last executing test programs: 1m8.489174094s ago: executing program 0 (id=158): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x57, [0x0, 0x2, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x80, 0x0, 0x40000, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffd, 0x768, 0x200, 0x7, 0xf, 0xfffffffc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1000, 0x400080, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda7, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x4dc6d315, 0x6, 0x9, 0x4304a8bd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000022c0)={[0x38, 0xfff, 0x10001, 0x180, 0x9, 0x0, 0x7, 0x2, 0x7fffffffffffe, 0x5, 0x3, 0x8, 0x0, 0x45, 0xfffffffffffffffa, 0x4], 0xdddd1000, 0x1c6017}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r4, &(0x7f0000000040)={@val={0xa, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3b, 0x2d, 0x66, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @multicast2=0xe0000001}, {{0x4e24, 0x4e25, 0x41424344, 0x41424344, 0x1, 0x0, 0x0, 0x40, 0x4, 0x0, 0x2}, {"7db22b8a1e"}}}}}}}, 0x3f) r7 = syz_usb_connect$uac2(0x0, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x7c, {0x7c, 0x1c, "f5c12643e738c78a43017ffde18d0c38b195268136204af34ef03c988117af7c5c53012bf5f1de2b76444a9116fe6bc15fdb8a0aba3615bd6ae92cb9d413068a08d7567cfc841fd04d707899e97810aaf8df48342861d24ea48e9ce0938f85deb7c7b5aa540867c4ce9af5df3da78aaf7db3a7ac2d8705085ad8"}}, &(0x7f0000000100)={0x0, 0x3, 0x33, @string={0x33, 0x3, "e70a6387cde9fa0be159268c5e3133e0ce01f12c4237c2f6b3bdd66e91b60e37ea38868ce8911aeffb6215e39da20f5539"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x40, 0x31, 0x4e, "d0d47f2af2a203b2ad8e37402f86558f4daf1786d84c3eae387cff6cbf1fae7027d58af194663ae87e92402e91b0dfdfe993f69e3830c4bcd748827947da04c0eb0f15d023555e25929dad9db272"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r8) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r10, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000810) 1m4.836324011s ago: executing program 0 (id=166): connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r0, @ANYRES64], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x9, 0x133, 0x0, 0x1, [@generic="20dd76e709"]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) (async, rerun: 64) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) 1m1.803155103s ago: executing program 0 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000095, 0x0, 0x1002}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000500), 0x4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000180)={'geneve1\x00', @multicast}) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="704500001b000000058d860d0688820d8c86048d068b088a8484000000000000000000"]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='7', 0x1) 1m1.540916669s ago: executing program 0 (id=174): socket$inet6(0xa, 0x3, 0x7) (async) socket(0xa, 0x3, 0xff) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') preadv(r0, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0x100, 0x10000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42002, 0x180) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_io_uring_setup(0x48a9, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0x3, 0xab}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0xd8}}, 0x20000080) 1m1.51820882s ago: executing program 0 (id=175): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.409049253s ago: executing program 0 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(r8, &(0x7f0000002000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c38359761cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc04d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d660526602dfc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26012a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d0a1cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10000000000000002b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce549aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e140e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef64948730b035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f56992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a3fe41b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1d36ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, 0x0) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0x7, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r12, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 46.302084144s ago: executing program 32 (id=177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(r8, &(0x7f0000002000)="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", 0x2000, 0x0) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0x7, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="1a040500c7ff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r12, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 45.796654476s ago: executing program 3 (id=244): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x811, 0xb) (async) membarrier(0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8, 0x66) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000000c0)={{0x9}, 0x100, './file0\x00'}) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) futimesat(r1, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={{0x77359400}, {0x77359400}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000022c0)={0x0, 0x0}) landlock_restrict_self(r0, 0x2) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000002340)=""/4096, &(0x7f0000003340)=0x1000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000003380)={0x0, r0}, 0x0) faccessat(r1, &(0x7f00000033c0)='./file0\x00', 0x21) (async) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000003400)=0x9) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000003440)={0x3, 0x1da0000000, 0x9, 0xa525, 0x1, 0x80}) (async) r6 = syz_io_uring_complete(0x0, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000003480)=0x7, &(0x7f00000034c0)=0x1) close_range(r6, r0, 0x0) (async) chown(&(0x7f0000003500)='./file0\x00', r3, 0xee00) write$binfmt_misc(r6, &(0x7f0000003540)="1c952e8a08abe4d2817f919287d8db481dd25b8ea4c410767b01c20a0bba442cdd0170a852fb3231e84cc9ffd1d2ce8d74be98ad0aca5b8bf765542ee4f66cf88ca49d36927c900b6c349d9d063e0c4a6f2d6b92ef99f3dde639565863f4c9be24097fca1ae406abbee2e375b18669bf1a0504b57db28f9a4087aaebfe7cd22c32f1ac8078201fed7f98c0ff0f99539671ba8a52f2d7f369fd067bacc1abf01fa812c2cb69440ba73b1c41a7a852d715ab932a72e8dc15aa1a77677f1f5f7a127561b38c56f55733aa1b2dea663cc3ef3a2953170904b391f945a9178d4ac8739615cc0a8b3240e1", 0xe8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000003640)={0x8, 'veth1_macvtap\x00', {'team_slave_0\x00'}, 0x5}) (async) write$khugepaged_scan(r1, &(0x7f0000003680), 0x8) (async) landlock_create_ruleset(&(0x7f00000036c0)={0x10, 0x4, 0x0, 0x11, 0xb, 0x1}, 0x30, 0x2) (async) r7 = syz_create_resource$binfmt(&(0x7f0000003700)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000003740)='team_slave_0\x00', &(0x7f0000003780)='./file0\x00', r0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003a80)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000003ac0)={0x85003200, &(0x7f00000037c0), &(0x7f0000003800), &(0x7f0000003840), {0x2e}, &(0x7f0000003880)=""/177, 0xb1, &(0x7f0000003940)=""/247, &(0x7f0000003a40)=[r4, r5, r5, r4, 0x0, r5], 0x6, {r8}}, 0x58) write$P9_RREADLINK(r1, &(0x7f0000003b40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) write(r8, &(0x7f0000003b80)="2b036a5ca033a217d0e83ac5685aa374cd3739fa61862b9233707d1746dbd408e72fda28c1dea830977cfd5ba19d3cd2443181ec8d382752a43124af779b379860e6a9f08b471514b2a029104ba52540126d329f9975f64e7cf9f22e7cb7ad6ecd294df6ae7fa2bc090df38414d94529976a250279f2765658126970633c68e4d3161679e7f000cd2fb37f0d800d70e6ba853c90e6b678d5", 0x98) 45.795932596s ago: executing program 3 (id=245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a00)='veth1_to_bond\x00', 0x10) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/192, 0xc0}], 0x3}, 0x5}, {{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/229, 0xe5}], 0x4, &(0x7f0000000740)=""/37, 0x25}, 0x8}, {{&(0x7f0000000780)=@generic, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f0000000a00)}, {&(0x7f0000000a80)=""/102, 0x66}, {&(0x7f0000000b00)=""/190, 0xbe}], 0x6, &(0x7f0000001c40)=""/4096, 0x1000}, 0x7276}, {{&(0x7f0000002c40)=@pptp, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002cc0)=""/241, 0xf1}, {&(0x7f0000002dc0)=""/112, 0x70}], 0x2, &(0x7f0000002e80)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000003e80)=""/54, 0x36}, {&(0x7f0000003ec0)=""/165, 0xa5}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/200, 0xc8}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/51, 0x33}], 0x6, &(0x7f0000006140)=""/65, 0x41}, 0xffffe566}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000061c0)=""/246, 0xf6}, {&(0x7f00000062c0)=""/251, 0xfb}], 0x2}, 0xbafd}], 0x6, 0x10000, &(0x7f0000006580)={0x0, 0x3938700}) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="f6063f7886509f869a03beeab46d20c4381ec2dcfc38a333088fee500e98ab5403158c13c0461f6f63c30f682013de82e3707a", 0x33}], 0x1}}], 0x1, 0x111) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='.^$\'#{@\\\x00', 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 45.730635067s ago: executing program 3 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000780)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 45.654942769s ago: executing program 3 (id=248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x9, 0x1, 0x10}) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2, 0x10082, 0x2}, 0x30, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0xa58}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r5, &(0x7f0000000210)="01", 0x1) read(r4, &(0x7f0000800000)=""/8, 0x8) sendto$packet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 45.648744309s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioperm(0x1, 0x3, 0x163f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={0x0, 0x300}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)={0x0, 0xb}) timer_create(0x0, 0x0, 0x0) 45.369742796s ago: executing program 3 (id=255): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000c77000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000c75000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) close(r3) 45.108544583s ago: executing program 4 (id=240): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="90e302faff0002035ae7ef9c312dc94907334fb4552b7935ad90de9100e6e9979ed1e4c2f13f09fd73893fdc041a6cd884dbffff00000000d83b22431035da0000de4df35bdaab61fe20bd1f9b478afdba39e7c34e503f60b99c931ac5a2cc22c34542ea6cd543501e4aede0c2158f7c21575aa3e280c0a867"]}, 0x0) (async) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="90e302faff0002035ae7ef9c312dc94907334fb4552b7935ad90de9100e6e9979ed1e4c2f13f09fd73893fdc041a6cd884dbffff00000000d83b22431035da0000de4df35bdaab61fe20bd1f9b478afdba39e7c34e503f60b99c931ac5a2cc22c34542ea6cd543501e4aede0c2158f7c21575aa3e280c0a867"]}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0xdddd1000, 0xffffffff, 0x0, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe0}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x50000, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000031, 0x0, 0x1000, 0x20, 0x0, 0x0, 0x0, [0xe00f8e]}) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000a40)) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x3}, 0x30, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x14dd82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r5, 0xe856000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r5, 0xe856000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) (async) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) (async) landlock_restrict_self(r7, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x1}, 0x30, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r8, 0x1) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r9) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r10, 0x150}, 0x0, &(0x7f00000008c0)="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", 0x0) listen(r6, 0x1) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000080)=@file={0x1}, 0x6e) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 43.294588936s ago: executing program 4 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioperm(0x1, 0x3, 0x163f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={0x0, 0x300}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000180)={0x0, 0xb}) timer_create(0x0, 0x0, 0x0) 43.053596922s ago: executing program 4 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x3, 0xfff, 0x9, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x4, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x2, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xc, 0x6, 0x4}]}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 36.964695928s ago: executing program 1 (id=297): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r0) clock_gettime(0x5, &(0x7f00000001c0)) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xd, 0x5, '\x00', 0x6}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000002c0)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f00000001c0)=0xfffffffffffffff9}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x100}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r5, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000140)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) connect$tipc(r6, &(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x800001}}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="5e80", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="cc", 0x1}], 0x1}}], 0x2, 0x6081) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fe8000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000025c0)=""/4110, 0x100e, 0x0, 0x0}, &(0x7f0000000340)=0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="00012dbd7000fbdbdf2503000000050012000400000005001200380000000500120009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) 36.868601519s ago: executing program 1 (id=298): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 36.767368802s ago: executing program 1 (id=300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fb, 0x400, 0x70bd26, 0x25dfdbfe, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) r3 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8100, 0x124, 0x3}, 0x18) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x88a}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000100)={0x81, 0x4, 0x10001, 0x1, 0xfffffffffffffffe, 0x3ff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) socket$inet(0x2, 0x3, 0x4) mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x5, 0xfffffffffffffffe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x19}, @fda={0x66646185, 0x6, 0x1, 0x3}}, &(0x7f0000000bc0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 36.673123274s ago: executing program 1 (id=302): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a"], 0x119) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) syz_usb_connect$uac3(0x2, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400c200b104300010203010902780003010af005080b0001012430ed0904000000010130000a24010114000080000005240c070005240c1e000904010000010230000904010101ec0130000905010920010109100a25250500200050030009040200000102300009040201010102300009058209100006e2010a2525000000000dffff"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)=@arm64_sve_vls={0x606000000015ffff, &(0x7f00000000c0)=0x400000000000000}) sysinfo(&(0x7f0000000140)=""/4096) pwritev(r4, &(0x7f0000001380)=[{&(0x7f0000000140)="266ff95cee3b8adf3439a04220ccbede9031eeed629c11e05dd022a1554126d9a6716efbc9e3c553d8c9a5997fe4cbc86b09c7d882b6bb9e00a682a245089d5a0f852f598671f8e367aad670edbe9fad1dc18ad94ef5daf39fa8231d581fff6c03243305f8a6c55e81f4cbf348783b76f12ecdb0a1639536b2370402efeaf8737e29cb59a9c2d586b232ea08d04ab454a6dba2f2ba5c33a72ab04d83d8cee16281367bde3aeb13b1de762349", 0xac}, {&(0x7f00000013c0)="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", 0x1032}, {&(0x7f0000001200)="75cc762c1a7cd2d8652f3bc0cbcedf9257dd7f1c0739b6262e5d31d790bd5d83f1638713793940f06963cffae5f09293392d8697f5784748de44e03b25277964101e8492e58639c8bcb1f4411122eef742b00285a0b72c81513e49d55e2307317daff39239ac37244783c48fc1b19d7888785f737a564fbe5df8aeadd7ffafa267efbbf0ea55897eb185cbdea9df295d4fa9d44a15a6028290368cbaddbf4c13950fbc123011d2b35752e7ff996f995ed85b13b9e0234e341e85bff0948b56e5bec3ce4390ebb630dd7073d3d33139bf8598db62e556e5987cfac406ce51cf355c3fb05f298b24af", 0xe8}, {&(0x7f0000001300)="53545c1960895d134c1aa359be6ed6228e9a65f41fee9d2b407763dc36f5b96abd3bb848baab5a5f024b2caff3193756dd2fb66455bf38e562a1a386cb5539d5b0b9effb55f0affe57089f035e3ae4fb74b451851f99d3cff955", 