last executing test programs: 3m13.204455201s ago: executing program 3 (id=112): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) openat(r0, &(0x7f0000000240)='./mnt\x00', 0x401, 0x1b) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 3m13.154673803s ago: executing program 3 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 3m13.080968497s ago: executing program 3 (id=118): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x406, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0xef3, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x6, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7eff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x10, 0x800003, 0x310, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x0, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xfffffff7, 0x1, 0x78e, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x40086607, 0x0) 3m11.713158972s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 3m11.712625742s ago: executing program 3 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000500)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x8}, 0x9}) pipe2(0x0, 0xc0000) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4, 0x0, 0x4, 0x6, 0xa, 0x3, 0xa42c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/26, 0xfdef, 0x97) preadv(r6, &(0x7f0000000680)=[{&(0x7f0000000480)=""/175, 0xaf}], 0x1, 0xffff, 0x4) r7 = syz_clone(0x20000011, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioprio_set$pid(0x1, r7, 0x4007) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000, &(0x7f0000000000)="ecd380d8f355ca733102a91d1d170d435e0aa6e6755d3a358f6957f8c6d1263b273c2568f0fe3eac1c7943afc09dcf7bfd76f8", 0x33, &(0x7f0000000140), &(0x7f0000000380), &(0x7f00000003c0)="de345076aed4f83c09") 3m10.862750452s ago: executing program 3 (id=158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (fail_nth: 5) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f00000002c0)={0x0}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2m55.080821065s ago: executing program 32 (id=158): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (fail_nth: 5) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0100000a0a000700000000000000000a00000a08000a40000000030c000b40000900000000000000000d40cbeb826369a62a3faa577f0c251194b79f42945f94806997b90bb6b33a9a8a2ac332039d8e7ce4e447094a37fc313adeb2b66cea9533dbe19af7e3fab3666785c9cf69d1a4aa196b22bb060824b3ac37fc4dc4013b402c7644baf745d7a9282b2fcd51af13c6c6e5d74ddac5093016beac4a767f25887bba261eef7caa5023c2c4a67868b08ab695c4114799c3aaa545cbeaf7230220a2a2662642ec24f298892a27462e342a4d6aaef90c5c5af46711b3906e4c565751b13126c01f8f4158b7c1911e196d0000000c000980080001400000000008000a400000000308000440000000030c0010400000000000000005340011800b00010072656a6563740000240002800500020004000000050002008e0000000800000108000740000000048d824d636d70491439d375222a652c44fb638d8a2a6364dbc571d39cad82a1eaf25c251d87ed43eb5b78dba49efb6fe478347c45bcccb52f4c9d40fb8ac24055549b90e32aa39c6f72f0d29674393c8c961358cee3"], 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f00000002c0)={0x0}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2m52.561001434s ago: executing program 1 (id=346): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0) write$FUSE_INIT(r1, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x80, 0x9, 0x7d, 0x9, 0x8, 0x0, 0x0, 0x2, 0x2}}, 0x50) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x32874000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r2, 0x400452c8, &(0x7f0000000100)="0000000003") r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r3) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000027c0)='\x00\x00\x03\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xb7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\ntZ\xd1\xcdT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xee\x0f\x00\x00\x00\x00\x00\x004\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x81\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x12\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2m52.469366568s ago: executing program 1 (id=347): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) 2m51.241985225s ago: executing program 1 (id=350): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4b, {0x2, "b9c30d00000f32b805000000b90a0000000f01d90f01c8403400ed470f07b8010000000f01d97302470f21ce26f242a5469230"}}], 0x4c}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x5}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0xc, 0xf1, 0xfab3, 0x3, 0x5, 0x0, 0xd, 0x0, 0x6, 0x0, 0xbd9], 0x1000, 0x43102}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m51.178754198s ago: executing program 1 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setresuid(0xee00, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x10080, 0x40, 0x20}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_complete(r2, r3) close(r4) r5 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x1df843, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r6, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x1000000, 0x0, 0x1, 0x4ecf, r5, &(0x7f0000000200)='p', 0x1, 0x80000000600}]) 2m51.129345541s ago: executing program 1 (id=352): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004da000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 2m50.957323849s ago: executing program 1 (id=353): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x10120, 0x0) 2m50.957099389s ago: executing program 33 (id=353): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x10120, 0x0) 1m46.951006603s ago: executing program 0 (id=818): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x4b, {0x2, "b9c30d00000f32b805000000b90a0000000f01d90f01c8403400ed470f07b8010000000f01d97302470f21ce26f242a5469230"}}], 0x4c}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002540)=0xfffffefd) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000001c0)=@sg0, r1, &(0x7f0000000040)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002340), 0x200000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000002500)={0x4, 0x82c, &(0x7f0000002380)="eebb1bee1f6f4106cb00241db8e8a23691467a38e202d9b8ff4caeb66d596ea4c1f46ceeef5cd1fba97b74601359a81d4c69fa076bdb05809564d8102ff80abc55d28252b363313a0c898c97310cd84e346956b0a22d30608b111598a44e329e7bc163f134e6aff5f6fda936bf7ae3cf98065ab0f20e6b29f63d15d998e0b8423962385eed1b0baafd7c1f83afd9c5b448e680cc12505fee5c6775b69bc42ca0ebee77c9a128ba42d3735fafe5b54381e7212b39806f1fdf0ea5ccbeb0a7dc6c35ce26122163681f57f4c718108a89b2be", &(0x7f0000002480)="ffb97a34160657dc7f6ed18e67ed65de791549ec029bd28e27c238762e0f7676d869ee9e7ad4f428fd40118b29abc3b7f58b0c3342ed1bfc9114e51e4198c2a546e1c062a4246bba53989a3635d37d1cea96440613eeae24172be29e73f8eabf21af193e9b09abcbd03aa3f9d7f7bbb6f2e3b94687138696b605bf8514", 0xd1, 0x7d}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x5}, 0x1c) r3 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff02) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r10, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x6, 0x9000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x2, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7e, 0x800000068fc, 0x40000000000007, 0x5, 0x803, 0x0, 0x9], 0x8003000, 0x40a02}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m46.645152088s ago: executing program 0 (id=819): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x62) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x32874000) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x50007a2) read(r2, &(0x7f0000000200)=""/149, 0x95) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x68800, 0x20) read$FUSE(r3, &(0x7f0000002040)={0x2020}, 0x2020) ioctl$BLKFRAGET(r3, 0x1265, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x60000600) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002240)=""/4112, 0x1010}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000001980)=""/285, 0x11d}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000080)=""/73, 0x49}], 0x9}, 0x1207}], 