d2f5acc7350fc846fc702add2ea45222d0bb6b773d42bc10f54d89733d00c9c43b22d641cf25ca86abd8957b0e097713a9d360f846e106081c77540b2304fba182ad2a91e8663d9035c7cd10b62bcd90b13789d3d5cbcec781c8c6721e61f57b6f4ddb02c7037de32e45f54329290a0d14c881f7d385cf44e8e8bc67e599f1d61f5fee"}], 0x550}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c00)="d1e5f39e67fecdb0932f57f4ad73a2e83b874bf76b5255e0a9af1d9262c9cc17a6ea14aba7b04100e98384429e758d5ea7490393d8bf2787aa038e6aa1490054808b2aa2cc5a827449c80dab49505e3eb25ff12c82838f3549125bd98a1c9e809a2022c5bc95dac0d7223921d1b968b892dd70e132162e1a2deeeac188161a14465d29f653cb776d09b1b97ac587e32ed1144ad37207eaf8005936b1c299f520c0f91760992f9b9ff27a498c336f629e684c2b16907b9d0b5e5f2cd46dfba6ff7c101182c3d47fa5", 0xc8}, {&(0x7f0000000d00)="7eea004765341094f0261b9c3134d6ca72899a1e6a536c925776b14c29d8a5d184445e063623f105bd74723d15bdb266b935b38d3e62c996d69530287f2996", 0x3f}, {&(0x7f0000000d40)="c625084152b6185762c543bfe01e6f408d9be67131945c5f56966e032094330e0fa2fd84ea9f7fe176f41de045cd1b6ee1ca6d0a6841da3f6559872b8fcd5218c8cc46d8c7b909ff34cd947c7ba855cb570383c83a591b4dc49290b777a42ebc537427833b8fa50dcef906b23fc78435c23b9cd009676aa5716239de3af76ab482ea583a6ef6cbd3f4e761c33ae8e97c686c30e7197a3d099f9355fe3dc9e0fd5f4915b4614e370a8992262e5a91d25147074917948043164230fa208a79d076d484a20f4dba508826a774524f694e4631fdb890113e394249eb589dab140d2f99906cf4c7aa93203aed6e001a74f64fcb0adfcc9eff", 0xf6}, {&(0x7f0000000e40)="1c1075b6f848c03dd004926eed9bd136b2d5a9bb7ef22a87fbecd65108e2e6e713fdcd93b5ea3e070e64ace44ff652dbc5e44a06e798b1f23ee8f2c814c989ef8abc9fd81953eab3c9b329714ddacb1584b9755593028d6a909d2bcc652008cce560c4d47056c86d403f0a1332c46ea3a53b3fd50907f8896b1a1297e637564fcee38a368165f9", 0x87}, {&(0x7f0000000f00)="e5d49c4029cdf90c3c6da498b3b4d66be46411c32555693029d1e63239daa61f8fd845fcc099d4dd68591754fc9be0e335d7270bcde44a6a49677c628bba0099268776b25a455c5de90b4c01e790e8caff38430d1cff94b0260bc92fd62a60cfcddae5b1412d41ecb1d35cd7a724ba50650b2744c2bbdadfe949a6a866b169732bf7b5908bd2927a70a28a6643663d4c15a4f0b07050dc3909e83969f372ed30fc6b422ffe821947d397053e855d7262d13f3bc5a79e059e891b8a2cf7b82861d9f886883bc605486f05914e0678f22c7dc047e20af494ae4f02428ac8b273d1efe2e4", 0xe3}], 0x5, &(0x7f0000001080)=[{0xb0, 0x114, 0x7f, "70921a0411a85bd40818169b86f005b117c8ae4a6caf285751f047c4302c4c26aedba58254249c0abfbc617ffbaf329e6e10f7f2eae5acd226b1893d5d6e5ae9f393c152298c540c87d3a870c3631fc57d34d9c6ebfca910ecb225c757d0a38df21c23bc7e3b97e0760084d2e92239f6031602036158eb0ff54598435a47e84717ef50d4833f297bb35937f1396eb2b44331ce55e2083a7a1cf8ef6dfa80"}, {0x100, 0x10e, 0x0, "73013ac8094c99cff579d717c52e897337809af12b7d413ba48578e9dbb6f2e8a434d815c9662a7bd25c00950c05b9fd12daf70197f400d907bb1057d67afe674d518cd77c859a6b5b1819bcca3e69cdf56c11c49e4923f8c5caa496cbdd38f6cd82b8f2c80096bf94c26ee0e85bae436cba0a558379b9197aa0b839070b8742aa3ca41077599d9a017af1293bca79300d4c27f11d277b98be76dcdd53aeb91c28ef1fc97c68828cae6236668d69615e13805c138ad5fb06fdd383a8a975332a76e57547ab3ca53fcd1be91cc9bba83b7929b55a3dcd874ab9286c6b348b29d2412e203e62ea1f2e44"}], 0x1b0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) 37.177552638s ago: executing program 2 (id=604): unshare(0x5a030380) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x7) close_range(r2, r2, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) cachestat(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x10, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000021) 37.128582851s ago: executing program 2 (id=605): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @ioapic={0x5000, 0x2537c21a, 0x1, 0x5, 0x0, [{0xe, 0x80, 0x8, '\x00', 0x9}, {0x7, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0x6, 0x2, '\x00', 0x39}, {0x0, 0x40, 0x28}, {0x2, 0x2, 0x8, '\x00', 0x1}, {0x7, 0xa0, 0x3, '\x00', 0x29}, {0xf, 0xb, 0x40, '\x00', 0xaf}, {0x2c, 0x3, 0x1, '\x00', 0x6c}, {0x2, 0x80, 0x8, '\x00', 0x10}, {0x9, 0x49, 0x6f, '\x00', 0xa0}, {0x8, 0x6, 0xb, '\x00', 0xb6}, {0x4, 0x7, 0x4, '\x00', 0x81}, {0x4, 0x6, 0x8, '\x00', 0x8d}, {0x7, 0xfb, 0xa4, '\x00', 0x2}, {0x8, 0xfd, 0x6, '\x00', 0x7}, {0x7f, 0x6, 0x1, '\x00', 0x81}, {0x81, 0x8, 0x8, '\x00', 0x1}, {0x6, 0x9, 0x7, '\x00', 0x3}, {0xb9, 0x9, 0xa6, '\x00', 0x1}, {0x9, 0x2, 0x9, '\x00', 0x7}, {0xae, 0x80, 0x9, '\x00', 0x3}, {0x4, 0x4, 0x2, '\x00', 0x40}, {0x6, 0x2, 0x4, '\x00', 0xfa}, {0x8, 0x2, 0x10, '\x00', 0xe}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0xa7, 0x9, 0x81, 0xf8, 0x3, 0xf0, 0x4, 0x7, 0xff, 0x40, 0x1, 0x0, 0x1, 0x1, 0x0, 0x19}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3179f20456257452", "6f3888152b24eb2cb501671b9c0dc7d8", "4b93cb92"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3189, 0x13080, 0xffffffff, 0x2b7, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) poll(0x0, 0x0, 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) exit(0xffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.194619829s ago: executing program 2 (id=606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setresuid(0xee01, 0x0, 0x0) (async) setresuid(0xee01, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setreuid(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000000000)={0x3, 0x0, [{0x4, 0x6995, 0x1, 0x7c, 0x5, 0x40, 0x5}, {0x0, 0xfff, 0x4, 0x1000, 0x800, 0x7, 0xb4c}, {0x0, 0x3, 0x2, 0xb91a, 0x6, 0x866, 0xf9a}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x10, 0x4, 0x7, 0x909, 0x5, 0x9, 0xc, 0x8, 0x8, 0xfffffffffffffffe, 0x0, 0xff, 0xfffffffffffffc01, 0x0, 0x8, 0xd7], 0x26000, 0x804}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x10, 0x4, 0x7, 0x909, 0x5, 0x9, 0xc, 0x8, 0x8, 0xfffffffffffffffe, 0x0, 0xff, 0xfffffffffffffc01, 0x0, 0x8, 0xd7], 0x26000, 0x804}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 34.124769677s ago: executing program 2 (id=607): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0xdd0) mount(&(0x7f0000003d00)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='gfs2meta\x00', 0x2a008b3, 0x0) 33.355501496s ago: executing program 2 (id=608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x8}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x208, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x9, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xd0, 0x2, {{'ctr-des3_ede-asm\x00'}, 0x440, "e6597eb8b9560f7a8db7e430197cfd099ae8be946302bc5585d295843ceaf7303fc2a38fe39be75f9a53f42035ef4c37749624b003cdc32323120e49673978390024da8086b9bde5d1ed6d6c153e11198f257c151adf97eaa23cf54f718f35b31da19ff6e892e260c77f87198c9720e033d3a8730148ef5be6b61a7bfb655123a17c293710a88e9f"}}]}, 0x208}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44b0640b658eae4fc1e948baa7950cf0928cd674eacd1aac693f0bd7f712223277ab130dea7b5785c51d2d0096e460639f1968e3a6bfbf19159804090e394cc9ee72c5709b4937cc84e4c67a0716b54db5e3a60c5794e8e9ee640af719e572432a0488fe2942e2c79b69838bed834df3ea2f8d5677fd518edb847f2b415a4bfd3ce45bc68de4eddbac6aac19332079501c145fe9f0ee9a296b08a684f5a180", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10043, &(0x7f0000002d40)={0x77359400}) r5 = syz_pidfd_open(0x0, 0x0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d2}, 0x40000) tee(r5, r6, 0x800, 0x9) unshare(0x64000600) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 26.532023771s ago: executing program 32 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c9842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nicvf0\x00', 0x1602}) write$tun(r0, 0x0, 0x32) syz_usb_connect(0x3, 0xfffffffffffffdd3, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xc2, 0x13, 0x89, 0x40, 0x5e3, 0x502, 0x6b02, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x10, "", [{{0x9, 0x4, 0x5d, 0x6, 0x0, 0x85, 0x3c, 0xf4, 0x87}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0xd, 0x100000001}) 22.492841131s ago: executing program 33 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0xd, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="b974052d3f7418acb9174a3ca93e1c666b1a31c7eac6e071df90db52d3ba69fd56120ee4134a5fef0899c4e8ec3ce848a084b99705aeb82a13887bb217f32a69e5484b4f4227835c8b9afdf1d0264b658ca30b1d2a4c4cfa98631fec5fee17e9d82b7c201b5993a84db15fbd39e3aeba80f14cc2b00596a52cc7120bfc0e8e01155922aca0365219ff3f1f5fc2149c9cf43c368a8a3380fd", 0x98}, {&(0x7f0000000180)}, {&(0x7f0000000280)="23e67983aca87c83a540de96b24c08b0636150ba88cd34632ac89f7b101ecaaa6223c1f5bd4570e06deaddc49d35fa46167652e65c4611a4a363bd6e1ef0c33e2d89f07a43ff675b85d68966944a94ec4422483edb6d409717d81e0af151b4ba9330b11fdc3560fce4cce38cb97a65b0a25804cb3178bf61c0add7dfedda1fe4f5caa8fcdfec71fef9b9d9db34c5522d75b77b5eda6b5e87af28b15e7bc91cd321ec321634a02b764e01578dd18c2fc1e4d0009b1dfcd5d2588e063a0b4b6b052d6d28866f85f3c9abed7c16ca6abb673fab5873f03d", 0xd6}, {&(0x7f0000000380)="f394f1271acf22b272998e4e3b1cc2f700690314b324ce511e317ca74343a44977256c4ccbf6423873fcfd0739b565ec36e2d8d0cf484515c6afe068ae93e256fbac02e9fc1e7782d9826e49e6db2c0e0331da33bb7bc21ca63056f9fafff8cacecdc5de4ea0d65cc29175a8ea29677a1eab24b790540d175270dbfeab85376d3050da6622decfe4a936a26187be7451dd7ed75f5245b953369aceb4cdec77b04a88b5fa788347a94f1c76e386350237ebe4207e7b10", 0xb6}, {&(0x7f0000000500)="c0c29ccb6fa16a6178b3c71faace4664e5ce79127c42ede4ed0abf2d5820f36aa1828d2664dccbdf0bac3d98926d599e4505c95d70ed7f11a55177b48a876b9988594d594cd33a8a7d57699e24256495bd66570387cdc8bf8c59d91457b76b52f7532554e9d5ec0a89e5b52ca64f3736677dccea6bc701d412235d1cf142a7c517081b3185015f859902c430bd5f2feef22c018307268ba4ac0bbf22e0cd3103cbcf31faec72d23bca44e530ca09c33200530399315212ca0eed25a0623c7251fec8ff321ea9655c7995a79c6777f491d51c847a2e2a774cc702276ed241313564bf6f95ebe93df1598ef52afda7dc142c57", 0xf2}], 0x5, &(0x7f0000000680)=[{0x48, 0xff, 0x401, "79bcf52bd966f559021042b93dc77e6c04c10327f477f3c80cfd5b0ceff08ea2c13bbaa9941b0ceedf5c73e8eb50a5897eb7ee2348"}, {0xd0, 0x6, 0xd, "58458d1365b11dbccb99dcdff498d2b58b37f67a1d0822f6e778a49d682bf351ca38d644985a71e5ee8b2038d28579a1bdc355080f1d6ec9211fafd04b868d0efa30efdb9c636c8097fd0b8862e269705cbe1a1f95d4268e45923fcb91190a4ebde3723b3edff809fe1b28f5aea896463e7ac938365ab81ce29baf6f4f0601b4980ae048344a64f0e27d3ea3713dcb185d8425234eb0ff45e6551bb3a4aea64bc2faed6ecb8d4a71ec1a4e0d6b2552131d78282f53ec748bcb1c5c4f71de"}, {0x78, 0x10e, 0x3, "4fd19038596aaf473a9525c8cd2f2edb2bf19927310348fa2ffa7299e34d31a12c3c22eb733e4ba365d3923164663daae9f284e1d44dfeb38bf51c7e766f0e3cd5267113d63232b460c2a706c62cd0c78a12fdc1ad6eab4ff8791be484dc367b16dbe246"}, {0xe8, 0x0, 0x5, "f30452472a653d9be2ea8f3cd4fb5a87d1f8518db8372999e0d9e235ba6c33050291a5fb93c9efb9e6f03d247da6786fe97d46b0e5361eb76df423aaedfb21f40c9f59355290727b92020e404edb5b9476aa5e8a60c6776b3887b6f7907a4af97a2250126c30cf73c1d23fe928d22f0dd3df121858e783d6a992bd9435b8b3b0bd157aaf4c4e606fbf83653042371d788cd7c73e6e5b187111818fc20271a8c2adfadc44626654dee5dd72b2e1eccbf49e011d5c26fde7a19934e46cebcb28d9772f4909514e428763f9fdc861a0584f5bfd44a7ee"}, {0x98, 0x102, 0x5, "87b2c87a9da4dd1798355aa9d8b57012c388ddb67ba1a082e92854e4138509c3e0501e6667816cc4d6e475a0d64583a617773b3818a693dcbb24a11a2a93c68f861e6a78a3a14e9f6f58381f7048201d50c1cd2a82db8762c16f7128349e9aaf9b65d1f6ea4d4e621209382cf9ef865692dafa2b796d2415ec1c4fc563495ef8ca"}, {0x48, 0x84, 0x3, "b8a5d32cddb77a12205b9ace1339e31d905908bea7559c197252e3ea018e24677530d07398abbabb30a3a4fbf6f7b5fefd2e"}, {0xc0, 0x10d, 0x7e73, "8c700b37bc0db290781be8d4a420f6436298d52f9dca3984573810cbac8dec5b2ed2dbb758734a644a9717bc74959a817225f8b48cccdb271aa0f75f98bd769fcf8404058714ec029a0ad5fe48c6df70efcea0829f419fb3ce4fa2d2a4cbe4574f56ad6857f5817d5a8952f4ab107a4a483208a9eae4c2612ebdf97ae0da6eaf9637a80a369dc3f390e9b67880d124b8fbc7760f4cee184ce0284388f50d1168ea43182277e5167cad"}, {0x70, 0x113, 0x1000, "4a962c423edfabc0f8d6ac8c995fa3e5cac3ae26824684462edf5c6873120732df48200db3248a88f92a21410e00812d91d3e2c9578802a16e83478206000000000000000ac40c087ff2f9d33e252899a1dc000000000000000000"}, {0xc8, 0x10d, 0xe0, "4865f2362c8b6b053d70a94c9daf1f93a15520aaf0638a8e671688c51397e6782b3318ffb1b45d152c19a4a26688fb0fd0a93e0662d2f5acc7350fc846fc702add2ea45222d0bb6b773d42bc10f54d89733d00c9c43b22d641cf25ca86abd8957b0e097713a9d360f846e106081c77540b2304fba182ad2a91e8663d9035c7cd10b62bcd90b13789d3d5cbcec781c8c6721e61f57b6f4ddb02c7037de32e45f54329290a0d14c881f7d385cf44e8e8bc67e599f1d61f5fee"}], 0x550}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c00)="d1e5f39e67fecdb0932f57f4ad73a2e83b874bf76b5255e0a9af1d9262c9cc17a6ea14aba7b04100e98384429e758d5ea7490393d8bf2787aa038e6aa1490054808b2aa2cc5a827449c80dab49505e3eb25ff12c82838f3549125bd98a1c9e809a2022c5bc95dac0d7223921d1b968b892dd70e132162e1a2deeeac188161a14465d29f653cb776d09b1b97ac587e32ed1144ad37207eaf8005936b1c299f520c0f91760992f9b9ff27a498c336f629e684c2b16907b9d0b5e5f2cd46dfba6ff7c101182c3d47fa5", 0xc8}, {&(0x7f0000000d00)="7eea004765341094f0261b9c3134d6ca72899a1e6a536c925776b14c29d8a5d184445e063623f105bd74723d15bdb266b935b38d3e62c996d69530287f2996", 0x3f}, {&(0x7f0000000d40)="c625084152b6185762c543bfe01e6f408d9be67131945c5f56966e032094330e0fa2fd84ea9f7fe176f41de045cd1b6ee1ca6d0a6841da3f6559872b8fcd5218c8cc46d8c7b909ff34cd947c7ba855cb570383c83a591b4dc49290b777a42ebc537427833b8fa50dcef906b23fc78435c23b9cd009676aa5716239de3af76ab482ea583a6ef6cbd3f4e761c33ae8e97c686c30e7197a3d099f9355fe3dc9e0fd5f4915b4614e370a8992262e5a91d25147074917948043164230fa208a79d076d484a20f4dba508826a774524f694e4631fdb890113e394249eb589dab140d2f99906cf4c7aa93203aed6e001a74f64fcb0adfcc9eff", 0xf6}, {&(0x7f0000000e40)="1c1075b6f848c03dd004926eed9bd136b2d5a9bb7ef22a87fbecd65108e2e6e713fdcd93b5ea3e070e64ace44ff652dbc5e44a06e798b1f23ee8f2c814c989ef8abc9fd81953eab3c9b329714ddacb1584b9755593028d6a909d2bcc652008cce560c4d47056c86d403f0a1332c46ea3a53b3fd50907f8896b1a1297e637564fcee38a368165f9", 0x87}, {&(0x7f0000000f00)="e5d49c4029cdf90c3c6da498b3b4d66be46411c32555693029d1e63239daa61f8fd845fcc099d4dd68591754fc9be0e335d7270bcde44a6a49677c628bba0099268776b25a455c5de90b4c01e790e8caff38430d1cff94b0260bc92fd62a60cfcddae5b1412d41ecb1d35cd7a724ba50650b2744c2bbdadfe949a6a866b169732bf7b5908bd2927a70a28a6643663d4c15a4f0b07050dc3909e83969f372ed30fc6b422ffe821947d397053e855d7262d13f3bc5a79e059e891b8a2cf7b82861d9f886883bc605486f05914e0678f22c7dc047e20af494ae4f02428ac8b273d1efe2e4", 0xe3}], 0x5, &(0x7f0000001080)=[{0xb0, 0x114, 0x7f, "70921a0411a85bd40818169b86f005b117c8ae4a6caf285751f047c4302c4c26aedba58254249c0abfbc617ffbaf329e6e10f7f2eae5acd226b1893d5d6e5ae9f393c152298c540c87d3a870c3631fc57d34d9c6ebfca910ecb225c757d0a38df21c23bc7e3b97e0760084d2e92239f6031602036158eb0ff54598435a47e84717ef50d4833f297bb35937f1396eb2b44331ce55e2083a7a1cf8ef6dfa80"}, {0x100, 0x10e, 0x0, "73013ac8094c99cff579d717c52e897337809af12b7d413ba48578e9dbb6f2e8a434d815c9662a7bd25c00950c05b9fd12daf70197f400d907bb1057d67afe674d518cd77c859a6b5b1819bcca3e69cdf56c11c49e4923f8c5caa496cbdd38f6cd82b8f2c80096bf94c26ee0e85bae436cba0a558379b9197aa0b839070b8742aa3ca41077599d9a017af1293bca79300d4c27f11d277b98be76dcdd53aeb91c28ef1fc97c68828cae6236668d69615e13805c138ad5fb06fdd383a8a975332a76e57547ab3ca53fcd1be91cc9bba83b7929b55a3dcd874ab9286c6b348b29d2412e203e62ea1f2e44"}], 0x1b0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[], 0xc2) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) 18.363915486s ago: executing program 2 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_getres(0x2, &(0x7f00000009c0)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 17.422650915s ago: executing program 34 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x305, 0x4, 0x0, 0x101, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000240)="670f353e660f618e0018baf80c66b83cd9098066efbafc0cb80040ef0f3566b94d02000066b80080000066ba000000000f30660f38147f8eb800008ec8640fa20f01d1b827098ed8", 0x48}], 0x1, 0x5d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 35 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_getres(0x2, &(0x7f00000009c0)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) kernel console output (not intermixed with test programs): ng to 64 [ 51.544046][ T36] audit: type=1400 audit(1776511779.920:245): avc: denied { relabelto } for pid=997 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.554627][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 51.593733][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 51.604421][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.612426][ T9] usb 3-1: Product: syz [ 51.616629][ T9] usb 3-1: Manufacturer: syz [ 51.623494][ T9] usb 3-1: SerialNumber: syz [ 51.629510][ T9] usb 3-1: config 0 descriptor?? [ 51.636171][ T974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.683362][ T307] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 51.844244][ T974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 51.844813][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.860191][ T307] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 51.868890][ T307] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 51.873453][ T436] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.878077][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.893517][ T307] usb 4-1: Product: syz [ 51.897687][ T307] usb 4-1: Manufacturer: syz [ 51.902275][ T307] usb 4-1: SerialNumber: syz [ 51.944668][ T36] audit: type=1400 audit(1776511780.380:246): avc: denied { setopt } for pid=1007 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.965345][ T36] audit: type=1400 audit(1776511780.380:247): avc: denied { read } for pid=1007 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.985839][ T36] audit: type=1400 audit(1776511780.380:248): avc: denied { ioctl } for pid=1007 comm="syz.1.265" path="socket:[9167]" dev="sockfs" ino=9167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.011996][ T36] audit: type=1400 audit(1776511780.380:249): avc: denied { getopt } for pid=1007 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.023472][ T436] usb 1-1: device descriptor read/64, error -71 [ 52.066624][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 52.077448][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 52.092594][ T1017] FAULT_INJECTION: forcing a failure. [ 52.092594][ T1017] name failslab, interval 1, probability 0, space 0, times 0 [ 52.105871][ T9] usb 3-1: USB disconnect, device number 9 [ 52.112859][ T1017] CPU: 0 UID: 0 PID: 1017 Comm: syz.2.268 Not tainted syzkaller #0 de3e1d1c5728fabb050931035751e453f935abb5 [ 52.112891][ T1017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 52.112904][ T1017] Call Trace: [ 52.112910][ T1017] [ 52.112919][ T1017] __dump_stack+0x21/0x30 [ 52.112951][ T1017] dump_stack_lvl+0x140/0x1c0 [ 52.112975][ T1017] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.113000][ T1017] dump_stack+0x19/0x20 [ 52.113023][ T1017] should_fail_ex+0x3d7/0x530 [ 52.113048][ T1017] should_failslab+0xac/0x100 [ 52.113066][ T1017] kmem_cache_alloc_noprof+0x42/0x410 [ 52.113092][ T1017] ? skb_clone+0x229/0x460 [ 52.113118][ T1017] ? _raw_read_lock_irqsave+0x92/0xf0 [ 52.113137][ T1017] skb_clone+0x229/0x460 [ 52.113162][ T1017] netlink_broadcast_filtered+0x688/0x11f0 [ 52.113190][ T1017] netlink_broadcast+0x3e/0x60 [ 52.113220][ T1017] kobject_uevent_net_broadcast+0x3de/0x5e0 [ 52.113242][ T1017] kobject_uevent_env+0x551/0x7e0 [ 52.113261][ T1017] kobject_uevent+0x21/0x40 [ 52.113279][ T1017] lo_ioctl+0x1481/0x2070 [ 52.113306][ T1017] ? arch_stack_walk+0x10a/0x170 [ 52.113336][ T1017] ? __cfi_lo_ioctl+0x10/0x10 [ 52.113365][ T1017] ? stack_depot_save_flags+0x38/0x800 [ 52.113391][ T1017] ? stack_trace_save+0xaa/0x100 [ 52.113412][ T1017] ? kasan_save_track+0x4f/0x80 [ 52.113441][ T1017] ? kasan_save_track+0x3e/0x80 [ 52.113469][ T1017] ? kasan_save_alloc_info+0x40/0x50 [ 52.113490][ T1017] ? __kasan_slab_alloc+0x73/0x90 [ 52.113508][ T1017] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 52.113535][ T1017] ? security_inode_alloc+0x51/0x230 [ 52.113567][ T1017] ? inode_init_always_gfp+0x756/0x9e0 [ 52.113585][ T1017] ? alloc_inode+0xc5/0x270 [ 52.113604][ T1017] ? new_inode+0x25/0x1e0 [ 52.113622][ T1017] ? proc_pid_make_inode+0x25/0x140 [ 52.113651][ T1017] ? proc_pident_instantiate+0x6d/0x2c0 [ 52.113669][ T1017] ? proc_pident_lookup+0x1c7/0x270 [ 52.113686][ T1017] ? proc_tid_base_lookup+0x2f/0x40 [ 52.113710][ T1017] ? path_openat+0x1312/0x34f0 [ 52.113730][ T1017] ? do_filp_open+0x1f5/0x440 [ 52.113750][ T1017] ? do_sys_openat2+0x134/0x1d0 [ 52.113772][ T1017] ? __x64_sys_openat+0x13a/0x170 [ 52.113795][ T1017] ? x64_sys_call+0xe69/0x2ee0 [ 52.113822][ T1017] ? do_syscall_64+0x57/0xf0 [ 52.113840][ T1017] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.113874][ T1017] ? avc_has_perm_noaudit+0x26c/0x360 [ 52.113903][ T1017] ? __asan_memcpy+0x5a/0x80 [ 52.113930][ T1017] ? avc_has_perm_noaudit+0x28a/0x360 [ 52.113959][ T1017] ? avc_has_perm+0x155/0x240 [ 52.113987][ T1017] ? __cfi_avc_has_perm+0x10/0x10 [ 52.114015][ T1017] ? kasan_save_alloc_info+0x40/0x50 [ 52.114041][ T1017] ? selinux_file_open+0x46c/0x630 [ 52.114067][ T1017] ? __cfi_selinux_file_open+0x10/0x10 [ 52.114097][ T1017] ? avc_has_extended_perms+0x80b/0xe70 [ 52.114125][ T1017] ? __asan_memcpy+0x5a/0x80 [ 52.114151][ T1017] ? avc_has_extended_perms+0x969/0xe70 [ 52.114181][ T1017] ? __asan_set_shadow_00+0x12/0x20 [ 52.114213][ T1017] ? do_vfs_ioctl+0x182d/0x2010 [ 52.114231][ T1017] ? arch_stack_walk+0x10a/0x170 [ 52.114260][ T1017] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 52.114281][ T1017] ? _parse_integer+0x2e/0x40 [ 52.114311][ T1017] ? __asan_set_shadow_00+0x12/0x20 [ 52.114333][ T1017] ? blkdev_common_ioctl+0x11d8/0x2730 [ 52.114359][ T1017] ? blkdev_bszset+0x230/0x230 [ 52.114401][ T1017] ? has_cap_mac_admin+0xd0/0xd0 [ 52.114429][ T1017] ? proc_fail_nth_write+0x184/0x220 [ 52.114455][ T1017] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 52.114482][ T1017] ? selinux_file_ioctl+0x732/0x1480 [ 52.114508][ T1017] ? vfs_write+0x9a4/0xf90 [ 52.114535][ T1017] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 52.114562][ T1017] ? __cfi_vfs_write+0x10/0x10 [ 52.114590][ T1017] ? __kasan_check_write+0x18/0x20 [ 52.114618][ T1017] ? mutex_unlock+0x90/0x240 [ 52.114642][ T1017] ? __cfi_mutex_unlock+0x10/0x10 [ 52.114664][ T1017] ? __fget_files+0x2c5/0x340 [ 52.114684][ T1017] ? __cfi_lo_ioctl+0x10/0x10 [ 52.114715][ T1017] blkdev_ioctl+0x548/0x690 [ 52.114740][ T1017] ? __cfi_blkdev_ioctl+0x10/0x10 [ 52.114765][ T1017] ? bpf_lsm_file_ioctl+0xd/0x20 [ 52.114788][ T1017] ? security_file_ioctl+0x3e/0x110 [ 52.114813][ T1017] ? __cfi_blkdev_ioctl+0x10/0x10 [ 52.114837][ T1017] __se_sys_ioctl+0x135/0x1b0 [ 52.114859][ T1017] __x64_sys_ioctl+0x7f/0xa0 [ 52.114878][ T1017] x64_sys_call+0x1878/0x2ee0 [ 52.114908][ T1017] do_syscall_64+0x57/0xf0 [ 52.114926][ T1017] ? clear_bhb_loop+0x50/0xa0 [ 52.114948][ T1017] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.114980][ T1017] RIP: 0033:0x7effe3b9c819 [ 52.114999][ T1017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.115019][ T1017] RSP: 002b:00007effe4adc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.115042][ T1017] RAX: ffffffffffffffda RBX: 00007effe3e15fa0 RCX: 00007effe3b9c819 [ 52.115059][ T1017] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000005 [ 52.115073][ T1017] RBP: 00007effe4adc090 R08: 0000000000000000 R09: 0000000000000000 [ 52.115087][ T1017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.115100][ T1017] R13: 00007effe3e16038 R14: 00007effe3e15fa0 R15: 00007fff8494fef8 [ 52.115118][ T1017] [ 52.343909][ T436] usb 1-1: device descriptor read/64, error -71 [ 52.351941][ T307] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.413431][ T31] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 52.422531][ T307] usb 4-1: unit 13 not found! [ 52.434707][ T1022] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 52.630761][ T307] usb 4-1: USB disconnect, device number 14 [ 52.674483][ T36] audit: type=1400 audit(1776511781.070:250): avc: denied { mount } for pid=1021 comm="syz.2.270" name="/" dev="overlay" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.763407][ T436] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 52.784514][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.795588][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.815957][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.825439][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.834722][ T31] usb 2-1: config 0 descriptor?? [ 52.840077][ T36] audit: type=1400 audit(1776511781.270:251): avc: denied { mounton } for pid=1025 comm="syz.2.272" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.840159][ T1026] binder: Bad value for 'stats' [ 52.868621][ T31] hub 2-1:0.0: USB hub found [ 52.903409][ T436] usb 1-1: device descriptor read/64, error -71 [ 53.073856][ T31] hub 2-1:0.0: 1 port detected [ 53.153378][ T436] usb 1-1: device descriptor read/64, error -71 [ 53.173414][ T64] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 53.263474][ T436] usb usb1-port1: attempt power cycle [ 53.279084][ T31] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 53.293412][ T31] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 53.306847][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 53.313099][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.324806][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.333384][ T64] usb 3-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 53.344987][ T31] usb 2-1: USB disconnect, device number 17 [ 53.351782][ T64] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 53.362478][ T64] usb 3-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 53.373047][ T64] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 53.386723][ T64] usb 3-1: config 1 interface 0 has no altsetting 0 [ 53.476310][ T1029] kvm: Disabled LAPIC found during irq injection [ 53.623382][ T436] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.654383][ T436] usb 1-1: device descriptor read/8, error -71 [ 53.784333][ T436] usb 1-1: device descriptor read/8, error -71 [ 54.044087][ T436] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 54.074348][ T436] usb 1-1: device descriptor read/8, error -71 [ 54.234412][ T436] usb 1-1: device descriptor read/8, error -71 [ 54.343753][ T436] usb usb1-port1: unable to enumerate USB device [ 54.438047][ T1051] FAULT_INJECTION: forcing a failure. [ 54.438047][ T1051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.451378][ T1051] CPU: 1 UID: 0 PID: 1051 Comm: syz.1.278 Not tainted syzkaller #0 de3e1d1c5728fabb050931035751e453f935abb5 [ 54.451406][ T1051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.451418][ T1051] Call Trace: [ 54.451424][ T1051] [ 54.451432][ T1051] __dump_stack+0x21/0x30 [ 54.451459][ T1051] dump_stack_lvl+0x140/0x1c0 [ 54.451493][ T1051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.451518][ T1051] ? check_stack_object+0x12b/0x150 [ 54.451545][ T1051] dump_stack+0x19/0x20 [ 54.451568][ T1051] should_fail_ex+0x3d7/0x530 [ 54.451593][ T1051] should_fail+0xf/0x20 [ 54.451614][ T1051] should_fail_usercopy+0x1e/0x30 [ 54.451640][ T1051] _copy_to_user+0x24/0xa0 [ 54.451656][ T1051] simple_read_from_buffer+0xed/0x160 [ 54.451678][ T1051] proc_fail_nth_read+0x1aa/0x220 [ 54.451701][ T1051] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 54.451723][ T1051] ? bpf_lsm_file_permission+0xd/0x20 [ 54.451743][ T1051] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 54.451765][ T1051] vfs_read+0x286/0xcb0 [ 54.451789][ T1051] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 54.451813][ T1051] ? __cfi_vfs_read+0x10/0x10 [ 54.451837][ T1051] ? __kasan_check_write+0x18/0x20 [ 54.451863][ T1051] ? mutex_lock+0x97/0x1d0 [ 54.451884][ T1051] ? __cfi_mutex_lock+0x10/0x10 [ 54.451904][ T1051] ? __fget_files+0x2c5/0x340 [ 54.451922][ T1051] ksys_read+0x145/0x260 [ 54.451947][ T1051] ? __cfi_ksys_read+0x10/0x10 [ 54.451972][ T1051] ? __kasan_check_read+0x15/0x20 [ 54.451997][ T1051] __x64_sys_read+0x7f/0x90 [ 54.452028][ T1051] x64_sys_call+0x2638/0x2ee0 [ 54.452055][ T1051] do_syscall_64+0x57/0xf0 [ 54.452071][ T1051] ? clear_bhb_loop+0x50/0xa0 [ 54.452091][ T1051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.452120][ T1051] RIP: 0033:0x7f47f495d04e [ 54.452136][ T1051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 54.452152][ T1051] RSP: 002b:00007f47f58e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.452172][ T1051] RAX: ffffffffffffffda RBX: 00007f47f58e76c0 RCX: 00007f47f495d04e [ 54.452186][ T1051] RDX: 000000000000000f RSI: 00007f47f58e70a0 RDI: 0000000000000006 [ 54.452198][ T1051] RBP: 00007f47f58e7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.452210][ T1051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.452222][ T1051] R13: 00007f47f4c16038 R14: 00007f47f4c15fa0 R15: 00007ffc4f3ab1d8 [ 54.452238][ T1051] [ 54.673482][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 54.718264][ T1053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.884875][ T1063] fuse: Unknown parameter 'f' [ 54.884875][ T1064] fuse: Unknown parameter 'f' [ 54.924384][ T10] usb 4-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 54.944563][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.964372][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 229: 136, using maximum allowed: 30 [ 54.994968][ T10] usb 4-1: config 1 interface 1 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 136 [ 55.008260][ T10] usb 4-1: config 1 interface 1 has no altsetting 1 [ 55.024177][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.033246][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.045264][ T10] usb 4-1: Product: syz [ 55.049448][ T10] usb 4-1: Manufacturer: syz [ 55.054091][ T10] usb 4-1: SerialNumber: syz [ 55.060215][ T10] usb 4-1: selecting invalid altsetting 1 [ 55.121443][ T1077] input: syz0 as /devices/virtual/input/input9 [ 55.266629][ T10] cdc_ncm 4-1:1.0: bind() failure [ 55.272659][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 55.286256][ T10] cdc_ncm 4-1:1.1: bind() failure [ 55.293085][ T10] usb 4-1: USB disconnect, device number 15 [ 55.643380][ T307] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 55.794723][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.818471][ T307] usb 2-1: config 1 has an invalid descriptor of length 174, skipping remainder of the config [ 55.836774][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.853377][ T307] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 55.855698][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.882934][ T307] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 236, using maximum allowed: 30 [ 55.903395][ T307] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 236 [ 55.935438][ T307] usb 2-1: string descriptor 0 read error: -22 [ 55.941727][ T307] usb 2-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 55.954192][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.974239][ T307] usb 2-1: low speed audio streaming not supported [ 55.987498][ T307] usb 2-1: unit 4 not found! [ 55.988315][ T64] usb 3-1: can't set config #1, error -71 [ 55.995614][ T307] usb 2-1: unit 255 not found! [ 56.014102][ T64] usb 3-1: USB disconnect, device number 10 [ 56.335015][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 56.335036][ T36] audit: type=1400 audit(1776511784.770:265): avc: denied { ioctl } for pid=1091 comm="syz.1.292" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.366493][ T1095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.383592][ T1095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.397985][ T307] usb 2-1: USB disconnect, device number 18 [ 56.414794][ T36] audit: type=1400 audit(1776511784.840:266): avc: denied { create } for pid=1103 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.435713][ T36] audit: type=1400 audit(1776511784.840:267): avc: denied { setopt } for pid=1103 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.455760][ T36] audit: type=1400 audit(1776511784.840:268): avc: denied { write } for pid=1103 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.475654][ T36] audit: type=1400 audit(1776511784.840:269): avc: denied { ioctl } for pid=1103 comm="syz.3.295" path="socket:[10362]" dev="sockfs" ino=10362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.635501][ T36] audit: type=1400 audit(1776511785.070:270): avc: denied { create } for pid=1112 comm="syz.0.