0x5a}], 0x4, 0x5c, 0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$midi(0x5, 0xa2, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0xe, 0x180, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x0, 0x3, [{0xff, 0x5}, {0xde, 0xc}, {0x2, 0xfb}], 0xd7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3, 0x8}], [{{0x9, 0x5, 0x3, 0x1, 0x0, 0x8, 0x9, 0xbc, {0x6, 0x25, 0x1, 0x2, "8a1a"}}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x5, 0x9, 0x7, {0xe, 0x25, 0x1, 0xa, "5c24d6d7827beb630801"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x1, 0x0, {0xb, 0x25, 0x1, 0x7, "6f7d2a7f47fa7e"}}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x4, 0xa2, {0xb, 0x25, 0x1, 0x7, "434317ae75fdb6"}}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xf6, 0x5, 0x3, {0xd, 0x25, 0x1, 0x9, "662bc10585092e907b"}}}]}}}}}]}}, &(0x7f0000002640)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x250, 0x0, 0x38, 0x2, 0x20, 0x2}, 0x63, &(0x7f0000002440)={0x5, 0xf, 0x63, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "4a00f1b19505a875dd4cabb0175d08e4"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1e4f6b397c22b323de967ca91f8de930"}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x1, 0xf, 0xfffc}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x5, 0x8, 0x8, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "93088dbafa416baaeabf3ccba16a888f"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10a, 0x7f, 0x6, 0x0, 0x81}]}, 0x4, [{0x33, &(0x7f00000024c0)=@string={0x33, 0x3, "ac6765f1aeede9f4a84df3215ea4459899c059cf4445085cdfc9dbda9ffa21a86c1833aa9cb0fe9abe858b6dba885e1ee9"}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x42d}}, {0x8a, &(0x7f0000002580)=ANY=[@ANYBLOB="8a031e320e38d35a9e21ebd2be10e71975ce91b8ec3f940c8148d8d149dc5040a65daa56a960faddd75feb2e2b69b01a94ec0d7491d7765b4ede85c9cd21ebdbd400582f7df10cd8bfe314d61f5e56a39be49d8828439d28235c6a81ff3fec9b9569a04fbacde509ed0b0202a6450e4b4a5f2c75be1c2af9cc023e9374571f0fe8fa401e0573320ddc08"]}]}) 36.672537154s ago: executing program 2 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x3004c020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101901, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='&\x00', 0x200941, &(0x7f00000000c0)={@align=0x4, {0x7, 0x3, 0x0, 0x6}}, 0xe83, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x7f, 0x4) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x6296}]}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x10000, 0x0, 0xffffffffffffffff, 0x9}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x3004c020) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101901, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='&\x00', 0x200941, &(0x7f00000000c0)={@align=0x4, {0x7, 0x3, 0x0, 0x6}}, 0xe83, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)}) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x7f, 0x4) (async) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x6296}]}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x1, 0x10000, 0x0, 0xffffffffffffffff, 0x9}) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) (async) 36.44074784s ago: executing program 1 (id=304): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d000000000000090400"], 0x0) (async) syz_usb_connect(0x5, 0x4e, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x50, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0xfffffff4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x40, 0x9, 0x7, {0xa, 0x25, 0x25, 0x1ff, 0x8, 0x8001}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x64, 0xd4, {0xa, 0x25, 0x25, 0x2, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x5, 0x7, 0x4, 0x8}, 0x0, 0x0}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/97, 0x61, 0x102, &(0x7f0000000380)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0xfffffdf8}, 0x1c) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) syz_usb_ep_write(r1, 0x9, 0x10, &(0x7f0000000100)="c55dfdbd186372fa43cc18630ececbc7") (async) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 36.335832443s ago: executing program 2 (id=305): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0xff, 0x5, 0x7, 0x400, 0x3, 0x40000201, r3}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close(0x3) 36.182348066s ago: executing program 2 (id=306): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0xfcff, 0x200000000000000, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000500)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r4, &(0x7f0000007bc0), 0x0, 0xc015) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 35.791357305s ago: executing program 2 (id=307): syz_usb_connect(0x3, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e70009058810020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000010b304093100000000000109022d00010000e02009041004070300010009210300000122060009058103"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00010f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0xb, 0x30, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "168e55"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xfff8, 0x3ff, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x33}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x0, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x2, [0x73, 0x4, 0x7f, 0x4, 0x4, 0x591e]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x5, 0x9}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x48, 0x3, 0x7, 0x10, 0x2}, 0x101, &(0x7f0000000200)={0x5, 0xf, 0x101, 0x6, [@generic={0x8e, 0x10, 0x0, "96992a9c9fe3ce026a2a807746327ef72b7b15f92972162cf267dc735969a1e7716921aaf4294e3f3ca356a4816ddbbce828f47395598aed6535569a05cbab9956aa93a9e05cfdc27b9e0bb48bab6cf35b7706483e8f6bbb9cb8c4673a7e37486a0bbbda0eafd06dce9e0cf71e74cc8e305be735f27e15cdc24d36160dee0c923f7e0ab90108f2a98535f3"}, @generic={0x47, 0x10, 0x3, "ce78e1958b4d871257386dbb043f53e6e0e43e5b1991f6c758972fbc980ba6b90b90b1c8dd06c3c7295e91d33a07e14fc0538a52de32c1fd09a125fb9da7f39d8ff99e02"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x4, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x40, 0x2, 0xe, 0xb5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7c, 0x60, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x2, 0xda, 0x9, 0x13, 0xc03, 0xe}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x3f, &(0x7f0000000040)=@string={0x3f, 0x3, "8c4ce7d1a2a7322d49526d1de47d032791fe079db9a715bcf5dbe51208a0f9ea6e73353069b27e64f24a386a5591374dc3d5e8dd74de249abf9a66ddcf"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}, {0x74, &(0x7f0000000480)=@string={0x74, 0x3, "101180436e10a5fe0be60647b0d8350cdeebe29754041c73a1c7f49f939e09ce7666190063389c65907cb45ac4d3056539b02946a4e353699285ba1e7575f160979d5b1835ddeaa2e543d7f0b1933e7bec86866c04bc38fbd48c4066534bde3c95b3d919f51b062b9751699b6e72d843fec2"}}]}) 32.868106355s ago: executing program 1 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x5, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x4b564d05, 0x0, 0x2}, {0xbcf, 0x0, 0xff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) r7 = dup(r6) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r10 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000240)={r6, &(0x7f0000000080)='/dev/kvm\x00', 0x403, &(0x7f0000000180)={@align, {0xffff, 0x5, 0xfff, 0x39}}, 0x1000, &(0x7f00000001c0), &(0x7f0000000200)=0x6}) sendto$unix(r10, 0x0, 0x0, 0x24040890, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="0f78a40800b836008ec00f019d090066b8000000000f23d80f21f86635c00000c00f23f8660f381c4babf0812f00009a00006800ba4000b032eef466b8010000000f01d9", 0x44}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 32.66760149s ago: executing program 2 (id=309): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) (async) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) 29.32636273s ago: executing program 33 (id=255): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000c77000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000c75000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) close(r3) 28.014566451s ago: executing program 2 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2804c02, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno}', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,\x00']) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="b112abce9dbf1ec76c88a5a3bd7a069fe6bf9a4215cb2560969de5a22915b6c5965359a60e24509e59eb1dbf047fd804f5250ee7595f12a5895c63dbabc8d6fb57db85bbc555d1e07aff30a636eed7cd920b63f58d7cce196da737edafc6651252a6ddbd29b04998cc9df96344375f28265662a262ae45f55c037d9e83", @ANYBLOB="f78f1df401d307661ecbacfeec17b2955f5f1b50058523e40d8e709b8f88336a8c8af455712727965a5e4105a9276fccdb097baf1bac3be72dcba3776684d0c924850b1df9d29076623308d124e5d180b527d3520140383b8b2394e392d94ff99095d668fac217cf71e5b64f7e6acebc6f9ce0cee35fb5361e276b226876a1908bb8bc1b8b4993bac11201ea8f2763c09819d6dd8b6fc1e129c04cbb6a", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000314031d7d1cce416001499100"/27], 0x0, 0x0}, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/20, 0x14}], 0x3, 0x898d, 0x20) fspick(r3, &(0x7f0000000140)='./file0\x00', 0x1) 21.483408647s ago: executing program 34 (id=267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x3, 0xfff, 0x9, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x4, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x2, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xc, 0x6, 0x4}]}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) 10.343782323s ago: executing program 35 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x5, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x4b564d05, 0x0, 0x2}, {0xbcf, 0x0, 0xff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x8) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup(r5) r7 = dup(r6) ioctl$SIOCGETNODEID(r7, 0x89e1, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r10 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000240)={r6, &(0x7f0000000080)='/dev/kvm\x00', 0x403, &(0x7f0000000180)={@align, {0xffff, 0x5, 0xfff, 0x39}}, 0x1000, &(0x7f00000001c0), &(0x7f0000000200)=0x6}) sendto$unix(r10, 0x0, 0x0, 0x24040890, &(0x7f00000002c0)=@file={0x1, './file1\x00'}, 0x6e) sendto$unix(r10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="0f78a40800b836008ec00f019d090066b8000000000f23d80f21f86635c00000c00f23f8660f381c4babf0812f00009a00006800ba4000b032eef466b8010000000f01d9", 0x44}], 0x1, 0x3c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 36 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2804c02, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno}', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=none,\x00']) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="b112abce9dbf1ec76c88a5a3bd7a069fe6bf9a4215cb2560969de5a22915b6c5965359a60e24509e59eb1dbf047fd804f5250ee7595f12a5895c63dbabc8d6fb57db85bbc555d1e07aff30a636eed7cd920b63f58d7cce196da737edafc6651252a6ddbd29b04998cc9df96344375f28265662a262ae45f55c037d9e83", @ANYBLOB="f78f1df401d307661ecbacfeec17b2955f5f1b50058523e40d8e709b8f88336a8c8af455712727965a5e4105a9276fccdb097baf1bac3be72dcba3776684d0c924850b1df9d29076623308d124e5d180b527d3520140383b8b2394e392d94ff99095d668fac217cf71e5b64f7e6acebc6f9ce0cee35fb5361e276b226876a1908bb8bc1b8b4993bac11201ea8f2763c09819d6dd8b6fc1e129c04cbb6a", @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000314031d7d1cce416001499100"/27], 0x0, 0x0}, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/20, 0x14}], 0x3, 0x898d, 0x20) fspick(r3, &(0x7f0000000140)='./file0\x00', 0x1) kernel console output (not intermixed with test programs): core_dump+0x2d61/0x3840 [ 45.462533][ T691] ? __cfi_elf_core_dump+0x10/0x10 [ 45.462555][ T691] ? mas_next_slot+0xf01/0xfd0 [ 45.462582][ T691] ? dump_interrupted+0xf0/0xf0 [ 45.462601][ T691] ? filp_open+0x199/0x1f0 [ 45.462625][ T691] ? 0xffffffffff600000 [ 45.462641][ T691] do_coredump+0x20d2/0x3050 [ 45.462662][ T691] ? __cfi_do_coredump+0x10/0x10 [ 45.462681][ T691] ? asm_exc_page_fault+0x2b/0x30 [ 45.462708][ T691] ? __kasan_slab_free+0x6a/0x80 [ 45.462730][ T691] ? get_signal+0xa2a/0x1490 [ 45.462755][ T691] get_signal+0x11bf/0x1490 [ 45.462781][ T691] arch_do_signal_or_restart+0xbc/0x700 [ 45.462800][ T691] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 45.462819][ T691] ? __bad_area_nosemaphore+0x2fb/0x680 [ 45.462839][ T691] irqentry_exit_to_user_mode+0x4d/0xb0 [ 45.462862][ T691] irqentry_exit+0x16/0x60 [ 45.462883][ T691] exc_page_fault+0x65/0xc0 [ 45.462905][ T691] asm_exc_page_fault+0x2b/0x30 [ 45.462924][ T691] RIP: 0033:0x7f8fb9c53bd7 [ 45.462940][ T691] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 45.462956][ T691] RSP: 002b:00007f8fbac91120 EFLAGS: 00010202 [ 45.462980][ T691] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f8fb9d9e159 [ 45.462993][ T691] RDX: 00007f8fbac91140 RSI: 00007f8fbac91270 RDI: 000000000000000b [ 45.463006][ T691] RBP: 00007f8fb9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 45.463018][ T691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 45.463030][ T691] R13: 00007f8fba026038 R14: 00007f8fba025fa0 R15: 00007fff674490f8 [ 45.463046][ T691] [ 45.463054][ T691] memory: usage 307200kB, limit 307200kB, failcnt 46878 [ 45.633981][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 45.639548][ T691] memory+swap: usage 426140kB, limit 9007199254740988kB, failcnt 0 [ 45.686667][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.739019][ T691] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 45.809051][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.849057][ T691] Memory cgroup stats for [ 45.889020][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 45.892133][ T736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.909018][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 45.929543][ T736] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.959007][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 45.974804][ T691] /syz2 [ 46.025244][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.036961][ T9] usb 4-1: config 0 descriptor?? [ 46.049141][ T691] : [ 46.049311][ T691] cache 314073088 [ 46.055436][ T736] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 46.064909][ T736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 46.079015][ T736] usb 2-1: Product: syz [ 46.083198][ T736] usb 2-1: Manufacturer: syz [ 46.088321][ T691] rss 483328 [ 46.091566][ T691] rss_huge 0 [ 46.094758][ T691] shmem 314068992 [ 46.098386][ T691] mapped_file 68825088 [ 46.108953][ T691] dirty 0 [ 46.110002][ T736] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 46.119465][ T691] writeback 0 [ 46.122773][ T691] workingset_refault_anon 74 [ 46.127370][ T691] workingset_refault_file 4556 [ 46.132403][ T691] swap 121794560 [ 46.135963][ T691] swapcached 24576 [ 46.150895][ T691] pgpgin 192242 [ 46.154402][ T691] pgpgout 115442 [ 46.157953][ T691] pgfault 52697 [ 46.165764][ T691] pgmajfault 51 [ 46.178998][ T691] inactive_anon 259125248 [ 46.183386][ T691] active_anon 55443456 [ 46.187452][ T691] inactive_file 4096 [ 46.191657][ T691] active_file 0 [ 46.195122][ T691] unevictable 0 [ 46.198582][ T691] hierarchical_memory_limit 314572800 [ 46.208987][ T691] hierarchical_memsw_limit 9223372036854771712 [ 46.215170][ T691] total_cache 314073088 [ 46.229008][ T691] total_rss 483328 [ 46.232806][ T691] total_rss_huge 0 [ 46.236526][ T691] total_shmem 314068992 [ 46.240987][ T691] total_mapped_file 68825088 [ 46.245590][ T691] total_dirty 0 [ 46.259002][ T691] total_writeback 0 [ 46.262858][ T691] total_workingset_refault_anon 74 [ 46.267995][ T691] total_workingset_refault_file 4556 [ 46.273973][ T691] total_swap 121794560 [ 46.278070][ T691] total_swapcached 24576 [ 46.289005][ T691] total_pgpgin 192242 [ 46.293015][ T691] total_pgpgout 115442 [ 46.297081][ T691] total_pgfault 52697 [ 46.309293][ T691] total_pgmajfault 51 [ 46.314998][ T691] total_inactive_anon 259125248 [ 46.321216][ T691] total_active_anon 55443456 [ 46.325825][ T691] total_inactive_file 4096 [ 46.339272][ T691] total_active_file 0 [ 46.343380][ T691] total_unevictable 0 [ 46.347451][ T691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.30,pid=402,uid=0 [ 46.362375][ T691] Memory cgroup out of memory: Killed process 402 (syz.2.30) total-vm:192412kB, anon-rss:1256kB, file-rss:20608kB, shmem-rss:46352kB, UID:0 pgtables:348kB oom_score_adj:1000 [ 46.399042][ T316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.429131][ T662] syz.1.134 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 46.438909][ T662] CPU: 1 UID: 0 PID: 662 Comm: syz.1.134 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 46.438938][ T662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.438950][ T662] Call Trace: [ 46.438956][ T662] [ 46.438965][ T662] __dump_stack+0x21/0x30 [ 46.438993][ T662] dump_stack_lvl+0x140/0x1c0 [ 46.439017][ T662] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.439041][ T662] ? ___ratelimit+0x41c/0x5c0 [ 46.439061][ T662] ? __kasan_check_write+0x18/0x20 [ 46.439082][ T662] dump_stack+0x19/0x20 [ 46.439105][ T662] dump_header+0xd9/0x460 [ 46.439129][ T662] oom_kill_process+0x35d/0x640 [ 46.439152][ T662] out_of_memory+0x5d1/0xa20 [ 46.439173][ T662] ? __cfi_out_of_memory+0x10/0x10 [ 46.439193][ T662] ? mutex_lock_killable+0x115/0x1d0 [ 46.439215][ T662] ? __cfi_mutex_lock_killable+0x10/0x10 [ 46.439238][ T662] mem_cgroup_out_of_memory+0x2c5/0x390 [ 46.439259][ T662] ? css_next_descendant_pre+0x1ec/0x210 [ 46.439282][ T662] ? __kasan_check_write+0x18/0x20 [ 46.439301][ T662] ? drain_obj_stock+0xec0/0xec0 [ 46.439321][ T662] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 46.439340][ T662] try_charge_memcg+0x925/0xe10 [ 46.439363][ T662] ? static_key_count+0x45/0x70 [ 46.439387][ T662] ? __cfi_gfp_zone+0x1/0x10 [ 46.439408][ T662] ? __cfi_try_charge_memcg+0x10/0x10 [ 46.439433][ T662] ? __alloc_pages_noprof+0x35a/0x7e0 [ 46.439457][ T662] ? do_try_to_free_pages+0x1d0c/0x1ee0 [ 46.439488][ T662] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.439516][ T662] __mem_cgroup_charge+0xfc/0x420 [ 46.439535][ T662] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 46.439556][ T662] shmem_alloc_and_add_folio+0x8e4/0x10b0 [ 46.439581][ T662] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.439604][ T662] ? shmem_huge_global_enabled+0x2da/0x360 [ 46.439627][ T662] ? shmem_allowable_huge_orders+0x405/0x430 [ 46.439650][ T662] shmem_get_folio_gfp+0x5cd/0x12e0 [ 46.439673][ T662] ? shmem_get_folio+0xc0/0xc0 [ 46.439694][ T662] ? __cfi_filemap_map_pages+0x10/0x10 [ 46.439719][ T662] shmem_fault+0x17d/0x350 [ 46.439742][ T662] do_pte_missing+0x3649/0x4440 [ 46.439768][ T662] ? shmem_alloc_and_add_folio+0xd84/0x10b0 [ 46.439792][ T662] ? pte_marker_clear+0x1b0/0x1b0 [ 46.439817][ T662] ? shmem_replace_folio+0x9b0/0x9b0 [ 46.439840][ T662] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 46.439860][ T662] handle_mm_fault+0x1189/0x1ba0 [ 46.439882][ T662] ? __kasan_check_write+0x18/0x20 [ 46.439904][ T662] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.439926][ T662] ? follow_page_pte+0x2c0/0xba0 [ 46.439953][ T662] ? gup_must_unshare+0x1e0/0x1e0 [ 46.439978][ T662] ? vma_is_secretmem+0x11/0x50 [ 46.440003][ T662] ? check_vma_flags+0x337/0x3a0 [ 46.440029][ T662] __get_user_pages+0x114b/0x22d0 [ 46.440054][ T662] ? __kasan_check_write+0x18/0x20 [ 46.440076][ T662] ? populate_vma_page_range+0x220/0x220 [ 46.440108][ T662] ? __kernel_write_iter+0x6ff/0x900 [ 46.440129][ T662] get_dump_page+0x10c/0x220 [ 46.440153][ T662] ? __cfi_get_dump_page+0x10/0x10 [ 46.440176][ T662] ? __asan_memset+0x39/0x50 [ 46.440195][ T662] dump_user_range+0x18b/0xe60 [ 46.440219][ T662] ? __cfi_dump_user_range+0x10/0x10 [ 46.440239][ T662] ? elf_coredump_extra_notes_write+0x426/0x4b0 [ 46.440267][ T662] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 46.440295][ T662] ? elf_core_dump+0x23cf/0x3840 [ 46.440320][ T662] elf_core_dump+0x2d61/0x3840 [ 46.440347][ T662] ? __cfi_elf_core_dump+0x10/0x10 [ 46.440370][ T662] ? mas_next_slot+0xf01/0xfd0 [ 46.440398][ T662] ? dump_interrupted+0xf0/0xf0 [ 46.440417][ T662] ? filp_open+0x199/0x1f0 [ 46.440442][ T662] ? 0xffffffffff600000 [ 46.440458][ T662] do_coredump+0x20d2/0x3050 [ 46.440485][ T662] ? __cfi_do_coredump+0x10/0x10 [ 46.440504][ T662] ? asm_exc_page_fault+0x2b/0x30 [ 46.440532][ T662] ? __kasan_slab_free+0x6a/0x80 [ 46.440555][ T662] ? get_signal+0xa2a/0x1490 [ 46.440580][ T662] get_signal+0x11bf/0x1490 [ 46.440607][ T662] arch_do_signal_or_restart+0xbc/0x700 [ 46.440626][ T662] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 46.440646][ T662] ? __bad_area_nosemaphore+0x2fb/0x680 [ 46.440667][ T662] irqentry_exit_to_user_mode+0x4d/0xb0 [ 46.440691][ T662] irqentry_exit+0x16/0x60 [ 46.440712][ T662] exc_page_fault+0x65/0xc0 [ 46.440734][ T662] asm_exc_page_fault+0x2b/0x30 [ 46.440754][ T662] RIP: 0033:0x7f4a09053bd7 [ 46.440770][ T662] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 46.440786][ T662] RSP: 002b:00007f4a0a107120 EFLAGS: 00010202 [ 46.440804][ T662] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f4a0919e159 [ 46.440818][ T662] RDX: 00007f4a0a107140 RSI: 00007f4a0a107270 RDI: 000000000000000b [ 46.440831][ T662] RBP: 00007f4a09235024 R08: 0000000000000000 R09: 0000000000000000 [ 46.440844][ T662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 46.440856][ T662] R13: 00007f4a09426128 R14: 00007f4a09426090 R15: 00007ffd282c4f98 [ 46.440873][ T662] [ 46.489001][ T9] hid (null): report_id 49134 is invalid [ 46.505213][ T662] memory: usage 307200kB, limit 307200kB, failcnt 10517 [ 46.519206][ T9] hid (null): unknown global tag 0xd [ 46.520909][ T662] memory+swap: usage 312704kB, limit 9007199254740988kB, failcnt 0 [ 46.539019][ T316] usb 1-1: device descriptor read/64, error -71 [ 46.543145][ T662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 46.547816][ T9] hid (null): unknown global tag 0xc [ 46.552916][ T662] Memory cgroup stats for /syz1: [ 46.560139][ T9] hid (null): unknown global tag 0xc [ 46.562852][ T662] cache 313503744 [ 46.567207][ T9] hid (null): global environment stack overflow [ 46.572552][ T662] rss 827392 [ 46.572563][ T662] rss_huge 0 [ 46.572569][ T662] shmem 313503744 [ 46.779031][ T316] usb 1-1: device descriptor read/64, error -71 [ 46.784156][ T662] mapped_file 157356032 [ 46.839532][ T758] usb 4-1: USB disconnect, device number 3 [ 46.843415][ T662] dirty 0 [ 47.019194][ T316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.021012][ T662] writeback 0 [ 47.040459][ T662] workingset_refault_anon 7 [ 47.044979][ T662] workingset_refault_file 261 [ 47.049779][ T662] swap 5636096 [ 47.053160][ T662] swapcached 241664 [ 47.056980][ T662] pgpgin 200927 [ 47.060507][ T662] pgpgout 124127 [ 47.064061][ T662] pgfault 83997 [ 47.067532][ T662] pgmajfault 13 [ 47.071026][ T662] inactive_anon 117915648 [ 47.075361][ T662] active_anon 196657152 [ 47.079546][ T662] inactive_file 0 [ 47.083180][ T662] active_file 0 [ 47.086641][ T662] unevictable 0 [ 47.090124][ T662] hierarchical_memory_limit 314572800 [ 47.095508][ T662] hierarchical_memsw_limit 9223372036854771712 [ 47.101945][ T662] total_cache 313503744 [ 47.106119][ T662] total_rss 827392 [ 47.109872][ T662] total_rss_huge 0 [ 47.113604][ T662] total_shmem 313503744 [ 47.117767][ T662] total_mapped_file 157356032 [ 47.122495][ T662] total_dirty 0 [ 47.125963][ T662] total_writeback 0 [ 47.129801][ T662] total_workingset_refault_anon 7 [ 47.134834][ T662] total_workingset_refault_file 261 [ 47.140065][ T662] total_swap 5636096 [ 47.143965][ T662] total_swapcached 241664 [ 47.148302][ T662] total_pgpgin 200927 [ 47.152326][ T662] total_pgpgout 124127 [ 47.156399][ T662] total_pgfault 83997 [ 47.159012][ T316] usb 1-1: device descriptor read/64, error -71 [ 47.160399][ T662] total_pgmajfault 13 [ 47.170610][ T662] total_inactive_anon 117915648 [ 47.175468][ T662] total_active_anon 196657152 [ 47.181135][ T662] total_inactive_file 0 [ 47.185318][ T662] total_active_file 0 [ 47.189330][ T662] total_unevictable 0 [ 47.193322][ T662] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.121,pid=621,uid=0 [ 47.208082][ T662] Memory cgroup out of memory: Killed process 621 (syz.1.121) total-vm:192340kB, anon-rss:1380kB, file-rss:20608kB, shmem-rss:71680kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 47.399038][ T316] usb 1-1: device descriptor read/64, error -71 [ 47.421026][ T751] syz.1.164 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 47.509002][ T751] CPU: 1 UID: 0 PID: 751 Comm: syz.1.164 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 47.509031][ T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.509041][ T751] Call Trace: [ 47.509047][ T751] [ 47.509057][ T751] __dump_stack+0x21/0x30 [ 47.509083][ T751] dump_stack_lvl+0x140/0x1c0 [ 47.509105][ T751] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.509126][ T751] ? ___ratelimit+0x41c/0x5c0 [ 47.509144][ T751] ? __kasan_check_write+0x18/0x20 [ 47.509151][ T316] usb usb1-port1: attempt power cycle [ 47.509164][ T751] dump_stack+0x19/0x20 [ 47.509186][ T751] dump_header+0xd9/0x460 [ 47.509204][ T751] oom_kill_process+0x35d/0x640 [ 47.509232][ T751] out_of_memory+0x5d1/0xa20 [ 47.509253][ T751] ? __cfi_out_of_memory+0x10/0x10 [ 47.509273][ T751] ? mutex_lock_killable+0x97/0x1d0 [ 47.509293][ T751] ? __cfi_mutex_lock_killable+0x10/0x10 [ 47.509315][ T751] mem_cgroup_out_of_memory+0x2c5/0x390 [ 47.509335][ T751] ? css_next_descendant_pre+0x1ec/0x210 [ 47.509356][ T751] ? __kasan_check_write+0x18/0x20 [ 47.509374][ T751] ? drain_obj_stock+0xec0/0xec0 [ 47.509393][ T751] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 47.509413][ T751] try_charge_memcg+0x925/0xe10 [ 47.509436][ T751] ? static_key_count+0x45/0x70 [ 47.509458][ T751] ? __cfi_gfp_zone+0x1/0x10 [ 47.509478][ T751] ? __cfi_try_charge_memcg+0x10/0x10 [ 47.509502][ T751] ? __alloc_pages_noprof+0x35a/0x7e0 [ 47.509527][ T751] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 47.509552][ T751] __mem_cgroup_charge+0xfc/0x420 [ 47.509570][ T751] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 47.509589][ T751] folio_prealloc+0x67/0x220 [ 47.509611][ T751] do_pte_missing+0x16af/0x4440 [ 47.509635][ T751] ? pte_marker_clear+0x1b0/0x1b0 [ 47.509656][ T751] ? cgroup_rstat_updated+0x144/0x800 [ 47.509678][ T751] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 47.509696][ T751] handle_mm_fault+0x1189/0x1ba0 [ 47.509719][ T751] ? __cfi_handle_mm_fault+0x10/0x10 [ 47.509739][ T751] ? lock_vma_under_rcu+0x4cf/0x590 [ 47.509762][ T751] ? __se_sys_futex+0x13c/0x320 [ 47.509786][ T751] do_user_addr_fault+0x951/0x1230 [ 47.509812][ T751] ? __kasan_check_read+0x15/0x20 [ 47.509831][ T751] exc_page_fault+0x58/0xc0 [ 47.509851][ T751] asm_exc_page_fault+0x2b/0x30 [ 47.509869][ T751] RIP: 0033:0x7f4a090517f6 [ 47.509885][ T751] Code: 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b <41> 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 [ 47.509900][ T751] RSP: 002b:00007ffd282c4fd8 EFLAGS: 00010246 [ 47.509916][ T751] RAX: 00000000814533f5 RBX: ffffffff814533f5 RCX: 0000000000000000 [ 47.509930][ T751] RDX: 00000000000013f5 RSI: ffffffff814533f5 RDI: 0000000000000000 [ 47.509943][ T751] RBP: 0000000000000000 R08: 00007f4a09410000 R09: 00007f4a09412000 [ 47.509955][ T751] R10: 00000000814533f9 R11: 0000000000000000 R12: 00007f4a09426038 [ 47.509967][ T751] R13: 0000000000000000 R14: ffffffff814533f5 R15: 00007f4a09f55720 [ 47.509980][ T751] ? fault_in_kernel_space+0x15/0x70 [ 47.510004][ T751] ? fault_in_kernel_space+0x15/0x70 [ 47.510029][ T751] ? fault_in_kernel_space+0x15/0x70 [ 47.510054][ T751] [ 47.510084][ T751] memory: usage 297792kB, limit 307200kB, failcnt 11715 [ 47.879034][ T316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.923376][ T316] usb 1-1: device descriptor read/8, error -71 [ 48.066262][ T316] usb 1-1: device descriptor read/8, error -71 [ 48.080220][ T36] audit: type=1400 audit(1788345624.629:154): avc: denied { ioctl } for pid=763 comm="syz.2.168" path="socket:[5332]" dev="sockfs" ino=5332 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.089024][ T751] memory+swap: usage 232560kB, limit 9007199254740988kB, failcnt 0 [ 48.139090][ T36] audit: type=1400 audit(1788345624.679:155): avc: denied { create } for pid=763 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.271210][ T751] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.309026][ T316] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 48.329999][ T316] usb 1-1: device descriptor read/8, error -71 [ 48.336251][ T751] Memory cgroup stats for /syz1: [ 48.336398][ T751] cache 230772736 [ 48.367345][ T751] rss 692224 [ 48.378719][ T751] rss_huge 0 [ 48.395192][ T751] shmem 230641664 [ 48.460004][ T316] usb 1-1: device descriptor read/8, error -71 [ 48.480311][ T751] mapped_file 100573184 [ 48.491186][ T751] dirty 0 [ 48.494148][ T751] writeback 0 [ 48.535512][ T751] workingset_refault_anon 7 [ 48.551398][ T751] workingset_refault_file 294 [ 48.567433][ T36] audit: type=1400 audit(1788345625.109:156): avc: denied { create } for pid=769 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.569175][ T316] usb usb1-port1: unable to enumerate USB device [ 48.609007][ T751] swap 4608000 [ 48.640407][ T751] swapcached 102400 [ 48.644235][ T751] pgpgin 209099 [ 48.647691][ T751] pgpgout 152559 [ 48.659041][ T751] pgfault 88069 [ 48.662524][ T751] pgmajfault 14 [ 48.665982][ T751] inactive_anon 540672 [ 48.689038][ T751] active_anon 230916096 [ 48.693218][ T751] inactive_file 0 [ 48.696854][ T751] active_file 131072 [ 48.733068][ T751] unevictable 0 [ 48.736586][ T751] hierarchical_memory_limit 314572800 [ 48.739012][ T36] audit: type=1400 audit(1788345625.279:157): avc: denied { setopt } for pid=769 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.791193][ T751] hierarchical_memsw_limit 9223372036854771712 [ 48.797379][ T751] total_cache 230772736 [ 48.829003][ T751] total_rss 692224 [ 48.832757][ T751] total_rss_huge 0 [ 48.836481][ T751] total_shmem 230641664 [ 48.849008][ T751] total_mapped_file 100573184 [ 48.856438][ T751] total_dirty 0 [ 48.889023][ T751] total_writeback 0 [ 48.892886][ T751] total_workingset_refault_anon 7 [ 48.897908][ T751] total_workingset_refault_file 294 [ 48.929007][ T751] total_swap 4608000 [ 48.932930][ T751] total_swapcached 102400 [ 48.937257][ T751] total_pgpgin 209099 [ 48.973500][ T751] total_pgpgout 152559 [ 48.977601][ T751] total_pgfault 88069 [ 48.996028][ T751] total_pgmajfault 14 [ 49.009057][ T751] total_inactive_anon 540672 [ 49.013849][ T751] total_active_anon 230916096 [ 49.018800][ T751] total_inactive_file 0 [ 49.046483][ T36] audit: type=1400 audit(1788345625.589:158): avc: denied { connect } for pid=772 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.061369][ T751] total_active_file 131072 [ 49.081600][ T751] total_unevictable 0 [ 49.095061][ T36] audit: type=1400 audit(1788345625.629:159): avc: denied { append } for pid=774 comm="syz.2.171" name="usbmon5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.099092][ T751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 49.170588][ T36] audit: type=1400 audit(1788345625.629:160): avc: denied { open } for pid=774 comm="syz.2.171" path="/dev/usbmon5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.183431][ T751] ,cpuset= [ 49.227162][ T36] audit: type=1400 audit(1788345625.629:161): avc: denied { map } for pid=774 comm="syz.2.171" path="/dev/usbmon5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.269911][ T751] syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.134,pid=666,uid=0 [ 49.310093][ T751] Memory cgroup out of memory: Killed process 666 (syz.1.134) total-vm:192604kB, anon-rss:1384kB, file-rss:20608kB, shmem-rss:42112kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 49.414136][ T736] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 49.439101][ T736] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 49.456351][ T736] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 49.483662][ T736] usb 2-1: USB disconnect, device number 2 [ 49.859036][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 49.859051][ T36] audit: type=1326 audit(1788345626.399:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.171" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb9d9e159 code=0x7fc00000 [ 50.035817][ T36] audit: type=1400 audit(1788345626.579:176): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 50.239894][ T36] audit: type=1400 audit(1788345626.789:177): avc: denied { create } for pid=803 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.269013][ T736] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.279283][ T804] Zero length message leads to an empty skb [ 50.289031][ T36] audit: type=1400 audit(1788345626.809:178): avc: denied { bind } for pid=803 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.332329][ T36] audit: type=1400 audit(1788345626.809:179): avc: denied { connect } for pid=803 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.389068][ T36] audit: type=1400 audit(1788345626.809:180): avc: denied { write } for pid=803 comm="syz.1.182" path="socket:[6240]" dev="sockfs" ino=6240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.440055][ T36] audit: type=1400 audit(1788345626.839:181): avc: denied { read } for pid=803 comm="syz.1.182" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.461129][ T36] audit: type=1400 