last executing test programs: 1m4.928323701s ago: executing program 2 (id=702): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m4.922749921s ago: executing program 2 (id=703): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000001040)=0x1040, 0x4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0"], 0x120}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/137, 0x89}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f00000000c0)=""/60, 0x3c}], 0x4, 0x7, 0x20000000) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000003c0)={"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"}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r7, 0x0, 0x0) close(r8) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) 1m4.895120112s ago: executing program 2 (id=704): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20022, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r2, 0x0, 0x0, 0x0) 1m4.020723732s ago: executing program 2 (id=709): r0 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x80\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf+2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~MxJ\x90\x00x\x86\xff\x9ce\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5b\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gL\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\x9c\xff\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0t\xf2\xad\xa7\xd2\xd1\xe7\xfb+g\xc0\xaa\xf0c;\xba\x84Uq\xca0\xc8\xa0{\x10\x1e\xa6\x1073\xab\xa9\xd4!\xce4\xb3!\x91\x05\x9dG\xe4+\x0f1\a\xbc\xd6\xf7\xac\xab\xaa\xe5\x8f\x13M\x92\x7f\xb3\xa4\xd7d\xdc\xdd\xe9\xc20~\xcc\x82[\xc3+N\xc2x\x00\xd3\x87\x94\x7f\x8c\x1a\xe4_\xeffo\x15\xaa\xb2\x8f\x9d\xa4\x8dkt\x17\xb8A\x97\xb0\x99\x96\x8c\n]\x95FWQ\x10\xe3a\xcd=*\xf70\xb3Pj\x8e\xd6}\x13\xad\x01\b8p\xf7h\xbc\xd8\x18D\x03VK\x86\xe5\xe0bo\xcbXTS\x97b\x11\xf7\x9c96\n\x18>\x8e\x8bs\xca\n\xcc|\xff\xab\xd2\x9b\xf3\x9c\x8a$\xa7d\xf5\tQ\x83$e\x04\x7f\xf0Yx\x00\xf2\x01\xd1`m\xfe\xde\x89\xb8\xb1\"\xe2\xe3#\x95Z\xa5i%]\\!\xdd\xc09\t\xce\x17Oe\r\xe4\xad8W\xd9k\x04Y\x91\x90\xdd\x88\x1dR)\xd9+\xbb\t`\x13k\xfd\xb8\x81\xc7\xd3\xeaq\xe9\xcb\x061Q\xa5\xe0P\"&#d\xf5\xf1\x14g\x8e\xeb\x8d\x02\x89N\x87a\x9a#c\xf9)?\xc3%\x14\x10\xed# \xae\xaf\x14\xf1\x05\xd2i\xa3~pW\x19\xben\xe5L[\xb8\xd2\xa5f\xa2>\x84\xb1I:\xab\x1b', 0x0) r1 = socket(0x1, 0x80802, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003dbc602f8b0569d3721d9ce6d53151db236817bb4bf864b6ee5919698691c541ebffb9747d", @ANYRES16=r2, @ANYBLOB="10002dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x5) 1m3.824178666s ago: executing program 2 (id=710): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) capset(0x0, 0x0) lchown(0x0, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT=0x0], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00030400000004030408b83d98ccc6c3657e86a883e1480ef9e49dc7ba23f1ae0e008bb920ff44c57f9e54f86636b0d06a1f3a44ffbdf03f"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000000)={0x0, 0x16, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x20, 0x82, 0x1, "f6"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000600)={0x20, 0x7, 0x2d, "319c97cf66f30e91acd92b25836df2af6761f8f927b567b2e31e71e9538659ba851afef7a77c9f2f5275b94776"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x20, 0x40, [0xf0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "a970"}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, "0521"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0xca}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x577abafb5a9e5c08, 0x11, 0x2, '7.'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.522373658s ago: executing program 2 (id=719): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r4], 0xbfb3) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)) (async, rerun: 64) r5 = syz_open_pts(r4, 0x101000) (rerun: 64) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) membarrier(0x1, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async, rerun: 64) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={0x0}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r8, r8, r8) eventfd(0xfffffffa) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r8, &(0x7f0000000080)) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 51.306641715s ago: executing program 3 (id=761): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18040000000000000100000c010000006200000000400000", @ANYRESDEC=r1], 0x18}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x40000103, 0x0, 0x1}, {0x202}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000580)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x100000) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x1, 0x7, {{0x1f, 0x4, 0x2, 0x1, 0x7c, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @local, {[@lsrr={0x83, 0xb, 0x79, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0xdc, 0x0, 0x0, [0x9, 0xc96, 0x7fffffff, 0x6033030f]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xa3, [@multicast1, @empty, @local]}, @generic={0x88, 0xd, "a16c421ad64241271aca4d"}, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0x3, [0x0, 0x7fffffff, 0x0, 0xd6, 0x5, 0x2]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8, 0x700, 0xe, 0x7f, {{0xb, 0x4, 0x2, 0x0, 0x2c, 0x67, 0x0, 0x9, 0x29, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x5f, [@private=0xa010102, @multicast1, @broadcast]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r8, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x1, 0x40, 0x5, 0x1, {{0x30, 0x4, 0x2, 0x0, 0xc0, 0x64, 0x0, 0x1f, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @local, {[@timestamp_prespec={0x44, 0x24, 0xc8, 0x3, 0x0, [{@multicast1, 0x1}, {@multicast2, 0x6}, {@loopback, 0x5}, {@multicast1, 0xfff}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x1b, 0x0, 0x3, [0x4, 0x1, 0x147, 0x7]}, @generic={0x94, 0x8, "a8d049b81d1c"}, @cipso={0x86, 0x5d, 0x3, [{0x7, 0x12, "cbbbbcfc2c4e0c19ea4e2c57c785c295"}, {0x2, 0xa, "f9cff66a7d9634b2"}, {0x6, 0xd, "3e8c72532a6e003aef0f7b"}, {0x1, 0x6, "1645b2bc"}, {0x6, 0xc, "67d14ed59541f3ba9844"}, {0x1, 0xb, "50869472c809bad43c"}, {0x6, 0x11, "78a1c38abb121d4546c11021748d55"}]}, @generic={0x82, 0xb, "7f2540588198161a00"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x5, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x5b57, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'erspan0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x7, 0x4a, {{0x3e, 0x4, 0x0, 0x5, 0xf8, 0x65, 0x0, 0x4, 0x29, 0x0, @local, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0x6, [{@remote, 0x200}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xcd75}, {@remote, 0xfaa3}, {@local, 0x9}, {@local, 0xfffffff9}]}, @lsrr={0x83, 0xf, 0xae, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x15, 0x1, 0x4, [{@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0xe9, 0x1, 0x2, [{@remote, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@remote, 0x6}, {@multicast1, 0x9}, {@private=0xa010100, 0x8}]}, @timestamp_addr={0x44, 0x14, 0x9c, 0x1, 0xe, [{@loopback, 0x1000}, {@private=0xa010102, 0xfffffff2}]}, @timestamp_addr={0x44, 0x3c, 0x19, 0x1, 0xc, [{@multicast2, 0x2}, {@loopback, 0x2}, {@multicast1, 0x1}, {@remote, 0x8b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x509c4c8}, {@multicast2, 0xb1c}]}, @end, @ra={0x94, 0x4}]}}}}}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000380)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "22bb191c3413648fc570aaa49837f125b6d9fa2ec226aaabb8f7dfe2bf31d8a19abec1420a9e11cdb7d7d9a554bf30755cdf02364042e256d8b1c8c10c764cd9"}, 0x48}}, 0x4008054) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x40, 0x8, 0xfffffbff, 0x2, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x68, 0x0, 0xb1, 0x4, 0x0, @empty, @remote, {[@noop, @end, @cipso={0x86, 0x26, 0x1, [{0x5, 0x3, '4'}, {0x5, 0x12, "65d245706cfa70993b5a7b987c9b3bfc"}, {0x7, 0x7, "a29aabdc04"}, {0x0, 0x4, "9a04"}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x8e, 0x3, 0xb, [{@empty, 0x4}, {@remote, 0x5}]}, @ssrr={0x89, 0xb, 0x18, [@remote, @broadcast]}, @noop, @lsrr={0x83, 0x7, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x17, 0xc5, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x7, 0x9, {{0x49, 0x4, 0x1, 0x9, 0x124, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @loopback, {[@end, @generic={0x89, 0xf, "3555892f7bb3bf90adb8a711d5"}, @timestamp_prespec={0x44, 0x34, 0x5f, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote}, {@private=0xa010100, 0x300}, {@rand_addr=0x64010102, 0xffffffff}, {@rand_addr=0x60010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffff485}]}, @ssrr={0x89, 0x27, 0x62, [@rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010106, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @broadcast, @empty, @empty]}, @timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x34cb}, {@multicast2, 0x8}, {@empty, 0x2}]}, @lsrr={0x83, 0x17, 0x7c, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0xea, [@private=0xa010101, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x27, 0x65, [@rand_addr=0x64010102, @local, @loopback, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x26}, @remote, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast1]}, @lsrr={0x83, 0x3, 0xc3}, @timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x1}]}}}}}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r12, r11, 0x0) 48.290755622s ago: executing program 3 (id=764): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="0c7ce4db", 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000180)="0c7ce4db", 0x4) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) (async) 46.854351365s ago: executing program 0 (id=771): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000003c0)={0x8, 0x3, [{0x8, 0x0, 0x1d5}, {0x7, 0x0, 0x3}, {0xef, 0x0, 0x690c}, {0x7, 0x0, 0x1}, {0x54, 0x0, 0x401}, {0x3, 0x0, 0x3}, {0xfff, 0x0, 0x4}, {0x6, 0x0, 0x3ff}, {0x0, 0x0, 0x4}, {0x7, 0x0, 0x800}, {0xeb7, 0x0, 0x4}, {0x6b, 0x0, 0x2}, {0xed0, 0x0, 0x1}, {0x8, 0x0, 0x7}, {0x9, 0x0, 0x7f75}, {0x3e, 0x0, 0x2}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20022, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r6, 0x0, 0x0, 0x0) 46.407032294s ago: executing program 1 (id=777): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 46.406673384s ago: executing program 32 (id=719): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) sendto(0xffffffffffffffff, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000002c0)={0x407f, 0x5, 0x3, 0xb9fe, 0x9, "ffff5300"}) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r4], 0xbfb3) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)) (async, rerun: 64) r5 = syz_open_pts(r4, 0x101000) (rerun: 64) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) membarrier(0x1, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async, rerun: 64) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async, rerun: 64) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={0x0}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r8, r8, r8) eventfd(0xfffffffa) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r8, &(0x7f0000000080)) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 46.17279347s ago: executing program 1 (id=779): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000071d0d"], 0x38}}], 0x1, 0x46000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000600)='.dead\x00', &(0x7f0000000640)=@keyring={'key_or_keyring:', r0}) prctl$PR_GET_TIMERSLACK(0x1e) syz_usb_connect(0x4, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff0106024ff6e2c49d352dd600090507"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x8001, 0x0, 0x7, 0xa, 0x0, 0x0, 0xff}, {0x0, 0x40000000000, 0x0, 0x7, 0x7, 0x4, 0x0, 0x7}, {0x0, 0x1, 0xe5}, 0x0, 0xfffffffd, 0x0, 0x4b0b444949dd71ee, 0x2}, {{@in=@remote, 0x404d1, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100, 0x0, 0x1, 0x0, 0x6, 0x9}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x0, 0x9}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f0000000000)=0xb, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f11021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp', 0x2) sendmsg$nl_generic(r11, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001500000066cf766893a22c806fecfbd243002a27e3587322fae00e2b6040a30a6e21f3932b968002bf247dfa4c7c85e357c57c8c364ff9d1b584ae14c9f1a2a8"], 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r11) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r11) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e99900000000fcdbdf2564010101000000000000000000000000ff01000000000000000000000000000100000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff040000000000000000000000000000000000000200000000000000000000000000000008000000000000000000000000000000020000000000000000000000000000000000000200000000641a6d"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 45.876851166s ago: executing program 0 (id=780): write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7188}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xfffffffa}]}]}}}], 0x30}, 0x4000014) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 45.748203889s ago: executing program 0 (id=781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$P9_RREAD(r1, &(0x7f0000000000)={0x32, 0x75, 0x2, {0x27, "6b7192411fc65c6bf4442aacad6713103505ce01f7a931f842446d64d459643a647d6768d82ef1"}}, 0x32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x77643699a4168d88, 0x70bd29, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001d0021000000000000000000070000000500000009000000090002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) setsockopt$inet6_int(r3, 0x29, 0x4c, 0x0, 0x0) close_range(r1, r3, 0x2) 45.611727772s ago: executing program 0 (id=782): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a80)={{r0}, 0x0, 0x0, @unused=[0xfff, 0x8, 0x7, 0x80], @subvolid=0x42}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) r5 = fcntl$dupfd(r1, 0x0, r4) preadv(r5, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/75, 0x4b}, {&(0x7f0000001dc0)=""/11, 0xb}, {&(0x7f0000001e00)=""/17, 0x11}], 0x3, 0x9c4, 0x4) (async) preadv(r5, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/75, 0x4b}, {&(0x7f0000001dc0)=""/11, 0xb}, {&(0x7f0000001e00)=""/17, 0x11}], 0x3, 0x9c4, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x0, 0x2000002, 0x80010, r2, 0x20000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000960100060b0000000000002a90a0753883"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002222000000960100060b0000000000002a90a0753883"], 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000540)={0x2c, &(0x7f0000000040)={0x0, 0x1, 0x4e, {0x4e, 0x30, "a1452a8d101c0b0519905b240e2b97a4a923faff612d56501b603aaba38803ea91cf60067d05b67f4ee6b7d04c60178a9c42d72ea2c31d6e7db7e45bd48e2eabf067ee5dee52d02344ee10a1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000380)={0x0, 0xf, 0x29, {0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x4, 0x0, 0x644, [0xf, 0x3f00, 0x30, 0x0, 0xff0000, 0xffff00]}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa2, 0x1, 0x4, 0xba, "6db177ef", "6943d006"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x8, 0x9, 0x20, 0x0, 0x3, 0x7}}}, &(0x7f0000001c80)={0x84, &(0x7f0000000580)={0x20, 0x15, 0x90, "173e60e02ccc5ce66f3583d624bec217f078ec9f5c974e0f4dfad9cf2bb50314fd22bf13ea46b208ffc5347a24a5886443339bdbd691d4be10d10ee066a782186857b3ba773de894c4fa29dc2097aa40061286fbb2bd0c5fe6728660a0326e66277a9023618dfc25631b3cc7305ad3ce9aa1b7899071197995342f36b23b1f8c769a9058f5401b2536b00514d6d72db9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x0, 0x40, [0xf0ee]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x9, 0x1}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "981d"}, &(0x7f0000001a80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001ac0)={0x40, 0x13, 0x6}, &(0x7f0000001b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x19, 0x2, "02cc"}, &(0x7f0000001b80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001bc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001c00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001c40)={0x40, 0x21, 0x1, 0xff}}) syz_ublk_add_dev(0xffffffffffffffff, r6, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x10, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x44}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$NILFS_IOCTL_GET_BDESCS(r10, 0xc0186e87, &(0x7f0000000340)={&(0x7f00000001c0)=[{0x0, 0x2, 0x2, 0x2, 0x3ff}, {0x5, 0x4, 0xc4a, 0x8, 0x1}, {0x3, 0x10, 0xfffffffffffffff8, 0x2, 0x6}, {0x9, 0xfffffffffffffcd8, 0xd, 0x94b, 0x9}, {0x2, 0xc, 0xbc2, 0x2, 0x4}, {0x2, 0xd6, 0x3, 0x2, 0xffffffff}, {0xfffffffffffffffd, 0xffffffffa45a3965, 0x492, 0x204, 0xfffffffb}, {0x80, 0x4, 0x2acf, 0x7}], 0x8, 0x28, 0x3, 