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.665906][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 56.764427][ T36] audit: type=1400 audit(1776511785.200:271): avc: denied { ioctl } for pid=1115 comm="syz.0.298" path="socket:[11455]" dev="sockfs" ino=11455 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.788993][ T36] audit: type=1400 audit(1776511785.200:272): avc: denied { write } for pid=1115 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.789571][ T1116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 56.808519][ T9] usb 4-1: device descriptor read/64, error -71 [ 56.840872][ T1121] overlayfs: failed to resolve './file1': -2 [ 57.007608][ T1132] netlink: 'syz.2.306': attribute type 17 has an invalid length. [ 57.063374][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.069787][ T36] audit: type=1400 audit(1776511785.491:273): avc: denied { read } for pid=1128 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.142254][ T1142] netlink: 80 bytes leftover after parsing attributes in process `syz.1.309'. [ 57.323362][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.373404][ T307] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 57.413392][ T798] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 57.453436][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.512972][ T36] audit: type=1400 audit(1776511785.931:274): avc: denied { block_suspend } for pid=1147 comm="syz.0.311" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.544992][ T307] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 57.556330][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.573025][ T307] usb 3-1: Product: syz [ 57.579283][ T798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.592416][ T307] usb 3-1: Manufacturer: syz [ 57.597224][ T798] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.608434][ T307] usb 3-1: SerialNumber: syz [ 57.614061][ T798] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.625567][ T798] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 57.640492][ T798] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.649846][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.658060][ T798] usb 2-1: Product: syz [ 57.662373][ T798] usb 2-1: Manufacturer: syz [ 57.667261][ T798] usb 2-1: SerialNumber: syz [ 57.673091][ T1146] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 57.681123][ T798] cdc_mbim 2-1:1.0: skipping garbage [ 57.693398][ T9] usb 4-1: device descriptor read/64, error -71 [ 57.813498][ T9] usb usb4-port1: attempt power cycle [ 57.830051][ T307] usb 3-1: USB disconnect, device number 11 [ 58.153381][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.194412][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.324367][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.353585][ T1156] syzkaller1: entered promiscuous mode [ 58.359096][ T1156] syzkaller1: entered allmulticast mode [ 58.441234][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 58.465522][ T1160] netlink: 'syz.2.316': attribute type 6 has an invalid length. [ 58.476276][ T1161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1161 comm=syz.2.316 [ 58.489450][ T1161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1161 comm=syz.2.316 [ 58.563376][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 58.583361][ T436] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 58.604351][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.702306][ T798] cdc_mbim 2-1:1.0: bind() failure [ 58.708486][ T798] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 58.716820][ T798] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 58.725755][ T798] usb 2-1: USB disconnect, device number 19 [ 58.734444][ T9] usb 4-1: device descriptor read/8, error -71 [ 58.744461][ T436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 58.755373][ T436] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 58.768261][ T436] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 58.777331][ T436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.786101][ T436] usb 1-1: config 0 descriptor?? [ 58.791350][ T1154] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.843511][ T9] usb usb4-port1: unable to enumerate USB device [ 58.863399][ T64] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 59.013429][ T64] usb 3-1: device descriptor read/64, error -71 [ 59.263397][ T64] usb 3-1: device descriptor read/64, error -71 [ 59.317201][ T436] usbhid 1-1:0.0: can't add hid device: -71 [ 59.323274][ T436] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 59.332007][ T436] usb 1-1: USB disconnect, device number 15 [ 59.457282][ T1176] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 59.515160][ T64] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 59.663376][ T64] usb 3-1: device descriptor read/64, error -71 [ 59.674302][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.913374][ T64] usb 3-1: device descriptor read/64, error -71 [ 60.043679][ T64] usb usb3-port1: attempt power cycle [ 60.386429][ T1204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 60.399705][ T1203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 60.414223][ T64] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 60.454342][ T64] usb 3-1: device descriptor read/8, error -71 [ 60.594386][ T64] usb 3-1: device descriptor read/8, error -71 [ 60.833411][ T64] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.843511][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.853385][ T798] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 60.854746][ T64] usb 3-1: device descriptor read/8, error -71 [ 60.993363][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 61.004124][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.014272][ T64] usb 3-1: device descriptor read/8, error -71 [ 61.020480][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.030891][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.040052][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.048448][ T31] usb 2-1: Product: syz [ 61.052711][ T31] usb 2-1: Manufacturer: syz [ 61.053010][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 61.057848][ T31] usb 2-1: SerialNumber: syz [ 61.083414][ T798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 61.113375][ T798] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 61.122473][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.131173][ T798] usb 1-1: config 0 descriptor?? [ 61.133930][ T64] usb usb3-port1: unable to enumerate USB device [ 61.142556][ T1218] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 61.298190][ T31] usb 2-1: 0:2 : does not exist [ 61.305434][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 61.316603][ T31] usb 2-1: USB disconnect, device number 20 [ 61.676558][ T798] usbhid 1-1:0.0: can't add hid device: -71 [ 61.682556][ T798] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 61.693354][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.710535][ T798] usb 1-1: USB disconnect, device number 16 [ 62.202714][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 62.202732][ T36] audit: type=1400 audit(1776511790.621:277): avc: denied { map } for pid=1236 comm="syz.0.340" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.232433][ T31] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 62.283420][ T1239] netlink: 'syz.0.341': attribute type 63 has an invalid length. [ 62.291188][ T1239] netlink: 5 bytes leftover after parsing attributes in process `syz.0.341'. [ 62.393399][ T31] usb 2-1: device descriptor read/64, error -71 [ 62.583452][ T436] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 62.643400][ T31] usb 2-1: device descriptor read/64, error -71 [ 62.664027][ T64] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 62.746212][ T436] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 62.755605][ T436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.763866][ T436] usb 1-1: Product: syz [ 62.768150][ T436] usb 1-1: Manufacturer: syz [ 62.772846][ T436] usb 1-1: SerialNumber: syz [ 62.830400][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.851300][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.861416][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 62.871861][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 62.881846][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 62.891787][ T31] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 62.899769][ T64] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.911887][ T64] usb 3-1: string descriptor 0 read error: -22 [ 62.918266][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.927527][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.981509][ T1239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.990158][ T1239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.000378][ T436] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 63.008909][ T436] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 63.015539][ T436] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 63.025658][ T436] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 63.034283][ T31] usb 2-1: device descriptor read/64, error -71 [ 63.040644][ T436] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 63.047273][ T436] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 63.057363][ T436] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 63.066089][ T436] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 63.074701][ T436] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 63.084523][ T436] usb 1-1: USB disconnect, device number 17 [ 63.138433][ T64] cdc_ncm 3-1:1.0: bind() failure [ 63.144647][ T64] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 63.151523][ T64] cdc_ncm 3-1:1.1: bind() failure [ 63.158324][ T64] usb 3-1: USB disconnect, device number 16 [ 63.293385][ T31] usb 2-1: device descriptor read/64, error -71 [ 63.413484][ T31] usb usb2-port1: attempt power cycle [ 63.426079][ T36] audit: type=1400 audit(1776511791.851:278): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.507829][ T36] audit: type=1400 audit(1776511791.931:279): avc: denied { create } for pid=1249 comm="syz.3.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.551935][ T36] audit: type=1400 audit(1776511791.931:280): avc: denied { sys_admin } for pid=1249 comm="syz.3.346" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 63.763549][ T31] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 63.794344][ T31] usb 2-1: device descriptor read/8, error -71 [ 63.923370][ T798] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 63.926467][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.084477][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 64.095339][ T798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 64.108395][ T798] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 64.117587][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.126525][ T798] usb 3-1: config 0 descriptor?? [ 64.131790][ T1258] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.183367][ T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 64.204420][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.340292][ T31] usb 2-1: device descriptor read/8, error -71 [ 64.447869][ T1267] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 64.448013][ T36] audit: type=1400 audit(1776511792.871:281): avc: denied { call } for pid=1265 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.476745][ T31] usb usb2-port1: unable to enumerate USB device [ 64.496996][ T1271] bridge0: port 3(veth0_vlan) entered blocking state [ 64.513420][ T1271] bridge0: port 3(veth0_vlan) entered disabled state [ 64.520160][ T1271] veth0_vlan: entered allmulticast mode [ 64.533893][ T1271] bridge0: port 3(veth0_vlan) entered blocking state [ 64.540629][ T1271] bridge0: port 3(veth0_vlan) entered forwarding state [ 64.660850][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 64.666867][ T798] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 64.675854][ T798] usb 3-1: USB disconnect, device number 17 [ 64.743360][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 64.843394][ T64] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 64.893392][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 64.900000][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 64.910024][ T31] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 64.919325][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.927455][ T31] usb 1-1: Product: syz [ 64.936729][ T31] usb 1-1: Manufacturer: syz [ 64.941355][ T31] usb 1-1: SerialNumber: syz [ 64.964551][ T36] audit: type=1400 audit(1776511793.391:282): avc: denied { listen } for pid=1281 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.013669][ T36] audit: type=1400 audit(1776511793.391:283): avc: denied { accept } for pid=1281 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.023408][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 65.066982][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.074303][ T1288] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 65.086257][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.098305][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.107580][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.116459][ T64] usb 4-1: config 0 descriptor?? [ 65.122459][ T64] hub 4-1:0.0: USB hub found [ 65.154746][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 65.183719][ T31] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 65.212227][ T36] audit: type=1400 audit(1776511793.631:284): avc: denied { setattr } for pid=1294 comm="syz.2.361" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.231471][ T31] usb 1-1: USB disconnect, device number 18 [ 65.242501][ T1295] rust_binder: Write failure EINVAL in pid:175 [ 65.245913][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 65.260157][ T1295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1295 comm=syz.2.361 [ 65.323115][ T64] hub 4-1:0.0: 1 port detected [ 65.337247][ T36] audit: type=1400 audit(1776511793.761:285): avc: denied { setopt } for pid=1298 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.340930][ T1299] netlink: 388 bytes leftover after parsing attributes in process `syz.1.363'. [ 65.375870][ T36] audit: type=1400 audit(1776511793.801:286): avc: denied { connect } for pid=1300 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.653373][ T436] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 65.691797][ T1307] netlink: 108 bytes leftover after parsing attributes in process `syz.0.366'. [ 65.721509][ T1307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 65.814682][ T436] usb 3-1: unable to get BOS descriptor or descriptor too short [ 65.824570][ T436] usb 3-1: config 74 has an invalid interface number: 240 but max is 0 [ 65.842992][ T436] usb 3-1: config 74 has no interface number 0 [ 65.849345][ T436] usb 3-1: config 74 interface 240 has no altsetting 0 [ 65.865350][ T436] usb 3-1: string descriptor 0 read error: -22 [ 65.881774][ T436] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 65.893352][ T436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.913247][ T436] net1080 3-1:74.240: probe with driver net1080 failed with error -22 [ 65.933699][ T64] hub 4-1:0.0: activate --> -90 [ 66.115494][ T31] usb 3-1: USB disconnect, device number 18 [ 66.173413][ T1290] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 66.327738][ T1290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 66.341006][ T31] usb 4-1: USB disconnect, device number 20 [ 66.353389][ T1290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 66.366222][ T1289] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 