0x3, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000027c0)='\x00\x00\x03\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xb7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\ntZ\xd1\xcdT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xee\x0f\x00\x00\x00\x00\x00\x004\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x81\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x12\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1m45.843007025s ago: executing program 0 (id=820): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 1m45.759710399s ago: executing program 0 (id=821): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0xb00) 1m45.709159732s ago: executing program 0 (id=822): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8080) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000400)={0x14, &(0x7f0000000240)={0x20, 0x21, 0x8a, {0x8a, 0x9, "27323034a60a163b672a61762c2a76a109052197844463fb94a655bf35303ec0f97986c7c1269c746d20fd556272b703692ffd41048f7f40a00c4ca487af103c0509fedeb31ee9477d4ce0202033e7f07e12b4c1a588015f63b2a622a28ddeb0602494beb120a2126a47cf014c5151b8946c094a77c4b23f0a6667675631ca711b8ac10c9f17cb8a"}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") unshare(0x60000600) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='0', 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003200)=[{{&(0x7f0000000940)={0xa, 0x4e23, 0xffffff01, @remote, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="14000000ca0800000000"], 0x18}}], 0x1, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 1m43.654786968s ago: executing program 0 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m43.607056761s ago: executing program 34 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 50.575619858s ago: executing program 6 (id=1278): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40087602, 0x0) 50.469664493s ago: executing program 6 (id=1282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="64000000120001060000000000000000000000003f00000000000000000000001000030076657468300000000000000025001200080001007665746818000000000001000005e2cf6c50a3070010000300766574683100000000000000cf13b7feedeb9e", 0x64}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000000004035121082400001020301090269000301053009080b00010107208c09040000000101200009240100500409000709040100000102200009040701ffff022000090501090002030b0408250100004004000904020000"], 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'macvtap0\x00', {}, 0x86e}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x1fc}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x1b, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@flushpolicy={0x1c, 0x1d, 0xc263e8d1d5446edb, 0x70bd2c, 0x25dfdbff, "", [@policy_type={0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c00001c) socket(0x10, 0x3, 0x0) epoll_create1(0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xfb4, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0xba}}}, &(0x7f0000000280)=0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) setuid(0xee01) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$sock(r11, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1467, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x1, 0x0, 0x31c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x4, 0x2000008, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x10, 0x2, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x801, 0x2, 0x1040021d}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r9, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x220000, 0x0) ioctl$XFS_IOC_INUMBERS(r13, 0x80405880, &(0x7f0000000180)={{0xfffffffffffffffb, 0x3, 0x2}, [{0x100, 0x1, 0x4, 0x6}]}) 48.565460213s ago: executing program 6 (id=1284): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x2f89, r2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="22a2", 0x2}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 48.554878153s ago: executing program 6 (id=1285): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001e903000000fedbdf250a0000000400"], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143a01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fadvise64(r5, 0x1, 0x8000000000000000, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x350, 0xffff8881f6e4ec80) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000000, 0x80000001, 0x180000, 0x3}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010141, 0x0, 0x10001}]}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0xffff7f91, 0x4}}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)) syz_usb_connect$midi(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000002099045c1040000102030109022d00010170e90509040000010103200f0724030102000707240303650005090502020002065677aad590f8ddffcccc8d13af"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 47.289372443s ago: executing program 6 (id=1288): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4104, 0x1008}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0x5e}, {{0x0, 0x0, 0x0}, 0x8000000}], 0x2, 0x10160, 0x0) 47.079895153s ago: executing program 6 (id=1289): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x6628, 0x0) 47.050476424s ago: executing program 35 (id=1289): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x6628, 0x0) 46.456588902s ago: executing program 7 (id=1290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f00000000c0), 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800000006"], 0x12cd) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x5000}) 45.976118935s ago: executing program 7 (id=1299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x8, @any, 0x0, 0x1}, 0xe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081000000000000800000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03031b003a00320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 45.947428556s ago: executing program 7 (id=1300): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0x4008af00, 0x0) 45.870944449s ago: executing program 7 (id=1301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x88ff, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0) 45.870678629s ago: executing program 7 (id=1302): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x6, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') lseek(r1, 0x14, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r2, 0x400454ce, 0x337) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000a40)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usbcore/parameters/quirks\x00', 0x404000, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r3) syz_ublk_setup_queues(r7, r8, &(0x7f0000000140)={0x0, 0xba1d, 0x4000, 0x2, 0x3}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc50, 0x800, 0x1, 0xe8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x267e, 0x200, 0x1, 0x15c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f69, 0x4, 0x1, 0x3d4}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe8e3, 0x8000, 0x0, 0x148}}], 0x4, 0x0, 0x0) r11 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) ioctl$EXT4_IOC_MIGRATE(r12, 0xff03) syz_ublk_setup_queues(r9, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x81}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x3000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc67, 0x2000, 0x4003bfff, 0x802b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r7}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 45.870414669s ago: executing program 7 (id=1303): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x6) read(r1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x68, r3, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x1, 0x8}}, @val={0x72, 0x6}, @void, @void}}]]}, 0x68}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x7ff, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 37.817377829s ago: executing program 4 (id=1345): futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001440)=""/4099, 0x1003}, {&(0x7f0000002480)=""/105, 