0x100000000}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001e80)={{r3}, "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"}) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001e80)={{r3}, "1252aa29b871befbb85d8aa3ed9560e86506d9aad6f98a019a5d6affe9990322bfc3c09e93d7c64d80c4a718e4bed0c8bc7a4340c93140d202a6579fc61ea1f5df95355f92db7643e804d2d3279cb5ae39d80fee44a4c4c21b946630cafe2981d678b9108866dc37a978a124d30a5a39de5ffa31d921f31c6cee21ebe6befe216f9c19040151e479bc096c4e5128d97a28af0dff5caf3525d732049796f01606a44012a8a8700e461baf2b313e1a135f7b986646a9fb1cb96d38f38073abb655c21f6adfd1fe7081d2b92c16bf7f909d41d52a0577ff16b7c7a6f823e8b84164c8556b1ecdeb99ab59de170b5245fa6073e0c735cf5d5fd63798e313753e7a8df31da1f2fb45d94fdb55386bd65b53a6052aba02dc73e9fce34d2284cccab6f792a50ceb30d2ac480df943dd854a3a369125eb3b2eb739534aa628c354abee2b9c8a15e5f852c2b1ec7c3b8ccefcd0dc156c0bd0efebd1b75f0e3b83d83b728ddbf3471a1c57ec5009d690ef93f0839797abe9c5498bff30640ef797b7d036a8864d7243ed8153cfdd71a57bfbd7041e791da201dc3387895b027bc408132e09498a27cfd928a606d160ed245adb0ed710e00def0d02dc234d7aa5e4b25098cbb5ff6147dec657cb858bc7313084ba50e20f2e4d12d3cacd7854a1101f328bb4dd980a756768ec8359f78205d9079b4b785442dd067b913b8e81698ddb162974afbf03100aa174f7bf366cec5754b343c43700813c58d40fb7b00a4acc9e369cb9cc41daecc6dea984d1b204a072d0f3733887582844dd7b111f72b9ac30ba0600a43635b0be3bc83798e7ec193c17a7885bea7fe7b65859da8544b778cd7fe32fc095c442aee68914e9b129193923d794b49d1e13a75887ae74d57a899612425b58497d9c10d97ff50c27dc558899f223ca8e3b742e54557634106c9a9ccde4b3af7c34dd5376708e2ed5a360bec168e158796b739deac29b3890b722845ce450c9f09655ea3a859cee9f78ef0c8a772aaf303a69d2e3c3b9a677adef2ea52aedfc132f9ff64c86d7e4a2f239f9acb363eb9866249c8ec3b65e8f18f6f00d3f8b8bfcea4e15c2adebb9b3a8a7ee75a50c1505ac0c275ae12fb3b7e0980daa75632e16d17facdaa6c8e3c7caca5d3c7771e4d1b8da037da54f7cf59abce1d69848df575443c1ef375a292ac5ffa6912de6c7da05930f9473611aab5c2b94ca0ac4294de5c4c00534ae13f01a12cb74850ee9c271382baac9d6376d7ef3cf30b57da1a0cef1c0ef6681f1525bc4c3cca36846937734d56324261dcf7c8744b3357d38af868d36e040d1b1c1de696b79e250bf7f6b20ae0ad57ec9b1aeded34c9c5b297296c260eef4982b2823a8a61bf3903a8f3a21551b9e949485564926b511c49df31ebcbca1c0345e227385f44d1e478ffdf0632680a88853a8ab056703f53e8aba728ecba36023a382eaf304c71e1f987a0aed2b391028919e65f83fba2aa46e5de37364f2df6df7e4e764525e8d85917c29a54a7a52fa6af4e7fc551119107b593921c686d79dd181cea2572d4fec8abd5ed0d5fd7db8c3b606db291a40ede9d8e5a6070654aacd0603b1ded88f42c5ab8a3e98cfbde4b95ebdb948672e5250c3ae3716d52e9b893b0ef1c4c2a4ee04fac913ce3c0185f4abfe8c7fc9cd489e7c4336709e9abc0d0ae9b89eeb3b9068b7963de68fbac6156839ace84ea8a3e583c11906371fbf2ff2cbe701abe151f948863d1be79c696ea6b1babae8774bd9b72c4afbd510aabb70dbdfe318d9db52d8684c111117f544cabc1052d800cdc4c4da44da960ed75ef60869c6cfe54eb8f52e10798d3f98b45ba56e50e918e8102ed0f427b1d5fec7098d7283b6e5dad4a9c6b55627ac86e4a5d3150a7c4b8998c11b1ff2d051369d5c2de1a9097504a8e17ed6af893d352dea78beaf97b9dae9750b739382e9366b6b5df551ce2756f296e40c00e9360761ae9e105c533bbd58972b36183e98a1ac83281bf5bfd91224089db2b5bc24ab9023f8f0c75c0b8345593d8b0305962ab0b9aaa41dacaf9423a30f53cbe3ffb5686a357e83a9b065de4e7b57431a3ecdb7307b05206e5c926556bcedc4d00e562caee69a18b72883f2c839462d81688ebbc96a74875e51bddf51eb02ae1ffb2e7a37f81f921896118bd9669e2c51e3c9b6233427893529c04c2fe4884fb015d8890cd4dcb6632b0ec04eb88eff6e256bc0d8034b8a447952774a502510c5456a841e53b328947b82cef2668257175c0aa8582ac86228c4db86892542a09b59a5de486295e49f47ffbf1b70497a0fade0b817dd7c86ceb75254f46236aca3aa7ad4d1649daf7b7295b3d60a48ffe0562deb4813f16fe9d8cd3a823c75b16b38039694807d2c0fd0546c5d2964398c5af62d5ec5501e17499641a329138980be5ae1b695d4bf5e99986c0849175a1f8ecdbb6b1b135612eb7510688d142700fff82b75e9c36d4fc0ac56148ed2c2f36b97923b9faa5dbda52c7dbbdc08822f075c39ba56e93d54a7ef3923875ca049dc083964f0960acea9fec922164d2ee718f932f0cf1c7531d80e440e49ebc06e6f45cb54f4d68797b52457478bd3769cd793117293be3401905309a3954cfa207001da5ffd36cc0170cd5b363f77946f0da1d564687da063f688a061cdffd9ae72b79be7b22965c9ee00f5ed2bead7b9a7623c5d852e669eb6c78125e989e882a272846244e7539556473f798c6070ab663bd2bf5e1d6ebb73718e55a22e4603a1d65fc4752a87a1137936ea34d9ed76c287e0a51d75e7d7f2330b4c17bd9572b72ac63fabe6a2e6b58c2f51144a009026f07b5a7b776791d0440c3c9fa552c0a2ac7b5490df834761e4b5f4c6438fe79efbbb8a2c67076841eb86bb46df0d195ab716e35f7396ede9ca9349775240a0fe44726ee27440ba34874d45795a676db4cf2aadf6f08ad2c43d6500fb0dbccfc59cf3b2ee0d8daf1aa8ed908db955de2a925d7ce61b1c85bf6fa5f5a5436cf64feb38d27e904f6313fba7c1d56cc97838c4c40a8cf1b2ca2343b885e91cb0ee87fbc46fc3688c90d8ae4eae7c2b58fd24683a3fa91072e0f12d12d24af94f2dec2691d8166c7ccf17243aa5fce378ccb60e93fd87c1463396fafab49742ca9fa8801ec1595acacea1d394a734aee89a567a9ebe22a4439e2947276d83c46040ed8cfb2adc5b62157c6862399a142a57bd12388e4beb61405e0ac748b150108bc33840fcd1bcee549cce41df58ffd0e9ddcc5a80db4a7e51fe828fafcecf60cc733b6dabb71ed2308556d2dd60d172ce6eb9af8e8239872c3045efda59a05a6765e0441471643f4b7f1a51f3d2be01276658d8925d4ccb33dc9763c99810e85c3b634cb3652470c375f9932d52468c48ff884f2969895ff861dd1ebe0e0353e1716ab4942602238bd868520270aa8b2033524fb9464a0042b52ff5da82f2c72f9136dbcefedd110234fbd1a81e451ac02fc7858f0ee36eed9c725b791d9053856e8c73fc7a28253cbb365bc8b470f13c574367d0ebbe23b8ce96c0c0910c6890fc93d824ec8943f966aa6c10f76c4702b372ef3f1230f0b95cbce2ee9a0abf919290d297acbaa6d4b1ed606977f853b26122fcb626585e02cdd2b875b845769271be7177f5c22170840acfa76d644217f63a7a19925a0587bcb5a7e628616198bee9142b06e9ca57713c818e80ac60fd14e134d4f3f4aba12f340e183662a59f2322e304f965b40c1e6252aaa8a62942145247ac27fc11598d08420a8092e78b8c71f7329da944937faf229718767108b09c18ab84b1d4e7c83d684e102c7950bd26053ec7d3fa1aeaa2c08393d7d1f2c2efb2c1e91b62d172d9f077eb8a3b6aab6899041f5d4682e9443430e5e6088b4a3296ffed2cf2498074bb45e5645e78381cb32b39784ffc671d453cece9098df937d281345f693427797db609479a3329444a06ac8fff07de9662dfd213d7769f268d5a58f2ed3cceaca1f7ab4198fb3280e45510f127ffd56279ec24a0e0cd0c0f7d941b39614bb7ab78536bcda430a4f1655774f46f81f01fef41fa53b81fabf7786016672a2962388533df9138233555dd0691e248476f71146718064b836c7da2be4e78b6b38fae12217a08729d7d82fdffcafa2c97af60e6a3dbf26155453c007a6b25d674d96f897c3773ddd6e9f5b08910c3fc53021a313b0c1154e0a895b9628a9207d6b24e6c59937b340c560fa318e659ded8ca050643bd78d33af2fb91028e7f56a85f0702423438c87af6ffc6bd0111b8cbb1d2762cef708492cb88d5f97639ba042c5df7c72eb3199bc3d405d15f46619d2ff9219bfc2407c9fbaed359e91b7c9c7a390f7f6f25994502132207827d2fa9732a7555689c7eef3f9a51cf1434a9f69696220bf88c31dd60e4346a1d5e32c7f623bb6fbfb2d058a29331788764adcb3ed30e894cbae44baf7d8f251abd3cdb16c2a1fd2b32439946320b045ff0e5161a27e6ccac8e98bc42ddf498806fe93abd5e557f85bd2068d7f89b9059cf81e94d57460e053d8b203f59680664367d47b15afd09299870f2b71dcaa47dbb652b881033679db2b177028c99b3c73f9f253905f91500bdbe485e9dbbca14f8b26ce10d0f86d5a4035facea2d2facd313d557829e1ab8a54078170faa4b6fd6f981091920865969c142b8d0c69dcd7054a5a7ece08b9effa5db8a7596eeecc218d47620700d26388eb23194b3f3b7309d65e0ae6af56678b1e3789912103475c7b01d2f6f5abac714b60cf2c58a4763301113dbd20ff502192a15336669c986925a4173dac5b659e6f99ced99dd07876c8b62a0b2e19c243183723dd7e81708f90a88b8ba4c3fc32e761a2b871cf687f0bb7894140b6d8d5ba5ccc07110d1e1baa0e536b2c14d29edc55a3d4f0f84c95172083c994161be5c3618b8b97f6d8e5fdf7f378ddd9a61bca54795245c87c603d49c9c774c6ee9351df4a54ae82b7df32ed44b26741d725a3bcb5c9d85c5418f62ccc7b1eb7836fa489cac6498548248ec44e1ffd68d967c2a6ec798ba0e6b2afb9b3a552d97ad496ad77232512fd44706f413467407d30cfceb2d8d7c48cb9ae3d97d632e85f97381adc39742720dd8fd6de3f19e2e2ef3a8e23f561421ec417882935b5fca3f59e03ee2eb3cc402685c6e0ba301c20e9ddcfe1a04c5af2b24c253620fd7e9bd22e1a8704683f98423e7c5721f2206356a349694445a6647b16d35fd0e22e8bdb36e106bfb9c519f7e87519b9f0d979e6bbc8a002a8f6e04a9b1c4a1a571741e8290588cb5d7743295904517c5e5fc45090cb4a7ddd33ca96976a22034b910ddfa03d7539a844c6cdd1efc836924da07a578fae93dca5814b7b18d2acbab313edb323466ecf755462adcba13d6b728045739a205b3c8ced1caf94642ea286ffd883447386c16767497b30bcfa2f3df48254cf67125fa91cef9800bee284632c51b6b99a6f8a174fb377bf0e90439d389591f6bdaf2441585e2307f0bfeaa446fa70ab78c8ac5eb1a6d4a92a319b5c88c8112b0057fb8ac18a80f494f96410168ea27529409f087c8ff9be3c470350f777054765c63fdb396ea04962f67859bb818e2cda9a579d02df7cf9ca557c8e9fd74c060d6f642ff82b0916324aa9510b1c980eff169f415015eea249f675ccb5b181e7df26abc5ee0bdf730f7f862092dc97b498b8ff4dc36b4f22f5d6d737c3f54152e5f6f900b3d2755b2118fd6b236ad72386cf90eac13b59de73feb19d51e03366f"}) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) (async) syz_ublk_setup_queues(r11, r8, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 45.193740011s ago: executing program 3 (id=783): r0 = syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) setresgid(0xffffffffffffffff, 0xee01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x50, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x50}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000304000000e115083eb622480b50da04034904"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x270, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @local, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xa8a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff8000}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa2c, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffff, @local, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast2, 0xfffffffb}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0xd6f44ac4957ff955) 45.054508094s ago: executing program 4 (id=786): socket(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 44.8269401s ago: executing program 1 (id=787): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x9c}]}}}], 0x18}}], 0x2, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x9c}]}}}], 0x18}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x9, 0x2) (async) preadv(r4, &(0x7f0000003d40)=[{&(0x7f0000000380)=""/128, 0x80}], 0x1, 0x9, 0x2) close(0x3) (async) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 44.82669878s ago: executing program 1 (id=788): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c8020103010203"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect$uac1(0x1, 0xc1, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x6, 0xa0, 0x93, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x25}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x80, 0x8}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0xf4, "edc1cb364f"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0x3, "cacd60"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x66, 0xc, 0x1002}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1000, 0x9, 0x1, "9ed95a65"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x16, 0x3, 0x4, 0xff, "eae639", "bb38"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0xa, 0xa, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0xec, 'w'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x4, 0xa6, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xfa, 0x5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x9, 0x8001}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x10, 0x15, 0x1, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3419}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "a3b6a0b6f3922124d039b34946dfa88325bed498d7955d7432ad6b7cf64ca5ff171a741c04b447c361a75569c6308c8d84ef6f1e25725bd5dc629c5665655c288fcf2ddc79d25fe3d03e8d7ba9e8adb012885b535fbf4ef6187afc45cd37737bc5a1f1b0454a0b6300f6c375077a11f4094bf1d3027ae5a135ec2840843d15a6d3365e50923739061fe954"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x77, &(0x7f0000000400)=@string={0x77, 0x3, "bd013474c71321d24b72c5e271759bd6a990c832d711b42135f721e2b4e784f712251e154262f245d04c1a04dcfc415a127b2e618c1831c8f18e536b2257f8b34cf63fee7d12212d974159babcbeb19cbed8e5f70118147c5d83a9b18c9bb641b867c1aa6d2603466ecc49614a4a5fd42f0f6afe6f"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b2885396d0102030109021b00010001000b0904c8020103010203"], 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) syz_usb_connect$uac1(0x1, 0xc1, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x6, 0xa0, 0x93, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x25}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x80, 0x8}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0xf4, "edc1cb364f"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0x3, "cacd60"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x66, 0xc, 0x1002}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1000, 0x9, 0x1, "9ed95a65"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x16, 0x3, 0x4, 0xff, "eae639", "bb38"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x40, 0xa, 0xa, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0xec, 'w'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x4, 0xa6, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xfa, 0x5, 0x5, {0x7, 0x25, 0x1, 0x8, 0x9, 0x8001}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x10, 0x15, 0x1, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3419}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x300a}}, {0x8d, &(0x7f00000002c0)=@string={0x8d, 0x3, "a3b6a0b6f3922124d039b34946dfa88325bed498d7955d7432ad6b7cf64ca5ff171a741c04b447c361a75569c6308c8d84ef6f1e25725bd5dc629c5665655c288fcf2ddc79d25fe3d03e8d7ba9e8adb012885b535fbf4ef6187afc45cd37737bc5a1f1b0454a0b6300f6c375077a11f4094bf1d3027ae5a135ec2840843d15a6d3365e50923739061fe954"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x77, &(0x7f0000000400)=@string={0x77, 0x3, "bd013474c71321d24b72c5e271759bd6a990c832d711b42135f721e2b4e784f712251e154262f245d04c1a04dcfc415a127b2e618c1831c8f18e536b2257f8b34cf63fee7d12212d974159babcbeb19cbed8e5f70118147c5d83a9b18c9bb641b867c1aa6d2603466ecc49614a4a5fd42f0f6afe6f"}}]}) (async) 44.754809792s ago: executing program 4 (id=789): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0x0, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100000200", [0x9, 0xa]}}) (async) pwrite64(r0, &(0x7f0000000000)='7', 0x1, 0x1ff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000300)) 44.658614534s ago: executing program 4 (id=790): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000002600)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x15, 0x7, 0x1, 0x101, 0x7, 0xf9, 0x0, 0xfa, 0xff, 0x6, 0x2, 0xffff, 0x7, 0x3, 0x4, 0x9, [0xa, 0x7c]}}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) waitid(0x0, r2, 0x0, 0x8000000a, 0x0) wait4(r2, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) r4 = socket(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000340)={0x60, 0x14, 0x4, "e7fd657e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000380)={0x20, 0xc, 0x4, "418e8305"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000300)={0x20, 0xf, 0x4, "f028c50e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x40, 0x14, 0x6b, "2a1bfafa9c3e00cbf489be1aee876f5f2cacb817b14955724e6476fbca32bfac7bc3b3fd580443bd1e1cb63c0cec0b8b532d95f647eae04a201640725c9c1b37bb4bef1388bc656680c3eaf351689adeb9bd79bb0060040a4cbe8f26f55c15a3038acb9cbf8cd079ecb968"}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), r3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000002580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002240)={0x2d0, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x3000000}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7ff, @loopback, 0x400}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff66}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4185085}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8000}, 0xc084) socket(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f00000025c0)='ufs\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x80, 0x0, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) 42.886370673s ago: executing program 3 (id=791): unshare(0x6060600) (async) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf2501"], 0xc8}, 0x1, 0x0, 0x0, 0x24000000}, 0x40090) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x938, 0xffffffff, 0x3}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2000cc34) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x1, {{0x9, 0x4, 0x0, 0x1c, 0x24, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0x89, 0xd, "b3cd8c1c0207e064366cea"}]}}}}}) (async) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 41.291363569s ago: executing program 1 (id=792): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x10007, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0f, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040)) 39.401432441s ago: executing program 0 (id=793): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r2 = dup(r0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'geneve1\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x9, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) (async) dup(r0) (async) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'geneve1\x00'}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x9, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) 38.491314471s ago: executing program 4 (id=794): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001e903000000fedbdf250a0000000400"], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001e903000000fedbdf250a0000000400"], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) 36.990431374s ago: executing program 3 (id=795): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xedf3ad4e16633313, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xedf3ad4e16633313, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x7, 0x9}) 36.450911897s ago: executing program 0 (id=796): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x5, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x8, 0x10000006, 0x4, 0x2dcd, 0xd510, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x80000001, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x101, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x7f, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x4, 0x9, 0x84, 0x8000c63, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x4, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0x100, 0xe1, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x80009, 0x80000004, 0x6, 0x438, 0x4, 0x5, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xfffefffc, 0x41, 0x8, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x9, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xffffdff7, 0x0, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x5, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x7, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xffff, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36.29845793s ago: executing program 1 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 33.521135772s ago: executing program 4 (id=798): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) 29.179358129s ago: executing program 4 (id=799): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x31) 27.910889297s ago: executing program 3 (id=800): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xa]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0x1ed929001}, {"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"}}) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f00000001c0)='1\x00', 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$selinux_user(r7, &(0x7f0000000000)={'system_u:object_r:auditd_initrc_exec_t:s0', 0x20, 'system_u\x00'}, 