66.373854][ T1290] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 66.382934][ T1290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.392244][ T1290] usb 1-1: config 0 descriptor?? [ 66.397624][ T1315] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 66.513378][ T1289] usb 2-1: device descriptor read/64, error -71 [ 66.773375][ T1289] usb 2-1: device descriptor read/64, error -71 [ 66.885985][ T1324] Invalid ELF header len 9 [ 66.896651][ T1290] usbhid 1-1:0.0: can't add hid device: -71 [ 66.908758][ T1290] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 66.923424][ T1290] usb 1-1: USB disconnect, device number 19 [ 67.013370][ T1289] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 67.163531][ T1289] usb 2-1: device descriptor read/64, error -71 [ 67.216281][ T1328] fuse: Bad value for 'fd' [ 67.226996][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 67.227009][ T36] audit: type=1400 audit(1776511795.651:289): avc: denied { mount } for pid=1327 comm="syz.2.374" name="/" dev="configfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 67.258819][ T36] audit: type=1400 audit(1776511795.681:290): avc: denied { search } for pid=1327 comm="syz.2.374" name="/" dev="configfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.293369][ T1291] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 67.403371][ T1289] usb 2-1: device descriptor read/64, error -71 [ 67.451449][ T1291] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.460945][ T1291] usb 4-1: config 1 has an invalid descriptor of length 131, skipping remainder of the config [ 67.477096][ T1291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 67.503390][ T1291] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 219, changing to 7 [ 67.523456][ T1289] usb usb2-port1: attempt power cycle [ 67.530268][ T1291] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 67.543363][ T1291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.561669][ T1291] usb 4-1: Product: syz [ 67.571678][ T1291] usb 4-1: Manufacturer: syz [ 67.581772][ T1291] usb 4-1: SerialNumber: syz [ 67.601268][ T1349] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 67.637471][ T1349] SELinux: failed to load policy [ 67.653267][ T36] audit: type=1400 audit(1776511796.071:291): avc: denied { read } for pid=1351 comm="syz.2.381" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 67.691943][ T1352] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 67.711599][ T36] audit: type=1400 audit(1776511796.131:292): avc: denied { relabelto } for pid=1351 comm="syz.2.381" name="file0" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cgroup_t:s0" [ 67.762634][ T36] audit: type=1400 audit(1776511796.131:293): avc: denied { associate } for pid=1351 comm="syz.2.381" name="file0" dev="tmpfs" ino=398 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cgroup_t:s0" [ 67.807590][ T1291] usb 4-1: USB disconnect, device number 21 [ 67.841241][ T1356] /dev/nullb0: Can't lookup blockdev [ 67.846905][ T1356] /dev/nullb0: Can't lookup blockdev [ 67.873370][ T1289] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 67.903981][ T36] audit: type=1400 audit(1776511796.331:294): avc: denied { validate_trans } for pid=1357 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.933537][ T1289] usb 2-1: device descriptor read/8, error -71 [ 68.074352][ T1289] usb 2-1: device descriptor read/8, error -71 [ 68.191465][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.200231][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.323372][ T1289] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 68.344327][ T1289] usb 2-1: device descriptor read/8, error -71 [ 68.484298][ T1289] usb 2-1: device descriptor read/8, error -71 [ 68.560468][ T36] audit: type=1400 audit(1776511796.981:295): avc: denied { watch watch_reads } for pid=1394 comm="syz.2.396" path="/83/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 68.603902][ T1289] usb usb2-port1: unable to enumerate USB device [ 68.663372][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 68.698369][ T36] audit: type=1326 audit(1776511797.121:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb93519c819 code=0x50000 [ 68.742217][ T36] audit: type=1326 audit(1776511797.121:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb93519d609 code=0x50000 [ 68.783359][ T36] audit: type=1326 audit(1776511797.121:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1404 comm="syz.0.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb93519c819 code=0x50000 [ 68.851994][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 68.860330][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 68.883364][ T10] usb 4-1: config 220 has no interface number 2 [ 68.889653][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 68.923395][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 68.930243][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 68.953386][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 68.964404][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 68.983359][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.991369][ T10] usb 4-1: Product: syz [ 69.003477][ T10] usb 4-1: Manufacturer: syz [ 69.008097][ T10] usb 4-1: SerialNumber: syz [ 69.014345][ T1410] netlink: 'syz.2.402': attribute type 2 has an invalid length. [ 69.113525][ T1413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.122077][ T1413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.151368][ T1416] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 69.169228][ T1416] netlink: 944 bytes leftover after parsing attributes in process `syz.1.404'. [ 69.226066][ T10] usb 4-1: selecting invalid altsetting 0 [ 69.231947][ T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 69.248461][ T10] usb 4-1: No valid video chain found. [ 69.260893][ T10] usb 4-1: USB disconnect, device number 22 [ 69.343361][ T64] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 69.415244][ T1422] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 69.493388][ T64] usb 3-1: Using ep0 maxpacket: 16 [ 69.499744][ T64] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 69.508742][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.519020][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.530186][ T64] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.539486][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.547854][ T64] usb 3-1: Product: syz [ 69.552121][ T64] usb 3-1: Manufacturer: syz [ 69.556908][ T64] usb 3-1: SerialNumber: syz [ 69.703420][ T436] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 69.713590][ T31] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 69.864693][ T436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.883170][ T436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.903473][ T436] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.912559][ T436] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1028, setting to 1024 [ 69.923817][ T31] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 69.935003][ T436] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 69.945146][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.956349][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.973566][ T64] usb 3-1: 0:2 : does not exist [ 69.978587][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 69.997858][ T436] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 70.007512][ T436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.015788][ T64] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 70.023241][ T436] usb 2-1: Product: syz [ 70.027644][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.037099][ T436] usb 2-1: Manufacturer: syz [ 70.041803][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.049943][ T436] usb 2-1: SerialNumber: syz [ 70.055573][ T31] usb 1-1: SerialNumber: syz [ 70.063716][ T64] usb 3-1: USB disconnect, device number 19 [ 70.183386][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 70.282579][ T31] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 70.308232][ T31] usb 1-1: USB disconnect, device number 20 [ 70.325072][ T436] usb 2-1: USB disconnect, device number 29 [ 70.342107][ T10] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 70.357137][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.373591][ T10] usb 4-1: Product: syz [ 70.377776][ T10] usb 4-1: Manufacturer: syz [ 70.382384][ T10] usb 4-1: SerialNumber: syz [ 70.393363][ T64] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 70.543380][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 70.549693][ T64] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.561532][ T64] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 70.580764][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.593355][ T64] usb 3-1: Product: syz [ 70.597530][ T64] usb 3-1: Manufacturer: syz [ 70.599037][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 70.611567][ T64] usb 3-1: SerialNumber: syz [ 70.617091][ T64] usb 3-1: config 0 descriptor?? [ 70.623060][ T64] usb 3-1: bad CDC descriptors [ 70.625363][ T10] usb 4-1: USB disconnect, device number 23 [ 70.628871][ T64] usb 3-1: unsupported MDLM descriptors [ 70.832215][ T1440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.851516][ T1440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.860555][ T31] usb 3-1: USB disconnect, device number 20 [ 70.924765][ T1458] new mount options do not match the existing superblock, will be ignored [ 70.933852][ T1458] netlink: 160 bytes leftover after parsing attributes in process `syz.0.419'. [ 71.023374][ T64] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 71.194700][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.203152][ T64] usb 2-1: config 5 has an invalid interface number: 141 but max is 0 [ 71.222624][ T64] usb 2-1: config 5 has no interface number 0 [ 71.228948][ T64] usb 2-1: config 5 interface 141 has no altsetting 0 [ 71.240264][ T64] usb 2-1: New USB device found, idVendor=0403, idProduct=da74, bcdDevice=ab.ad [ 71.253354][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.253364][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 71.289158][ T64] usb 2-1: Product: syz [ 71.299242][ T64] usb 2-1: Manufacturer: syz [ 71.303993][ T64] usb 2-1: SerialNumber: syz [ 71.383364][ T10] usb 1-1: device descriptor read/64, error -71 [ 71.402976][ T1469] netlink: 'syz.2.424': attribute type 22 has an invalid length. [ 71.413364][ T1291] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 71.478197][ T1471] fuse: Unknown parameter '' [ 71.521582][ T1473] Zero length message leads to an empty skb [ 71.529406][ T64] usb 2-1: NDI device with a latency value of 1 [ 71.543577][ T64] ftdi_sio 2-1:5.141: FTDI USB Serial Device converter detected [ 71.561638][ T64] ftdi_sio ttyUSB0: unknown device type: 0xabad [ 71.569078][ T64] usb 2-1: USB disconnect, device number 30 [ 71.575474][ T64] ftdi_sio 2-1:5.141: device disconnected [ 71.582183][ T1291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 71.596199][ T1291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 71.609185][ T1291] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 71.618421][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.633409][ T10] usb 1-1: device descriptor read/64, error -71 [ 71.639946][ T1291] usb 4-1: config 0 descriptor?? [ 71.645216][ T1467] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 71.893388][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 72.023352][ T10] usb 1-1: device descriptor read/64, error -71 [ 72.126280][ T1291] usbhid 4-1:0.0: can't add hid device: -71 [ 72.132263][ T1291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 72.154660][ T1291] usb 4-1: USB disconnect, device number 24 [ 72.283369][ T10] usb 1-1: device descriptor read/64, error -71 [ 72.333387][ T392] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 72.393441][ T10] usb usb1-port1: attempt power cycle [ 72.420712][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 72.420725][ T36] audit: type=1400 audit(1776511800.841:307): avc: denied { mount } for pid=1481 comm="syz.2.429" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.463387][ T392] usb 2-1: device descriptor read/64, error -71 [ 72.703386][ T392] usb 2-1: device descriptor read/64, error -71 [ 72.743405][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 72.774327][ T10] usb 1-1: device descriptor read/8, error -71 [ 72.914446][ T10] usb 1-1: device descriptor read/8, error -71 [ 72.953369][ T392] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 72.968794][ T36] audit: type=1400 audit(1776511801.391:308): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.993610][ T1491] netlink: 'syz.2.433': attribute type 12 has an invalid length. [ 73.123412][ T392] usb 2-1: device descriptor read/64, error -71 [ 73.143382][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 73.163381][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 73.184545][ T10] usb 1-1: device descriptor read/8, error -71 [ 73.294831][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 73.303251][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.313706][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.314552][ T10] usb 1-1: device descriptor read/8, error -71 [ 73.325195][ T64] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 73.337861][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.346040][ T64] usb 4-1: Product: syz [ 73.350296][ T64] usb 4-1: Manufacturer: syz [ 73.355099][ T64] usb 4-1: SerialNumber: syz [ 73.361689][ T64] usb 4-1: selecting invalid altsetting 1 [ 73.367905][ T64] usb 4-1: unit 6 not found! [ 73.372616][ T64] usb 4-1: unit 2 not found! [ 73.377280][ T392] usb 2-1: device descriptor read/64, error -71 [ 73.453441][ T10] usb usb1-port1: unable to enumerate USB device [ 73.493484][ T392] usb usb2-port1: attempt power cycle [ 73.564696][ T64] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.574640][ T64] usb 4-1: USB disconnect, device number 25 [ 73.833407][ T392] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 73.854484][ T392] usb 2-1: device descriptor read/8, error -71 [ 73.893382][ T10] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 73.984438][ T392] usb 2-1: device descriptor read/8, error -71 [ 74.027985][ T36] audit: type=1400 audit(1776511802.451:309): avc: denied { getopt } for pid=1513 comm="syz.0.439" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.044926][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 74.067681][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 74.091299][ T10] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 74.110822][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.134054][ T10] usb 3-1: config 0 descriptor?? [ 74.139323][ T1512] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 74.215155][ T36] audit: type=1400 audit(1776511802.641:310): avc: denied { listen } for pid=1534 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.246349][ T392] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 74.274682][ T392] usb 2-1: device descriptor read/8, error -71 [ 74.414785][ T392] usb 2-1: device descriptor read/8, error -71 [ 74.523476][ T392] usb usb2-port1: unable to enumerate USB device [ 74.543381][ T64] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 74.584196][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 74.590134][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 74.598733][ T10] usb 3-1: USB disconnect, device number 21 [ 74.713374][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 74.719737][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.730899][ T64] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.740840][ T64] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.750065][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.758907][ T64] usb 1-1: config 0 descriptor?? [ 74.764978][ T64] hub 1-1:0.0: USB hub found [ 74.965761][ T64] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 75.085995][ T36] audit: type=1400 audit(1776511803.511:311): avc: denied { mounton } for pid=1551 comm="syz.1.452" path="/proc/250/task" dev="proc" ino=14504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 75.176361][ T64] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 75.185257][ T64] hid-generic 0003:046D:C31C.0003: probe with driver hid-generic failed with error -22 [ 75.326124][ T1576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 75.335071][ T36] audit: type=1400 audit(1776511803.751:312): avc: denied { nlmsg_read } for pid=1575 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.453364][ T392] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 75.493443][ T436] usb 1-1: USB disconnect, device number 25 [ 75.543530][ T64] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 75.603359][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.613355][ T392] usb 2-1: Using ep0 maxpacket: 32 [ 75.619685][ T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.633364][ T392] usb 2-1: config 0 has no interfaces? [ 75.644457][ T392] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 75.653654][ T392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.661684][ T392] usb 2-1: Product: syz [ 75.666249][ T392] usb 2-1: Manufacturer: syz [ 75.670869][ T392] usb 2-1: SerialNumber: syz [ 75.676441][ T392] usb 2-1: config 0 descriptor?? [ 75.703392][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 75.710093][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.718748][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.728931][ T64] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.739479][ T64] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 75.748636][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.756929][ T64] usb 4-1: Product: à   [ 75.761109][ T64] usb 4-1: SerialNumber: 〟쉺簸䬒ì¶â¦²ãžµå ¸êˆ˜î¯‰â–Œî¸§ä™©á“²îƒ±ê•©ç¯§æ­¨æ¾…ç¾­áž½é®ë’냣䭵é¾ç‚½ì™»â¡©è›Žá——▰ᣡ댼윯Ḵä§å¥¤ç´†ä¾íŠœì¸¯æ¶‹ë»“奿ⶎ冘조囉ⵊã¸çª£î—³â‡’ᡳ憖슒ꥴ㰉ॕ簱㫂稒یނæ‡á³ïž°ë»¸æœµá‘“ɜᑒ敚挼í’馻馽褕쒳꾾徒훊䥦㼳ꠗèŒâ¢‹ì“ꖼឨ瀿侜납 [ 75.791667][ T31] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 75.801074][ T31] usb 3-1: config 0 has no interfaces? [ 75.807497][ T31] usb 3-1: config 0 has no interfaces? [ 75.817226][ T31] usb 3-1: config 0 has no interfaces? [ 75.833674][ T31] usb 3-1: config 0 has no interfaces? [ 75.839934][ T31] usb 3-1: config 0 has no interfaces? [ 75.850035][ T31] usb 3-1: config 0 has no interfaces? [ 75.860228][ T31] usb 3-1: config 0 has no interfaces? [ 75.870215][ T31] usb 3-1: config 0 has no interfaces? [ 75.880986][ T31] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.899456][ T31] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.908035][ T392] usb 2-1: USB disconnect, device number 35 [ 75.922022][ T31] usb 3-1: Product: syz [ 75.926305][ T31] usb 3-1: Manufacturer: syz [ 75.930938][ T31] usb 3-1: SerialNumber: syz [ 75.936282][ T31] usb 3-1: config 0 descriptor?? [ 76.002731][ T64] usb 4-1: skipping empty audio interface (v1) [ 76.010582][ T64] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 76.020413][ T64] usb 4-1: USB disconnect, device number 26 [ 76.143981][ T392] usb 3-1: USB disconnect, device number 22 [ 76.223392][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 76.363402][ T10] usb 1-1: device descriptor read/64, error -71 [ 76.434629][ T1592] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 76.445363][ T36] audit: type=1400 audit(1776511804.871:313): avc: denied { mounton } for pid=1591 comm="syz.1.466" path="/97/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 76.613391][ T10] usb 1-1: device descriptor read/64, error -71 [ 76.710711][ T36] audit: type=1400 audit(1776511805.131:314): avc: denied { read } for pid=1615 comm="syz.2.473" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.739155][ T1616] x_tables: duplicate underflow at hook 1 [ 76.760697][ T1623] fuse: Bad value for 'fd' [ 76.765213][ T36] audit: type=1400 audit(1776511805.131:315): avc: denied { open } for pid=1615 comm="syz.2.473" path="/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.803785][ T1631] overlayfs: failed to resolve './file1': -2 [ 76.811632][ T36] audit: type=1326 audit(1776511805.231:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1627 comm="syz.3.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7e12f96597 code=0x0 [ 76.863404][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 76.930198][ T1642] netlink: 80 bytes leftover after parsing attributes in process `syz.1.481'. [ 77.003378][ T10] usb 1-1: device descriptor read/64, error -71 [ 77.272353][ T10] usb 1-1: device descriptor read/64, error -71 [ 77.393478][ T10] usb usb1-port1: attempt power cycle [ 77.689335][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 77.689352][ T36] audit: type=1400 audit(1776511806.111:322): avc: denied { bind } for pid=1673 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.743371][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 77.768697][ T1675] input: syz1 as /devices/virtual/input/input15 [ 77.784326][ T10] usb 1-1: device descriptor read/8, error -71 [ 77.914330][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.163425][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 78.203375][ T64] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 78.211805][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.284917][ T1685] binder: Bad value for 'stats' [ 78.292158][ T1685] loop7: detected capacity change from 0 to 7 [ 78.298788][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.308000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.316102][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.325262][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 78.333179][ T1685] loop7: unable to read partition table [ 78.339292][ T1685] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 78.354365][ T10] usb 1-1: device descriptor read/8, error -71 [ 78.363356][ T64] usb 2-1: Invalid ep0 maxpacket: 64 [ 78.463439][ T10] usb usb1-port1: unable to enumerate USB device [ 78.513357][ T64] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 78.673354][ T64] usb 2-1: Invalid ep0 maxpacket: 64 [ 78.688916][ T64] usb usb2-port1: attempt power cycle [ 79.033371][ T64] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 79.074256][ T64] usb 2-1: Invalid ep0 maxpacket: 64 [ 79.209659][ T64] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 79.253692][ T64] usb 2-1: Invalid ep0 maxpacket: 64 [ 79.267476][ T64] usb usb2-port1: unable to enumerate USB device [ 79.473359][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 79.613362][ T10] usb 4-1: device descriptor read/64, error -71 [ 79.770404][ T36] audit: type=1326 audit(1776511808.191:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1622 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe3b9c819 code=0x7fc00000 [ 79.863365][ T10] usb 4-1: device descriptor read/64, error -71 [ 80.213373][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 80.323372][ T1291] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 80.343364][ T10] usb 4-1: device descriptor read/64, error -71 [ 80.473351][ T1291] usb 1-1: Using ep0 maxpacket: 32 [ 80.484782][ T1291] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 80.492970][ T1291] usb 1-1: config 0 has no interface number 0 [ 80.513361][ T1291] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 80.529950][ T1291] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.540667][ T1291] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 80.550797][ T1291] usb 1-1: config 0 interface 196 has no altsetting 0 [ 80.559040][ T1291] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 80.570727][ T1291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.579009][ T1291] usb 1-1: Product: syz [ 80.583395][ T10] usb 4-1: device descriptor read/64, error -71 [ 80.589846][ T1291] usb 1-1: Manufacturer: syz [ 80.595807][ T1291] usb 1-1: SerialNumber: syz [ 80.601782][ T1291] usb 1-1: config 0 descriptor?? [ 80.607606][ T1710] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 80.609362][ T36] audit: type=1400 audit(1776511809.041:324): avc: denied { write } for pid=1718 comm="syz.2.506" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 80.690753][ T1720] 9pnet_fd: Insufficient options for proto=fd [ 80.693771][ T10] usb usb4-port1: attempt power cycle [ 80.983083][ T1725] netlink: 'syz.1.508': attribute type 4 has an invalid length. [ 80.990879][ T1725] netlink: 17 bytes leftover after parsing attributes in process `syz.1.508'. [ 81.013441][ T36] audit: type=1400 audit(1776511809.441:325): avc: denied { setopt } for pid=1726 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.033382][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 81.065351][ T10] usb 4-1: device descriptor read/8, error -71 [ 81.214504][ T10] usb 4-1: device descriptor read/8, error -71 [ 81.244455][ T1291] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 81.252941][ T1291] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 81.303383][ T64] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 81.453125][ T31] usb 1-1: USB disconnect, device number 30 [ 81.460282][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.473408][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 81.474215][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 81.502641][ T64] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 81.511997][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.520704][ T64] usb 2-1: config 0 descriptor?? [ 81.523776][ T10] usb 4-1: device descriptor read/8, error -71 [ 81.583595][ T31] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 81.637762][ T1744] veth1_macvtap: left promiscuous mode [ 81.643268][ T1744] macsec0: entered promiscuous mode [ 81.648690][ T1744] macsec0: entered allmulticast mode [ 81.655412][ T10] usb 4-1: device descriptor read/8, error -71 [ 81.663792][ T1744] veth1_macvtap: entered promiscuous mode [ 81.669540][ T1744] veth1_macvtap: entered allmulticast mode [ 81.675650][ T1744] macsec0: left promiscuous mode [ 81.680868][ T1744] macsec0: left allmulticast mode [ 81.685983][ T1744] veth1_macvtap: left allmulticast mode [ 81.773447][ T10] usb usb4-port1: unable to enumerate USB device [ 81.783131][ T36] audit: type=1326 audit(1776511810.201:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1749 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe3b9c819 code=0x7fc00000 [ 82.135768][ T1763] 9pnet_fd: Insufficient options for proto=fd [ 82.190518][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 82.200295][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.214321][ T64] usb 2-1: USB disconnect, device number 40 [ 82.278613][ T36] audit: type=1400 audit(1776511810.701:327): avc: denied { setopt } for pid=1767 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.316880][ T1770] veth1_macvtap: left promiscuous mode [ 82.322444][ T1770] macsec0: entered promiscuous mode [ 82.327995][ T1770] macsec0: entered allmulticast mode [ 82.343626][ T1770] veth1_macvtap: entered promiscuous mode [ 82.349446][ T1770] veth1_macvtap: entered allmulticast mode [ 82.355530][ T1770] macsec0: left promiscuous mode [ 82.360588][ T1770] macsec0: left allmulticast mode [ 82.365786][ T1770] veth1_macvtap: left allmulticast mode [ 82.373971][ T1770] syzkaller1: entered promiscuous mode [ 82.379606][ T1770] syzkaller1: entered allmulticast mode [ 82.534551][ T36] audit: type=1400 audit(1776511810.961:328): avc: denied { ioctl } for pid=1776 comm="syz.3.527" path="/139/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.763818][ T36] audit: type=1400 audit(1776511811.191:329): avc: denied { read } for pid=1795 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.954218][ T64] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 82.969180][ T1806] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 82.994096][ T1806] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 83.056904][ T36] audit: type=1400 audit(2000000000.120:330): avc: denied { create } for pid=1810 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.113359][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 83.120012][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.137427][ T1821] bridge0: port 3(veth0_to_bridge) entered blocking state [ 83.143406][ T64] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.163362][ T1821] bridge0: port 3(veth0_to_bridge) entered disabled state [ 83.176972][ T64] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 83.180880][ T1821] veth0_to_bridge: entered allmulticast mode [ 83.193353][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.211506][ T64] usb 2-1: Product: syz [ 83.214609][ T1821] veth0_to_bridge: entered promiscuous mode [ 83.216261][ T64] usb 2-1: Manufacturer: syz [ 83.221831][ T1821] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.236635][ T64] usb 2-1: SerialNumber: syz [ 83.278937][ T1821] bridge0: port 3(veth0_to_bridge) entered blocking state [ 83.286095][ T1821] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 83.313473][ T1824] netlink: 165 bytes leftover after parsing attributes in process `syz.0.542'. [ 83.344440][ T36] audit: type=1400 audit(2000000000.410:331): avc: denied { sqpoll } for pid=1822 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.448347][ T1788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.456900][ T1788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.469954][ T64] usb 2-1: 0:1 : does not exist [ 83.483365][ T64] usb 2-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 83.505103][ T64] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 83.524701][ T64] usb 2-1: USB disconnect, device number 41 [ 83.785265][ T1840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 83.807378][ T1845] tipc: Failed to remove unknown binding: 66,0,0/0:4159186898/4159186900 [ 83.815932][ T1845] tipc: Failed to remove unknown binding: 66,0,0/0:4159186898/4159186899 [ 83.825571][ T36] audit: type=1400 audit(2000000000.890:332): avc: denied { accept } for pid=1844 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.845032][ T1845] tipc: Failed to remove unknown binding: 66,0,0/0:4159186898/4159186900 [ 83.853614][ T31] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 83.861229][ T1845] tipc: Failed to remove unknown binding: 66,0,0/0:4159186898/4159186899 [ 83.883746][ T1847] tipc: Started in network mode [ 83.888645][ T1847] tipc: Node identity fffffff8, cluster identity 4711 [ 83.895698][ T1847] tipc: Node number set to 4294967288 [ 83.901947][ T306] tipc: Subscription rejected, illegal request [ 83.909324][ T36] audit: type=1400 audit(2000000000.970:333): avc: denied { map } for pid=1846 comm="syz.3.551" path="socket:[16508]" dev="sockfs" ino=16508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.955744][ T36] audit: type=1400 audit(2000000001.020:334): avc: denied { create } for pid=1850 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.024407][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 84.042910][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 84.064344][ T31] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 84.074022][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.082657][ T31] usb 1-1: config 0 descriptor?? [ 84.088234][ T1833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.130041][ T1867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.138571][ T1867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.283398][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 84.332867][ T1873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 84.433349][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 84.438765][ T1878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.447380][ T1878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.456055][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.468031][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1878 comm=syz.3.563 [ 