0x69}, {&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/71, 0x47}, {&(0x7f00000003c0)=""/4084, 0xff4}], 0x6}, 0xc}, {{0x0, 0x0, 0x0}, 0x8000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x10120, 0x0) 36.870742083s ago: executing program 4 (id=1356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='prev_state.function <', 0x15) pipe2(0x0, 0xc0000) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 36.271302522s ago: executing program 5 (id=1359): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000001011fffc010000000000000000000000000000ff0200000000000000000000000000014e204e23"], 0x4a) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r9, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000660001"], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x8d03000) 36.120897749s ago: executing program 5 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c060000000000", 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 36.08535776s ago: executing program 5 (id=1361): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) (fail_nth: 8) 35.109183326s ago: executing program 5 (id=1362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x0, 0x2, 0x1}, 0x20) close(r3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r7, r5, 0x80000) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/76, 0x4c) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x5, 0x0, 0x2080, {0x20, 0x8000000, {}, 0x0, 0x5}}) 35.03218543s ago: executing program 4 (id=1363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x10000000, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 34.988838132s ago: executing program 4 (id=1364): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0x4004af61, 0x0) (fail_nth: 1) 34.285379545s ago: executing program 2 (id=1366): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0x4004af61, 0x0) 34.258845916s ago: executing program 2 (id=1367): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80087601, 0x0) 34.227450268s ago: executing program 2 (id=1368): r0 = syz_usb_connect$uac2(0x2, 0x9d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201500200000040630703204020010203010902e732030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d02008700200904010000010220000904010101010220000624020103be10240105c403030000000309000000cd090501090800000cf9072501"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket(0x26, 0x800, 0xfffffff8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x22, {0x22, 0xf, "2742dbaa19573adcddb55e0ae83abe050e808e31e79194f41eaf77132531a8b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400eaa00000032b5dbff86bd0ca677a130711e293097d2003c89798537ecd6339119157bb76cccadb5b7668c8516d79145787225134b7aad39488f7a084eb25aedae483c058c34390b3ec4c305c308e49a3adb6a661318c5bd03d23894f3d2f7552a616bbe5bda91789bf99e8cfc992a8ad236524619693b69d7d31e6eba3525fdcfc5f382304b00"/176], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x20, 0x82, 0x1, "04"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="b853914b0e5221316697fd2ff76dd33f1e16209ad65c969eec7da34532f249482bea0370ff4acf7be39e74288577037ff96957a2aacd8fe547a9a83fdc19297694fc0dd59c5131233db139113d65e840c2a48b043ec76c"], &(0x7f00000004c0)=ANY=[@ANYBLOB="2084025e0018ea7b"], &(0x7f0000000500)={0x20, 0x85, 0x3, "e23dcf"}}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201500200000040630703204020010203010902e732030107600b080b010101ff20050904000000010120000924010600031500070c24030501035d02008700200904010000010220000904010101010220000624020103be10240105c403030000000309000000cd090501090800000cf9072501"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) socket(0x26, 0x800, 0xfffffff8) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x22, {0x22, 0xf, "2742dbaa19573adcddb55e0ae83abe050e808e31e79194f41eaf77132531a8b5"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400eaa00000032b5dbff86bd0ca677a130711e293097d2003c89798537ecd6339119157bb76cccadb5b7668c8516d79145787225134b7aad39488f7a084eb25aedae483c058c34390b3ec4c305c308e49a3adb6a661318c5bd03d23894f3d2f7552a616bbe5bda91789bf99e8cfc992a8ad236524619693b69d7d31e6eba3525fdcfc5f382304b00"/176], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x20, 0x82, 0x1, "04"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="b853914b0e5221316697fd2ff76dd33f1e16209ad65c969eec7da34532f249482bea0370ff4acf7be39e74288577037ff96957a2aacd8fe547a9a83fdc19297694fc0dd59c5131233db139113d65e840c2a48b043ec76c"], &(0x7f00000004c0)=ANY=[@ANYBLOB="2084025e0018ea7b"], &(0x7f0000000500)={0x20, 0x85, 0x3, "e23dcf"}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) 34.111534043s ago: executing program 4 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a", 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 34.105818994s ago: executing program 4 (id=1370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x80002, 0x49) write(r2, &(0x7f0000000200)='0', 0x1) 32.385265054s ago: executing program 2 (id=1371): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) read$FUSE(r1, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x11e, &(0x7f00000000c0)={0x0, 0xe7b2, 0x800, 0x0, 0xad}, &(0x7f0000000380), &(0x7f0000000480), &(0x7f0000000340)) syz_io_uring_setup(0x7ca4, &(0x7f0000000500)={0x0, 0x1000001c, 0x27, 0x2, 0x24f, 0x0, r3}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000001c0)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0xffffffffffffffff, {{0x41, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc8d1}, 0x20008000) 32.300138689s ago: executing program 2 (id=1372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='prev_state.function <', 0x15) pipe2(0x0, 0xc0000) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 32.203744303s ago: executing program 5 (id=1373): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') pread64(r1, &(0x7f0000000040)=""/102391, 0x18ff7, 0x8ca8) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a00000000000000000000000000090000000000009dc9a3c1d9c135510002000a00000000000001fe8000000000000000000000000000bb000000000d0001007564703a73797a30"], 0x6c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000019040)='loginuid\x00') write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="3500000005000000"], 0x35) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x200000, 0x1000, &(0x7f0000001000/0x1000)=nil}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 31.390875811s ago: executing program 2 (id=1374): write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0xa, 0x18}, @val={0x1, 0x3, 0x401, 0x4ef4, 0x7, 0x4}, @x25={0x1, 0x2, 0x13}}, 0x11) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}, 0xc020) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x7ff, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 30.298814183s ago: executing program 36 (id=1303): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x6) read(r1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x68, r3, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x1, 0x8}}, @val={0x72, 0x6}, @void, @void}}]]}, 0x68}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x7ff, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 27.638640188s ago: executing program 5 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0xc2}}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKTRACESTART(r2, 0x1269, 0x0) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0xd00) ioctl$KDDISABIO(r3, 0x4b37) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xffffeffffffffbfd, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x3e8) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda1\x00', 0x28) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) 17.857399479s ago: executing program 37 (id=1370): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debugfs\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debugfs/kvm/halt_poll_fail_ns\x00', 0x80002, 0x49) write(r2, &(0x7f0000000200)='0', 0x1) 905.580827ms ago: executing program 38 