0x33) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r13, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3d0, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x140, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b1f8a2dc52c6"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xe}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2338aeba651e"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x54, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x4f, 0xb, "aae7875c7fcf82e544b7981ffb1bb8f769d9981adc1182fccbaa8341c8c7079d125f78f992cde01a1b8b331383545fae4923b3ea5ffc0afaab0876f1f00d8b3a28e0b7cefbb571520e5d1c"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x214, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1e8, 0xd, 0x0, 0x1, [{0x5, 0x0, "fe"}, {0x21, 0x0, "d371dc56ffa16c3fb0f1119b7ac8af5bbfe4f4679615bb40e0a92b220f"}, {0xbf, 0x0, "8ea1bb10704c6907829101977b15ad0ea37191c90fc7544bbbf896c6eaf557f0f753ebcdd60b789791fe0ffb38d7cb2b1f1528bfb350e75308d166707cf1edf589691e6f94c6294461c2a0726d4274b61a075afb4774bcb0aa52aca3dc763df35cc91467296523bf16ca7893ff23462d34482fd92990e5bb5560b38f54b8019b7117b59b5cf2027ea570542dbb878ae1779aeaf00a45d5829de55d46bfaa34ed2a3fcb08b239a4680cb42ce3b0a778e0caac46c88873079d501809"}, {0xf8, 0x0, "7de1770144dceb134a435f7e6d705a40c5781dcbcd07599f848082cce8f5a65a057aa18970c3b79b4fe39b8122c8cdeb8f10f0d28ab8276fe3a59711d762c0ec795f980b569ac9a3c4ff556cefac2a4f8526bae3da97c93c6aca02a7673a7cdb04ca20432d3ecab493041349dc2455de73d490aa8efacebc72ef956a8b1df7688e2143834f65a11c35737820171c9ecd1be6e506cafa6692f08f487d67a7e31f1132bf57bd1b6f5d7092e980690703441c1a661c2b611e1172fef644b1f5bc022d1d48d14ffed6d48c5745f2d8f1b86f69adada039ed9dede815a02bf8f0ad8532e9e2d6a203e7b1d464c86a9424a9c2b3e15142"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000007c0)) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) 20.735583427s ago: executing program 33 (id=796): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x5, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x8, 0x10000006, 0x4, 0x2dcd, 0xd510, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x80000001, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x101, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x7f, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x4, 0x9, 0x84, 0x8000c63, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x4, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0x100, 0xe1, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x80009, 0x80000004, 0x6, 0x438, 0x4, 0x5, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xfffefffc, 0x41, 0x8, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x9, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xffffdff7, 0x0, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x5, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x7, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0xffff, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)='S', 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.66489494s ago: executing program 34 (id=797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 478.993789ms ago: executing program 35 (id=799): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x31) 0s ago: executing program 36 (id=800): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xa]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0x1ed929001}, {"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"}}) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f00000001c0)='1\x00', 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) write$selinux_user(r7, &(0x7f0000000000)={'system_u:object_r:auditd_initrc_exec_t:s0', 0x20, 'system_u\x00'}, 0x33) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbdf251b00000008009a"], 0x24}}, 0x40004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r13, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)={0x3d0, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x140, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b1f8a2dc52c6"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xe}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2338aeba651e"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x54, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x4f, 0xb, "aae7875c7fcf82e544b7981ffb1bb8f769d9981adc1182fccbaa8341c8c7079d125f78f992cde01a1b8b331383545fae4923b3ea5ffc0afaab0876f1f00d8b3a28e0b7cefbb571520e5d1c"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x214, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1e8, 0xd, 0x0, 0x1, [{0x5, 0x0, "fe"}, {0x21, 0x0, "d371dc56ffa16c3fb0f1119b7ac8af5bbfe4f4679615bb40e0a92b220f"}, {0xbf, 0x0, "8ea1bb10704c6907829101977b15ad0ea37191c90fc7544bbbf896c6eaf557f0f753ebcdd60b789791fe0ffb38d7cb2b1f1528bfb350e75308d166707cf1edf589691e6f94c6294461c2a0726d4274b61a075afb4774bcb0aa52aca3dc763df35cc91467296523bf16ca7893ff23462d34482fd92990e5bb5560b38f54b8019b7117b59b5cf2027ea570542dbb878ae1779aeaf00a45d5829de55d46bfaa34ed2a3fcb08b239a4680cb42ce3b0a778e0caac46c88873079d501809"}, {0xf8, 0x0, "7de1770144dceb134a435f7e6d705a40c5781dcbcd07599f848082cce8f5a65a057aa18970c3b79b4fe39b8122c8cdeb8f10f0d28ab8276fe3a59711d762c0ec795f980b569ac9a3c4ff556cefac2a4f8526bae3da97c93c6aca02a7673a7cdb04ca20432d3ecab493041349dc2455de73d490aa8efacebc72ef956a8b1df7688e2143834f65a11c35737820171c9ecd1be6e506cafa6692f08f487d67a7e31f1132bf57bd1b6f5d7092e980690703441c1a661c2b611e1172fef644b1f5bc022d1d48d14ffed6d48c5745f2d8f1b86f69adada039ed9dede815a02bf8f0ad8532e9e2d6a203e7b1d464c86a9424a9c2b3e15142"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000007c0)) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) kernel console output (not intermixed with test programs): write+0x18/0x20 [ 140.568761][ T2707] ? populate_vma_page_range+0x220/0x220 [ 140.568785][ T2707] ? __kernel_write_iter+0x6ff/0x900 [ 140.568806][ T2707] get_dump_page+0x10c/0x220 [ 140.568829][ T2707] ? __cfi_get_dump_page+0x10/0x10 [ 140.568853][ T2707] ? __asan_memset+0x39/0x50 [ 140.568871][ T2707] dump_user_range+0x18b/0xe60 [ 140.568892][ T2707] ? __cfi_dump_user_range+0x10/0x10 [ 140.568912][ T2707] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 140.568939][ T2707] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 140.568966][ T2707] ? elf_core_dump+0x23cf/0x3840 [ 140.568989][ T2707] elf_core_dump+0x2d61/0x3840 [ 140.569014][ T2707] ? __cfi_elf_core_dump+0x10/0x10 [ 140.569036][ T2707] ? mas_next_slot+0xf01/0xfd0 [ 140.569067][ T2707] ? dump_interrupted+0xf0/0xf0 [ 140.569084][ T2707] ? filp_open+0x199/0x1f0 [ 140.569108][ T2707] ? 0xffffffffff600000 [ 140.569124][ T2707] do_coredump+0x20d2/0x3050 [ 140.569145][ T2707] ? __cfi_do_coredump+0x10/0x10 [ 140.569164][ T2707] ? asm_exc_page_fault+0x2b/0x30 [ 140.569192][ T2707] ? __kasan_slab_free+0x6a/0x80 [ 140.569215][ T2707] ? get_signal+0xa2a/0x1490 [ 140.569239][ T2707] get_signal+0x11bf/0x1490 [ 140.569266][ T2707] arch_do_signal_or_restart+0xbc/0x700 [ 140.569285][ T2707] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 140.569305][ T2707] ? __bad_area_nosemaphore+0x2fb/0x680 [ 140.569334][ T2707] irqentry_exit_to_user_mode+0x4d/0xb0 [ 140.569362][ T2707] irqentry_exit+0x16/0x60 [ 140.569391][ T2707] exc_page_fault+0x65/0xc0 [ 140.569416][ T2707] asm_exc_page_fault+0x2b/0x30 [ 140.569438][ T2707] RIP: 0033:0x7f7b64a53b27 [ 140.569454][ T2707] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 fe f9 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 140.569472][ T2707] RSP: 002b:00007f7b65a56120 EFLAGS: 00010202 [ 140.569490][ T2707] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f7b64b9de99 [ 140.569504][ T2707] RDX: 00007f7b65a56140 RSI: 00007f7b65a56270 RDI: 000000000000000b [ 140.569519][ T2707] RBP: 00007f7b64c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 140.569532][ T2707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.569544][ T2707] R13: 00007f7b64e26038 R14: 00007f7b64e25fa0 R15: 00007ffd238e6d48 [ 140.569561][ T2707] [ 140.569568][ T2707] memory: usage 307200kB, limit 307200kB, failcnt 69579 [ 140.623441][ T400] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 140.634693][ T2707] memory+swap: usage 428060kB, limit 9007199254740988kB, failcnt 0 [ 140.640357][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.649585][ T2707] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 140.649601][ T2707] Memory cgroup stats for /syz0 [ 140.663172][ T400] usb 4-1: Product: syz [ 140.679598][ T2707] : [ 140.687654][ T400] usb 4-1: Manufacturer: syz [ 140.691970][ T2707] cache 305975296 [ 140.698343][ T400] usb 4-1: SerialNumber: syz [ 140.707286][ T2707] rss 8527872 [ 140.707296][ T2707] rss_huge 0 [ 140.707302][ T2707] shmem 305963008 [ 140.707308][ T2707] mapped_file 0 [ 140.928427][ T2931] netlink: 'syz.3.696': attribute type 16 has an invalid length. [ 140.936862][ T2707] dirty 0 [ 140.941457][ T2931] netlink: 38166 bytes leftover after parsing attributes in process `syz.3.696'. [ 140.946819][ T2707] writeback 0 [ 141.150293][ T2707] workingset_refault_anon 114 [ 141.162588][ T2707] workingset_refault_file 54929 [ 141.167448][ T2707] swap 123760640 [ 141.171072][ T2707] swapcached 90112 [ 141.174082][ T400] usb 4-1: USB disconnect, device number 66 [ 141.174785][ T2707] pgpgin 278508 [ 141.184209][ T2707] pgpgout 202731 [ 141.187780][ T2707] pgfault 42060 [ 141.191665][ T2707] pgmajfault 1163 [ 141.195306][ T2707] inactive_anon 114176000 [ 141.199652][ T2707] active_anon 191991808 [ 141.203826][ T2707] inactive_file 4096 [ 141.207728][ T2707] active_file 0 [ 141.211175][ T2707] unevictable 8388608 [ 141.215132][ T2707] hierarchical_memory_limit 314572800 [ 141.220584][ T2707] hierarchical_memsw_limit 9223372036854771712 [ 141.226725][ T2707] total_cache 305975296 [ 141.230939][ T2707] total_rss 8527872 [ 141.241769][ T2707] total_rss_huge 0 [ 141.245477][ T2707] total_shmem 305963008 [ 141.249628][ T2707] total_mapped_file 0 [ 141.253620][ T2707] total_dirty 0 [ 141.257067][ T2707] total_writeback 0 [ 141.260926][ T2707] total_workingset_refault_anon 114 [ 141.266109][ T2707] total_workingset_refault_file 54929 [ 141.271476][ T2707] total_swap 123760640 [ 141.275554][ T2707] total_swapcached 90112 [ 141.279818][ T2707] total_pgpgin 278508 [ 141.283789][ T2707] total_pgpgout 202731 [ 141.287886][ T2707] total_pgfault 42060 [ 141.291860][ T2707] total_pgmajfault 1163 [ 141.295986][ T2707] total_inactive_anon 114176000 [ 141.300876][ T2707] total_active_anon 191991808 [ 141.307088][ T2707] total_inactive_file 4096 [ 141.311579][ T2707] total_active_file 0 [ 141.315600][ T2707] total_unevictable 8388608 [ 141.320237][ T2707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.634,pid=2708,uid=0 [ 141.335122][ T2707] Memory cgroup out of memory: Killed process 2708 (syz.0.634) total-vm:90520kB, anon-rss:1260kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 141.438040][ T2935] input: syz0 as /devices/virtual/input/input30 [ 141.451426][ T293] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 141.531831][ T293] CPU: 0 UID: 0 PID: 293 Comm: syz-executor Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 141.531863][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 141.531877][ T293] Call Trace: [ 141.531883][ T293] [ 141.531900][ T293] __dump_stack+0x21/0x30 [ 141.531931][ T293] dump_stack_lvl+0x140/0x1c0 [ 141.531958][ T293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 141.531983][ T293] ? ___ratelimit+0x41c/0x5c0 [ 141.532008][ T293] ? __kasan_check_write+0x18/0x20 [ 141.532029][ T293] dump_stack+0x19/0x20 [ 141.532054][ T293] dump_header+0xd9/0x460 [ 141.532080][ T293] oom_kill_process+0x35d/0x640 [ 141.532103][ T293] out_of_memory+0x5d1/0xa20 [ 141.532124][ T293] ? __cfi_out_of_memory+0x10/0x10 [ 141.532145][ T293] ? mutex_lock_killable+0x97/0x1d0 [ 141.532171][ T293] ? __cfi_mutex_lock_killable+0x10/0x10 [ 141.532199][ T293] mem_cgroup_out_of_memory+0x2c5/0x390 [ 141.532221][ T293] ? css_next_descendant_pre+0x1ec/0x210 [ 141.532244][ T293] ? __kasan_check_write+0x18/0x20 [ 141.532264][ T293] ? drain_obj_stock+0xec0/0xec0 [ 141.532285][ T293] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 141.532304][ T293] try_charge_memcg+0x925/0xe10 [ 141.532327][ T293] ? static_key_count+0x45/0x70 [ 141.532352][ T293] ? lruvec_init+0x231/0x280 [ 141.532373][ T293] ? __cfi_try_charge_memcg+0x10/0x10 [ 141.532399][ T293] ? __alloc_pages_noprof+0x35a/0x7e0 [ 141.532426][ T293] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 141.532452][ T293] ? kvm_sched_clock_read+0x15/0x30 [ 141.532480][ T293] __mem_cgroup_charge+0xfc/0x420 [ 141.532499][ T293] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 141.532519][ T293] folio_prealloc+0x67/0x220 [ 141.532543][ T293] do_wp_page+0x187e/0x2e80 [ 141.532565][ T293] ? kernel_fpu_begin_mask+0x3a5/0x4c0 [ 141.532589][ T293] ? __cfi_enqueue_task+0x10/0x10 [ 141.532609][ T293] ? folio_put+0x90/0x90 [ 141.532629][ T293] ? __cfi__raw_spin_lock+0x10/0x10 [ 141.532652][ T293] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 141.532680][ T293] handle_mm_fault+0x1017/0x1ba0 [ 141.532704][ T293] ? __cfi_handle_mm_fault+0x10/0x10 [ 141.532726][ T293] ? lock_vma_under_rcu+0x4cf/0x590 [ 141.532752][ T293] ? __cfi___x64_sys_clone+0x10/0x10 [ 141.532778][ T293] ? __se_sys_rt_sigprocmask+0x237/0x2a0 [ 141.532807][ T293] do_user_addr_fault+0x951/0x1230 [ 141.532837][ T293] ? fpregs_restore_userregs+0x11c/0x260 [ 141.532862][ T293] exc_page_fault+0x58/0xc0 [ 141.532895][ T293] asm_exc_page_fault+0x2b/0x30 [ 141.532920][ T293] RIP: 0033:0x7f7b64bc695e [ 141.532938][ T293] Code: 00 66 48 0f 6e c7 66 0f 6c c0 0f 11 80 d8 02 00 00 b8 11 01 00 00 0f 05 48 83 3d 44 36 22 00 00 74 05 e8 e5 9a f7 ff 48 89 df 5d 8b f7 ff 48 8b 44 24 08 64 48 2b 04 25 28 00 00 00 75 20 48 [ 141.532956][ T293] RSP: 002b:00007ffd238e6f60 EFLAGS: 00010202 [ 141.532976][ T293] RAX: 0000000000000223 RBX: 00007ffd238e6f60 RCX: 00007f7b64bc6912 [ 141.532991][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ffd238e6f60 [ 141.533006][ T293] RBP: 0000000000000223 R08: 0000000000000000 R09: 0000000000000001 [ 141.533019][ T293] R10: 000055555f0027d0 R11: 0000000000000246 R12: 0000000000000000 [ 141.533034][ T293] R13: 00000000000927c0 R14: 00000000000220ae R15: 00007ffd238e7140 [ 141.533052][ T293] [ 141.533059][ T293] memory: usage 305428kB, limit 307200kB, failcnt 70941 [ 141.852984][ T293] memory+swap: usage 427476kB, limit 9007199254740988kB, failcnt 0 [ 141.860917][ T293] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 141.871876][ T293] Memory cgroup stats for /syz0: [ 141.872017][ T293] cache 305709056 [ 141.883967][ T293] rss 8544256 [ 141.887260][ T293] rss_huge 0 [ 141.917667][ T293] shmem 301576192 [ 141.921318][ T293] mapped_file 3670016 [ 141.977984][ T2950] 9pnet_fd: p9_fd_create_tcp (2950): problem connecting socket to 127.0.0.1 [ 142.003855][ T312] usb 2-1: USB disconnect, device number 54 [ 142.045777][ T293] dirty 0 [ 142.052220][ T2954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.060250][ T293] writeback 4096 [ 142.121500][ T2959] tipc: Enabling of bearer rejected, media not registered [ 142.134882][ T293] workingset_refault_anon 119 [ 142.193719][ T293] workingset_refault_file 58510 [ 142.254816][ T293] swap 123490304 [ 142.294149][ T293] swapcached 110592 [ 142.339324][ T293] pgpgin 287752 [ 142.362179][ T293] pgpgout 212022 [ 142.366145][ T293] pgfault 42381 [ 142.369821][ T293] pgmajfault 1190 [ 142.373491][ T293] inactive_anon 259690496 [ 142.378056][ T293] active_anon 41852928 [ 142.382159][ T293] inactive_file 0 [ 142.385822][ T293] active_file 3788800 [ 142.390098][ T293] unevictable 8388608 [ 142.394113][ T293] hierarchical_memory_limit 314572800 [ 142.399527][ T312] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 142.407340][ T293] hierarchical_memsw_limit 9223372036854771712 [ 142.413674][ T293] total_cache 305709056 [ 142.418327][ T293] total_rss 8544256 [ 142.422174][ T293] total_rss_huge 0 [ 142.425926][ T293] total_shmem 301576192 [ 142.427655][ T330] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 142.430418][ T293] total_mapped_file 3670016 [ 142.442298][ T293] total_dirty 0 [ 142.445792][ T293] total_writeback 4096 [ 142.450027][ T293] total_workingset_refault_anon 119 [ 142.455314][ T293] total_workingset_refault_file 58510 [ 142.460872][ T293] total_swap 123490304 [ 142.464967][ T293] total_swapcached 110592 [ 142.469504][ T293] total_pgpgin 287752 [ 142.473514][ T293] total_pgpgout 212022 [ 142.477769][ T293] total_pgfault 42381 [ 142.481833][ T293] total_pgmajfault 1190 [ 142.486022][ T293] total_inactive_anon 259690496 [ 142.491278][ T293] total_active_anon 41852928 [ 142.495957][ T293] total_inactive_file 0 [ 142.500310][ T293] total_active_file 3788800 [ 142.504844][ T293] total_unevictable 8388608 [ 142.509562][ T293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.634,pid=2707,uid=0 [ 142.524495][ T293] Memory cgroup out of memory: Killed process 2707 (syz.0.634) total-vm:90520kB, anon-rss:1388kB, file-rss:22128kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 142.568938][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.580249][ T312] usb 2-1: not running at top speed; connect to a high speed hub [ 142.593192][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 142.594245][ T312] usb 2-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 142.607332][ T330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.617657][ T312] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 142.631893][ T330] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 142.643232][ T312] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.655167][ T330] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 142.672332][ T2723] syz.0.634 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.680886][ T312] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 142.685545][ T330] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.702727][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.719570][ T312] usb 2-1: Product: syz [ 142.720087][ T330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.727043][ T312] usb 2-1: Manufacturer: syz [ 