audit(1788345626.839:182): avc: denied { open } for pid=803 comm="syz.1.182" path="net:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 50.494321][ T36] audit: type=1400 audit(1788345626.839:183): avc: denied { create } for pid=803 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.539018][ T36] audit: type=1400 audit(1788345626.839:184): avc: denied { read } for pid=803 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.594642][ T736] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 50.609019][ T736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.617037][ T736] usb 3-1: Product: syz [ 50.649018][ T736] usb 3-1: Manufacturer: syz [ 50.653655][ T736] usb 3-1: SerialNumber: syz [ 50.896686][ T736] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.926373][ T736] usb 3-1: 2:1 : format type 37 is not supported yet [ 50.943128][ T736] usb 3-1: USB disconnect, device number 3 [ 50.998502][ T739] udevd[739]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.486036][ T840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.193'. [ 51.573903][ T840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.193'. [ 51.619061][ T316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 51.759318][ T853] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 51.809044][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 51.835807][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.849003][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.849020][ T736] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.896742][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.935737][ T316] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.951928][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.980462][ T316] usb 2-1: config 0 descriptor?? [ 52.029036][ T736] usb 4-1: Using ep0 maxpacket: 32 [ 52.129216][ T736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 52.176959][ T736] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 52.186603][ T736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.200699][ T838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.219025][ T736] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.249175][ T838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.291134][ T736] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 52.309055][ T736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.329007][ T736] usb 4-1: Product: ࠇ [ 52.333207][ T736] usb 4-1: Manufacturer: Ч [ 52.337726][ T736] usb 4-1: SerialNumber: syz [ 52.488383][ T297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 52.532089][ T316] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 52.561340][ T316] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 52.579192][ T297] CPU: 1 UID: 0 PID: 297 Comm: syz-executor Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 52.579226][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.579238][ T297] Call Trace: [ 52.579250][ T297] [ 52.579258][ T297] __dump_stack+0x21/0x30 [ 52.579288][ T297] dump_stack_lvl+0x140/0x1c0 [ 52.579315][ T297] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.579340][ T297] ? ___ratelimit+0x41c/0x5c0 [ 52.579360][ T297] ? __kasan_check_write+0x18/0x20 [ 52.579380][ T297] dump_stack+0x19/0x20 [ 52.579404][ T297] dump_header+0xd9/0x460 [ 52.579428][ T297] oom_kill_process+0x35d/0x640 [ 52.579450][ T297] out_of_memory+0x5d1/0xa20 [ 52.579471][ T297] ? __cfi_out_of_memory+0x10/0x10 [ 52.579491][ T297] ? mutex_lock_killable+0x97/0x1d0 [ 52.579512][ T297] ? __cfi_mutex_lock_killable+0x10/0x10 [ 52.579536][ T297] mem_cgroup_out_of_memory+0x2c5/0x390 [ 52.579557][ T297] ? css_next_descendant_pre+0x1ec/0x210 [ 52.579581][ T297] ? __kasan_check_write+0x18/0x20 [ 52.579600][ T297] ? drain_obj_stock+0xec0/0xec0 [ 52.579621][ T297] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 52.579641][ T297] try_charge_memcg+0x925/0xe10 [ 52.579668][ T297] ? __cfi_try_charge_memcg+0x10/0x10 [ 52.579693][ T297] ? __alloc_pages_noprof+0x35a/0x7e0 [ 52.579719][ T297] __mem_cgroup_charge+0xfc/0x420 [ 52.579738][ T297] ? filemap_get_entry+0x41b/0x490 [ 52.579759][ T297] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 52.579780][ T297] filemap_add_folio+0x57/0x3e0 [ 52.579808][ T297] __filemap_get_folio+0x829/0xe80 [ 52.579831][ T297] ? downgrade_write+0x470/0x470 [ 52.579860][ T297] ? __cfi___filemap_get_folio+0x10/0x10 [ 52.579881][ T297] ? down_read+0x7f/0xe0 [ 52.579902][ T297] ? __cfi_down_read+0x10/0x10 [ 52.579923][ T297] ? filemap_map_pages+0x17c0/0x1b80 [ 52.579946][ T297] ? __kasan_check_write+0x18/0x20 [ 52.579964][ T297] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 52.579988][ T297] filemap_fault+0xb8e/0x1ad0 [ 52.580013][ T297] ? __cfi_filemap_fault+0x10/0x10 [ 52.580036][ T297] ? __kasan_check_write+0x18/0x20 [ 52.580055][ T297] ? __cfi_filemap_map_pages+0x10/0x10 [ 52.580079][ T297] ? __schedule+0x149e/0x20b0 [ 52.580098][ T297] ? vma_data_pages+0x105/0x140 [ 52.580116][ T297] do_pte_missing+0x3649/0x4440 [ 52.580142][ T297] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 52.580168][ T297] ? hrtimer_start_range_ns+0x123f/0x2030 [ 52.580195][ T297] ? pte_marker_clear+0x1b0/0x1b0 [ 52.580218][ T297] ? __kasan_check_write+0x18/0x20 [ 52.580237][ T297] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 52.580269][ T297] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.580297][ T297] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 52.580317][ T297] handle_mm_fault+0x1189/0x1ba0 [ 52.580342][ T297] ? __cfi_handle_mm_fault+0x10/0x10 [ 52.580363][ T297] ? lock_vma_under_rcu+0x4cf/0x590 [ 52.580387][ T297] ? __cfi___x64_sys_wait4+0x10/0x10 [ 52.580414][ T297] do_user_addr_fault+0x951/0x1230 [ 52.580443][ T297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.580465][ T297] exc_page_fault+0x58/0xc0 [ 52.580484][ T297] asm_exc_page_fault+0x2b/0x30 [ 52.580501][ T297] RIP: 0033:0x7f213f06c014 [ 52.580516][ T297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a0 97 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 99 96 ee 00 48 01 d1 [ 52.580530][ T297] RSP: 002b:00007ffc5603c7e0 EFLAGS: 00010202 [ 52.580545][ T297] RAX: 0000001b2f124000 RBX: 000000000000007f RCX: 000000000000cb20 [ 52.580557][ T297] RDX: 00000000073ff3fc RSI: 00007ffc5603c870 RDI: 0000000000000001 [ 52.580568][ T297] RBP: 00007ffc5603c81c R08: 000000001ba7e62a R09: 4000000000000000 [ 52.580579][ T297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 52.580590][ T297] R13: 00000000000927c0 R14: 000000000000c969 R15: 00007ffc5603c870 [ 52.580602][ T297] [ 52.590254][ T316] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/0:2) [ 52.633442][ T297] memory: usage 307200kB, limit 307200kB, failcnt 48533 [ 52.813543][ T864] rust_binder: 837:864 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 52.839034][ T297] memory+swap: usage 424352kB, limit 9007199254740988kB, failcnt 0 [ 52.859075][ T864] rust_binder: 837:864 got transaction to invalid handle 1 [ 52.909002][ T297] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 52.949024][ T864] rust_binder: 837:864 transaction call to 0:0 failed ENOENT, code 0 size 88-24 [ 53.008993][ T297] Memory cgroup stats for [ 53.012933][ T316] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 53.044206][ T316] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 53.045605][ T297] /syz3 [ 53.056917][ T316] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 53.058994][ T297] : [ 53.062453][ T316] microsoft 0003:045E:07DA.0002: no inputs found [ 53.089116][ T297] cache 314421248 [ 53.092786][ T297] rss 135168 [ 53.109009][ T316] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 53.111012][ T297] rss_huge 0 [ 53.147079][ T297] shmem 314417152 [ 53.150794][ T297] mapped_file 134811648 [ 53.164771][ T297] dirty 0 [ 53.167745][ T297] writeback 0 [ 53.171135][ T297] workingset_refault_anon 9 [ 53.175676][ T297] workingset_refault_file 7393 [ 53.181446][ T297] swap 119963648 [ 53.185019][ T297] swapcached 16384 [ 53.188748][ T297] pgpgin 329610 [ 53.192720][ T868] FAULT_INJECTION: forcing a failure. [ 53.192720][ T868] name failslab, interval 1, probability 0, space 0, times 1 [ 53.205363][ T297] pgpgout 252810 [ 53.208934][ T297] pgfault 126372 [ 53.212550][ T297] pgmajfault 33 [ 53.216018][ T297] inactive_anon 48787456 [ 53.220325][ T297] active_anon 265781248 [ 53.224489][ T297] inactive_file 0 [ 53.228132][ T297] active_file 4096 [ 53.231927][ T868] CPU: 1 UID: 0 PID: 868 Comm: syz.2.197 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 53.231954][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.231965][ T868] Call Trace: [ 53.231971][ T868] [ 53.231978][ T868] __dump_stack+0x21/0x30 [ 53.232018][ T868] dump_stack_lvl+0x140/0x1c0 [ 53.232044][ T868] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.232071][ T868] ? mutex_unlock+0x90/0x240 [ 53.232095][ T868] ? pcpu_alloc_noprof+0x1440/0x1440 [ 53.232119][ T868] dump_stack+0x19/0x20 [ 53.232143][ T868] should_fail_ex+0x3c2/0x510 [ 53.232165][ T868] should_failslab+0xac/0x100 [ 53.232199][ T868] __kmalloc_cache_noprof+0x41/0x470 [ 53.232221][ T868] ? percpu_ref_init+0xe3/0x4d0 [ 53.232244][ T868] percpu_ref_init+0xe3/0x4d0 [ 53.232265][ T868] ? __cfi_css_release+0x10/0x10 [ 53.232285][ T868] cgroup_mkdir+0x26f/0x1600 [ 53.232308][ T868] ? __kasan_check_write+0x18/0x20 [ 53.232329][ T868] ? __cfi_cgroup_mkdir+0x10/0x10 [ 53.232350][ T868] kernfs_iop_mkdir+0x1bb/0x2d0 [ 53.232377][ T868] vfs_mkdir+0x591/0x810 [ 53.232402][ T868] do_mkdirat+0x240/0x530 [ 53.232427][ T868] ? __cfi_do_mkdirat+0x10/0x10 [ 53.232452][ T868] ? __kasan_check_write+0x18/0x20 [ 53.232472][ T868] ? getname_flags+0x203/0x6b0 [ 53.232493][ T868] ? __kasan_check_write+0x18/0x20 [ 53.232513][ T868] __x64_sys_mkdirat+0x8b/0xa0 [ 53.232539][ T868] x64_sys_call+0x2ba8/0x2ee0 [ 53.232558][ T868] do_syscall_64+0x57/0xf0 [ 53.232584][ T868] ? clear_bhb_loop+0x50/0xa0 [ 53.232606][ T868] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.232626][ T868] RIP: 0033:0x7f8fb9d9e159 [ 53.232643][ T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.232658][ T868] RSP: 002b:00007f8fbacb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 53.232679][ T868] RAX: ffffffffffffffda RBX: 00007f8fba025fa0 RCX: 00007f8fb9d9e159 [ 53.232692][ T868] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 53.232706][ T868] RBP: 00007f8fb9e35024 R08: 0000000000000000 R09: 0000000000000000 [ 53.232717][ T868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.232728][ T868] R13: 00007f8fba026038 R14: 00007f8fba025fa0 R15: 00007fff674490f8 [ 53.232745][ T868] [ 53.233765][ T297] unevictable 0 [ 53.473170][ T297] hierarchical_memory_limit 314572800 [ 53.478568][ T297] hierarchical_memsw_limit 9223372036854771712 [ 53.484862][ T297] total_cache 314421248 [ 53.504059][ T297] total_rss 135168 [ 53.507820][ T297] total_rss_huge 0 [ 53.511646][ T297] total_shmem 314417152 [ 53.515814][ T297] total_mapped_file 134811648 [ 53.531729][ T297] total_dirty 0 [ 53.535231][ T297] total_writeback 0 [ 53.547939][ T297] total_workingset_refault_anon 9 [ 53.553042][ T297] total_workingset_refault_file 7393 [ 53.558336][ T297] total_swap 119963648 [ 53.562445][ T297] total_swapcached 16384 [ 53.566698][ T297] total_pgpgin 329610 [ 53.570711][ T297] total_pgpgout 252810 [ 53.574794][ T297] total_pgfault 126372 [ 53.578868][ T297] total_pgmajfault 33 [ 53.582971][ T297] total_inactive_anon 48787456 [ 53.587778][ T297] total_active_anon 265781248 [ 53.592513][ T297] total_inactive_file 0 [ 53.596705][ T297] total_active_file 4096 [ 53.601033][ T297] total_unevictable 0 [ 53.605057][ T297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.141,pid=698,uid=0 [ 53.619772][ T297] Memory cgroup out of memory: Killed process 698 (syz.3.141) total-vm:194724kB, anon-rss:1284kB, file-rss:20608kB, shmem-rss:69376kB, UID:0 pgtables:368kB oom_score_adj:1000 [ 53.716809][ T736] usb 4-1: 0:1 : does not exist [ 53.723000][ T736] usb 4-1: 0:2 : does not exist [ 53.739117][ T736] usb 4-1: USB disconnect, device number 4 [ 54.355742][ T875] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 54.398221][ T316] rust_binder: 837: undelivered TRANSACTION_ERROR: 29201 [ 54.413653][ T758] usb 2-1: USB disconnect, device number 3 [ 54.445287][ T316] rust_binder: 837: undelivered death notification, 0000000000000000 [ 54.669028][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 54.673228][ T31] rust_binder: 874: undelivered TRANSACTION_ERROR: 29189 [ 54.829010][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 54.838889][ T9] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 54.858388][ T9] usb 3-1: config 2 has no interface number 0 [ 54.878591][ T9] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 54.888600][ T758] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 54.899068][ T9] usb 3-1: config 2 interface 88 has no altsetting 0 [ 54.916774][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 54.916792][ T36] audit: type=1400 audit(1788345631.459:209): avc: denied { setopt } for pid=893 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.943310][ T36] audit: type=1400 audit(1788345631.459:210): avc: denied { ioctl } for pid=893 comm="syz.3.206" path="socket:[6363]" dev="sockfs" ino=6363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.972558][ T9] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 54.981642][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.989909][ T9] usb 3-1: Product: syz [ 54.994328][ T9] usb 3-1: Manufacturer: syz [ 54.998929][ T9] usb 3-1: SerialNumber: syz [ 55.003630][ T36] audit: type=1400 audit(1788345631.539:211): avc: denied { mount } for pid=895 comm="syz.3.207" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.027014][ T881] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 55.040140][ T36] audit: type=1400 audit(1788345631.589:212): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.099009][ T758] usb 2-1: Using ep0 maxpacket: 8 [ 55.105171][ T758] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 55.130394][ T758] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 55.149032][ T758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.157072][ T758] usb 2-1: Product: syz [ 55.169058][ T758] usb 2-1: Manufacturer: syz [ 55.173699][ T758] usb 2-1: SerialNumber: syz [ 55.260704][ T9] asix 3-1:2.88: probe with driver asix failed with error -71 [ 55.269307][ T9] usb 3-1: USB disconnect, device number 4 [ 55.380540][ T887] syz.1.204 uses obsolete (PF_INET,SOCK_PACKET) [ 55.393039][ T758] usb 2-1: USB disconnect, device number 4 [ 55.467549][ T735] udevd[735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.725065][ T36] audit: type=1400 audit(1788345632.269:213): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.821395][ T909] veth1_to_hsr: entered promiscuous mode [ 55.827078][ T36] audit: type=1400 audit(1788345632.369:214): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.848197][ T909] veth1_to_hsr: entered allmulticast mode [ 55.859276][ T36] audit: type=1400 audit(1788345632.399:215): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.925186][ T36] audit: type=1400 audit(1788345632.399:216): avc: denied { read } for pid=150 comm="dhcpcd" name="n40" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.947623][ T36] audit: type=1400 audit(1788345632.399:217): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.962136][ T919] ======================================================= [ 55.962136][ T919] WARNING: The mand mount option has been deprecated and [ 55.962136][ T919] and is ignored by this kernel. Remove the mand [ 55.962136][ T919] option from the mount to silence this warning. [ 55.962136][ T919] ======================================================= [ 55.970904][ T36] audit: type=1400 audit(1788345632.399:218): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=1396 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.059102][ T758] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.125573][ T927] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 56.134482][ T927] netlink: 'syz.1.216': attribute type 21 has an invalid length. [ 56.143537][ T927] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.216'. [ 56.154428][ T927] device-mapper: table: 252:0: thin-pool: unknown target type [ 56.162082][ T927] device-mapper: ioctl: error adding target to table [ 56.219019][ T758] usb 4-1: device descriptor read/64, error -71 [ 56.268011][ T930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.297887][ T934] random: crng reseeded on system resumption [ 56.459122][ T758] usb 4-1: device descriptor read/64, error -71 [ 56.699018][ T758] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 56.839055][ T758] usb 4-1: device descriptor read/64, error -71 [ 57.099113][ T758] usb 4-1: device descriptor read/64, error -71 [ 57.210667][ T758] usb usb4-port1: attempt power cycle [ 57.489058][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.549040][ T758] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 57.590065][ T758] usb 4-1: device descriptor read/8, error -71 [ 57.660134][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.672947][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 57.682426][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.690820][ T9] usb 3-1: Product: syz [ 57.695086][ T9] usb 3-1: Manufacturer: syz [ 57.699988][ T9] usb 3-1: SerialNumber: syz [ 57.709881][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 57.729040][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 57.736805][ T758] usb 4-1: device descriptor read/8, error -71 [ 57.879025][ T316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.921196][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.927833][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.934100][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.940714][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.946962][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.953569][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.959835][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.966529][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.972766][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.979367][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.985617][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 57.989026][ T758] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.992220][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 57.992396][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 58.012337][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 58.019005][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 58.025614][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 58.029026][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 58.031845][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 58.037983][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.043386][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 58.044265][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 58.066889][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 58.075909][ T31] usb 3-1: USB disconnect, device number 5 [ 58.079914][ T758] usb 4-1: device descriptor read/8, error -71 [ 58.081775][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 58.097788][ T316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.110766][ T316] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.121318][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.139153][ T316] usb 2-1: config 0 descriptor?? [ 58.220020][ T758] usb 4-1: device descriptor read/8, error -71 [ 58.339069][ T758] usb usb4-port1: unable to enumerate USB device [ 58.547684][ T316] HID 045e:07da: Invalid code 65791 type 1 [ 58.560888][ T316] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5 [ 58.590207][ T316] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 58.763586][ T949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.788891][ T949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.814863][ T736] usb 2-1: USB disconnect, device number 5 [ 58.860960][ T961] process 'syz.2.227' launched './file0' with NULL argv: empty string added [ 59.180602][ T70] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 59.199034][ T31] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 59.330395][ T70] usb 3-1: unable to get BOS descriptor or descriptor too short [ 59.347711][ T70] usb 3-1: not running at top speed; connect to a high speed hub [ 59.358919][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 59.367100][ T70] usb 3-1: config index 0 descriptor too short (expected 13031, got 139) [ 59.375818][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 59.385744][ T70] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.396237][ T70] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.405581][ T70] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 59.416602][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.427027][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.438440][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 59.447633][ T70] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice=20.40 [ 59.459017][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.467115][ T70] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.475437][ T31] usb 4-1: Product: syz [ 59.479833][ T70] usb 3-1: Product: syz [ 59.484121][ T31] usb 4-1: Manufacturer: syz [ 59.488860][ T70] usb 3-1: Manufacturer: syz [ 59.493824][ T31] usb 4-1: SerialNumber: syz [ 59.498475][ T70] usb 3-1: SerialNumber: syz [ 59.579039][ T758] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 59.708823][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.719842][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.729048][ T758] usb 2-1: device descriptor read/64, error -71 [ 59.735454][ T956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.744524][ T956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.969026][ T758] usb 2-1: device descriptor read/64, error -71 [ 60.209052][ T758] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 60.359018][ T758] usb 2-1: device descriptor read/64, error -71 [ 60.425826][ T70] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 60.444437][ T70] usb 3-1: 1:1 : sample bitwidth 190 in over sample bytes 3 [ 60.452103][ T70] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 60.461537][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 60.461552][ T36] audit: type=1400 audit(1788345637.009:243): avc: denied { read } for pid=975 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.487932][ T70] usb 3-1: unit 2 not found! [ 60.492740][ T70] usb 3-1: unit 0 not found! [ 60.540444][ T70] usb 3-1: USB disconnect, device number 6 [ 60.548372][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 60.561130][ T31] usb 4-1: USB disconnect, device number 9 [ 60.577510][ T740] udevd[740]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 60.634447][ T740] udevd[740]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.656394][ T36] audit: type=1400 audit(1788345637.199:244): avc: denied { ioctl } for pid=975 comm="syz.2.232" path="socket:[6760]" dev="sockfs" ino=6760 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.685327][ T758] usb 2-1: device descriptor read/64, error -71 [ 60.809342][ T758] usb usb2-port1: attempt power cycle [ 60.939838][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 61.099068][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 61.105443][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.115888][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.135818][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 61.145376][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.153584][ T31] usb 4-1: Product: syz [ 61.157891][ T31] usb 4-1: Manufacturer: syz [ 61.159046][ T758] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 61.162756][ T31] usb 4-1: SerialNumber: syz [ 61.199976][ T758] usb 2-1: device descriptor read/8, error -71 [ 61.339996][ T758] usb 2-1: device descriptor read/8, error -71 [ 61.383748][ T31] usb 4-1: 0:1 : does not exist [ 61.388753][ T31] usb 4-1: unit 6 not found! [ 61.399198][ T31] usb 4-1: USB disconnect, device number 10 [ 61.420155][ T739] udevd[739]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 61.589036][ T734] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 61.599874][ T758] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 61.629971][ T758] usb 2-1: device descriptor read/8, error -71 [ 61.719029][ T734] usb 3-1: device descriptor read/64, error -71 [ 61.759974][ T758] usb 2-1: device descriptor read/8, error -71 [ 61.879080][ T758] usb usb2-port1: unable to enumerate USB device [ 61.959050][ T734] usb 3-1: device descriptor read/64, error -71 [ 62.149048][ T758] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 62.199033][ T734] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 62.319014][ T758] usb 4-1: Using ep0 maxpacket: 16 [ 62.329029][ T734] usb 3-1: device descriptor read/64, error -71 [ 62.335842][ T758] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 62.359004][ T758] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.378732][ T758] usb 4-1: config 1 has no interface number 0 [ 62.384918][ T758] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 62.398204][ T758] usb 4-1: config 1 interface 105 has no altsetting 0 [ 62.406554][ T758] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 62.416404][ T758] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.424915][ T758] usb 4-1: Product: syz [ 62.429320][ T758] usb 4-1: Manufacturer: syz [ 62.433920][ T758] usb 4-1: SerialNumber: syz [ 62.491355][ T36] audit: type=1400 audit(1788345639.039:245): avc: denied { ioctl } for pid=993 comm="syz.1.236" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.539017][ T36] audit: type=1400 audit(1788345639.039:246): avc: denied { bind } for pid=993 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.579034][ T734] usb 3-1: device descriptor read/64, error -71 [ 62.691097][ T734] usb usb3-port1: attempt power cycle [ 62.728503][ T758] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 62.935419][ T990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.954324][ T990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.039039][ T734] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 63.060127][ T734] usb 3-1: device descriptor read/8, error -71 [ 63.190168][ T734] usb 3-1: device descriptor read/8, error -71 [ 63.429035][ T734] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 63.450100][ T734] usb 3-1: device descriptor read/8, error -71 [ 63.580106][ T734] usb 3-1: device descriptor read/8, error -71 [ 63.649053][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 63.689135][ T734] usb usb3-port1: unable to enumerate USB device [ 63.819023][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 63.825688][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 63.834465][ T31] usb 2-1: config 252 has an invalid interface number: 223 but max is 0 [ 63.843077][ T31] usb 2-1: config 252 has an invalid interface association descriptor of length 2, skipping [ 63.854048][ T31] usb 2-1: config 252 has no interface number 0 [ 63.863549][ T31] usb 2-1: New USB device found, idVendor=1a86, idProduct=5a2f, bcdDevice=c6.a6 [ 63.872938][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.881196][ T31] usb 2-1: Product: NJ䓐⒝㔒ퟓ仄᜷憳⬌邨﬩곸왼혱ꙣ䇝ᧉ⊌ﰮՃ觞뽠㴋첓㷹븂ᛷφප葃唀㩓긛甹嬶Ĉ矾˰룳䝱寎ᗥ䷒놇蒚謵꩑峢Ⴆẵ媼珑讌쬷䗬 [ 63.902065][ T31] usb 2-1: Manufacturer: Ч [ 63.906687][ T31] usb 2-1: SerialNumber: 防쇭ḑ酖뫅挟ᥗﭲ⫀妩ᯕ幧챥혐袺汳ὼ爢ண⭫囅훃浔휇矚⢛뿞쮫캨Ţ〿凶⚡稫灴准❝ꑕ丒伨潮 [ 64.131823][ T31] usb 2-1: USB disconnect, device number 10 [ 64.450967][ T36] audit: type=1400 audit(1788345640.999:247): avc: denied { cmd } for pid=1008 comm="iou-wrk-1009" path="socket:[6060]" dev="sockfs" ino=6060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.751459][ T36] audit: type=1400 audit(1788345641.299:248): avc: denied { read write } for pid=1015 comm="syz.1.241" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.811605][ T36] audit: type=1400 audit(1788345641.299:249): avc: denied { open } for pid=1015 comm="syz.1.241" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.859034][ T36] audit: type=1400 audit(1788345641.299:250): avc: denied { mounton } for pid=1017 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.888925][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.901255][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.917555][ T734] usb 4-1: USB disconnect, device number 11 [ 64.923589][ T36] audit: type=1400 audit(1788345641.329:251): avc: denied { ioctl } for pid=1015 comm="syz.1.241" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 64.957838][ T1017] bridge_slave_0: entered allmulticast mode [ 64.966202][ T36] audit: type=1400 audit(1788345641.339:252): avc: denied { wake_alarm } for pid=1015 comm="syz.1.241" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.979407][ T1017] bridge_slave_0: entered promiscuous mode [ 65.000437][ T46] bridge_slave_1: left allmulticast mode [ 65.006270][ T46] bridge_slave_1: left promiscuous mode [ 65.012202][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.020344][ T46] bridge_slave_0: left allmulticast mode [ 65.029166][ T46] bridge_slave_0: left promiscuous mode [ 65.035888][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.093920][ T1024] random: crng reseeded on system resumption [ 65.100045][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.114848][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.131314][ T1017] bridge_slave_1: entered allmulticast mode [ 65.137695][ T1017] bridge_slave_1: entered promiscuous mode [ 65.154702][ T46] veth1_macvtap: left promiscuous mode [ 65.169045][ T46] veth0_vlan: left promiscuous mode [ 65.219677][ T1035] rust_binder: 1034:1035 got transaction to invalid handle 1 [ 65.231775][ T1035] rust_binder: 1034:1035 transaction async to 0:0 failed ENOENT, code 0 size 80-24 [ 65.238112][ T1040] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 65.319593][ T1044] sd 0:0:1:0: PR command failed: 1026 [ 65.325038][ T1044] sd 0:0:1:0: Sense Key : 0x5 [current] [ 65.335351][ T1044] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 65.341255][ T1044] netlink: 'syz.1.249': attribute type 16 has an invalid length. [ 65.349201][ T1044] netlink: 'syz.1.249': attribute type 3 has an invalid length. [ 65.357017][ T1044] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.249'. [ 65.466112][ T1049] FAULT_INJECTION: forcing a failure. [ 65.466112][ T1049] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 65.469092][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.486369][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.493674][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.495798][ T1049] CPU: 1 UID: 0 PID: 1049 Comm: syz.3.250 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 65.495828][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.495840][ T1049] Call Trace: [ 65.495847][ T1049] [ 65.495854][ T1049] __dump_stack+0x21/0x30 [ 65.495901][ T1049] dump_stack_lvl+0x140/0x1c0 [ 65.495926][ T1049] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.495951][ T1049] ? futex_wait+0x2b8/0x7c0 [ 65.495970][ T1049] dump_stack+0x19/0x20 [ 65.495993][ T1049] should_fail_ex+0x3c2/0x510 [ 65.496015][ T1049] should_fail_alloc_page+0xec/0x110 [ 65.496038][ T1049] __alloc_pages_noprof+0x1c0/0x7e0 [ 65.496064][ T1049] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 65.496089][ T1049] ? do_futex+0x32a/0x510 [ 65.496115][ T1049] ___kmalloc_large_node+0x81/0x220 [ 65.496134][ T1049] ? security_capable+0x44/0x130 [ 65.496156][ T1049] __kmalloc_large_noprof+0x1e/0xe0 [ 65.496174][ T1049] ksys_ioperm+0x174/0x7d0 [ 65.496195][ T1049] __x64_sys_ioperm+0x7e/0x90 [ 65.496213][ T1049] x64_sys_call+0x2129/0x2ee0 [ 65.496229][ T1049] do_syscall_64+0x57/0xf0 [ 65.496255][ T1049] ? clear_bhb_loop+0x50/0xa0 [ 65.496276][ T1049] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.496297][ T1049] RIP: 0033:0x7f213f19e159 [ 65.496317][ T1049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.496332][ T1049] RSP: 002b:00007f213dbf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 65.496359][ T1049] RAX: ffffffffffffffda RBX: 00007f213f425fa0 RCX: 00007f213f19e159 [ 65.496373][ T1049] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 65.496386][ T1049] RBP: 00007f213f235024 R08: 0000000000000000 R09: 0000000000000000 [ 65.496398][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.496419][ T1049] R13: 00007f213f426038 R14: 00007f213f425fa0 R15: 00007ffc5603c478 [ 65.496436][ T1049] [ 65.664279][ T1062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.669002][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.704737][ T1017] veth0_vlan: entered promiscuous mode [ 65.726633][ T1062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.756180][ T1017] veth1_macvtap: entered promiscuous mode [ 65.767108][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 65.767123][ T36] audit: type=1400 audit(1788345642.319:258): avc: denied { read } for pid=1064 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.853361][ T36] audit: type=1400 audit(1788345642.319:259): avc: denied { open } for pid=1064 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.899011][ T734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.912713][ T36] audit: type=1400 