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0xc2}}]}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKTRACESTART(r2, 0x1269, 0x0) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r3 = syz_open_pts(r2, 0xd00) ioctl$KDDISABIO(r3, 0x4b37) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xffffeffffffffbfd, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x3e8) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda1\x00', 0x28) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) 0s ago: executing program 39 (id=1374): write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0xa, 0x18}, @val={0x1, 0x3, 0x401, 0x4ef4, 0x7, 0x4}, @x25={0x1, 0x2, 0x13}}, 0x11) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}, 0xc020) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x7, 0xc, 0x6, 0x20ac1f87, 0x8, 0x6, 0x4, 0x4, 0x8, 0x4, 0x7ff, 0x1, 0x1932be21, 0x100000000, 0x4, 0x4], 0xeeee0000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): ck_object_size+0x54c/0x870 [ 177.391446][ T3588] ? __cfi___check_object_size+0x10/0x10 [ 177.391460][ T3588] copy_page_from_iter+0x1e5/0x2a0 [ 177.391478][ T3588] skb_copy_datagram_from_iter+0x300/0x6f0 [ 177.391496][ T3588] unix_stream_sendmsg+0x80f/0xfd0 [ 177.391513][ T3588] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 177.391529][ T3588] ? __check_object_size+0xdc/0x870 [ 177.391542][ T3588] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 177.391558][ T3588] ? __cfi___check_object_size+0x10/0x10 [ 177.391572][ T3588] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 177.391587][ T3588] ? security_socket_sendmsg+0x3d/0x100 [ 177.391605][ T3588] ____sys_sendmsg+0x99e/0xa00 [ 177.391623][ T3588] ? __sys_sendmsg_sock+0x50/0x50 [ 177.391641][ T3588] ? import_iovec+0x80/0xb0 [ 177.391653][ T3588] ___sys_sendmsg+0x2a6/0x370 [ 177.391670][ T3588] ? __sys_sendmsg+0x260/0x260 [ 177.391687][ T3588] ? proc_fail_nth_write+0x184/0x220 [ 177.391710][ T3588] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 177.391730][ T3588] ? __fget_files+0x2bc/0x330 [ 177.391754][ T3588] __x64_sys_sendmsg+0x1be/0x2a0 [ 177.391771][ T3588] ? fput+0x1a4/0x230 [ 177.391787][ T3588] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 177.391805][ T3588] ? ksys_write+0x1f3/0x260 [ 177.391819][ T3588] ? __kasan_check_read+0x15/0x20 [ 177.391834][ T3588] x64_sys_call+0x2a4c/0x2ee0 [ 177.391846][ T3588] do_syscall_64+0x57/0xf0 [ 177.391858][ T3588] ? clear_bhb_loop+0x50/0xa0 [ 177.391874][ T3588] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 177.391889][ T3588] RIP: 0033:0x7f6a1ed9e159 [ 177.391902][ T3588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.391913][ T3588] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.391930][ T3588] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 177.391941][ T3588] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 177.391950][ T3588] RBP: 00007f6a1fc3e090 R08: 0000000000000000 R09: 0000000000000000 [ 177.391959][ T3588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.391967][ T3588] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 177.391978][ T3588] [ 177.752817][ T1634] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 177.774273][ T1634] usb 6-1: device descriptor read/8, error -71 [ 177.903924][ T1634] usb 6-1: device descriptor read/8, error -71 [ 178.142866][ T1634] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 178.174600][ T1634] usb 6-1: device descriptor read/8, error -71 [ 178.304143][ T1634] usb 6-1: device descriptor read/8, error -71 [ 178.412942][ T1634] usb usb6-port1: unable to enumerate USB device [ 178.502905][ T317] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 178.585393][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 178.607179][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.615836][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.662813][ T317] usb 5-1: Using ep0 maxpacket: 8 [ 178.669613][ T317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.679671][ T317] usb 5-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 178.688860][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.697042][ T317] usb 5-1: Product: syz [ 178.701449][ T317] usb 5-1: Manufacturer: syz [ 178.706194][ T317] usb 5-1: SerialNumber: syz [ 178.842834][ T359] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 178.919858][ T317] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 178.935357][ T317] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 178.944831][ T317] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 178.955418][ T317] usb 5-1: USB disconnect, device number 52 [ 178.964928][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 178.993934][ T359] usb 3-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 179.004787][ T359] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.015804][ T359] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 25956, setting to 64 [ 179.026922][ T359] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.041595][ T359] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.051006][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.059118][ T359] usb 3-1: Product: syz [ 179.063342][ T359] usb 3-1: Manufacturer: syz [ 179.067970][ T359] usb 3-1: SerialNumber: syz [ 179.073711][ T3603] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 179.283171][ T359] cdc_ncm 3-1:1.0: bind() failure [ 179.289224][ T359] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 179.296115][ T428] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 179.303891][ T359] cdc_ncm 3-1:1.1: bind() failure [ 179.310215][ T359] usb 3-1: USB disconnect, device number 59 [ 179.451991][ T3619] FAULT_INJECTION: forcing a failure. [ 179.451991][ T3619] name failslab, interval 1, probability 0, space 0, times 0 [ 179.464985][ T3619] CPU: 1 UID: 0 PID: 3619 Comm: syz.4.1230 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 179.465020][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.465033][ T3619] Call Trace: [ 179.465045][ T3619] [ 179.465053][ T3619] __dump_stack+0x21/0x30 [ 179.465087][ T3619] dump_stack_lvl+0x140/0x1c0 [ 179.465116][ T3619] ? __cfi_dump_stack_lvl+0x10/0x10 [ 179.465145][ T3619] dump_stack+0x19/0x20 [ 179.465171][ T3619] should_fail_ex+0x3c2/0x510 [ 179.465196][ T3619] ? x509_fabricate_name+0x61b/0xcb0 [ 179.465217][ T3619] should_failslab+0xac/0x100 [ 179.465244][ T3619] __kmalloc_noprof+0x69/0x510 [ 179.465265][ T3619] ? x509_fabricate_name+0x61b/0xcb0 [ 179.465285][ T3619] ? x509_note_OID+0x12a/0x190 [ 179.465316][ T3619] x509_fabricate_name+0x61b/0xcb0 [ 179.465337][ T3619] x509_note_subject+0x8b/0xc0 [ 179.465356][ T3619] asn1_ber_decoder+0x1974/0x1ff0 [ 179.465390][ T3619] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 179.465418][ T3619] ? kasan_save_alloc_info+0x3a/0x50 [ 179.465438][ T3619] ? __kasan_kmalloc+0x96/0xb0 [ 179.465463][ T3619] ? auto_movable_stats_account_group+0x110/0x140 [ 179.465488][ T3619] x509_cert_parse+0x1e3/0xbd0 [ 179.465517][ T3619] x509_key_preparse+0x6a/0x880 [ 179.465540][ T3619] ? __cfi_down_read+0x10/0x10 [ 179.465567][ T3619] asymmetric_key_preparse+0xb6/0x100 [ 179.465594][ T3619] __key_create_or_update+0x430/0xa90 [ 179.465613][ T3619] ? security_key_permission+0x3d/0x100 [ 179.465637][ T3619] ? key_create_or_update+0x70/0x70 [ 179.465656][ T3619] ? __kasan_kmalloc+0x96/0xb0 [ 179.465683][ T3619] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 179.465722][ T3619] key_create_or_update+0x47/0x70 [ 179.465740][ T3619] __se_sys_add_key+0x355/0x4b0 [ 179.465762][ T3619] ? __x64_sys_add_key+0xf0/0xf0 [ 179.465786][ T3619] __x64_sys_add_key+0xc3/0xf0 [ 179.465809][ T3619] x64_sys_call+0x195f/0x2ee0 [ 179.465829][ T3619] do_syscall_64+0x57/0xf0 [ 179.465848][ T3619] ? clear_bhb_loop+0x50/0xa0 [ 179.465874][ T3619] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.465899][ T3619] RIP: 0033:0x7f6a1ed9e159 [ 179.465918][ T3619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.465937][ T3619] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 179.465961][ T3619] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 179.465977][ T3619] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 179.465993][ T3619] RBP: 00007f6a1fc3e090 R08: ffffffffffffffff R09: 0000000000000000 [ 179.466008][ T3619] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002 [ 179.466022][ T3619] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 179.466041][ T3619] [ 179.466984][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.754899][ T428] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.763978][ T428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.773227][ T428] usb 6-1: config 0 descriptor?? [ 179.930976][ T3628] FAULT_INJECTION: forcing a failure. [ 179.930976][ T3628] name failslab, interval 1, probability 0, space 0, times 0 [ 179.943905][ T3628] CPU: 1 UID: 0 PID: 3628 Comm: syz.2.1234 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 179.943946][ T3628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.943961][ T3628] Call Trace: [ 179.943970][ T3628] [ 179.943979][ T3628] __dump_stack+0x21/0x30 [ 179.944018][ T3628] dump_stack_lvl+0x140/0x1c0 [ 179.944049][ T3628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 179.944083][ T3628] dump_stack+0x19/0x20 [ 179.944113][ T3628] should_fail_ex+0x3c2/0x510 [ 179.944139][ T3628] should_failslab+0xac/0x100 [ 179.944167][ T3628] kmem_cache_alloc_noprof+0x42/0x410 [ 179.944190][ T3628] ? __anon_vma_prepare+0xa5/0x590 [ 179.944214][ T3628] __anon_vma_prepare+0xa5/0x590 [ 179.944237][ T3628] do_wp_page+0x2321/0x2e80 [ 179.944265][ T3628] ? __cfi___futex_wait+0x10/0x10 [ 179.944286][ T3628] ? folio_put+0x90/0x90 [ 179.944310][ T3628] ? __cfi__raw_spin_lock+0x10/0x10 [ 179.944330][ T3628] ? futex_wake+0x666/0x950 [ 179.944350][ T3628] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 179.944373][ T3628] handle_mm_fault+0x1017/0x1ba0 [ 179.944403][ T3628] ? __cfi_handle_mm_fault+0x10/0x10 [ 179.944430][ T3628] ? lock_vma_under_rcu+0x4cf/0x590 [ 179.944461][ T3628] ? __se_sys_futex+0x13c/0x320 [ 179.944493][ T3628] do_user_addr_fault+0x951/0x1230 [ 179.944514][ T3628] ? __cfi_ksys_write+0x10/0x10 [ 179.944537][ T3628] ? fpregs_restore_userregs+0x11c/0x260 [ 179.944567][ T3628] exc_page_fault+0x58/0xc0 [ 179.944595][ T3628] asm_exc_page_fault+0x2b/0x30 [ 179.944620][ T3628] RIP: 0033:0x7f0588c52c47 [ 179.944640][ T3628] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 179.944659][ T3628] RSP: 002b:00007f0589bd5fd0 EFLAGS: 00010246 [ 179.944681][ T3628] RAX: 00007f0588c52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 179.944698][ T3628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.944712][ T3628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.944726][ T3628] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 179.944740][ T3628] R13: 00007f0589026038 R14: 00007f0589025fa0 R15: 00007fffc8f84fe8 [ 179.944760][ T3628] [ 179.944791][ T3628] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 180.174821][ T428] usbhid 6-1:0.0: can't add hid device: -71 [ 180.180789][ T428] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 180.191055][ T428] usb 6-1: USB disconnect, device number 44 [ 180.232793][ T359] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 180.252028][ T36] audit: type=1400 audit(1789815010.846:477): avc: denied { mounton } for pid=3634 comm="syz.4.1237" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 180.373044][ T359] usb 7-1: device descriptor read/64, error -71 [ 180.492813][ T428] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 180.622911][ T359] usb 7-1: device descriptor read/64, error -71 [ 180.644178][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.655240][ T428] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 180.664525][ T428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.673567][ T428] usb 6-1: config 0 descriptor?? [ 180.702869][ T1115] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 180.853916][ T1115] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 180.865153][ T1115] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.872826][ T359] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 180.882999][ T1115] usb 5-1: config 1 interface 0 has no altsetting 0 [ 180.885078][ T1115] usb 5-1: string descriptor 0 read error: -22 [ 180.902407][ T1115] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 180.912097][ T1115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.032843][ T359] usb 7-1: device descriptor read/64, error -71 [ 181.122291][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.131562][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.272828][ T359] usb 7-1: device descriptor read/64, error -71 [ 181.341697][ T1115] usbhid 5-1:1.0: can't add hid device: -32 [ 181.347774][ T1115] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 181.356680][ T1115] usb 5-1: USB disconnect, device number 53 [ 181.393402][ T359] usb usb7-port1: attempt power cycle [ 181.513232][ T428] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 181.521089][ T428] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input70 [ 181.732832][ T359] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 181.753741][ T359] usb 7-1: device descriptor read/8, error -71 [ 181.890946][ T359] usb 7-1: device descriptor read/8, error -71 [ 181.948096][ T3682] netlink: 'syz.2.1256': attribute type 27 has an invalid length. [ 181.967301][ T3676] FAULT_INJECTION: forcing a failure. [ 181.967301][ T3676] name failslab, interval 1, probability 0, space 0, times 0 [ 181.980098][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.4.1253 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 181.980141][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.980155][ T3676] Call Trace: [ 181.980163][ T3676] [ 181.980172][ T3676] __dump_stack+0x21/0x30 [ 181.980210][ T3676] dump_stack_lvl+0x140/0x1c0 [ 181.980241][ T3676] ? __cfi_dump_stack_lvl+0x10/0x10 [ 181.980275][ T3676] dump_stack+0x19/0x20 [ 181.980304][ T3676] should_fail_ex+0x3c2/0x510 [ 181.980332][ T3676] should_failslab+0xac/0x100 [ 181.980359][ T3676] kmem_cache_alloc_noprof+0x42/0x410 [ 181.980382][ T3676] ? __anon_vma_prepare+0xa5/0x590 [ 181.980405][ T3676] __anon_vma_prepare+0xa5/0x590 [ 181.980428][ T3676] do_wp_page+0x2321/0x2e80 [ 181.980454][ T3676] ? __cfi___futex_wait+0x10/0x10 [ 181.980476][ T3676] ? folio_put+0x90/0x90 [ 181.980500][ T3676] ? __cfi__raw_spin_lock+0x10/0x10 [ 181.980520][ T3676] ? futex_wake+0x627/0x950 [ 181.980545][ T3676] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 181.980568][ T3676] handle_mm_fault+0x1017/0x1ba0 [ 181.980596][ T3676] ? __cfi_handle_mm_fault+0x10/0x10 [ 181.980622][ T3676] ? lock_vma_under_rcu+0x4cf/0x590 [ 181.980670][ T3676] ? __se_sys_futex+0x13c/0x320 [ 181.980709][ T3676] do_user_addr_fault+0x951/0x1230 [ 181.980730][ T3676] ? fpregs_restore_userregs+0x11c/0x260 [ 181.980758][ T3676] exc_page_fault+0x58/0xc0 [ 181.980786][ T3676] asm_exc_page_fault+0x2b/0x30 [ 181.980811][ T3676] RIP: 0033:0x7f6a1ec52c47 [ 181.980830][ T3676] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 181.980850][ T3676] RSP: 002b:00007f6a1fc3dfd0 EFLAGS: 00010246 [ 181.980873][ T3676] RAX: 00007f6a1ec52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.980890][ T3676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.980903][ T3676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.980917][ T3676] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 181.980931][ T3676] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 181.980950][ T3676] [ 181.980981][ T3676] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 182.049148][ T1115] usb 6-1: USB disconnect, device number 45 [ 182.052791][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 182.218734][ T36] audit: type=1400 audit(1789815012.626:478): avc: denied { watch } for pid=3684 comm="syz.2.1257" path="/331" dev="tmpfs" ino=1903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.243004][ T36] audit: type=1400 