84.480396][ T10] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 84.493437][ T1879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1879 comm=syz.3.563 [ 84.505756][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.512418][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 84.521652][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1878 comm=syz.3.563 [ 84.533996][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.542858][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1878 comm=syz.3.563 [ 84.555390][ T10] usb 2-1: config 0 descriptor?? [ 84.575110][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 84.581214][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 84.589929][ T31] usb 1-1: USB disconnect, device number 31 [ 84.609693][ T1885] batadv_slave_1: entered promiscuous mode [ 84.616391][ T1884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.564'. [ 84.761450][ T1864] syz.1.558 uses obsolete (PF_INET,SOCK_PACKET) [ 84.776508][ T10] usb 2-1: string descriptor 0 read error: -71 [ 84.793402][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 84.803022][ T10] usb 2-1: USB disconnect, device number 42 [ 84.864880][ T1882] batadv_slave_1: left promiscuous mode [ 85.317039][ T1896] veth1_macvtap: left promiscuous mode [ 85.332729][ T1896] macsec0: entered promiscuous mode [ 85.338959][ T1896] macsec0: entered allmulticast mode [ 85.363712][ T1896] veth1_macvtap: entered promiscuous mode [ 85.383388][ T1896] veth1_macvtap: entered allmulticast mode [ 85.389581][ T1896] macsec0: left promiscuous mode [ 85.394928][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 85.413431][ T1896] macsec0: left allmulticast mode [ 85.423892][ T1896] veth1_macvtap: left allmulticast mode [ 85.440734][ T1897] syzkaller1: entered promiscuous mode [ 85.469907][ T1897] syzkaller1: entered allmulticast mode [ 85.563438][ T10] usb 1-1: device descriptor read/64, error -71 [ 85.729715][ T36] audit: type=1400 audit(2000000002.790:335): avc: denied { write } for pid=1908 comm="syz.1.574" path="socket:[16623]" dev="sockfs" ino=16623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.825025][ T10] usb 1-1: device descriptor read/64, error -71 [ 85.831386][ T1291] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 86.605587][ T36] audit: type=1326 audit(2000000003.660:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.1.577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47f499c819 code=0x0 [ 86.645990][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 86.663441][ T1291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.689017][ T1291] usb 4-1: config 0 has no interfaces? [ 86.725616][ T1291] usb 4-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00 [ 86.762741][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.805154][ T1291] usb 4-1: config 0 descriptor?? [ 86.833371][ T10] usb 1-1: device descriptor read/64, error -71 [ 87.093356][ T10] usb 1-1: device descriptor read/64, error -71 [ 87.213444][ T10] usb usb1-port1: attempt power cycle [ 87.507803][ T1933] veth1_macvtap: left promiscuous mode [ 87.514943][ T1933] macsec0: entered promiscuous mode [ 87.520173][ T1933] macsec0: entered allmulticast mode [ 87.552026][ T1933] veth1_macvtap: entered promiscuous mode [ 87.563507][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 87.587125][ T1933] veth1_macvtap: entered allmulticast mode [ 87.611464][ T1933] macsec0: left promiscuous mode [ 87.617344][ T1933] macsec0: left allmulticast mode [ 87.623505][ T10] usb 1-1: device descriptor read/8, error -71 [ 87.639975][ T1933] veth1_macvtap: left allmulticast mode [ 87.683939][ T1934] syzkaller1: entered promiscuous mode [ 87.693359][ T1934] syzkaller1: entered allmulticast mode [ 87.729045][ T1937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.753562][ T1937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.771639][ T10] usb 1-1: device descriptor read/8, error -71 [ 87.778443][ T1937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.796077][ T1937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.023354][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 88.064328][ T10] usb 1-1: device descriptor read/8, error -71 [ 88.203878][ T10] usb 1-1: device descriptor read/8, error -71 [ 88.313516][ T10] usb usb1-port1: unable to enumerate USB device [ 88.723375][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 88.823712][ T36] audit: type=1400 audit(2000000005.890:337): avc: denied { read write } for pid=1945 comm="syz.1.585" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.862317][ T1289] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 88.896758][ T1291] usb 4-1: USB disconnect, device number 32 [ 88.902969][ T1289] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.919178][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 88.935726][ T10] usb 1-1: can't read configurations, error -22 [ 88.946424][ T36] audit: type=1400 audit(2000000005.910:338): avc: denied { open } for pid=1945 comm="syz.1.585" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.113352][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 89.243405][ T1291] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 89.294661][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 89.305911][ T10] usb 1-1: can't read configurations, error -22 [ 89.326071][ T10] usb usb1-port1: attempt power cycle [ 89.414689][ T1291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 89.435659][ T1291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 89.462548][ T1291] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 89.481634][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.583684][ T1291] usb 4-1: config 0 descriptor?? [ 89.594357][ T1948] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.663350][ T406] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 89.703369][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 89.734996][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 89.749454][ T10] usb 1-1: can't read configurations, error -22 [ 89.855846][ T406] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.864402][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 89.884454][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.894278][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 89.913050][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 89.933376][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 89.954140][ T406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 89.973484][ T10] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 89.981528][ T10] usb 1-1: can't read configurations, error -22 [ 89.991980][ T406] usb 2-1: string descriptor 0 read error: -22 [ 89.998355][ T406] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 90.010834][ T1291] usbhid 4-1:0.0: can't add hid device: -71 [ 90.018763][ T10] usb usb1-port1: unable to enumerate USB device [ 90.025351][ T1291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 90.053673][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.064465][ T1291] usb 4-1: USB disconnect, device number 33 [ 90.080518][ T406] usb 2-1: config 0 descriptor?? [ 90.093421][ T1958] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 90.304534][ T1291] usb 2-1: USB disconnect, device number 43 [ 90.534186][ T36] audit: type=1326 audit(2000000007.600:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.3.590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e12f9c819 code=0x0 [ 90.823487][ T1971] netlink: 'syz.1.594': attribute type 64 has an invalid length. [ 90.840025][ T1971] netlink: 5 bytes leftover after parsing attributes in process `syz.1.594'. [ 91.239888][ T1975] 9pnet_fd: Insufficient options for proto=fd [ 92.038333][ T1981] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 92.423347][ T36] audit: type=1400 audit(2000000009.480:340): avc: denied { shutdown } for pid=1991 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.483428][ T36] audit: type=1400 audit(2000000009.480:341): avc: denied { read } for pid=1991 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.720333][ T1997] overlayfs: failed to clone upperpath [ 93.385683][ T2002] 9pnet_fd: Insufficient options for proto=fd [ 93.683594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.695696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.707682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.719657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.731642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.743617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.755603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.767565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.779563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.791529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.693339][ C0] net_ratelimit: 97807 callbacks suppressed [ 98.693359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 98.711325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.723300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 98.735352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.747334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 98.759364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.771427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 98.783457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.795440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 98.807497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.043330][ C0] sched: DL replenish lagged too much [ 103.703378][ C0] net_ratelimit: 102239 callbacks suppressed [ 103.703401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.721429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.733405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.745536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 103.757580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.769554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.781531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.793599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 103.805631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 103.817592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.713377][ C0] net_ratelimit: 95444 callbacks suppressed [ 108.713398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.731464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 108.743519][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.755489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.767462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.779510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 108.791537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.803496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.815480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.827532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 113.723341][ C0] net_ratelimit: 100247 callbacks suppressed [ 113.723362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 113.741498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.753465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.765440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.777492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 113.789533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.801515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.813522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.825617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 113.837724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.733369][ C0] net_ratelimit: 100493 callbacks suppressed [ 118.733390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.751466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 118.763510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.775473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.787454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.799516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 118.811552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.823529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.835506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.847572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 123.743364][ C0] net_ratelimit: 98202 callbacks suppressed [ 123.743383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.761457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 123.773504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.785490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.797474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.809520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 123.821547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.833510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.845505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.857584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 128.753357][ C0] net_ratelimit: 96509 callbacks suppressed [ 128.753378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.771392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.783446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 128.795479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.807445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.819429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.831475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 128.843506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.855479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.867456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.250906][ T2017] ======================================================= [ 130.250906][ T2017] WARNING: The mand mount option has been deprecated and [ 130.250906][ T2017] and is ignored by this kernel. Remove the mand [ 130.250906][ T2017] option from the mount to silence this warning. [ 130.250906][ T2017] ======================================================= [ 133.763321][ C0] net_ratelimit: 98405 callbacks suppressed [ 133.763343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.781323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.793326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.805377][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 133.817411][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.829376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.838531][ T36] audit: type=1400 audit(2000000047.310:342): avc: denied { remount } for pid=2015 comm="syz.2.