142.739254][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.747482][ T312] usb 2-1: SerialNumber: syz [ 142.760900][ T330] usb 4-1: SerialNumber: syz [ 142.773380][ T2963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 142.780702][ T2963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 142.799721][ T330] hub 4-1:1.0: bad descriptor, ignoring hub [ 142.815762][ T330] hub 4-1:1.0: probe with driver hub failed with error -5 [ 142.824530][ T2723] CPU: 0 UID: 0 PID: 2723 Comm: syz.0.634 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 142.824558][ T2723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.824570][ T2723] Call Trace: [ 142.824577][ T2723] [ 142.824584][ T2723] __dump_stack+0x21/0x30 [ 142.824615][ T2723] dump_stack_lvl+0x140/0x1c0 [ 142.824649][ T2723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.824674][ T2723] ? ___ratelimit+0x41c/0x5c0 [ 142.824698][ T2723] ? __kasan_check_write+0x18/0x20 [ 142.824718][ T2723] dump_stack+0x19/0x20 [ 142.824743][ T2723] dump_header+0xd9/0x460 [ 142.824768][ T2723] oom_kill_process+0x35d/0x640 [ 142.824790][ T2723] ? __set_cpus_allowed_ptr+0x1d6/0x2c0 [ 142.824813][ T2723] out_of_memory+0x5d1/0xa20 [ 142.824834][ T2723] ? __cfi_out_of_memory+0x10/0x10 [ 142.824855][ T2723] ? mutex_lock_killable+0x115/0x1d0 [ 142.824880][ T2723] ? __cfi_mutex_lock_killable+0x10/0x10 [ 142.824908][ T2723] mem_cgroup_out_of_memory+0x2c5/0x390 [ 142.824929][ T2723] ? css_next_descendant_pre+0x1ec/0x210 [ 142.824952][ T2723] ? __kasan_check_write+0x18/0x20 [ 142.824970][ T2723] ? drain_obj_stock+0xec0/0xec0 [ 142.824990][ T2723] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 142.825009][ T2723] try_charge_memcg+0x925/0xe10 [ 142.825034][ T2723] ? static_key_count+0x45/0x70 [ 142.825057][ T2723] ? lruvec_init+0x231/0x280 [ 142.825077][ T2723] ? __cfi_try_charge_memcg+0x10/0x10 [ 142.825101][ T2723] ? __alloc_pages_noprof+0x35a/0x7e0 [ 142.825126][ T2723] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 142.825152][ T2723] __mem_cgroup_charge+0xfc/0x420 [ 142.825169][ T2723] ? do_pte_missing+0x3894/0x4440 [ 142.825192][ T2723] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 142.825210][ T2723] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 142.825235][ T2723] ? shmem_replace_folio+0x9b0/0x9b0 [ 142.825258][ T2723] ? shmem_huge_global_enabled+0x2da/0x360 [ 142.825281][ T2723] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 142.825302][ T2723] ? __kasan_check_write+0x18/0x20 [ 142.825319][ T2723] ? _raw_spin_lock+0x92/0x120 [ 142.825340][ T2723] shmem_get_folio_gfp+0x5cd/0x12e0 [ 142.825361][ T2723] ? shmem_get_folio+0xc0/0xc0 [ 142.825380][ T2723] ? __kasan_check_write+0x18/0x20 [ 142.825397][ T2723] ? inode_to_bdi+0x6d/0x100 [ 142.825423][ T2723] shmem_write_begin+0xf4/0x260 [ 142.825446][ T2723] generic_perform_write+0x329/0x970 [ 142.825471][ T2723] ? inode_update_timestamps+0x4d1/0x6e0 [ 142.825499][ T2723] ? __cfi_generic_perform_write+0x10/0x10 [ 142.825524][ T2723] ? generic_write_checks_count+0x426/0x540 [ 142.825548][ T2723] ? mnt_get_write_access_file+0x1af/0x3b0 [ 142.825574][ T2723] ? mnt_put_write_access_file+0xc2/0x100 [ 142.825598][ T2723] ? file_update_time+0x1de/0x210 [ 142.825622][ T2723] shmem_file_write_iter+0x105/0x130 [ 142.825663][ T2723] __kernel_write_iter+0x45f/0x900 [ 142.825684][ T2723] ? __cfi___kernel_write_iter+0x10/0x10 [ 142.825704][ T2723] ? get_dump_page+0x165/0x220 [ 142.825728][ T2723] ? __asan_memset+0x39/0x50 [ 142.825748][ T2723] ? iov_iter_bvec+0xc0/0x180 [ 142.825774][ T2723] dump_user_range+0xb8b/0xe60 [ 142.825800][ T2723] ? __cfi_dump_user_range+0x10/0x10 [ 142.825822][ T2723] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 142.825850][ T2723] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 142.825879][ T2723] ? elf_core_dump+0x23cf/0x3840 [ 142.825904][ T2723] elf_core_dump+0x2d61/0x3840 [ 142.825930][ T2723] ? __cfi_elf_core_dump+0x10/0x10 [ 142.825954][ T2723] ? mas_next_slot+0xf01/0xfd0 [ 142.825985][ T2723] ? dump_interrupted+0xf0/0xf0 [ 142.826004][ T2723] ? filp_open+0x199/0x1f0 [ 142.826029][ T2723] ? 0xffffffffff600000 [ 142.826046][ T2723] do_coredump+0x20d2/0x3050 [ 142.826068][ T2723] ? __cfi_do_coredump+0x10/0x10 [ 142.826087][ T2723] ? asm_exc_page_fault+0x2b/0x30 [ 142.826117][ T2723] ? __kasan_slab_free+0x6a/0x80 [ 142.826139][ T2723] ? get_signal+0xa2a/0x1490 [ 142.826164][ T2723] get_signal+0x11bf/0x1490 [ 142.826191][ T2723] arch_do_signal_or_restart+0xbc/0x700 [ 142.826212][ T2723] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 142.826233][ T2723] ? __bad_area_nosemaphore+0x2fb/0x680 [ 142.826263][ T2723] irqentry_exit_to_user_mode+0x4d/0xb0 [ 142.826291][ T2723] irqentry_exit+0x16/0x60 [ 142.826316][ T2723] exc_page_fault+0x65/0xc0 [ 142.826342][ T2723] asm_exc_page_fault+0x2b/0x30 [ 142.826363][ T2723] RIP: 0033:0x7f7b64a53b27 [ 142.826379][ T2723] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 fe f9 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 142.826397][ T2723] RSP: 002b:00007f7b65a56120 EFLAGS: 00010202 [ 142.826414][ T2723] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f7b64b9de99 [ 142.826428][ T2723] RDX: 00007f7b65a56140 RSI: 00007f7b65a56270 RDI: 000000000000000b [ 142.826443][ T2723] RBP: 00007f7b64c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 142.826455][ T2723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.826468][ T2723] R13: 00007f7b64e26038 R14: 00007f7b64e25fa0 R15: 00007ffd238e6d48 [ 142.826485][ T2723] [ 142.842884][ T2723] memory: usage 290804kB, limit 307200kB, failcnt 73663 [ 142.968560][ T2954] netlink: 'syz.1.706': attribute type 49 has an invalid length. [ 142.976543][ T2723] memory+swap: usage 404220kB, limit 9007199254740988kB, failcnt 0 [ 142.981017][ T36] audit: type=1400 audit(1784868268.653:386): avc: denied { execute } for pid=2966 comm="syz.2.709" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.999900][ T2962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.017650][ T36] audit: type=1400 audit(1784868268.683:387): avc: denied { execute_no_trans } for pid=2966 comm="syz.2.709" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 143.072847][ T2723] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 143.083007][ T330] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 143.146578][ T2723] Memory cgroup stats for [ 143.154031][ T36] audit: type=1400 audit(1784868268.733:388): avc: denied { read write } for pid=2960 comm="syz.3.708" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.180783][ T2723] /syz0 [ 143.186950][ T36] audit: type=1400 audit(1784868268.733:389): avc: denied { open } for pid=2960 comm="syz.3.708" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.214493][ T2723] : [ 143.221270][ T330] usb 4-1: USB disconnect, device number 67 [ 143.237647][ T400] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 143.240539][ T2723] cache 278855680 [ 143.407640][ T400] usb 3-1: Using ep0 maxpacket: 16 [ 143.456841][ T2723] rss 8630272 [ 143.460032][ T2954] ip6gretap0: entered promiscuous mode [ 143.464328][ T2723] rss_huge 0 [ 143.477693][ T2954] ip6gretap0: entered allmulticast mode [ 143.480625][ T2723] shmem 274526208 [ 143.502806][ T400] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.526383][ T2723] mapped_file 4317184 [ 143.534744][ T2979] fuse: Bad value for 'fd' [ 143.541032][ T2723] dirty 0 [ 143.543038][ T400] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.544058][ T2723] writeback 663552 [ 143.553992][ T400] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 143.556925][ T2723] workingset_refault_anon 123 [ 143.565710][ T400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.570551][ T2723] workingset_refault_file 61719 [ 143.578718][ T400] usb 3-1: SerialNumber: syz [ 143.583338][ T2723] swap 123035648 [ 143.593047][ T2723] swapcached 815104 [ 143.593622][ T400] usb 3-1: 0:2 : does not exist [ 143.596903][ T2723] pgpgin 296994 [ 143.605276][ T2723] pgpgout 227623 [ 143.609403][ T2723] pgfault 42672 [ 143.612860][ T2723] pgmajfault 1221 [ 143.616471][ T2723] inactive_anon 179834880 [ 143.620875][ T2723] active_anon 95637504 [ 143.624930][ T2723] inactive_file 3936256 [ 143.629103][ T2723] active_file 200704 [ 143.637634][ T2723] unevictable 8388608 [ 143.641618][ T2723] hierarchical_memory_limit 314572800 [ 143.646984][ T2723] hierarchical_memsw_limit 9223372036854771712 [ 143.653182][ T2723] total_cache 278855680 [ 143.657328][ T2723] total_rss 8630272 [ 143.662867][ T2723] total_rss_huge 0 [ 143.666591][ T2723] total_shmem 274526208 [ 143.670783][ T2723] total_mapped_file 4317184 [ 143.675275][ T2723] total_dirty 0 [ 143.678735][ T2723] total_writeback 663552 [ 143.682968][ T2723] total_workingset_refault_anon 123 [ 143.688176][ T2723] total_workingset_refault_file 61719 [ 143.693537][ T2723] total_swap 123035648 [ 143.697591][ T2723] total_swapcached 815104 [ 143.701919][ T2723] total_pgpgin 296994 [ 143.705892][ T2723] total_pgpgout 227623 [ 143.709974][ T2723] total_pgfault 42672 [ 143.713944][ T2723] total_pgmajfault 1221 [ 143.718102][ T2723] total_inactive_anon 179834880 [ 143.722942][ T2723] total_active_anon 95637504 [ 143.727517][ T2723] total_inactive_file 3936256 [ 143.732201][ T2723] total_active_file 200704 [ 143.736604][ T2723] total_unevictable 8388608 [ 143.741103][ T2723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.634,pid=2717,uid=0 [ 143.755847][ T2723] Memory cgroup out of memory: Killed process 2717 (syz.0.634) total-vm:90520kB, anon-rss:1260kB, file-rss:22248kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 143.804491][ T2723] syz.0.634 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 143.837999][ T2723] CPU: 0 UID: 0 PID: 2723 Comm: syz.0.634 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 143.838029][ T2723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.838052][ T2723] Call Trace: [ 143.838058][ T2723] [ 143.838066][ T2723] __dump_stack+0x21/0x30 [ 143.838097][ T2723] dump_stack_lvl+0x140/0x1c0 [ 143.838123][ T2723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 143.838148][ T2723] ? ___ratelimit+0x41c/0x5c0 [ 143.838172][ T2723] ? __kasan_check_write+0x18/0x20 [ 143.838194][ T2723] dump_stack+0x19/0x20 [ 143.838219][ T2723] dump_header+0xd9/0x460 [ 143.838245][ T2723] oom_kill_process+0x35d/0x640 [ 143.838266][ T2723] ? __set_cpus_allowed_ptr+0x1d6/0x2c0 [ 143.838288][ T2723] out_of_memory+0x5d1/0xa20 [ 143.838310][ T2723] ? __cfi_out_of_memory+0x10/0x10 [ 143.838331][ T2723] ? mutex_lock_killable+0x97/0x1d0 [ 143.838358][ T2723] ? __cfi_mutex_lock_killable+0x10/0x10 [ 143.838385][ T2723] mem_cgroup_out_of_memory+0x2c5/0x390 [ 143.838407][ T2723] ? css_next_descendant_pre+0x1ec/0x210 [ 143.838432][ T2723] ? __kasan_check_write+0x18/0x20 [ 143.838452][ T2723] ? drain_obj_stock+0xec0/0xec0 [ 143.838473][ T2723] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 143.838494][ T2723] try_charge_memcg+0x925/0xe10 [ 143.838519][ T2723] ? static_key_count+0x45/0x70 [ 143.838544][ T2723] ? lruvec_init+0x231/0x280 [ 143.838566][ T2723] ? __cfi_try_charge_memcg+0x10/0x10 [ 143.838593][ T2723] ? __alloc_pages_noprof+0x35a/0x7e0 [ 143.838621][ T2723] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 143.838650][ T2723] __mem_cgroup_charge+0xfc/0x420 [ 143.838668][ T2723] ? do_pte_missing+0x3894/0x4440 [ 143.838693][ T2723] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 143.838713][ T2723] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 143.838739][ T2723] ? shmem_replace_folio+0x9b0/0x9b0 [ 143.838763][ T2723] ? shmem_huge_global_enabled+0x2da/0x360 [ 143.838785][ T2723] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 143.838808][ T2723] ? __kasan_check_write+0x18/0x20 [ 143.838827][ T2723] ? _raw_spin_lock+0x92/0x120 [ 143.838849][ T2723] shmem_get_folio_gfp+0x5cd/0x12e0 [ 143.838874][ T2723] ? shmem_get_folio+0xc0/0xc0 [ 143.838895][ T2723] ? __kasan_check_write+0x18/0x20 [ 143.838914][ T2723] ? inode_to_bdi+0x6d/0x100 [ 143.838940][ T2723] shmem_write_begin+0xf4/0x260 [ 143.838964][ T2723] generic_perform_write+0x329/0x970 [ 143.838990][ T2723] ? inode_update_timestamps+0x4d1/0x6e0 [ 143.839018][ T2723] ? __cfi_generic_perform_write+0x10/0x10 [ 143.839049][ T2723] ? generic_write_checks_count+0x426/0x540 [ 143.839075][ T2723] ? mnt_get_write_access_file+0x1af/0x3b0 [ 143.839102][ T2723] ? mnt_put_write_access_file+0xc2/0x100 [ 143.839129][ T2723] ? file_update_time+0x1de/0x210 [ 143.839156][ T2723] shmem_file_write_iter+0x105/0x130 [ 143.839183][ T2723] __kernel_write_iter+0x45f/0x900 [ 143.839204][ T2723] ? __cfi___kernel_write_iter+0x10/0x10 [ 143.839224][ T2723] ? get_dump_page+0x165/0x220 [ 143.839250][ T2723] ? __asan_memset+0x39/0x50 [ 143.839268][ T2723] ? iov_iter_bvec+0xc0/0x180 [ 143.839295][ T2723] dump_user_range+0xb8b/0xe60 [ 143.839318][ T2723] ? __cfi_dump_user_range+0x10/0x10 [ 143.839339][ T2723] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 143.839369][ T2723] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 143.839397][ T2723] ? elf_core_dump+0x23cf/0x3840 [ 143.839422][ T2723] elf_core_dump+0x2d61/0x3840 [ 143.839449][ T2723] ? __cfi_elf_core_dump+0x10/0x10 [ 143.839472][ T2723] ? mas_next_slot+0xf01/0xfd0 [ 143.839515][ T2723] ? dump_interrupted+0xf0/0xf0 [ 143.839535][ T2723] ? filp_open+0x199/0x1f0 [ 143.839561][ T2723] ? 0xffffffffff600000 [ 143.839577][ T2723] do_coredump+0x20d2/0x3050 [ 143.839600][ T2723] ? __cfi_do_coredump+0x10/0x10 [ 143.839619][ T2723] ? asm_exc_page_fault+0x2b/0x30 [ 143.839649][ T2723] ? __kasan_slab_free+0x6a/0x80 [ 143.839673][ T2723] ? get_signal+0xa2a/0x1490 [ 143.839699][ T2723] get_signal+0x11bf/0x1490 [ 143.839727][ T2723] arch_do_signal_or_restart+0xbc/0x700 [ 143.839748][ T2723] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 143.839770][ T2723] ? __bad_area_nosemaphore+0x2fb/0x680 [ 143.839801][ T2723] irqentry_exit_to_user_mode+0x4d/0xb0 [ 143.839830][ T2723] irqentry_exit+0x16/0x60 [ 143.839857][ T2723] exc_page_fault+0x65/0xc0 [ 143.839882][ T2723] asm_exc_page_fault+0x2b/0x30 [ 143.839905][ T2723] RIP: 0033:0x7f7b64a53b27 [ 143.839922][ T2723] Code: e8 8e fa ff ff 89 f2 48 8d 3d c5 3e 1b 00 48 8d 35 fe f9 1d 00 31 c0 e8 e7 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 143.839940][ T2723] RSP: 002b:00007f7b65a56120 EFLAGS: 00010202 [ 143.839958][ T2723] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f7b64b9de99 [ 143.839973][ T2723] RDX: 00007f7b65a56140 RSI: 00007f7b65a56270 RDI: 000000000000000b [ 143.839987][ T2723] RBP: 00007f7b64c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 143.840001][ T2723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.840014][ T2723] R13: 00007f7b64e26038 R14: 00007f7b64e25fa0 R15: 00007ffd238e6d48 [ 143.840032][ T2723] [ 143.840045][ T2723] memory: usage 300480kB, limit 307200kB, failcnt 74777 [ 144.330716][ T330] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 144.347714][ T2723] memory+swap: usage 427116kB, limit 9007199254740988kB, failcnt 0 [ 144.374123][ T312] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 144.381178][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 144.399710][ T312] usb 2-1: USB disconnect, device number 55 [ 144.405699][ T2723] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 144.427791][ T2723] Memory cgroup stats for /syz0: [ 144.427944][ T2723] cache 302944256 [ 144.467655][ T330] usb 4-1: device descriptor read/64, error -71 [ 144.477700][ T2723] rss 8527872 [ 144.491096][ T2723] rss_huge 0 [ 144.494316][ T2723] shmem 290656256 [ 144.517646][ T2723] mapped_file 12038144 [ 144.521874][ T2723] dirty 0 [ 144.527667][ T2723] writeback 0 [ 144.530960][ T2723] workingset_refault_anon 204 [ 144.553568][ T2723] workingset_refault_file 65931 [ 144.593488][ T2723] swap 120614912 [ 144.597172][ T2723] swapcached 827392 [ 144.601316][ T2723] pgpgin 321120 [ 144.604788][ T2723] pgpgout 245895 [ 144.634951][ T2723] pgfault 43254 [ 144.651671][ T2723] pgmajfault 1262 [ 144.655319][ T2723] inactive_anon 233201664 [ 144.669661][ T2723] active_anon 58368000 [ 144.685788][ T2723] inactive_file 10137600 [ 144.697630][ T2723] active_file 1880064 [ 144.701625][ T2723] unevictable 8388608 [ 144.707655][ T330] usb 4-1: device descriptor read/64, error -71 [ 144.713988][ T2723] hierarchical_memory_limit 314572800 [ 144.727630][ T2723] hierarchical_memsw_limit 9223372036854771712 [ 144.737636][ T2723] total_cache 302944256 [ 144.741814][ T2723] total_rss 8527872 [ 144.755760][ T2723] total_rss_huge 0 [ 144.759518][ T2723] total_shmem 290656256 [ 144.763676][ T2723] total_mapped_file 12038144 [ 144.777889][ T2723] total_dirty 0 [ 144.787640][ T2723] total_writeback 0 [ 144.797743][ T2723] total_workingset_refault_anon 204 [ 144.805170][ T2723] total_workingset_refault_file 65931 [ 144.813725][ T400] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 144.825279][ T400] usb 3-1: 5:0: failed to get current value for ch 2 (-22) [ 144.829862][ T2723] total_swap 120614912 [ 144.836494][ T400] usb 3-1: 5:0: failed to get current value for ch 3 (-22) [ 144.837021][ T2723] total_swapcached 827392 [ 144.848098][ T400] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 144.848551][ T2723] total_pgpgin 321120 [ 144.863424][ T2723] total_pgpgout 245895 [ 144.863542][ T400] usb 3-1: USB disconnect, device number 69 [ 144.867495][ T2723] total_pgfault 43254 [ 144.867505][ T2723] total_pgmajfault 1262 [ 144.867512][ T2723] total_inactive_anon 233201664 [ 144.867519][ T2723] total_active_anon 58368000 [ 144.867526][ T2723] total_inactive_file 10137600 [ 144.867533][ T2723] total_active_file 1880064 [ 144.900614][ T2723] total_unevictable 8388608 [ 144.905118][ T2723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.634,pid=2726,uid=0 [ 144.927654][ T312] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 144.928864][ T2723] Memory cgroup out of memory: OOM victim 2726 (syz.0.634) is already exiting. Skip killing the task [ 144.957649][ T330] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 145.077659][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 145.087312][ T312] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 145.087669][ T330] usb 4-1: device descriptor read/64, error -71 [ 145.099770][ T312] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 145.113735][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.127644][ T312] usb 2-1: Product: syz [ 145.131815][ T312] usb 2-1: Manufacturer: syz [ 145.146541][ T312] usb 2-1: SerialNumber: syz [ 145.347662][ T330] usb 4-1: device descriptor read/64, error -71 [ 145.354989][ T312] usb 2-1: 1:1 : bogus bTerminalLink 4 [ 145.365400][ T312] usb 2-1: unit 1 not found! [ 145.367648][ T65] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 145.370039][ T312] usb 2-1: unit 12 not found! [ 145.388333][ T312] usb 2-1: unit 4 not found! [ 145.392960][ T312] usb 2-1: unit 8 not found! [ 145.411324][ T312] usb 2-1: USB disconnect, device number 56 [ 145.420636][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.457777][ T330] usb usb4-port1: attempt power cycle [ 145.537642][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 145.543776][ T65] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 145.557644][ T65] usb 1-1: config 1 has no interface number 0 [ 145.568026][ T65] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.587640][ T65] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.597703][ T65] usb 1-1: config 1 interface 105 has no altsetting 0 [ 145.608638][ T65] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 145.618645][ T65] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.626724][ T65] usb 1-1: Product: syz [ 145.630960][ T65] usb 1-1: Manufacturer: syz [ 145.635552][ T65] usb 1-1: SerialNumber: syz [ 145.642483][ T2996] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.649920][ T2996] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 145.797650][ T330] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 145.818540][ T330] usb 4-1: device descriptor read/8, error -71 [ 145.857750][ T65] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 145.867252][ T65] usb 1-1: USB disconnect, device number 58 [ 145.881723][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.891037][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.900342][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.909643][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.919015][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.928216][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.937490][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.946826][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.956340][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.965979][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.975438][ T330] usb 4-1: device descriptor read/8, error -71 [ 145.977958][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.990715][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 145.999861][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.009044][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.018203][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.027337][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.036600][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.045878][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.055167][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.064373][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.073621][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.082789][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.092220][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.101392][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.110633][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.119850][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.129021][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.138150][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.147159][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.156405][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.165734][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.174973][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.184179][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.193389][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.202580][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.211735][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.220561][ T330] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 146.228232][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.237342][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.246538][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.255976][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.265341][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.274183][ T330] usb 4-1: device descriptor read/8, error -71 [ 146.278272][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.289734][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.299050][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.308223][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.317237][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.326558][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.335781][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.345062][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.354377][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.363580][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.372761][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.382569][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.392066][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.397655][ T36] audit: type=1400 audit(1784868272.113:390): avc: denied { write } for pid=3005 comm="syz.0.721" name="file2" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 146.401466][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.423327][ T36] audit: type=1400 audit(1784868272.113:391): avc: denied { cmd } for pid=3005 comm="syz.0.721" path="/164/file2" dev="tmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 146.432512][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.454658][ T36] audit: type=1400 audit(1784868272.113:392): avc: denied { mounton } for pid=3005 comm="syz.0.721" path="/164/file0" dev="tmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.463839][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.494422][ T330] usb 4-1: device descriptor read/8, error -71 [ 146.498137][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.509890][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.519032][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.528353][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.537383][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.546701][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.555876][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.565125][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.574225][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.583516][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.592723][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.601885][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.611100][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.617773][ T330] usb usb4-port1: unable to enumerate USB device [ 146.620531][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.635175][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.644380][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.653596][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.663010][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.672560][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.681840][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.692131][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.701380][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.710541][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.719940][ T3003] 9pnet_fd: p9_fd_create_tcp (3003): problem connecting socket to 127.0.0.1 [ 146.738716][ T3012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 146.751111][ T36] audit: type=1400 audit(1784868272.463:393): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 147.057663][ T330] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 147.208652][ T330] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 147.219549][ T330] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 147.230429][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.237042][ T330] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 147.246110][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.263208][ T330] usb 4-1: config 0 descriptor?? [ 147.273019][ T3010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.283420][ T3010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.360726][ T3027] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 147.368933][ T3027] netlink: 'syz.0.728': attribute type 27 has an invalid length. [ 147.389374][ T3030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.397780][ T36] audit: type=1400 audit(1784868273.103:394): avc: denied { create } for pid=3028 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.407891][ T3031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.417970][ T3030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.425990][ T3031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.527663][ T312] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 147.617789][ T400] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 147.677652][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 147.683730][ T312] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 147.691969][ T312] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 147.700700][ T312] usb 2-1: config 3 has no interface number 0 [ 147.706155][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.706775][ T312] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.714056][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.726647][ T312] usb 2-1: config 3 interface 45 has no altsetting 0 [ 147.728208][ T312] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 147.733772][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.740686][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.749451][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.756590][ T312] usb 2-1: Product: syz [ 147.764431][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.771676][ T312] usb 2-1: Manufacturer: syz [ 147.775603][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.782743][ T312] usb 2-1: SerialNumber: syz [ 147.787193][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.794192][ T400] usb 1-1: Using ep0 maxpacket: 16 [ 147.798956][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.807381][ T400] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.813923][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.817980][ T400] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.829013][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.836046][ T400] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 147.845872][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.852782][ T400] usb 1-1: config 0 interface 0 has no altsetting 0 [ 147.865825][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.873352][ T400] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 147.879866][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.887764][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.895504][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.905918][ T400] usb 1-1: config 0 descriptor?? [ 147.911922][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.929324][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.936355][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.943499][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.950554][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.957586][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.964638][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.971712][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.978760][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.985791][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.992834][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 147.999882][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 148.006906][ T330] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 148.014752][ T330] chicony 0003:04F2:1421.000F: hidraw0: USB HID v0.04 Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 148.028305][ T330] usb 4-1: USB disconnect, device number 72 [ 148.073123][ T3025] bridge0: port 3(veth0_to_bridge) entered blocking state [ 148.080310][ T3025] bridge0: port 3(veth0_to_bridge) entered disabled state [ 148.087447][ T3025] veth0_to_bridge: entered allmulticast mode [ 148.093839][ T3025] veth0_to_bridge: entered promiscuous mode [ 148.099831][ T3025] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.112240][ T3025] bridge0: port 3(veth0_to_bridge) entered blocking state [ 148.119367][ T3025] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 148.123165][ T400] usbhid 1-1:0.0: can't add hid device: -71 [ 148.132639][ T400] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.146446][ T400] usb 1-1: USB disconnect, device number 59 [ 148.155410][ T312] usb 2-1: USB disconnect, device number 57 [ 148.158758][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.435536][ T3040] 9pnet_fd: p9_fd_create_tcp (3040): problem connecting socket to 127.0.0.1 [ 148.444551][ T3040] FAULT_INJECTION: forcing a failure. [ 148.444551][ T3040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.457600][ T3040] CPU: 0 UID: 0 PID: 3040 Comm: syz.3.731 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 148.457631][ T3040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 148.457644][ T3040] Call Trace: [ 148.457650][ T3040] [ 148.457658][ T3040] __dump_stack+0x21/0x30 [ 148.457688][ T3040] dump_stack_lvl+0x140/0x1c0 [ 148.457715][ T3040] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.457739][ T3040] ? restore_altstack+0x2d5/0x500 [ 148.457757][ T3040] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 148.457777][ T3040] dump_stack+0x19/0x20 [ 148.457802][ T3040] should_fail_ex+0x3c2/0x510 [ 148.457825][ T3040] should_fail+0xf/0x20 [ 148.457844][ T3040] should_fail_usercopy+0x1e/0x30 [ 148.457866][ T3040] _copy_from_user+0x20/0xa0 [ 148.457890][ T3040] __ia32_sys_rt_sigreturn+0x272/0x830 [ 148.457911][ T3040] ? _raw_spin_unlock_irq+0x45/0x70 [ 148.457934][ T3040] ? __cfi___x64_sys_rt_sigreturn+0x10/0x10 [ 148.457957][ T3040] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 148.457984][ T3040] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 148.458012][ T3040] x64_sys_call+0x2c14/0x2ee0 [ 148.458029][ T3040] do_syscall_64+0x57/0xf0 [ 148.458056][ T3040] ? clear_bhb_loop+0x50/0xa0 [ 148.458079][ T3040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.458100][ T3040] RIP: 0033:0x7f04b293f219 [ 148.458116][ T3040] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 148.458134][ T3040] RSP: 002b:00007f04b38aca40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 148.458154][ T3040] RAX: ffffffffffffffda RBX: 00007f04b38ad6c0 RCX: 00007f04b293f219 [ 148.458168][ T3040] RDX: 00007f04b38aca40 RSI: 00007f04b38acb70 RDI: 0000000000000021 [ 148.458182][ T3040] RBP: 00007f04b38ad090 R08: 0000000000000000 R09: 0000000000000000 [ 148.458194][ T3040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 148.458207][ T3040] R13: 00007f04b2c26038 R14: 00007f04b2c25fa0 R15: 00007ffeecfe2a48 [ 148.458221][ T3040] [ 148.487657][ T312] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 148.747656][ T65] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 148.807652][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 148.813791][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.823902][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.834070][ T312] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 148.843139][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.851130][ T312] usb 2-1: Product: syz [ 148.855266][ T312] usb 2-1: Manufacturer: syz [ 148.859852][ T312] usb 2-1: SerialNumber: syz [ 148.887661][ T440] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 148.900037][ T65] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.909098][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.917079][ T65] usb 4-1: Product: syz [ 148.921240][ T65] usb 4-1: Manufacturer: syz [ 148.925832][ T65] usb 4-1: SerialNumber: syz [ 149.017657][ T440] usb 1-1: device descriptor read/64, error -71 [ 149.077739][ T36] audit: type=1400 audit(1784868274.793:395): avc: denied { write } for pid=3037 comm="syz.1.730" name="/" dev="configfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.106938][ T312] usb 2-1: invalid UAC_HEADER (v1) [ 149.113447][ T312] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 149.123677][ T312] usb 2-1: USB disconnect, device number 58 [ 149.128135][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 149.147160][ T3042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.155644][ T3042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.216665][ T3045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.225179][ T3045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.233654][ T3045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.242140][ T3045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.277657][ T440] usb 1-1: device descriptor read/64, error -71 [ 149.517657][ T440] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 149.647686][ T440] usb 1-1: device descriptor read/64, error -71 [ 149.887653][ T440] usb 1-1: device descriptor read/64, error -71 [ 149.997737][ T440] usb usb1-port1: attempt power cycle [ 150.132119][ T3050] syzkaller1: entered promiscuous mode [ 150.137579][ T3050] syzkaller1: entered allmulticast mode [ 150.377654][ T440] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 150.398688][ T440] usb 1-1: device descriptor read/8, error -71 [ 150.538635][ T440] usb 1-1: device descriptor read/8, error -71 [ 150.697660][ T31] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 150.787654][ T440] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 150.808603][ T440] usb 1-1: device descriptor read/8, error -71 [ 150.857651][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 150.863876][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 150.875041][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 150.884085][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.892595][ T31] usb 2-1: config 0 descriptor?? [ 150.938690][ T440] usb 1-1: device descriptor read/8, error -71 [ 151.047748][ T440] usb usb1-port1: unable to enumerate USB device [ 151.299725][ T3057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.308514][ T3057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.316757][ T36] audit: type=1400 audit(1784868277.023:396): avc: denied { connect } for pid=3056 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.336913][ T31] hid (null): unknown global tag 0xd [ 151.343228][ T31] wacom 0003:056A:002A.0010: unknown main item tag 0x5 [ 151.350125][ T31] wacom 0003:056A:002A.0010: unknown global tag 0xd [ 151.356701][ T31] wacom 0003:056A:002A.0010: item 0 0 1 13 parsing failed [ 151.363973][ T31] wacom 0003:056A:002A.0010: parse failed [ 151.369726][ T31] wacom 0003:056A:002A.0010: probe with driver wacom failed with error -22 [ 151.522085][ T440] usb 4-1: USB disconnect, device number 73 [ 151.540312][ T10] usb 2-1: USB disconnect, device number 59 [ 151.721415][ T36] audit: type=1400 audit(1784868277.433:397): avc: denied { mounton } for pid=3071 comm="syz.0.742" path="/171/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 151.762528][ T3077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 151.818368][ T3079] netlink: 64 bytes leftover after parsing attributes in process `syz.0.745'. [ 151.907692][ T440] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 152.057674][ T440] usb 4-1: Using ep0 maxpacket: 8 [ 152.064920][ T440] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 152.075692][ T65] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 152.083272][ T440] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 152.097833][ T440] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 152.107498][ T440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.116342][ T440] usb 4-1: config 0 descriptor?? [ 152.179325][ T3088] netlink: 56 bytes leftover after parsing attributes in process `syz.1.749'. [ 152.188532][ T3088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 152.200052][ T3088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3088 comm=syz.1.749 [ 152.223002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.235034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.247124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.259132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.268674][ T65] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 152.271253][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.279869][ T65] usb 1-1: config 0 has no interface number 0 [ 152.291322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.298872][ T65] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 152.309314][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.318293][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.330300][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.338514][ T65] usb 1-1: Product: syz [ 152.350241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.354342][ T65] usb 1-1: Manufacturer: syz [ 152.366335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 152.370885][ T65] usb 1-1: SerialNumber: syz [ 152.390714][ T3065] netlink: 'syz.3.740': attribute type 46 has an invalid length. [ 152.400143][ T65] usb 1-1: config 0 descriptor?? [ 152.612398][ T440] kye 0003:0458:5017.0011: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 152.638132][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 152.648470][ T330] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 152.661656][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.678406][ T65] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 152.689224][ T3097] kvm: kvm [3096]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x81 [ 152.698421][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.705129][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.727678][ T65] asix 1-1:0.251: probe with driver asix failed with error -5 [ 152.745545][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.762086][ T65] usb 1-1: USB disconnect, device number 64 [ 152.777717][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.788409][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.805390][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.812487][ T3065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.820914][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 152.831052][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.838038][ T3065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.850176][ T330] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 152.864778][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.883154][ T330] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.907756][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.926904][ T330] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 152.946139][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.956337][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.970392][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.980920][ T330] usb 2-1: Product: syz [ 152.989410][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 152.997657][ T330] usb 2-1: Manufacturer: syz [ 153.006235][ T330] usb 2-1: SerialNumber: syz [ 153.015555][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.026694][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.045267][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.059380][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.070528][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.082489][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.089426][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.096194][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.119939][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.137328][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.156986][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.165022][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.177599][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.184482][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.191388][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.198252][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.205001][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.221840][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.237649][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.249104][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.255894][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.262795][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.270498][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.277231][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.284185][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.291063][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.297955][ T440] kye 0003:0458:5017.0011: unknown main item tag 0x0 [ 153.311201][ T440] kye 0003:0458:5017.0011: hidraw0: USB HID v0.81 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 153.334099][ T440] kye 0003:0458:5017.0011: tablet-enabling feature report not found [ 153.351010][ T440] kye 0003:0458:5017.0011: tablet enabling failed [ 153.364390][ T440] usb 4-1: USB disconnect, device number 74 [ 153.651064][ T36] audit: type=1400 audit(1784868279.363:398): avc: denied { getopt } for pid=3100 comm="syz.3.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.681757][ T36] audit: type=1400 audit(1784868279.383:399): avc: denied { ioctl } for pid=3100 comm="syz.3.752" path="socket:[34205]" dev="sockfs" ino=34205 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.837035][ T36] audit: type=1400 audit(1784868279.543:400): avc: denied { connect } for pid=3110 comm="syz.3.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.667649][ T440] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 154.732047][ T3133] syzkaller0: refused to change device tx_queue_len [ 154.827649][ T440] usb 1-1: Using ep0 maxpacket: 32 [ 154.834327][ T440] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.845483][ T440] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.856574][ T440] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.865824][ T440] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 154.874338][ T440] usb 1-1: Product: syz [ 154.878697][ T440] usb 1-1: Manufacturer: syz [ 154.886890][ T440] hub 1-1:4.0: USB hub found [ 155.088601][ T440] hub 1-1:4.0: 2 ports detected [ 155.093739][ T440] hub 1-1:4.0: insufficient power available to use all downstream ports [ 155.235718][ T330] usb 2-1: unit 8 not found! [ 155.256981][ T330] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 155.276800][ T330] usb 2-1: USB disconnect, device number 60 [ 155.490930][ T3131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.500299][ T3131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.508892][ T440] hub 1-1:4.0: set hub depth failed [ 155.520471][ T440] usb 1-1: USB disconnect, device number 65 [ 156.287650][ T440] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 156.437639][ T440] usb 1-1: Using ep0 maxpacket: 8 [ 156.443891][ T440] usb 1-1: config index 0 descriptor too short (expected 33273, got 36) [ 156.452524][ T440] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 156.462807][ T440] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.472492][ T440] usb 1-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 156.481728][ T440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.490608][ T440] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 156.502450][ T440] usb 1-1: no configuration chosen from 1 choice [ 157.227672][ C1] net_ratelimit: 82999 callbacks suppressed [ 157.227687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.245634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.257692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.269753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.281799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.293859][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.305894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.317950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.330025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.342080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.847651][ T440] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 158.987685][ T440] usb 4-1: device descriptor read/64, error -71 [ 159.045654][ T10] usb 1-1: USB disconnect, device number 66 [ 159.218186][ T3153] syzkaller0: refused to change device tx_queue_len [ 159.227670][ T440] usb 4-1: device descriptor read/64, error -71 [ 159.497645][ T440] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 159.658038][ T440] usb 4-1: device descriptor read/64, error -71 [ 159.708697][ T3157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3157 comm=syz.1.768 [ 159.897669][ T440] usb 4-1: device descriptor read/64, error -71 [ 160.013127][ T440] usb usb4-port1: attempt power cycle [ 160.071586][ T3171] can0: slcan on ttyS3. [ 160.128165][ T3171] can0 (unregistered): slcan off ttyS3. [ 160.248601][ T36] audit: type=1400 audit(1784868285.963:401): avc: denied { watch watch_reads } for pid=3181 comm="syz.1.774" path="/195/file0" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.344324][ T36] audit: type=1400 audit(1784868286.053:402): avc: denied { getopt } for pid=3197 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.368422][ T440] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 160.432215][ T440] usb 4-1: device descriptor read/8, error -71 [ 160.455685][ T36] audit: type=1400 audit(1784868286.083:403): avc: denied { write } for pid=3197 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.478383][ T3202] syzkaller0: refused to change device tx_queue_len [ 160.628649][ T440] usb 4-1: device descriptor read/8, error -71 [ 160.730642][ T36] audit: type=1400 audit(1784868286.433:404): avc: denied { mounton } for pid=3213 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 160.818731][ T36] audit: type=1400 audit(1784868286.463:405): avc: denied { ioctl } for pid=3147 comm="syz.3.764" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.897666][ T440] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 160.939448][ T3213] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.949070][ T440] usb 4-1: device descriptor read/8, error -71 [ 160.984981][ T3213] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.014256][ T3213] bridge_slave_0: entered allmulticast mode [ 161.036243][ T3213] bridge_slave_0: entered promiscuous mode [ 161.081087][ T3213] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.093307][ T440] usb 4-1: device descriptor read/8, error -71 [ 161.106763][ T3213] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.121630][ T3213] bridge_slave_1: entered allmulticast mode [ 161.138656][ T3213] bridge_slave_1: entered promiscuous mode [ 161.164323][ T3226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 161.210783][ T440] usb usb4-port1: unable to enumerate USB device [ 161.285001][ T36] audit: type=1400 audit(1784868286.993:406): avc: denied { read write } for pid=3228 comm="syz.0.782" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.313757][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.325391][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.345405][ T36] audit: type=1400 audit(1784868286.993:407): avc: denied { open } for pid=3228 comm="syz.0.782" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.398798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.405860][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.422773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.429834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.497429][ T3213] veth0_vlan: entered promiscuous mode [ 161.511609][ T3213] veth1_macvtap: entered promiscuous mode [ 161.527853][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 161.599212][ T3232] syzkaller1: entered promiscuous mode [ 161.619774][ T3232] syzkaller1: entered allmulticast mode [ 161.677694][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 161.686473][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.698255][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.708144][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 161.731103][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 161.743982][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.760477][ T10] usb 1-1: config 0 descriptor?? [ 161.879423][ T3247] syzkaller0: refused to change device tx_queue_len [ 162.037025][ T330] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 162.113407][ T3255] loop5: detected capacity change from 0 to 7 [ 162.180242][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.217648][ T330] usb 4-1: Using ep0 maxpacket: 32 [ 162.222873][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.236180][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.237668][ C1] net_ratelimit: 75231 callbacks suppressed [ 162.237684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.243763][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.249382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.262445][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.268987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.281121][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.288148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.300380][ T10] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 162.307316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.320763][ T330] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 162.326750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.340189][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.347727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.360743][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.366978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.392889][ T330] usb 4-1: Product: syz [ 162.398806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.403061][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.414888][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 162.422647][ T330] usb 4-1: Manufacturer: syz [ 162.441916][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.449805][ T330] usb 4-1: SerialNumber: syz [ 162.483309][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.492981][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.502362][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.511611][ T1113] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 162.513421][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.523816][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.535681][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.550873][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.559203][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.566485][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.583864][ T10] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 162.606444][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input32 [ 162.637099][ T10] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 162.781166][ T440] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.942257][ T330] usb 4-1: unit 4 not found! [ 162.946878][ T330] usb 4-1: unit 0 not found! [ 163.131703][ T440] usb 5-1: Using ep0 maxpacket: 32 [ 163.230148][ T1113] usb 2-1: Using ep0 maxpacket: 8 [ 163.271432][ T440] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 163.425472][ T1113] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 163.442598][ T1113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.488031][ T1113] usb 2-1: config 0 has no interface number 0 [ 163.510713][ T1113] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.557632][ T440] usb 5-1: config 0 has no interface number 0 [ 163.563729][ T440] usb 5-1: config 0 interface 184 has no altsetting 0 [ 164.101269][ T330] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 164.587998][ T65] usb 1-1: reset high-speed USB device number 67 using dummy_hcd [ 164.706713][ T330] usb 4-1: unit 4 not found! [ 164.970469][ T440] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 165.300578][ T330] usb 4-1: unit 0 not found! [ 165.321295][ T330] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 165.351675][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.504280][ T330] usb 4-1: unit 4 not found! [ 166.308414][ T330] usb 4-1: unit 0 not found! [ 166.576024][ T1113] usb 2-1: config 0 interface 200 has no altsetting 0 [ 167.159301][ T1113] usb 2-1: string descriptor 0 read error: -71 [ 167.165525][ T1113] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 167.218606][ T440] usb 5-1: Product: syz [ 167.222788][ T440] usb 5-1: Manufacturer: syz [ 167.227380][ T440] usb 5-1: SerialNumber: syz [ 167.247632][ C1] net_ratelimit: 115334 callbacks suppressed [ 167.247649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.247679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.253723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.265702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.277658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.289619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.301562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.313523][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.325464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.337433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.431063][ T330] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 167.519715][ T1113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.650817][ T440] usb 5-1: config 0 descriptor?? [ 167.773897][ T1113] usb 2-1: config 0 descriptor?? [ 167.774152][ T440] usb 5-1: can't set config #0, error -71 [ 167.805609][ T349] usb 1-1: USB disconnect, device number 67 [ 167.824463][ T330] usb 4-1: USB disconnect, device number 79 [ 167.905859][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.044427][ T1113] usb 2-1: can't set config #0, error -71 [ 168.065055][ T440] usb 5-1: USB disconnect, device number 2 [ 168.336861][ T1113] usb 2-1: USB disconnect, device number 61 [ 168.389293][ T3276] overlayfs: workdir and upperdir must be separate subtrees [ 168.416950][ T3272] netlink: 180 bytes leftover after parsing attributes in process `syz.3.791'. [ 168.740447][ T3280] netlink: 64 bytes leftover after parsing attributes in process `syz.4.794'. [ 168.844023][ T3281] overlayfs: workdir and upperdir must be separate subtrees [ 168.855201][ T3283] rust_binder: Failure in copy_transaction_data: ENOMEM [ 168.855250][ T3283] rust_binder: 3278:3283 transaction to 3278 failed: ENOMEM [ 171.449773][ T3280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 172.257617][ C0] net_ratelimit: 123445 callbacks suppressed [ 172.257638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.257645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.257732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.263713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.275702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.287653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.299631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.311562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.323529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 172.335462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.668563][ T3291] syzkaller0: refused to change device tx_queue_len [ 174.464433][ C1] sched: DL replenish lagged too much [ 177.267635][ C1] net_ratelimit: 126434 callbacks suppressed [ 177.267655][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.267669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.273752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.285696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.297689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.309631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.321610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.333528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.345514][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 177.357438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.277633][ C0] net_ratelimit: 129038 callbacks suppressed [ 182.277655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.277707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.283731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.295724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.307686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.319647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.331591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.343564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.355506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 182.367487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.287632][ C1] net_ratelimit: 127166 callbacks suppressed [ 187.287653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.287665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.287733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.293743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.305710][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.317694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.329630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.341594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.353528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.365504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.297618][ C0] net_ratelimit: 130685 callbacks suppressed [ 192.297640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.297711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.303706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.315690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.327641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.339608][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.351546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.363526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.375451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.387419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.307610][ C0] net_ratelimit: 129601 callbacks suppressed [ 197.307633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.307670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.313703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.325685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.337634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.349597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.361537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.373517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.385445][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 197.397432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.317636][ C1] net_ratelimit: 129750 callbacks suppressed [ 202.317657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.317702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.323732][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.335684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.347666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.359602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.371577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.383511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.395482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 202.407424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.241871][ T3304] netlink: 'syz.4.799': attribute type 9 has an invalid length. [ 207.327609][ C0] net_ratelimit: 123008 callbacks suppressed [ 207.327628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.327663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.333691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.345688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.357635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.369612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.387656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.393537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.405458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.417428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.337649][ C0] net_ratelimit: 131133 callbacks suppressed [ 212.337670][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.337723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.343739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.355736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.367694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.379658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.391594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.403574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.415499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.427476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.347616][ C0] net_ratelimit: 128546 callbacks suppressed [ 217.347638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.347646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.347736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.353702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.365708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.377653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.389618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.401548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.413532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.425457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.357592][ C0] net_ratelimit: 130431 callbacks suppressed [ 222.357614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.357681][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.363700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.375688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.387642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.399597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.411566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.423582][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.435511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.447482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.367605][ C0] net_ratelimit: 126832 callbacks suppressed [ 227.367626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.367628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.367727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.373748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.385740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.397676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.409649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.421596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.433566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.445493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.377630][ C0] net_ratelimit: 122094 callbacks suppressed [ 232.377650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.377705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.383725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.395726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.407666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.419664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.431587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.443557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.455484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.467466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.387609][ C1] net_ratelimit: 127660 callbacks suppressed [ 237.387632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.387678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.393726][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.405681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.417662][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.429602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.441577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.453517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.465520][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.477478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.397598][ C1] net_ratelimit: 130432 callbacks suppressed [ 242.397619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.397673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.403710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.415661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.427647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.439572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.451544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.463506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.475465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.487388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.407606][ C1] net_ratelimit: 132150 callbacks suppressed [ 247.407628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.407633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.407705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.413724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.425685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.437659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.449593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.461561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.473511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 247.485480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.417591][ C1] net_ratelimit: 133060 callbacks suppressed [ 252.417613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.417672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.423697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.435750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.447713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.459662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.471640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.483575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.495544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.507471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.427614][ C0] net_ratelimit: 126654 callbacks suppressed [ 257.427638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.427691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.433706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.445690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.457634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.469626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.481553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.493519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.505453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.517432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.437574][ C1] net_ratelimit: 131667 callbacks suppressed [ 262.437596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.437611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.437692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.443682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.455649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.467636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.479589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.491558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.503511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.515485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.447577][ C1] net_ratelimit: 132705 callbacks suppressed [ 267.447600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.447618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.453683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.465685][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.477658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.489570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.501537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.513478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.525451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.537404][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.457593][ C0] net_ratelimit: 117928 callbacks suppressed [ 272.457614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.457693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.463695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.475704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.487706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.499702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.511615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.523611][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.535527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.547522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.467606][ C0] net_ratelimit: 114549 callbacks suppressed [ 277.467625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.467689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.473693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.485692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.497658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.509634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.521608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.533575][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.545535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.557518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.477601][ C0] net_ratelimit: 128016 callbacks suppressed [ 282.477621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.477673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.483705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.495671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.507632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.519605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.531542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.543521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.555466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.567426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.487599][ C1] net_ratelimit: 123917 callbacks suppressed [ 287.487619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.487666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.493743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.505688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.517677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.529607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.541593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.553509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.565536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.577462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.497597][ C1] net_ratelimit: 125717 callbacks suppressed [ 292.497618][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.497666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.503697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.515660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.527636][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.539590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.551546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.563491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.575460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.587396][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.507598][ C0] net_ratelimit: 124680 callbacks suppressed [ 297.507617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.507653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.513681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.525711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.537650][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.549647][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.561563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.573577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.587610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.597492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.517584][ C0] net_ratelimit: 129637 callbacks suppressed [ 302.517607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.517624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.523683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.535679][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.547646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.559620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.571542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.583518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.595458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.607437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.019033][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.026103][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.068142][ T3318] bridge_slave_0: entered allmulticast mode [ 306.188469][ T3318] bridge_slave_0: entered promiscuous mode [ 306.612020][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.621772][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.647617][ T3318] bridge_slave_1: entered allmulticast mode [ 306.742305][ T3318] bridge_slave_1: entered promiscuous mode [ 306.921494][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.205250][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.301518][ T3319] bridge_slave_0: entered allmulticast mode [ 307.418943][ T3319] bridge_slave_0: entered promiscuous mode [ 307.527598][ C0] net_ratelimit: 126729 callbacks suppressed [ 307.527617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.527695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.533717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.545737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.557645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.569642][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.581571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.593573][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.605482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.617516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.728731][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.735803][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.765337][ T3321] bridge_slave_0: entered allmulticast mode [ 307.798035][ T3321] bridge_slave_0: entered promiscuous mode [ 308.190639][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.419644][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.426742][ T3319] bridge_slave_1: entered allmulticast mode [ 308.508223][ T3319] bridge_slave_1: entered promiscuous mode [ 308.700086][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.707139][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.734640][ T3321] bridge_slave_1: entered allmulticast mode [ 308.769549][ T3321] bridge_slave_1: entered promiscuous mode [ 309.065767][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.079469][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.098187][ T3320] bridge_slave_0: entered allmulticast mode [ 309.117855][ T3320] bridge_slave_0: entered promiscuous mode [ 309.618059][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.625111][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.664072][ T3320] bridge_slave_1: entered allmulticast mode [ 309.722329][ T3320] bridge_slave_1: entered promiscuous mode [ 312.537568][ C1] net_ratelimit: 125002 callbacks suppressed [ 312.537590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.537601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.537674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.543668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.555640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.567614][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.579537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.591527][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.603448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.615418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.547603][ C0] net_ratelimit: 119056 callbacks suppressed [ 317.547622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.547780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.553688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.565699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.577566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.589566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.601506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.613509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.625446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.637427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.819951][ T37] INFO: task syz.0.796:3287 blocked for more than 132 seconds. [ 318.829894][ T37] Not tainted syzkaller #0 [ 318.834837][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.872291][ T37] task:syz.0.796 state:D stack:0 pid:3287 tgid:3287 ppid:293 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.087801][ T36] audit: type=1400 audit(1784868444.613:408): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1539]" dev="pipefs" ino=1539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 319.122500][ T37] Call Trace: [ 319.125795][ T37] [ 319.128755][ T37] __schedule+0x1496/0x20b0 [ 319.133284][ T37] ? __sched_text_start+0x10/0x10 [ 319.138372][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 319.143403][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 319.149213][ T37] ? wake_nocb_gp+0x120/0x1b0 [ 319.153887][ T37] ? __kasan_check_write+0x18/0x20 [ 319.158996][ T37] schedule+0xc5/0x240 [ 319.163060][ T37] schedule_timeout+0xc7/0x3b0 [ 319.167844][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 319.173223][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 319.178767][ T37] ? __smp_call_single_queue+0xd5/0x380 [ 319.184304][ T37] ? generic_exec_single+0x1fd/0x500 [ 319.189597][ T37] wait_for_common+0x368/0x650 [ 319.194354][ T37] ? wait_for_completion+0x40/0x40 [ 319.199467][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 319.204916][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 319.211420][ T37] wait_for_completion+0x1c/0x40 [ 319.216347][ T37] rcu_barrier+0x45a/0x580 [ 319.220795][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 319.226159][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 319.230931][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 319.236048][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 319.241699][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 319.247329][ T37] kvm_put_kvm+0xadf/0x12d0 [ 319.251836][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 319.256934][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 319.262149][ T37] kvm_vm_release+0x47/0x70 [ 319.266643][ T37] __fput+0x20b/0xa30 [ 319.270631][ T37] ____fput+0x20/0x30 [ 319.274604][ T37] task_work_run+0x1e8/0x260 [ 319.279205][ T37] ? __cfi_task_work_run+0x10/0x10 [ 319.284317][ T37] ? __kasan_check_write+0x18/0x20 [ 319.289428][ T37] resume_user_mode_work+0x35/0x50 [ 319.294526][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 319.300053][ T37] do_syscall_64+0x63/0xf0 [ 319.304461][ T37] ? clear_bhb_loop+0x50/0xa0 [ 319.309166][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 319.315066][ T37] RIP: 0033:0x7f7b64b9de99 [ 319.319502][ T37] RSP: 002b:00007ffd238e6ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 319.327914][ T37] RAX: 0000000000000000 RBX: 00007ffd238e6f90 RCX: 00007f7b64b9de99 [ 319.335871][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 319.343838][ T37] RBP: 000000000002a432 R08: 0000000000000001 R09: 0000000000000000 [ 319.351812][ T37] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007ffd238e6fd0 [ 319.359781][ T37] R13: 00007f7b64e25fac R14: 000000000002a67b R15: 00007f7b64e25fa0 [ 319.367753][ T37] [ 319.433524][ T37] NMI backtrace for cpu 0 [ 319.433540][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 319.433567][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.433580][ T37] Call Trace: [ 319.433586][ T37] [ 319.433595][ T37] __dump_stack+0x21/0x30 [ 319.433625][ T37] dump_stack_lvl+0x140/0x1c0 [ 319.433651][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 319.433678][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 319.433707][ T37] dump_stack+0x19/0x20 [ 319.433732][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 319.433754][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 319.433787][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 319.433809][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 319.433835][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 319.433861][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 319.433888][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 319.433911][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 319.433937][ T37] watchdog+0xe45/0xf90 [ 319.433958][ T37] ? __kasan_check_write+0x18/0x20 [ 319.433980][ T37] ? __cfi_watchdog+0x10/0x10 [ 319.434001][ T37] ? __kasan_check_read+0x15/0x20 [ 319.434020][ T37] ? __kthread_parkme+0x12f/0x180 [ 319.434041][ T37] ? schedule+0xc5/0x240 [ 319.434064][ T37] kthread+0x2c7/0x360 [ 319.434085][ T37] ? __cfi_watchdog+0x10/0x10 [ 319.434106][ T37] ? __cfi_kthread+0x10/0x10 [ 319.434129][ T37] ret_from_fork+0x67/0xa0 [ 319.434156][ T37] ? __cfi_kthread+0x10/0x10 [ 319.434178][ T37] ret_from_fork_asm+0x1a/0x30 [ 319.434199][ T37] [ 319.434207][ T37] Sending NMI from CPU 0 to CPUs 1: [ 319.650255][ C1] NMI backtrace for cpu 1 [ 319.650269][ C1] CPU: 1 UID: 0 PID: 310 Comm: kworker/1:2 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 319.650290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.650301][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 319.650326][ C1] RIP: 0010:unwind_next_frame+0x2cb/0x6b0 [ 319.650350][ C1] Code: 80 3c 30 00 74 08 48 89 df e8 c1 94 9b 00 48 c7 03 00 00 00 00 b0 01 e9 7f 02 00 00 4c 89 f0 4c 8d 73 50 4d 89 f5 49 c1 ed 03 <41> 80 7c 05 00 00 74 08 4c 89 f7 e8 75 93 9b 00 49 8b 0e 48 85 c9 [ 319.650364][ C1] RSP: 0018:ffffc900002301a8 EFLAGS: 00000a06 [ 319.650377][ C1] RAX: dffffc0000000000 RBX: ffffc90000230208 RCX: 0000000000046000 [ 319.650390][ C1] RDX: dffffc0000000000 RSI: ffffffff81dff6f3 RDI: ffffc9000b7dff48 [ 319.650403][ C1] RBP: ffffc900002301f8 R08: ffffc900002302d0 R09: ffffc900002302c8 [ 319.650414][ C1] R10: 0000000000000002 R11: ffffffff81759ed0 R12: ffffc90000230598 [ 319.650426][ C1] R13: 1ffff9200004604b R14: ffffc90000230258 R15: 0000000000000000 [ 319.650438][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 319.650452][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.650464][ C1] CR2: 00007f10fa557e20 CR3: 000000010cfe0000 CR4: 00000000003526b0 [ 319.650478][ C1] Call Trace: [ 319.650484][ C1] [ 319.650491][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 319.650511][ C1] arch_stack_walk+0x138/0x170 [ 319.650527][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 319.650547][ C1] stack_trace_save+0xaa/0x100 [ 319.650564][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 319.650581][ C1] ? kmem_cache_free+0x1bd/0x4f0 [ 319.650597][ C1] ? __kfree_skb+0x18f/0x210 [ 319.650618][ C1] kasan_save_track+0x3e/0x80 [ 319.650634][ C1] ? kasan_save_track+0x3e/0x80 [ 319.650651][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 319.650672][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 319.650695][ C1] kasan_save_alloc_info+0x3a/0x50 [ 319.650717][ C1] __kasan_slab_alloc+0x73/0x90 [ 319.650735][ C1] kmem_cache_alloc_noprof+0x1bf/0x410 [ 319.650751][ C1] ? make_kuid+0x1e4/0x670 [ 319.650769][ C1] ? dst_alloc+0x13c/0x240 [ 319.650785][ C1] dst_alloc+0x13c/0x240 [ 319.650800][ C1] ip_route_input_rcu+0x18d4/0x26b0 [ 319.650817][ C1] ? br_flood+0x66d/0x720 [ 319.650833][ C1] ? ip_route_input_noref+0x150/0x150 [ 319.650848][ C1] ? br_pass_frame_up+0x126/0x1b0 [ 319.650867][ C1] ? arpt_do_table+0x77a/0x1e10 [ 319.650886][ C1] ? __asan_memcpy+0x5a/0x80 [ 319.650902][ C1] ip_route_input_noref+0xd4/0x150 [ 319.650918][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 319.650934][ C1] ? arpt_do_table+0x228/0x1e10 [ 319.650954][ C1] ? __asan_memcpy+0x5a/0x80 [ 319.650969][ C1] arp_process+0x905/0x1810 [ 319.650989][ C1] ? __cfi_arp_process+0x10/0x10 [ 319.651009][ C1] ? __cfi_arp_process+0x10/0x10 [ 319.651028][ C1] NF_HOOK+0x17e/0x1e0 [ 319.651045][ C1] ? __cfi_arp_process+0x10/0x10 [ 319.651064][ C1] ? arp_xmit+0x200/0x200 [ 319.651083][ C1] ? __cfi_arp_process+0x10/0x10 [ 319.651102][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 319.651125][ C1] arp_rcv+0x2f8/0x490 [ 319.651144][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 319.651163][ C1] process_backlog+0x57b/0xaf0 [ 319.651185][ C1] ? try_to_wake_up+0x111a/0x1fd0 [ 319.651203][ C1] __napi_poll+0xd0/0x600 [ 319.651223][ C1] net_rx_action+0x5dc/0xd70 [ 319.651250][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 319.651272][ C1] ? timer_expire_remote+0xa0/0xa0 [ 319.651292][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 319.651314][ C1] handle_softirqs+0x1aa/0x620 [ 319.651330][ C1] __do_softirq+0xf/0x16 [ 319.651348][ C1] do_softirq+0xb8/0x110 [ 319.651362][ C1] [ 319.651368][ C1] [ 319.651373][ C1] ? __cfi_do_softirq+0x10/0x10 [ 319.651387][ C1] ? _raw_write_lock_bh+0x96/0xf0 [ 319.651404][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 319.651422][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 319.651439][ C1] __local_bh_enable_ip+0x74/0x80 [ 319.651454][ C1] _raw_write_unlock_bh+0x33/0x70 [ 319.651472][ C1] neigh_periodic_work+0xa6a/0xbb0 [ 319.651492][ C1] process_scheduled_works+0x7f7/0x1060 [ 319.651511][ C1] worker_thread+0xc99/0x13f0 [ 319.651527][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 319.651544][ C1] ? __kasan_check_read+0x15/0x20 [ 319.651559][ C1] kthread+0x2c7/0x360 [ 319.651576][ C1] ? __cfi_worker_thread+0x10/0x10 [ 319.651592][ C1] ? __cfi_kthread+0x10/0x10 [ 319.651609][ C1] ret_from_fork+0x67/0xa0 [ 319.651630][ C1] ? __cfi_kthread+0x10/0x10 [ 319.651647][ C1] ret_from_fork_asm+0x1a/0x30 [ 319.651662][ C1] [ 322.557562][ C1] net_ratelimit: 108205 callbacks suppressed [ 322.557583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.557587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.557683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.563676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.575651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.587617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.599549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.611521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.623467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.635419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.567594][ C1] net_ratelimit: 121418 callbacks suppressed [ 327.567616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.567667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.573706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.585681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.597653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.609607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.621555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.633503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.645471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.657480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)