audit(1789815012.626:479): avc: denied { watch_reads } for pid=3684 comm="syz.2.1257" path="/331/file0" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.272612][ T36] audit: type=1326 audit(1789815012.866:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3689 comm="syz.5.1258" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c879e159 code=0x0 [ 182.342890][ T359] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 182.363917][ T359] usb 7-1: device descriptor read/8, error -71 [ 182.410856][ T36] audit: type=1400 audit(1789815013.006:481): avc: denied { create } for pid=3698 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 182.460974][ T3705] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 182.495014][ T359] usb 7-1: device descriptor read/8, error -71 [ 182.537592][ T36] audit: type=1400 audit(1789815013.136:482): avc: denied { create } for pid=3710 comm="syz.2.1267" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.612959][ T359] usb usb7-port1: unable to enumerate USB device [ 182.679365][ T36] audit: type=1400 audit(1789815013.276:483): avc: denied { unlink } for pid=295 comm="syz-executor" name="file5" dev="tmpfs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.755086][ T36] audit: type=1400 audit(1789815013.356:484): avc: denied { accept } for pid=3720 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 182.775516][ T3721] FAULT_INJECTION: forcing a failure. [ 182.775516][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 182.788215][ T428] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 182.788570][ T3721] CPU: 0 UID: 0 PID: 3721 Comm: syz.2.1272 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 182.788601][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.788615][ T3721] Call Trace: [ 182.788623][ T3721] [ 182.788631][ T3721] __dump_stack+0x21/0x30 [ 182.788667][ T3721] dump_stack_lvl+0x140/0x1c0 [ 182.788695][ T3721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 182.788734][ T3721] dump_stack+0x19/0x20 [ 182.788761][ T3721] should_fail_ex+0x3c2/0x510 [ 182.788786][ T3721] should_failslab+0xac/0x100 [ 182.788811][ T3721] __kmalloc_cache_noprof+0x41/0x470 [ 182.788835][ T3721] ? assoc_array_insert+0x9b/0x3660 [ 182.788862][ T3721] assoc_array_insert+0x9b/0x3660 [ 182.788889][ T3721] ? key_set_index_key+0x390/0x550 [ 182.788910][ T3721] ? __kasan_check_write+0x18/0x20 [ 182.788932][ T3721] ? down_write+0xee/0x2b0 [ 182.788958][ T3721] ? __cfi_down_write+0x10/0x10 [ 182.788984][ T3721] ? __cfi_key_set_index_key+0x10/0x10 [ 182.789004][ T3721] __key_link_begin+0xe5/0x220 [ 182.789025][ T3721] __key_create_or_update+0x4dd/0xa90 [ 182.789045][ T3721] ? security_key_permission+0x3d/0x100 [ 182.789067][ T3721] ? key_create_or_update+0x70/0x70 [ 182.789085][ T3721] ? __kasan_kmalloc+0x96/0xb0 [ 182.789111][ T3721] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 182.789140][ T3721] key_create_or_update+0x47/0x70 [ 182.789159][ T3721] __se_sys_add_key+0x355/0x4b0 [ 182.789181][ T3721] ? __x64_sys_add_key+0xf0/0xf0 [ 182.789204][ T3721] ? __kasan_check_write+0x18/0x20 [ 182.789224][ T3721] ? fpregs_restore_userregs+0x11c/0x260 [ 182.789249][ T3721] __x64_sys_add_key+0xc3/0xf0 [ 182.789272][ T3721] x64_sys_call+0x195f/0x2ee0 [ 182.789291][ T3721] do_syscall_64+0x57/0xf0 [ 182.789310][ T3721] ? clear_bhb_loop+0x50/0xa0 [ 182.789336][ T3721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.789359][ T3721] RIP: 0033:0x7f0588d9e159 [ 182.789377][ T3721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.789396][ T3721] RSP: 002b:00007f0589bd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 182.789420][ T3721] RAX: ffffffffffffffda RBX: 00007f0589025fa0 RCX: 00007f0588d9e159 [ 182.789436][ T3721] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 182.789452][ T3721] RBP: 00007f0588e3506b R08: ffffffffffffffff R09: 0000000000000000 [ 182.789467][ T3721] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 182.789481][ T3721] R13: 00007f0589026038 R14: 00007f0589025fa0 R15: 00007fffc8f84fe8 [ 182.789499][ T3721] [ 183.092407][ T3734] FAULT_INJECTION: forcing a failure. [ 183.092407][ T3734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.108323][ T3734] CPU: 0 UID: 0 PID: 3734 Comm: syz.4.1277 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 183.108359][ T3734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.108372][ T3734] Call Trace: [ 183.108379][ T3734] [ 183.108387][ T3734] __dump_stack+0x21/0x30 [ 183.108424][ T3734] dump_stack_lvl+0x140/0x1c0 [ 183.108454][ T3734] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.108483][ T3734] dump_stack+0x19/0x20 [ 183.108510][ T3734] should_fail_ex+0x3c2/0x510 [ 183.108537][ T3734] should_fail+0xf/0x20 [ 183.108560][ T3734] should_fail_usercopy+0x1e/0x30 [ 183.108586][ T3734] _copy_from_user+0x20/0xa0 [ 183.108615][ T3734] kvm_dev_ioctl_get_cpuid+0x166/0x1350 [ 183.108639][ T3734] ? ioctl_has_perm+0x39a/0x500 [ 183.108662][ T3734] ? __cfi_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 183.108686][ T3734] ? __kasan_check_write+0x18/0x20 [ 183.108708][ T3734] kvm_arch_dev_ioctl+0x3fd/0x990 [ 183.108729][ T3734] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 183.108749][ T3734] ? selinux_file_ioctl+0x732/0x1480 [ 183.108781][ T3734] ? vfs_write+0xbcf/0xfd0 [ 183.108805][ T3734] ? __cfi_vfs_write+0x10/0x10 [ 183.108826][ T3734] ? __kasan_check_write+0x18/0x20 [ 183.108846][ T3734] ? mutex_unlock+0x90/0x240 [ 183.108871][ T3734] ? __cfi_mutex_unlock+0x10/0x10 [ 183.108896][ T3734] kvm_dev_ioctl+0x48e/0x14c0 [ 183.108916][ T3734] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 183.108935][ T3734] ? bpf_lsm_file_ioctl+0xd/0x20 [ 183.108961][ T3734] ? security_file_ioctl+0x3e/0x110 [ 183.108983][ T3734] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 183.109002][ T3734] __se_sys_ioctl+0x123/0x1b0 [ 183.109028][ T3734] __x64_sys_ioctl+0x7f/0xa0 [ 183.109052][ T3734] x64_sys_call+0x1878/0x2ee0 [ 183.109071][ T3734] do_syscall_64+0x57/0xf0 [ 183.109090][ T3734] ? clear_bhb_loop+0x50/0xa0 [ 183.109115][ T3734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.109148][ T3734] RIP: 0033:0x7f6a1ed9e159 [ 183.109166][ T3734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.109185][ T3734] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.109209][ T3734] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 183.109225][ T3734] RDX: 0000200000000240 RSI: 00000000c008ae09 RDI: 0000000000000003 [ 183.109240][ T3734] RBP: 00007f6a1fc3e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.109255][ T3734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.109268][ T3734] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 183.109287][ T3734] [ 183.130080][ T3739] FAULT_INJECTION: forcing a failure. [ 183.130080][ T3739] name failslab, interval 1, probability 0, space 0, times 0 [ 183.138652][ T3737] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 183.140913][ T3739] CPU: 1 UID: 0 PID: 3739 Comm: syz.4.1280 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 183.140943][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.140957][ T3739] Call Trace: [ 183.140965][ T3739] [ 183.140973][ T3739] __dump_stack+0x21/0x30 [ 183.141008][ T3739] dump_stack_lvl+0x140/0x1c0 [ 183.141036][ T3739] ? __cfi_dump_stack_lvl+0x10/0x10 [ 183.141066][ T3739] ? __cfi___switch_to+0x10/0x10 [ 183.141098][ T3739] dump_stack+0x19/0x20 [ 183.141125][ T3739] should_fail_ex+0x3c2/0x510 [ 183.141150][ T3739] should_failslab+0xac/0x100 [ 183.141175][ T3739] kmem_cache_alloc_noprof+0x42/0x410 [ 183.141197][ T3739] ? vm_area_dup+0x3f/0x560 [ 183.141220][ T3739] vm_area_dup+0x3f/0x560 [ 183.141241][ T3739] ? __split_vma+0x1b8/0xc10 [ 183.141264][ T3739] __split_vma+0x1ce/0xc10 [ 183.141286][ T3739] ? __sched_text_start+0x10/0x10 [ 183.141308][ T3739] ? plist_add+0x4d4/0x570 [ 183.141328][ T3739] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 183.141353][ T3739] ? __cfi___futex_queue+0x10/0x10 [ 183.141379][ T3739] ? can_vma_merge_left+0x184/0x4b0 [ 183.141402][ T3739] vma_modify+0x60c/0x1540 [ 183.141426][ T3739] vma_modify_flags+0x182/0x1c0 [ 183.141450][ T3739] mprotect_fixup+0x432/0x8d0 [ 183.141474][ T3739] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 183.141498][ T3739] ? __cfi_mprotect_fixup+0x10/0x10 [ 183.141523][ T3739] ? bpf_lsm_file_mprotect+0xd/0x20 [ 183.141550][ T3739] do_mprotect_pkey+0xa85/0xe50 [ 183.141580][ T3739] ? prot_none_test+0x30/0x30 [ 183.141607][ T3739] ? mutex_unlock+0x90/0x240 [ 183.141641][ T3739] ? fput+0x1a4/0x230 [ 183.141668][ T3739] ? __kasan_check_write+0x18/0x20 [ 183.141688][ T3739] ? fpregs_restore_userregs+0x11c/0x260 [ 183.141714][ T3739] __x64_sys_mprotect+0x84/0xa0 [ 183.141739][ T3739] x64_sys_call+0x2590/0x2ee0 [ 183.141759][ T3739] do_syscall_64+0x57/0xf0 [ 183.141777][ T3739] ? clear_bhb_loop+0x50/0xa0 [ 183.141802][ T3739] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 183.141827][ T3739] RIP: 0033:0x7f6a1ed9e159 [ 183.141845][ T3739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.141864][ T3739] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 183.141889][ T3739] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 183.141905][ T3739] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000 [ 183.141920][ T3739] RBP: 00007f6a1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 183.141934][ T3739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.141948][ T3739] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 183.141966][ T3739] [ 183.203931][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.677291][ T428] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.689070][ T428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.698028][ T428] usb 6-1: config 0 descriptor?? [ 183.711850][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1282'. [ 183.721316][ T3744] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1282'. [ 183.905376][ T428] usbhid 6-1:0.0: can't add hid device: -71 [ 183.911399][ T428] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 183.921488][ T428] usb 6-1: USB disconnect, device number 46 [ 183.962924][ T359] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 183.972857][ T400] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 184.092867][ T359] usb 5-1: device descriptor read/64, error -71 [ 184.123977][ T400] usb 7-1: config 1 has an invalid interface number: 7 but max is 2 [ 184.132114][ T400] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.142301][ T400] usb 7-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 184.151327][ T400] usb 7-1: config 1 has no interface number 3 [ 184.157468][ T400] usb 7-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30 [ 184.168460][ T400] usb 7-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 184.181881][ T400] usb 7-1: config 1 interface 7 has no altsetting 0 [ 184.190052][ T400] usb 7-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 184.199255][ T400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.207380][ T400] usb 7-1: Product: syz [ 184.211611][ T400] usb 7-1: Manufacturer: syz [ 184.216635][ T400] usb 7-1: SerialNumber: syz [ 184.342823][ T31] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 184.350522][ T359] usb 5-1: device descriptor read/64, error -71 [ 184.503936][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.515132][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 184.524814][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.539054][ T31] usb 6-1: config 0 descriptor?? [ 184.547023][ T400] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 184.563055][ T400] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -71 [ 184.573235][ T400] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 184.585332][ T400] usb 7-1: USB disconnect, device number 24 [ 184.592832][ T359] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 184.603384][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.722811][ T359] usb 5-1: device descriptor read/64, error -71 [ 184.962827][ T359] usb 5-1: device descriptor read/64, error -71 [ 185.072920][ T359] usb usb5-port1: attempt power cycle [ 185.126707][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1285'. [ 185.353195][ T31] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 185.353486][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1268'. [ 185.361735][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input71 [ 185.402842][ T400] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 185.412796][ T359] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 185.433908][ T359] usb 5-1: device descriptor read/8, error -71 [ 185.552812][ T400] usb 7-1: Using ep0 maxpacket: 32 [ 185.559391][ T400] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.567964][ T400] usb 7-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 185.578601][ T359] usb 5-1: device descriptor read/8, error -71 [ 185.586039][ T400] usb 7-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 185.595155][ T400] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.603223][ T400] usb 7-1: Product: syz [ 185.607519][ T400] usb 7-1: Manufacturer: syz [ 185.612126][ T400] usb 7-1: SerialNumber: syz [ 185.822790][ T359] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 185.831425][ T400] usb 7-1: USB disconnect, device number 25 [ 185.841909][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.862770][ T359] usb 5-1: device descriptor read/8, error -71 [ 185.906619][ T1634] usb 6-1: USB disconnect, device number 47 [ 185.906744][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 185.993854][ T359] usb 5-1: device descriptor read/8, error -71 [ 186.103677][ T359] usb usb5-port1: unable to enumerate USB device [ 186.262882][ T1634] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 186.342857][ T1115] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 186.412824][ T1634] usb 6-1: Using ep0 maxpacket: 16 [ 186.419774][ T1634] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 186.428104][ T1634] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.438422][ T1634] usb 6-1: config 0 has no interface number 0 [ 186.444569][ T1634] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 186.454448][ T1634] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 186.464510][ T1634] usb 6-1: config 0 interface 98 has no altsetting 0 [ 186.472516][ T1634] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 186.481699][ T1634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.489964][ T1634] usb 6-1: Product: syz [ 186.494557][ T1634] usb 6-1: Manufacturer: syz [ 186.499378][ T1634] usb 6-1: SerialNumber: syz [ 186.505243][ T1115] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 186.513987][ T1634] usb 6-1: config 0 descriptor?? [ 186.519151][ T1115] usb 3-1: config 0 has no interface number 0 [ 186.525344][ T1115] usb 3-1: config 0 interface 41 has no altsetting 0 [ 186.525514][ T3754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.534224][ T1115] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 186.539657][ T3754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.548842][ T1115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.564861][ T1115] usb 3-1: Product: syz [ 186.569154][ T1115] usb 3-1: Manufacturer: syz [ 186.574285][ T1115] usb 3-1: SerialNumber: syz [ 186.579516][ T1115] usb 3-1: config 0 descriptor?? [ 186.728180][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.739598][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.759100][ T3758] bridge_slave_0: entered allmulticast mode [ 186.765794][ T3758] bridge_slave_0: entered promiscuous mode [ 186.773984][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.781207][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.788348][ T3754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.789911][ T3758] bridge_slave_1: entered allmulticast mode [ 186.802836][ T3754] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 186.803166][ T3758] bridge_slave_1: entered