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.841533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.872836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 133.884893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.896853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.465494][ T36] audit: type=1400 audit(2000000054.490:343): avc: denied { mounton } for pid=2021 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 138.773342][ C0] net_ratelimit: 96104 callbacks suppressed [ 138.773362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.791466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 138.803502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.815477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.827475][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.839546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 138.851584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.863547][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.875521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.887570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 143.783309][ C0] net_ratelimit: 100874 callbacks suppressed [ 143.783334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.801489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 143.813523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.825477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.837457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.849516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 143.861570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.873541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.885516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.897561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 148.793329][ C0] net_ratelimit: 98256 callbacks suppressed [ 148.793349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.811346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.823365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.835421][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 148.847462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.859423][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.871399][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.883453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 148.895490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.907458][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.803369][ C0] net_ratelimit: 103643 callbacks suppressed [ 153.803392][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.821517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.833614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 153.845674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.857701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.869714][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.881809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 153.893879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.905862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 153.917864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.813335][ C0] net_ratelimit: 99589 callbacks suppressed [ 158.813357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.831366][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.843366][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.855466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 158.867539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.879510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.891481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.903550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 158.915579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.927548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.823326][ C0] net_ratelimit: 102358 callbacks suppressed [ 163.823349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.841438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.853403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.865385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.877438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 163.889473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.901448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.913410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.925383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 163.937478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 168.833337][ C0] net_ratelimit: 96871 callbacks suppressed [ 168.833357][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.851280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.863355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 168.875415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.887407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.899413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 168.911462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 168.923457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.935514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 168.947557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.843326][ C0] net_ratelimit: 100814 callbacks suppressed [ 173.843346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.861333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.873387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 173.885424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.897417][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.909410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 173.921452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.933432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.945481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 173.957577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.853293][ C0] net_ratelimit: 94376 callbacks suppressed [ 178.853314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.871315][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.883367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 178.895398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.907401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.919379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.931418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.943400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 178.955525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 178.967495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.863306][ C0] net_ratelimit: 100573 callbacks suppressed [ 183.863331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 183.881437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.893419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.905468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 183.917522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.929498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.941467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.953571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 183.965543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 183.977578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.873331][ C0] net_ratelimit: 100505 callbacks suppressed [ 188.873351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 188.891425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.903503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.915477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.927515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.939494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 188.951544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.963526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 188.975576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 188.987606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.883337][ C0] net_ratelimit: 102965 callbacks suppressed [ 193.883358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.901428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 193.913462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.925432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.937410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.949457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.961427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 193.973469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.985440][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.997491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 198.893296][ C0] net_ratelimit: 98032 callbacks suppressed [ 198.893317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.911338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.923344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.935422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.947426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 198.959511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.971503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.983559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 198.995608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.007575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.903340][ C0] net_ratelimit: 100506 callbacks suppressed [ 203.903361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 203.921407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.933387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.945438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 203.957469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.969434][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.981412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.993444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.005434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 204.017512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.913292][ C0] net_ratelimit: 102438 callbacks suppressed [ 208.913312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 208.931485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.943488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.955547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 208.967598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.979619][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.991606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.003637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.015612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 209.027648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.923303][ C0] net_ratelimit: 99509 callbacks suppressed [ 213.923326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.941275][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 213.953336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.965318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.977418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 213.989471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.001456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.013448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.025489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.037476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 218.933321][ C0] net_ratelimit: 96209 callbacks suppressed [ 218.933341][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.951415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 218.963446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.975408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.993329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.005383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.017372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 219.029406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.041406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.053531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 223.943316][ C0] net_ratelimit: 88666 callbacks suppressed [ 223.943333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.961440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.973413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 223.985444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.997426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.009473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 224.021517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.033516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.045541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.057575][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.024030][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.031196][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.434894][ T2028] bridge_slave_0: entered allmulticast mode [ 228.953306][ C0] net_ratelimit: 102984 callbacks suppressed [ 228.953326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 228.971469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.983448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.995543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 229.007577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.019532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.031518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.043549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.055550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 229.067586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.414717][ T37] INFO: task kworker/0:8:1291 blocked for more than 122 seconds. [ 229.422586][ T37] Not tainted syzkaller #0 [ 229.625167][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 229.820341][ T37] task:kworker/0:8 state:D stack:0 pid:1291 tgid:1291 ppid:2 flags:0x00004000 [ 229.830598][ T37] Workqueue: events fqdir_free_fn [ 229.835700][ T37] Call Trace: [ 229.839008][ T37] [ 229.841957][ T37] __schedule+0x1399/0x1fa0 [ 229.846500][ T37] ? __sched_text_start+0x10/0x10 [ 229.851541][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 229.856706][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.862290][ T37] ? wq_worker_sleeping+0x250/0x260 [ 229.867528][ T37] ? wq_worker_sleeping+0x1a0/0x260 [ 229.872750][ T37] schedule+0xc5/0x240 [ 229.876898][ T37] schedule_timeout+0xc7/0x3b0 [ 229.881742][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 229.887152][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 229.892737][ T37] ? generic_exec_single+0x1fd/0x500 [ 229.898068][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 229.903747][ T37] wait_for_common+0x369/0x650 [ 229.908534][ T37] ? wait_for_completion+0x40/0x40 [ 229.913687][ T37] ? _raw_spin_unlock+0x45/0x60 [ 229.918561][ T37] ? __switch_to_asm+0x3d/0x70 [ 229.923372][ T37] wait_for_completion+0x1c/0x40 [ 229.928324][ T37] rcu_barrier+0x415/0x540 [ 229.932759][ T37] fqdir_free_fn+0x36/0x150 [ 229.937307][ T37] process_scheduled_works+0x7d1/0x1020 [ 229.942884][ T37] worker_thread+0xc70/0x10b0 [ 229.947612][ T37] kthread+0x2c6/0x370 [ 229.951698][ T37] ? __cfi_worker_thread+0x10/0x10 [ 229.956861][ T37] ? __cfi_kthread+0x10/0x10 [ 229.961479][ T37] ret_from_fork+0x67/0xa0 [ 229.965981][ T37] ? __cfi_kthread+0x10/0x10 [ 229.970591][ T37] ret_from_fork_asm+0x1a/0x30 [ 229.975414][ T37] [ 230.004982][ T36] audit: type=1400 audit(2000000146.740:344): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2285]" dev="pipefs" ino=2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.183883][ T37] INFO: task syz.0.584:1944 blocked for more than 123 seconds. [ 230.191546][ T37] Not tainted syzkaller #0 [ 230.846614][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 230.884028][ T37] task:syz.0.584 state:D stack:0 pid:1944 tgid:1943 ppid:295 flags:0x00004006 [ 230.913735][ T2028] bridge_slave_0: entered promiscuous mode [ 231.384854][ T37] Call Trace: [ 231.388231][ T37] [ 231.391174][ T37] __schedule+0x1399/0x1fa0 [ 231.755490][ T2027] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 231.768123][ T37] ? __sched_text_start+0x10/0x10 [ 231.782139][ T37] ? check_preempt_wakeup_fair+0x81e/0xb10 [ 231.787998][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 231.793146][ T37] ? __kasan_check_write+0x18/0x20 [ 231.798307][ T37] ? trace_contention_begin+0xc0/0xc0 [ 231.803730][ T37] schedule+0xc5/0x240 [ 231.807819][ T37] schedule_preempt_disabled+0x14/0x30 [ 231.813349][ T37] __mutex_lock+0x960/0x1bb0 [ 231.817967][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 231.824787][ T37] ? __kasan_check_write+0x18/0x20 [ 231.829930][ T37] ? _raw_spin_lock+0x92/0x120 [ 231.834738][ T37] ? __kasan_check_write+0x18/0x20 [ 231.839881][ T37] ? wake_up_q+0x10f/0x1c0 [ 231.844362][ T37] ? __mutex_unlock_slowpath+0x4b7/0x780 [ 231.850024][ T37] ? mutex_unlock+0x240/0x240 [ 231.854777][ T37] __mutex_lock_slowpath+0xe/0x20 [ 231.859823][ T37] mutex_lock+0x113/0x1d0 [ 231.864225][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 231.869110][ T37] rcu_barrier+0x4d/0x540 [ 231.873473][ T37] ? __kasan_slab_free+0x6a/0x80 [ 231.878442][ T37] netdev_run_todo+0x118/0xce0 [ 231.883273][ T37] ? kvfree+0x39/0x50 [ 231.887278][ T37] ? netdev_state_change+0xaa/0x240 [ 231.892498][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 231.897837][ T37] rtnl_unlock+0x12/0x20 [ 231.902133][ T37] tun_chr_close+0xc5/0x150 [ 231.906678][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 231.911821][ T37] __fput+0x1fe/0xa00 [ 