audit(1788345642.319:260): avc: denied { getattr } for pid=1064 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.939076][ T36] audit: type=1400 audit(1788345642.379:261): avc: denied { mount } for pid=1017 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.962186][ T36] audit: type=1400 audit(1788345642.379:262): avc: denied { mounton } for pid=1017 comm="syz-executor" path="/root/syzkaller.5pkJ1j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.990517][ T36] audit: type=1400 audit(1788345642.399:263): avc: denied { write } for pid=1063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.013879][ T36] audit: type=1400 audit(1788345642.399:264): avc: denied { add_name } for pid=1063 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.037873][ T36] audit: type=1400 audit(1788345642.399:265): avc: denied { create } for pid=1063 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.071653][ T36] audit: type=1400 audit(1788345642.399:266): avc: denied { write } for pid=1063 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.veth1_to_hsr.ipv4ll" dev="tmpfs" ino=1681 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.098683][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.107714][ T36] audit: type=1400 audit(1788345642.399:267): avc: denied { append } for pid=1063 comm="dhcpcd-run-hook" name="resolv.conf.veth1_to_hsr.ipv4ll" dev="tmpfs" ino=1681 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.134019][ T734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.142850][ T734] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 66.157533][ T734] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 66.167118][ T734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.175620][ T734] usb 2-1: Product: syz [ 66.180040][ T734] usb 2-1: Manufacturer: syz [ 66.186123][ T734] usb 2-1: SerialNumber: syz [ 66.249088][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 66.255797][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.267184][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.288931][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 66.295913][ T45] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 66.305627][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.319080][ T45] usb 5-1: config 0 descriptor?? [ 66.403747][ T734] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 66.423032][ T734] usb 2-1: USB disconnect, device number 11 [ 66.433274][ T735] udevd[735]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.519036][ T885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 66.689062][ T885] usb 3-1: Using ep0 maxpacket: 16 [ 66.695397][ T885] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 66.706573][ T885] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 66.720328][ T885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 66.726957][ T885] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 66.736126][ T885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.756576][ T885] usb 3-1: config 0 descriptor?? [ 66.921603][ T1088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.124652][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 67.131284][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.142941][ T45] usb 5-1: USB disconnect, device number 2 [ 67.197306][ T885] lg-g15 0003:046D:C227.0004: ignoring exceeding usage max [ 67.216844][ T885] lg-g15 0003:046D:C227.0004: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0 [ 67.453781][ T758] usb 3-1: USB disconnect, device number 11 [ 67.684720][ T1120] FAULT_INJECTION: forcing a failure. [ 67.684720][ T1120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 67.700018][ T1120] CPU: 1 UID: 0 PID: 1120 Comm: syz.4.266 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 67.700055][ T1120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.700069][ T1120] Call Trace: [ 67.700076][ T1120] [ 67.700084][ T1120] __dump_stack+0x21/0x30 [ 67.700118][ T1120] dump_stack_lvl+0x140/0x1c0 [ 67.700145][ T1120] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.700181][ T1120] ? futex_wait+0x2b8/0x7c0 [ 67.700202][ T1120] dump_stack+0x19/0x20 [ 67.700228][ T1120] should_fail_ex+0x3c2/0x510 [ 67.700252][ T1120] should_fail_alloc_page+0xec/0x110 [ 67.700277][ T1120] __alloc_pages_noprof+0x1c0/0x7e0 [ 67.700306][ T1120] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 67.700333][ T1120] ? do_futex+0x32a/0x510 [ 67.700359][ T1120] ___kmalloc_large_node+0x81/0x220 [ 67.700380][ T1120] ? security_capable+0x44/0x130 [ 67.700402][ T1120] __kmalloc_large_noprof+0x1e/0xe0 [ 67.700423][ T1120] ksys_ioperm+0x174/0x7d0 [ 67.700444][ T1120] __x64_sys_ioperm+0x7e/0x90 [ 67.700464][ T1120] x64_sys_call+0x2129/0x2ee0 [ 67.700482][ T1120] do_syscall_64+0x57/0xf0 [ 67.700509][ T1120] ? clear_bhb_loop+0x50/0xa0 [ 67.700531][ T1120] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.700552][ T1120] RIP: 0033:0x7f8945f9e159 [ 67.700570][ T1120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.700588][ T1120] RSP: 002b:00007f8946ea0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 67.700610][ T1120] RAX: ffffffffffffffda RBX: 00007f8946225fa0 RCX: 00007f8945f9e159 [ 67.700626][ T1120] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 67.700639][ T1120] RBP: 00007f8946035024 R08: 0000000000000000 R09: 0000000000000000 [ 67.700652][ T1120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.700665][ T1120] R13: 00007f8946226038 R14: 00007f8946225fa0 R15: 00007ffcdf6ce2a8 [ 67.700680][ T1120] [ 68.237680][ T1128] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 68.259212][ T1128] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 68.290741][ T1128] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 68.311882][ T1128] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 68.329268][ T1128] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 68.361325][ T1130] kvm: kvm [1127]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 68.759033][ T758] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 68.879025][ T885] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 68.919011][ T758] usb 2-1: Using ep0 maxpacket: 32 [ 68.925501][ T758] usb 2-1: unable to get BOS descriptor or descriptor too short [ 68.934108][ T758] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 68.949009][ T758] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.959540][ T758] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.970418][ T758] usb 2-1: string descriptor 0 read error: -22 [ 68.976634][ T758] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.995856][ T758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.019982][ T758] usb 2-1: 0:2 : does not exist [ 69.049011][ T885] usb 3-1: Using ep0 maxpacket: 8 [ 69.058477][ T885] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 69.077709][ T885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.097893][ T885] usb 3-1: Product: syz [ 69.102107][ T885] usb 3-1: Manufacturer: syz [ 69.106706][ T885] usb 3-1: SerialNumber: syz [ 69.221457][ T1138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.239141][ T1138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.259780][ T758] usb 2-1: USB disconnect, device number 12 [ 69.330584][ T885] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 69.349864][ T885] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 69.370006][ T885] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 69.390212][ T885] usb 3-1: USB disconnect, device number 12 [ 69.857335][ T1148] FAULT_INJECTION: forcing a failure. [ 69.857335][ T1148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.889027][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: syz.1.276 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 69.889064][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.889078][ T1148] Call Trace: [ 69.889085][ T1148] [ 69.889093][ T1148] __dump_stack+0x21/0x30 [ 69.889128][ T1148] dump_stack_lvl+0x140/0x1c0 [ 69.889155][ T1148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 69.889182][ T1148] ? futex_wait+0x2b8/0x7c0 [ 69.889202][ T1148] dump_stack+0x19/0x20 [ 69.889226][ T1148] should_fail_ex+0x3c2/0x510 [ 69.889250][ T1148] should_fail_alloc_page+0xec/0x110 [ 69.889275][ T1148] __alloc_pages_noprof+0x1c0/0x7e0 [ 69.889305][ T1148] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 69.889348][ T1148] ? do_futex+0x32a/0x510 [ 69.889378][ T1148] ___kmalloc_large_node+0x81/0x220 [ 69.889399][ T1148] ? security_capable+0x44/0x130 [ 69.889423][ T1148] __kmalloc_large_noprof+0x1e/0xe0 [ 69.889443][ T1148] ksys_ioperm+0x174/0x7d0 [ 69.889463][ T1148] __x64_sys_ioperm+0x7e/0x90 [ 69.889482][ T1148] x64_sys_call+0x2129/0x2ee0 [ 69.889501][ T1148] do_syscall_64+0x57/0xf0 [ 69.889527][ T1148] ? clear_bhb_loop+0x50/0xa0 [ 69.889550][ T1148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.889572][ T1148] RIP: 0033:0x7f4a0919e159 [ 69.889590][ T1148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.889608][ T1148] RSP: 002b:00007f4a0a147028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 69.889630][ T1148] RAX: ffffffffffffffda RBX: 00007f4a09425fa0 RCX: 00007f4a0919e159 [ 69.889645][ T1148] RDX: 000000000000163f RSI: 0000000000000003 RDI: 0000000000000001 [ 69.889658][ T1148] RBP: 00007f4a09235024 R08: 0000000000000000 R09: 0000000000000000 [ 69.889672][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.889684][ T1148] R13: 00007f4a09426038 R14: 00007f4a09425fa0 R15: 00007ffd282c4f98 [ 69.889701][ T1148] [ 70.216288][ T1159] bridge0: port 3(veth0_to_bridge) entered blocking state [ 70.233835][ T1159] bridge0: port 3(veth0_to_bridge) entered disabled state [ 70.259101][ T1159] veth0_to_bridge: entered allmulticast mode [ 70.265544][ T1159] veth0_to_bridge: entered promiscuous mode [ 70.271752][ T1159] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 70.284186][ T1159] bridge0: port 3(veth0_to_bridge) entered blocking state [ 70.291336][ T1159] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 70.349028][ T758] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 70.479023][ T758] usb 2-1: device descriptor read/64, error -71 [ 70.719039][ T758] usb 2-1: device descriptor read/64, error -71 [ 70.959064][ T758] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 71.069017][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 71.099164][ T758] usb 2-1: device descriptor read/64, error -71 [ 71.219014][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 71.226499][ T9] usb 3-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 71.239012][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.257200][ T9] usb 3-1: Product: syz [ 71.267303][ T9] usb 3-1: Manufacturer: syz [ 71.271968][ T9] usb 3-1: SerialNumber: syz [ 71.339166][ T758] usb 2-1: device descriptor read/64, error -71 [ 71.459146][ T758] usb usb2-port1: attempt power cycle [ 71.499997][ T1173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.527453][ T1173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.552296][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 71.569585][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.589031][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.596577][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.616761][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.637019][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.644521][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.659210][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.669239][ T9] usb 3-1: unable to issue vendor read request (ret = -71) [ 71.689994][ T9] usb 3-1: USB disconnect, device number 13 [ 71.711743][ T735] udevd[735]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.809100][ T758] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 71.830002][ T758] usb 2-1: device descriptor read/8, error -71 [ 71.960043][ T758] usb 2-1: device descriptor read/8, error -71 [ 72.199020][ T758] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 72.219462][ T1177] syz.2.288: attempt to access beyond end of device [ 72.219462][ T1177] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 72.249538][ T758] usb 2-1: device descriptor read/8, error -71 [ 72.262659][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 72.262675][ T36] audit: type=1400 audit(1788345648.809:287): avc: denied { map } for pid=1176 comm="syz.2.288" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.269098][ T1177] exFAT-fs (loop2): unable to read boot sector [ 72.319216][ T1177] exFAT-fs (loop2): failed to read boot sector [ 72.324052][ T1178] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 72.325400][ T1178] rust_binder: Failure in copy_transaction_data: ENOSPC [ 72.333492][ T36] audit: type=1400 audit(1788345648.869:288): avc: denied { write } for pid=1176 comm="syz.2.288" name="igmp" dev="proc" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.335589][ T1177] exFAT-fs (loop2): failed to recognize exfat type [ 72.340774][ T36] audit: type=1400 audit(1788345648.869:289): avc: denied { bind } for pid=1176 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.390159][ T758] usb 2-1: device descriptor read/8, error -71 [ 72.399012][ T1178] rust_binder: 1176:1178 transaction async to 1176:0 failed ENOSPC, code 0 size 0-24 [ 72.428004][ T316] rust_binder: 1176: undelivered TRANSACTION_ERROR: 29201 [ 72.499151][ T758] usb usb2-port1: unable to enumerate USB device [ 73.021576][ T1191] random: crng reseeded on system resumption [ 73.079034][ T758] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 73.112068][ T1193] 9pnet_fd: Insufficient options for proto=fd [ 73.230118][ T758] usb 3-1: Using ep0 maxpacket: 8 [ 73.240133][ T758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 73.258390][ T758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.278724][ T758] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.299026][ T758] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.317184][ T758] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.336436][ T758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.346528][ T758] usb 3-1: Product: syz [ 73.350883][ T758] usb 3-1: Manufacturer: syz [ 73.355489][ T758] usb 3-1: SerialNumber: syz [ 73.573241][ T1189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.599209][ T1189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.612238][ T758] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 73.629939][ T758] usb 3-1: USB disconnect, device number 14 [ 73.999493][ T36] audit: type=1400 audit(1788345650.549:290): avc: denied { write } for pid=1205 comm="syz.1.297" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.039025][ T36] audit: type=1400 audit(1788345650.579:291): avc: denied { connect } for pid=1205 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.109269][ T1209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.298'. [ 74.160700][ T36] audit: type=1400 audit(1788345650.709:292): avc: denied { write } for pid=1212 comm="syz.1.300" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.170057][ T1213] rust_binder: 1212:1213 error while translating object: EINVAL [ 74.200605][ T1215] random: crng reseeded on system resumption [ 74.219119][ T1213] rust_binder: Failure in copy_transaction_data: EINVAL [ 74.219148][ T1213] rust_binder: 1212:1213 transaction async to 1212:0 failed EINVAL, code 0 size 112-24 [ 74.236182][ T36] audit: type=1400 audit(1788345650.709:293): avc: denied { nlmsg_read } for pid=1212 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.274839][ T9] rust_binder: 1212: undelivered TRANSACTION_ERROR: 29201 [ 74.312943][ T36] audit: type=1400 audit(1788345650.859:294): avc: denied { read write } for pid=1218 comm="syz.1.302" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.324058][ T1224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.366052][ T36] audit: type=1400 audit(1788345650.859:295): avc: denied { open } for pid=1218 comm="syz.1.302" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 74.379234][ T1224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.496500][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.525333][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.801210][ T1235] bridge0: port 3(veth0_to_bridge) entered disabled state [ 74.808430][ T1235] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.815655][ T1235] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.829026][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 74.853098][ T1235] bridge0: entered allmulticast mode [ 74.868452][ T1236] bridge0: port 3(veth0_to_bridge) entered blocking state [ 74.875634][ T1236] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 