231.915860][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 231.921447][ T37] ____fput+0x20/0x30 [ 231.925482][ T37] task_work_run+0x1e8/0x260 [ 231.930090][ T37] ? __cfi_task_work_run+0x10/0x10 [ 231.935237][ T37] ? __kasan_check_write+0x18/0x20 [ 231.940372][ T37] do_exit+0x9ad/0x2720 [ 231.944560][ T37] ? down_interruptible+0x5b/0xe0 [ 231.949623][ T37] ? __cfi_do_exit+0x10/0x10 [ 231.954249][ T37] ? raw_ioctl+0x333d/0x37e0 [ 231.958877][ T37] ? __kasan_check_write+0x18/0x20 [ 231.964030][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 231.969182][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 231.974777][ T37] do_group_exit+0x229/0x2f0 [ 231.979404][ T37] ? __kasan_check_write+0x18/0x20 [ 231.984552][ T37] get_signal+0x1398/0x14e0 [ 231.989087][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 231.994696][ T37] ? __fget_files+0x2c5/0x340 [ 231.999393][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 232.005587][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 232.010457][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 232.015960][ T37] do_syscall_64+0x63/0xf0 [ 232.020401][ T37] ? clear_bhb_loop+0x50/0xa0 [ 232.025123][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 232.031040][ T37] RIP: 0033:0x7fb93519c4ab [ 232.035504][ T37] RSP: 002b:00007fb933be0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.043952][ T37] RAX: fffffffffffffffc RBX: 0000000000000004 RCX: 00007fb93519c4ab [ 232.051942][ T37] RDX: 00007fb933be1fd0 RSI: 0000000080085502 RDI: 0000000000000004 [ 232.059952][ T37] RBP: 00007fb933be1fd0 R08: 00007fb935064567 R09: 00007fb933be0fc8 [ 232.067980][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 232.075976][ T37] R13: 0000000800000000 R14: 0000000000000000 R15: 00007fb935250ede [ 232.084012][ T37] [ 232.087085][ T37] INFO: task syz.3.596:1977 blocked for more than 125 seconds. [ 232.513643][ T37] Not tainted syzkaller #0 [ 232.518647][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.527394][ T37] task:syz.3.596 state:D stack:0 pid:1977 tgid:1977 ppid:294 flags:0x00004004 [ 232.537584][ T37] Call Trace: [ 232.540875][ T37] [ 232.543833][ T37] __schedule+0x1399/0x1fa0 [ 232.548358][ T37] ? stack_depot_save_flags+0x38/0x800 [ 232.553858][ T37] ? __sched_text_start+0x10/0x10 [ 232.558906][ T37] ? kasan_save_stack+0x4d/0x60 [ 232.563820][ T37] ? kasan_save_stack+0x3e/0x60 [ 232.568715][ T37] ? __kasan_check_write+0x18/0x20 [ 232.573862][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 232.579094][ T37] ? __kasan_check_write+0x18/0x20 [ 232.584242][ T37] ? trace_contention_begin+0xc0/0xc0 [ 232.589636][ T37] ? do_syscall_64+0x63/0xf0 [ 232.594257][ T37] schedule+0xc5/0x240 [ 232.598355][ T37] schedule_preempt_disabled+0x14/0x30 [ 232.603855][ T37] __mutex_lock+0x960/0x1bb0 [ 232.608491][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 232.615293][ T37] ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10 [ 232.621748][ T37] ? __call_rcu_common+0x43b/0x720 [ 232.626897][ T37] ? call_rcu_hurry+0x30/0x30 [ 232.631687][ T37] __mutex_lock_slowpath+0xe/0x20 [ 232.636773][ T37] mutex_lock+0x113/0x1d0 [ 232.641129][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 232.646047][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 232.652576][ T37] rcu_barrier+0x4d/0x540 [ 232.656938][ T37] ? __kasan_check_write+0x18/0x20 [ 232.662071][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 232.667217][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 232.672610][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 232.677405][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 232.682539][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 232.688222][ T37] ? __kasan_check_write+0x18/0x20 [ 232.693373][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 232.699031][ T37] kvm_put_kvm+0xb04/0x12c0 [ 232.703578][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 232.708710][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 232.714382][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 232.719604][ T37] kvm_vm_release+0x47/0x70 [ 232.724148][ T37] __fput+0x1fe/0xa00 [ 232.728153][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 232.733749][ T37] ____fput+0x20/0x30 [ 232.737760][ T37] task_work_run+0x1e8/0x260 [ 232.742397][ T37] ? __cfi_task_work_run+0x10/0x10 [ 232.747538][ T37] ? __kasan_check_write+0x18/0x20 [ 232.752672][ T37] resume_user_mode_work+0x35/0x50 [ 232.757828][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 232.763359][ T37] do_syscall_64+0x63/0xf0 [ 232.963810][ T37] ? clear_bhb_loop+0x50/0xa0 [ 232.968527][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 232.974477][ T37] RIP: 0033:0x7f7e12f9c819 [ 232.978911][ T37] RSP: 002b:00007fffe51c79c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.987351][ T37] RAX: 0000000000000000 RBX: 00007fffe51c7ab0 RCX: 00007f7e12f9c819 [ 232.995365][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 233.003374][ T37] RBP: 00000000000164d6 R08: 0000000000000001 R09: 0000000000000000 [ 233.011362][ T37] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007fffe51c7af0 [ 233.019362][ T37] R13: 00007f7e13215fac R14: 0000000000016524 R15: 00007f7e13215fa0 [ 233.027362][ T37] [ 233.963313][ C0] net_ratelimit: 86652 callbacks suppressed [ 233.963338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.981384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.993402][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 234.005439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.017417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.029473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 234.041518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.053492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.065552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.068668][ T37] INFO: task syz.1.601:1991 blocked for more than 127 seconds. [ 234.077584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.276233][ T37] Not tainted syzkaller #0 [ 234.281244][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.289936][ T37] task:syz.1.601 state:D stack:0 pid:1991 tgid:1991 ppid:290 flags:0x00004004 [ 234.300133][ T37] Call Trace: [ 234.303442][ T37] [ 234.306385][ T37] __schedule+0x1399/0x1fa0 [ 234.310910][ T37] ? __sched_text_start+0x10/0x10 [ 234.315981][ T37] ? check_preempt_wakeup_fair+0x81e/0xb10 [ 234.321817][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 234.327033][ T37] ? __kasan_check_write+0x18/0x20 [ 234.332185][ T37] ? trace_contention_begin+0xc0/0xc0 [ 234.337598][ T37] schedule+0xc5/0x240 [ 234.341693][ T37] schedule_preempt_disabled+0x14/0x30 [ 234.347194][ T37] __mutex_lock+0x960/0x1bb0 [ 234.351806][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 234.358614][ T37] ? __kasan_check_write+0x18/0x20 [ 234.363764][ T37] ? _raw_spin_lock+0x92/0x120 [ 234.368553][ T37] ? __kasan_check_write+0x18/0x20 [ 234.373700][ T37] ? wake_up_q+0x10f/0x1c0 [ 234.378139][ T37] ? __mutex_unlock_slowpath+0x4b7/0x780 [ 234.383809][ T37] ? mutex_unlock+0x240/0x240 [ 234.388514][ T37] __mutex_lock_slowpath+0xe/0x20 [ 234.393581][ T37] mutex_lock+0x113/0x1d0 [ 234.397931][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 234.402802][ T37] rcu_barrier+0x4d/0x540 [ 234.407168][ T37] ? __kasan_slab_free+0x6a/0x80 [ 234.412123][ T37] netdev_run_todo+0x118/0xce0 [ 234.416946][ T37] ? kvfree+0x39/0x50 [ 234.420948][ T37] ? netdev_state_change+0xaa/0x240 [ 234.426185][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 234.431488][ T37] rtnl_unlock+0x12/0x20 [ 234.435782][ T37] tun_chr_close+0xc5/0x150 [ 234.440301][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 234.445451][ T37] __fput+0x1fe/0xa00 [ 234.449459][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 234.455098][ T37] ____fput+0x20/0x30 [ 234.459109][ T37] task_work_run+0x1e8/0x260 [ 234.463741][ T37] ? __cfi_task_work_run+0x10/0x10 [ 234.468895][ T37] ? fpregs_restore_userregs+0x11c/0x260 [ 234.474566][ T37] resume_user_mode_work+0x35/0x50 [ 234.479701][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 234.485209][ T37] do_syscall_64+0x63/0xf0 [ 234.489648][ T37] ? clear_bhb_loop+0x50/0xa0 [ 234.494357][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 234.500288][ T37] RIP: 0033:0x7f47f499c819 [ 234.504753][ T37] RSP: 002b:00007ffc4f3ab338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 234.513196][ T37] RAX: 0000000000000000 RBX: 00007f47f4c17da0 RCX: 00007f47f499c819 [ 234.521222][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 234.529224][ T37] RBP: 00007f47f4c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 234.537227][ T37] R10: 00007f47f4c17cb0 R11: 0000000000000246 R12: 0000000000016c29 [ 234.545237][ T37] R13: 00007f47f4c1609c R14: 00000000000169b9 R15: 00007f47f4c16090 [ 234.553230][ T37] [ 236.666315][ T37] NMI backtrace for cpu 0 [ 236.666335][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 de3e1d1c5728fabb050931035751e453f935abb5 [ 236.666365][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.666377][ T37] Call Trace: [ 236.666383][ T37] [ 236.666391][ T37] __dump_stack+0x21/0x30 [ 236.666422][ T37] dump_stack_lvl+0x140/0x1c0 [ 236.666447][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 236.666474][ T37] dump_stack+0x19/0x20 [ 236.666498][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 236.666527][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 236.666551][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 236.666585][ T37] ? sched_show_task+0x371/0x530 [ 236.666609][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 236.666633][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 236.666658][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 236.666682][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 236.666712][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 236.666737][ T37] watchdog+0xdad/0xf00 [ 236.666754][ T37] ? __kasan_check_write+0x18/0x20 [ 236.666783][ T37] ? __cfi_watchdog+0x10/0x10 [ 236.666800][ T37] ? __kasan_check_read+0x15/0x20 [ 236.666825][ T37] ? __kthread_parkme+0x137/0x180 [ 236.666855][ T37] ? schedule+0xc5/0x240 [ 236.666873][ T37] kthread+0x2c6/0x370 [ 236.666892][ T37] ? __cfi_watchdog+0x10/0x10 [ 236.666909][ T37] ? __cfi_kthread+0x10/0x10 [ 236.666929][ T37] ret_from_fork+0x67/0xa0 [ 236.666954][ T37] ? __cfi_kthread+0x10/0x10 [ 236.666973][ T37] ret_from_fork_asm+0x1a/0x30 [ 236.667003][ T37] [ 236.667010][ T37] Sending NMI from CPU 0 to CPUs 1: [ 236.859973][ C1] NMI backtrace for cpu 1 [ 236.859991][ C1] CPU: 1 UID: 0 PID: 20 Comm: rcuop/0 Not tainted syzkaller #0 de3e1d1c5728fabb050931035751e453f935abb5 [ 236.860010][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.860019][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x70 [ 236.860046][ C1] Code: e9 09 06 1c 04 cc cc cc cc cc cc cc cc cc b8 74 f6 c5 07 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 48 8b 45 08 <65> 48 8b 0d 7c 3f 7d 7e 65 8b 15 7d 3f 7d 7e 81 e2 00 01 ff 00 74 [ 236.860058][ C1] RSP: 0018:ffffc900002302b0 EFLAGS: 00000246 [ 236.860070][ C1] RAX: ffffffff84f95fa1 RBX: 1ffff11020b7e40c RCX: 0000000000000100 [ 236.860080][ C1] RDX: ffff888103660000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.860090][ C1] RBP: ffffc900002302b0 R08: ffffc90000230518 R09: 0000000000000017 [ 236.860099][ C1] R10: ffffc900002306b0 R11: fffff520000460da R12: 0000000000000100 [ 236.860109][ C1] R13: dffffc0000000000 R14: ffff888105bf2000 R15: 0000000000000001 [ 236.860118][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 236.860130][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.860139][ C1] CR2: 0000561a6bd1c1f0 CR3: 000000010db68000 CR4: 00000000003526b0 [ 236.860151][ C1] Call Trace: [ 236.860156][ C1] [ 236.860162][ C1] __find_rr_leaf+0x1a1/0x840 [ 236.860186][ C1] ? rt6_check_expired+0x250/0x250 [ 236.860206][ C1] ? __siphash_unaligned+0x276/0x3c0 [ 236.860225][ C1] fib6_table_lookup+0x2ee/0x9e0 [ 236.860241][ C1] ? __cfi_flow_hash_from_keys+0x10/0x10 [ 236.860261][ C1] ? __cfi_fib6_table_lookup+0x10/0x10 [ 236.860276][ C1] ? ipv6_rcv+0xf1/0x240 [ 236.860293][ C1] ip6_pol_route+0x17a/0x1360 [ 236.860309][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 236.860333][ C1] ? __cfi_ip6_pol_route+0x10/0x10 [ 236.860348][ C1] ? netif_receive_skb+0x161/0x7b0 [ 236.860366][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 236.860383][ C1] ? br_flood+0x67e/0x730 [ 236.860403][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 236.860416][ C1] ip6_pol_route_input+0x5a/0x80 [ 236.860433][ C1] fib6_rule_lookup+0x4ee/0x6d0 [ 236.860446][ C1] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 236.860463][ C1] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 236.860478][ C1] ? ip6t_do_table+0x1e0/0x14d0 [ 236.860497][ C1] ip6_route_input+0x62e/0x8f0 [ 236.860514][ C1] ? __cfi_ip6_route_input+0x10/0x10 [ 236.860532][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 236.860551][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 236.860577][ C1] ip6_rcv_finish+0x15a/0x3e0 [ 236.860594][ C1] ipv6_rcv+0xf1/0x240 [ 236.860609][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 236.860624][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 236.860640][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 236.860662][ C1] process_backlog+0x44b/0xad0 [ 236.860683][ C1] __napi_poll+0xd0/0x610 [ 236.860699][ C1] net_rx_action+0x5ea/0xd80 [ 236.860718][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 236.860741][ C1] ? timer_expire_remote+0xa0/0xa0 [ 236.860757][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 236.860775][ C1] handle_softirqs+0x1ad/0x630 [ 236.860797][ C1] __do_softirq+0xf/0x16 [ 236.860811][ C1] do_softirq+0xb8/0x110 [ 236.860830][ C1] [ 236.860835][ C1] [ 236.860839][ C1] ? __cfi_do_softirq+0x10/0x10 [ 236.860859][ C1] ? __cfi_radix_tree_node_rcu_free+0x10/0x10 [ 236.860881][ C1] __local_bh_enable_ip+0x74/0x80 [ 236.860901][ C1] rcu_do_batch+0x5d9/0xd40 [ 236.860922][ C1] ? rcu_core+0xd30/0xd30 [ 236.860940][ C1] ? __kasan_check_write+0x18/0x20 [ 236.860959][ C1] ? _raw_spin_lock+0x92/0x120 [ 236.860979][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 236.861001][ C1] ? __kasan_check_read+0x15/0x20 [ 236.861018][ C1] ? rcu_nocb_cb_kthread+0x50f/0xb30 [ 236.861039][ C1] rcu_nocb_cb_kthread+0x524/0xb30 [ 236.861061][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 236.861082][ C1] ? __kasan_check_write+0x18/0x20 [ 236.861100][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 236.861121][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 236.861142][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 236.861162][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 236.861176][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 236.861189][ C1] ? __kasan_check_read+0x15/0x20 [ 236.861207][ C1] ? __kthread_parkme+0x137/0x180 [ 236.861228][ C1] ? schedule+0xc5/0x240 [ 236.861241][ C1] kthread+0x2c6/0x370 [ 236.861254][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 236.861275][ C1] ? __cfi_kthread+0x10/0x10 [ 236.861289][ C1] ret_from_fork+0x67/0xa0 [ 236.861307][ C1] ? __cfi_kthread+0x10/0x10 [ 236.861321][ C1] ret_from_fork_asm+0x1a/0x30 [ 236.861345][ C1] [ 238.973318][ C0] net_ratelimit: 87067 callbacks suppressed [ 238.973339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 238.991420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.003385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.015363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.027403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.039425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 239.051499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.063489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.075574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:db:21:a1:24:20, vlan:0) [ 239.087616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)