74.883105][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.890169][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.897450][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.904518][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.932340][ T1236] bridge0: entered promiscuous mode [ 74.971551][ T45] rust_binder: 1234: undelivered death notification, 0000000000000000 [ 74.979240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 74.991764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.003870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.015890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.028000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.040042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.052142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.064160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.076251][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.088265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 75.119453][ T9] usb 2-1: device descriptor read/64, error -71 [ 78.139050][ T758] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 78.146723][ T9] usb 2-1: device descriptor read/64, error -71 [ 79.978998][ C1] net_ratelimit: 179692 callbacks suppressed [ 79.979020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.979040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.985101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 79.996955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.008975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.020889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.032816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.044654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.056564][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 80.068487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.989011][ C1] net_ratelimit: 255508 callbacks suppressed [ 84.989033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.989058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 84.995083][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.007063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.019782][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.031610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.043588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.055516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.067503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 85.079448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.999017][ C0] net_ratelimit: 254936 callbacks suppressed [ 89.999036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.999044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 89.999105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 90.005077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.017094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.029075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.041128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.053032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.065024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 90.076864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.492453][ C1] sched: DL replenish lagged too much [ 95.009001][ C1] net_ratelimit: 246130 callbacks suppressed [ 95.009021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.009042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.015093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.027065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.039020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.050814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.062785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.074754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.086761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 95.098611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.019021][ C1] net_ratelimit: 176320 callbacks suppressed [ 100.019042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 100.019051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.019096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.025130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.037027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.048934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 100.061416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.073473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.085563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 100.097376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.028997][ C1] net_ratelimit: 172968 callbacks suppressed [ 105.029018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.029043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.035071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.047122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.059061][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.070887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.083051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.095113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.107432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 105.119373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.039042][ C1] net_ratelimit: 174264 callbacks suppressed [ 110.039063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.039091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.045163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.057128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.069059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.080893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.092885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.105471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.117294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 110.129139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.049002][ C0] net_ratelimit: 162432 callbacks suppressed [ 115.049030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.049061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.055072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.067007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.078979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.090880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.102680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.114671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.126768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.138622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.059038][ C1] net_ratelimit: 167178 callbacks suppressed [ 120.059059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.059118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.065129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.077023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.089002][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.100813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.112724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.124574][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.136548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.148606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.069010][ C1] net_ratelimit: 168329 callbacks suppressed [ 125.069030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.069070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.075086][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 125.087065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.098987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.110904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.122799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.134718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.146684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 125.158823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.078998][ C0] net_ratelimit: 172319 callbacks suppressed [ 130.079018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.079063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.085067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.097008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.108943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.120866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.132683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.144691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.156675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.168509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.089027][ C1] net_ratelimit: 172949 callbacks suppressed [ 135.089048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.089077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.095131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.106997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.118978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 135.130847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.142749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.154664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.166692][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 135.178722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.249890][ T1252] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.256970][ T1252] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.280220][ T1252] bridge_slave_0: entered allmulticast mode [ 138.309612][ T1252] bridge_slave_0: entered promiscuous mode [ 138.779610][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.786678][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.810094][ T1253] bridge_slave_0: entered allmulticast mode [ 138.839457][ T1253] bridge_slave_0: entered promiscuous mode [ 138.949328][ T1252] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.956389][ T1252] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.990119][ T1252] bridge_slave_1: entered allmulticast mode [ 139.020517][ T1252] bridge_slave_1: entered promiscuous mode [ 139.480411][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.487477][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.520440][ T1253] bridge_slave_1: entered allmulticast mode [ 139.550552][ T1253] bridge_slave_1: entered promiscuous mode [ 139.979136][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.986200][ T1254] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.019306][ T1254] bridge_slave_0: entered allmulticast mode [ 140.049397][ T1254] bridge_slave_0: entered promiscuous mode [ 140.098997][ C0] net_ratelimit: 166468 callbacks suppressed [ 140.099017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.099050][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.105061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.117092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.129211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.141090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.152994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.164878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.176828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.188723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.252679][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.429303][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.436422][ T1251] bridge_slave_0: entered allmulticast mode [ 140.489709][ T1251] bridge_slave_0: entered promiscuous mode [ 140.641283][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.648355][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.759536][ T1251] bridge_slave_1: entered allmulticast mode [ 140.800267][ T1251] bridge_slave_1: entered promiscuous mode [ 141.051186][ T1254] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.058253][ T1254] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.100321][ T1254] bridge_slave_1: entered allmulticast mode [ 141.130024][ T1254] bridge_slave_1: entered promiscuous mode [ 145.109032][ C1] net_ratelimit: 165750 callbacks suppressed [ 145.109052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 145.109101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.115132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.126996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.138918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 145.150849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.162767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.174695][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.186702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.198770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.119023][ C1] net_ratelimit: 174409 callbacks suppressed [ 150.119045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.119118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.125101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.137090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.149051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.160874][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.172787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.184608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.196578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 150.208649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.129020][ C1] net_ratelimit: 165629 callbacks suppressed [ 155.129039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.129052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.129096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.135124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.146994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.158929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.171003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.182836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 155.194796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 155.206703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.138998][ C0] net_ratelimit: 169654 callbacks suppressed [ 160.139019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.139049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.145187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.157092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.168955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.180886][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.192807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.204727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.216635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.228605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.148994][ C0] net_ratelimit: 168791 callbacks suppressed [ 165.149014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.149016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.149081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.155220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.167092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.178954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.190928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.202796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.214785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.226612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.159014][ C1] net_ratelimit: 158845 callbacks suppressed [ 170.159034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.159103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.165088][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.177208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.189015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.200918][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.212750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.224682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.236675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.248633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.168994][ C0] net_ratelimit: 144497 callbacks suppressed [ 175.169015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.169048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.175058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.187097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.199087][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.210907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 175.222999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.234746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 175.246686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.258696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.178994][ C0] net_ratelimit: 144436 callbacks suppressed [ 180.179015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.179045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:14:8b:f8:e3:60, vlan:0) [ 180.185061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.197090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.209212][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.221035][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.233172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.244895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.256857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.268776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.189028][ C1] net_ratelimit: 143116 callbacks suppressed [ 185.189048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.189107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.195093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.207265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.219023][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.230869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.242757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.254941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.266907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.279039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.199031][ C1] net_ratelimit: 147459 callbacks suppressed [ 190.199052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.199092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.205119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.217012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.228892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.240853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.252810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.264975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.276786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.288825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.721414][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.728480][ T1268] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.759344][ T1268] bridge_slave_0: entered allmulticast mode [ 192.789918][ T1268] bridge_slave_0: entered promiscuous mode [ 194.065737][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.209002][ C0] net_ratelimit: 147411 callbacks suppressed [ 195.209022][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.209025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.209075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.215120][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.227184][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.239282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.251020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.263120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.274917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.286748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.579109][ T1268] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.094270][ T1268] bridge_slave_1: entered allmulticast mode [ 196.330522][ T1268] bridge_slave_1: entered promiscuous mode [ 200.219035][ C1] net_ratelimit: 146361 callbacks suppressed [ 200.219056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.219077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.225132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.237236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.248986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.260941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.272849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.284675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.296658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.308719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.229033][ C1] net_ratelimit: 151839 callbacks suppressed [ 205.229053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.229109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.235120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.247096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.259051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.270868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.282879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.295045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.306850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.318959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.239020][ C1] net_ratelimit: 143672 callbacks suppressed [ 210.239040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.239120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.245119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.257094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.269053][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.280863][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.292847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.304924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.316774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.328778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.980797][ T37] INFO: task syz.1.308:1239 blocked for more than 122 seconds. [ 211.988426][ T37] Not tainted syzkaller #0 [ 212.041416][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 212.070962][ T36] audit: type=1400 audit(1788345788.619:296): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1519]" dev="pipefs" ino=1519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 212.386140][ T37] task:syz.1.308 state:D stack:0 pid:1239 tgid:1239 ppid:294 flags:0x00004004 [ 212.570902][ T37] Call Trace: [ 212.574251][ T37] [ 212.577193][ T37] __schedule+0x1496/0x20b0 [ 212.610743][ T37] ? __sched_text_start+0x10/0x10 [ 212.615827][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 212.620898][ T37] ? __kasan_check_write+0x18/0x20 [ 212.626019][ T37] ? rcu_segcblist_entrain+0x69/0x2f0 [ 212.631536][ T37] ? _raw_spin_unlock+0x45/0x60 [ 212.636490][ T37] ? rcu_barrier_entrain+0x375/0x530 [ 212.641845][ T37] schedule+0xc5/0x240 [ 212.645921][ T37] schedule_timeout+0xc7/0x3b0 [ 212.650723][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 212.656106][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 212.661685][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 212.666810][ T37] ? generic_exec_single+0x206/0x500 [ 212.672142][ T37] ? call_rcu+0x14/0x20 [ 212.676312][ T37] wait_for_common+0x368/0x650 [ 212.681107][ T37] ? wait_for_completion+0x40/0x40 [ 212.686226][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 212.691728][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 212.698243][ T37] wait_for_completion+0x1c/0x40 [ 212.703235][ T37] rcu_barrier+0x45a/0x580 [ 212.707661][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 212.713065][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 212.717841][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 212.723008][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 212.728656][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 212.734381][ T37] kvm_put_kvm+0xadf/0x12d0 [ 212.738904][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 212.744051][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 212.749282][ T37] kvm_vm_release+0x47/0x70 [ 212.753806][ T37] __fput+0x20b/0xa30 [ 212.757801][ T37] ____fput+0x20/0x30 [ 212.761827][ T37] task_work_run+0x1e5/0x260 [ 212.766429][ T37] ? __cfi_task_work_run+0x10/0x10 [ 212.771583][ T37] ? __kasan_check_write+0x18/0x20 [ 212.776910][ T37] resume_user_mode_work+0x35/0x50 [ 212.782070][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 212.787595][ T37] do_syscall_64+0x63/0xf0 [ 212.792118][ T37] ? clear_bhb_loop+0x50/0xa0 [ 212.796815][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.802748][ T37] RIP: 0033:0x7f4a0919e159 [ 212.807167][ T37] RSP: 002b:00007ffd282c50f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 212.815660][ T37] RAX: 0000000000000000 RBX: 00007f4a09427da0 RCX: 00007f4a0919e159 [ 212.823792][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 212.831830][ T37] RBP: 00007f4a09427da0 R08: 00007f4a09426038 R09: 0000000000000000 [ 212.839858][ T37] R10: 00000000003ffbcc R11: 0000000000000246 R12: 0000000000013f74 [ 212.847853][ T37] R13: 00007f4a09425fac R14: 0000000000013d95 R15: 00007ffd282c5200 [ 212.855882][ T37] [ 212.989814][ T37] NMI backtrace for cpu 1 [ 212.989834][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 212.989862][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.989874][ T37] Call Trace: [ 212.989881][ T37] [ 212.989889][ T37] __dump_stack+0x21/0x30 [ 212.989920][ T37] dump_stack_lvl+0x140/0x1c0 [ 212.989945][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.989972][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 212.990001][ T37] dump_stack+0x19/0x20 [ 212.990025][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 212.990052][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 212.990076][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 212.990102][ T37] ? sched_show_task+0x371/0x530 [ 212.990127][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 212.990152][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 212.990179][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 212.990204][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 212.990244][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 212.990269][ T37] watchdog+0xe45/0xf90 [ 212.990289][ T37] ? __kasan_check_write+0x18/0x20 [ 212.990312][ T37] ? __cfi_watchdog+0x10/0x10 [ 212.990332][ T37] ? __kasan_check_read+0x15/0x20 [ 212.990351][ T37] ? __kthread_parkme+0x12f/0x180 [ 212.990370][ T37] ? schedule+0xc5/0x240 [ 212.990389][ T37] kthread+0x2c4/0x360 [ 212.990410][ T37] ? __cfi_watchdog+0x10/0x10 [ 212.990430][ T37] ? __cfi_kthread+0x10/0x10 [ 212.990451][ T37] ret_from_fork+0x64/0xa0 [ 212.990476][ T37] ? __cfi_kthread+0x10/0x10 [ 212.990497][ T37] ret_from_fork_asm+0x1a/0x30 [ 212.990517][ T37] [ 212.990524][ T37] Sending NMI from CPU 1 to CPUs 0: [ 213.193122][ C0] NMI backtrace for cpu 0 [ 213.193137][ C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 018ff8b15f97deb4d6c6217ad3b2c61971603935 [ 213.193158][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.193168][ C0] RIP: 0010:find_match+0x149/0x10d0 [ 213.193195][ C0] Code: f6 83 e6 40 41 0f 94 c7 31 ff e8 92 4f 8a fc 41 84 df 74 2c e8 48 4b 8a fc eb 05 e8 41 4b 8a fc 31 c0 48 81 c4 98 00 00 00 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 49 25 aa 00 cc e8 23 4b 8a fc eb 05 [ 213.193208][ C0] RSP: 0018:ffffc900000072b0 EFLAGS: 00000282 [ 213.193222][ C0] RAX: 0000000000000000 RBX: 1ffff110216fe10c RCX: ffff888103679300 [ 213.193233][ C0] RDX: 0000000000000100 RSI: 00000000fffffffd RDI: 00000000fffffffd [ 213.193244][ C0] RBP: ffffc900000072d0 R08: ffffc90000007540 R09: ffffc90000007550 [ 213.193255][ C0] R10: ffffc900000076b0 R11: fffff52000000eda R12: 0000000000000001 [ 213.193265][ C0] R13: 1ffff110216fe118 R14: 0000000000000003 R15: 00000000fffffffd [ 213.193275][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 213.193288][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.193299][ C0] CR2: 00005651d5343b50 CR3: 000000010beaa000 CR4: 00000000003526b0 [ 213.193313][ C0] Call Trace: [ 213.193317][ C0] [ 213.193325][ C0] __find_rr_leaf+0x249/0x840 [ 213.193349][ C0] ? rt6_check_expired+0x250/0x250 [ 213.193371][ C0] ? __flow_hash_from_keys+0x440/0x6e0 [ 213.193388][ C0] ? fib6_node_lookup+0x4ee/0x520 [ 213.193405][ C0] fib6_table_lookup+0x2d0/0x980 [ 213.193423][ C0] ? __cfi_fib6_table_lookup+0x10/0x10 [ 213.193442][ C0] ip6_pol_route+0x17a/0x1370 [ 213.193458][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 213.193473][ C0] ? __cfi_ip6_pol_route+0x10/0x10 [ 213.193489][ C0] ? stack_depot_save_flags+0x38/0x800 [ 213.193509][ C0] ? __kasan_slab_free+0x5f/0x80 [ 213.193527][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 213.193543][ C0] ? __kfree_skb+0x18f/0x210 [ 213.193559][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 213.193575][ C0] ? ip6_mc_input+0x433/0x680 [ 213.193592][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 213.193607][ C0] ? process_backlog+0x472/0xaf0 [ 213.193625][ C0] ? __napi_poll+0xcd/0x600 [ 213.193640][ C0] ? net_rx_action+0x5dc/0xd70 [ 213.193657][ C0] ip6_pol_route_input+0x5a/0x80 [ 213.193674][ C0] fib6_rule_lookup+0x4f1/0x6d0 [ 213.193688][ C0] ? __cfi_ip6_pol_route_input+0x10/0x10 [ 213.193705][ C0] ? __cfi_fib6_rule_lookup+0x10/0x10 [ 213.193720][ C0] ? ip6t_do_table+0x1d2/0x1510 [ 213.193739][ C0] ip6_route_input+0x60d/0x8d0 [ 213.193756][ C0] ? __cfi_ip6_route_input+0x10/0x10 [ 213.193774][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 213.193793][ C0] ? __asan_memset+0x39/0x50 [ 213.193808][ C0] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 213.193829][ C0] ip6_rcv_finish+0x15a/0x3c0 [ 213.193851][ C0] ipv6_rcv+0xf1/0x240 [ 213.193866][ C0] ? __irq_exit_rcu+0x53/0xb0 [ 213.193881][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 213.193897][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 213.193913][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 213.193936][ C0] process_backlog+0x472/0xaf0 [ 213.193956][ C0] __napi_poll+0xcd/0x600 [ 213.193972][ C0] net_rx_action+0x5dc/0xd70 [ 213.193990][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 213.194007][ C0] ? sched_clock+0x44/0x60 [ 213.194027][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 213.194050][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 213.194070][ C0] handle_softirqs+0x1aa/0x620 [ 213.194086][ C0] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 213.194105][ C0] __do_softirq+0xf/0x16 [ 213.194119][ C0] do_softirq+0xb8/0x110 [ 213.194133][ C0] [ 213.194138][ C0] [ 213.194143][ C0] ? __cfi_do_softirq+0x10/0x10 [ 213.194157][ C0] ? __kasan_slab_free+0x6a/0x80 [ 213.194197][ C0] __local_bh_enable_ip+0x74/0x80 [ 213.194211][ C0] rcu_do_batch+0x590/0xcb0 [ 213.194228][ C0] ? rcu_core+0xcc0/0xcc0 [ 213.194241][ C0] ? __kasan_check_write+0x18/0x20 [ 213.194255][ C0] ? _raw_spin_lock+0x92/0x120 [ 213.194277][ C0] ? __kasan_check_read+0x15/0x20 [ 213.194291][ C0] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 213.194307][ C0] rcu_nocb_cb_kthread+0x533/0xb60 [ 213.194324][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 213.194339][ C0] ? __kasan_check_write+0x18/0x20 [ 213.194354][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 213.194376][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 213.194397][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 213.194419][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 213.194435][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 213.194451][ C0] ? __kasan_check_read+0x15/0x20 [ 213.194465][ C0] ? __kthread_parkme+0x12f/0x180 [ 213.194481][ C0] ? schedule+0xc5/0x240 [ 213.194494][ C0] kthread+0x2c4/0x360 [ 213.194510][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 213.194526][ C0] ? __cfi_kthread+0x10/0x10 [ 213.194542][ C0] ret_from_fork+0x64/0xa0 [ 213.194563][ C0] ? __cfi_kthread+0x10/0x10 [ 213.194582][ C0] ret_from_fork_asm+0x1a/0x30 [ 213.194598][ C0] [ 215.249024][ C1] net_ratelimit: 128299 callbacks suppressed [ 215.249045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.249077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.255121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.267005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.278928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.290781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.302764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.314919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.326675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.338787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.070348][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.077420][ T1270] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.179430][ T1270] bridge_slave_0: entered allmulticast mode [ 218.325810][ T1270] bridge_slave_0: entered promiscuous mode [ 220.259032][ C1] net_ratelimit: 144279 callbacks suppressed [ 220.259053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.259074][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.265124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.276990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.289020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.301103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.312875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.324975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.336725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.348583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)