promiscuous mode [ 186.817271][ T1266] bridge_slave_1: left allmulticast mode [ 186.823305][ T1266] bridge_slave_1: left promiscuous mode [ 186.829033][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.837310][ T1266] bridge_slave_0: left allmulticast mode [ 186.843168][ T1266] bridge_slave_0: left promiscuous mode [ 186.849226][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.884624][ T3765] overlayfs: overlapping lowerdir path [ 186.977055][ T1266] veth1_macvtap: left promiscuous mode [ 186.982794][ T1266] veth0_vlan: left promiscuous mode [ 187.047992][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.055295][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.062609][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.068739][ T3768] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 187.069696][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.070578][ T514] rust_binder: 3767: undelivered TRANSACTION_ERROR: 29189 [ 187.101113][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.112991][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.122433][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.129535][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.142056][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.149166][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.185359][ T3758] veth0_vlan: entered promiscuous mode [ 187.200282][ T3758] veth1_macvtap: entered promiscuous mode [ 187.287006][ T3779] FAULT_INJECTION: forcing a failure. [ 187.287006][ T3779] name failslab, interval 1, probability 0, space 0, times 0 [ 187.299959][ T3779] CPU: 1 UID: 0 PID: 3779 Comm: syz.4.1297 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 187.299999][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.300014][ T3779] Call Trace: [ 187.300022][ T3779] [ 187.300030][ T3779] __dump_stack+0x21/0x30 [ 187.300069][ T3779] dump_stack_lvl+0x140/0x1c0 [ 187.300101][ T3779] ? __cfi_dump_stack_lvl+0x10/0x10 [ 187.300133][ T3779] dump_stack+0x19/0x20 [ 187.300160][ T3779] should_fail_ex+0x3c2/0x510 [ 187.300186][ T3779] should_failslab+0xac/0x100 [ 187.300214][ T3779] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 187.300253][ T3779] ? kstrdup_const+0x45/0x60 [ 187.300272][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300288][ T3779] ? _raw_spin_lock+0x92/0x120 [ 187.300302][ T3779] kstrdup+0x4d/0x130 [ 187.300313][ T3779] ? kstrdup_const+0x3a/0x60 [ 187.300335][ T3779] kstrdup_const+0x45/0x60 [ 187.300353][ T3779] __kernfs_new_node+0xaa/0x740 [ 187.300392][ T3779] ? down_write+0xee/0x2b0 [ 187.300427][ T3779] ? kernfs_new_node+0x280/0x280 [ 187.300444][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300458][ T3779] ? down_write+0xee/0x2b0 [ 187.300473][ T3779] ? __cfi_down_write+0x10/0x10 [ 187.300495][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300516][ T3779] kernfs_new_node+0x154/0x280 [ 187.300567][ T3779] __kernfs_create_file+0x52/0x280 [ 187.300590][ T3779] cgroup_addrm_files+0x775/0xac0 [ 187.300609][ T3779] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 187.300628][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300647][ T3779] ? _raw_spin_lock_irq+0x93/0x120 [ 187.300682][ T3779] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 187.300703][ T3779] css_populate_dir+0x2be/0x3d0 [ 187.300727][ T3779] cgroup_mkdir+0x124d/0x1600 [ 187.300747][ T3779] ? __cfi_cgroup_mkdir+0x10/0x10 [ 187.300763][ T3779] kernfs_iop_mkdir+0x1be/0x2d0 [ 187.300780][ T3779] vfs_mkdir+0x591/0x810 [ 187.300811][ T3779] do_mkdirat+0x240/0x530 [ 187.300842][ T3779] ? __cfi_do_mkdirat+0x10/0x10 [ 187.300873][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300887][ T3779] ? getname_flags+0x203/0x6b0 [ 187.300902][ T3779] ? __kasan_check_write+0x18/0x20 [ 187.300917][ T3779] __x64_sys_mkdirat+0x8b/0xa0 [ 187.300937][ T3779] x64_sys_call+0x2ba8/0x2ee0 [ 187.300959][ T3779] do_syscall_64+0x57/0xf0 [ 187.300980][ T3779] ? clear_bhb_loop+0x50/0xa0 [ 187.301007][ T3779] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.301029][ T3779] RIP: 0033:0x7f6a1ed9e159 [ 187.301042][ T3779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.301055][ T3779] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 187.301071][ T3779] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 187.301084][ T3779] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 187.301099][ T3779] RBP: 00007f6a1ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.301115][ T3779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.301129][ T3779] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 187.301147][ T3779] [ 187.301158][ T3779] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 [ 187.470315][ T514] wiimote 0005:057E:0330.0012: item fetching failed at offset 3/4 [ 187.631277][ T514] wiimote 0005:057E:0330.0012: HID parse failed [ 187.637695][ T514] wiimote 0005:057E:0330.0012: probe with driver wiimote failed with error -22 [ 187.718537][ T3785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1299'. [ 187.772290][ T3792] tap0: tun_chr_ioctl cmd 1074025678 [ 187.777926][ T3792] tap0: group set to 823 [ 187.790207][ T36] audit: type=1400 audit(1789815018.386:485): avc: denied { map } for pid=3791 comm="syz.7.1302" path="socket:[39836]" dev="sockfs" ino=39836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.815017][ T36] audit: type=1400 audit(1789815018.386:486): avc: denied { read } for pid=3791 comm="syz.7.1302" path="socket:[39836]" dev="sockfs" ino=39836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.892841][ T514] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 188.063962][ T514] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.074300][ T514] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.093780][ T514] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.103121][ T514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.111210][ T514] usb 5-1: Product: syz [ 188.116072][ T514] usb 5-1: Manufacturer: syz [ 188.120749][ T514] usb 5-1: SerialNumber: syz [ 188.127747][ T514] usb 5-1: config 0 descriptor?? [ 188.623043][ T1115] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 188.635718][ T1115] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 188.645892][ T1115] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 188.659819][ T1115] usb 3-1: USB disconnect, device number 60 [ 188.764324][ T36] audit: type=1400 audit(1789815019.366:487): avc: denied { connect } for pid=3795 comm="syz.2.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.844680][ T3802] tipc: Started in network mode [ 188.849722][ T3802] tipc: Node identity ac14140f, cluster identity 4096 [ 188.857175][ T3802] tipc: New replicast peer: 255.255.255.255 [ 188.865070][ T3802] tipc: Enabled bearer , priority 10 [ 188.899390][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 188.950840][ T1634] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.969693][ T1634] asix 6-1:0.98: probe with driver asix failed with error -71 [ 188.982642][ T1634] usb 6-1: USB disconnect, device number 48 [ 189.201809][ T3817] FAULT_INJECTION: forcing a failure. [ 189.201809][ T3817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.216265][ T3817] CPU: 0 UID: 0 PID: 3817 Comm: syz.5.1314 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 189.216303][ T3817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.216316][ T3817] Call Trace: [ 189.216323][ T3817] [ 189.216332][ T3817] __dump_stack+0x21/0x30 [ 189.216368][ T3817] dump_stack_lvl+0x140/0x1c0 [ 189.216396][ T3817] ? __cfi_dump_stack_lvl+0x10/0x10 [ 189.216426][ T3817] ? exc_page_fault+0x65/0xc0 [ 189.216455][ T3817] dump_stack+0x19/0x20 [ 189.216482][ T3817] should_fail_ex+0x3c2/0x510 [ 189.216511][ T3817] should_fail+0xf/0x20 [ 189.216534][ T3817] should_fail_usercopy+0x1e/0x30 [ 189.216560][ T3817] _copy_from_iter+0x3b6/0x1520 [ 189.216590][ T3817] ? _copy_from_iter+0x6a4/0x1520 [ 189.216620][ T3817] ? __cfi__copy_from_iter+0x10/0x10 [ 189.216649][ T3817] ? __cfi__copy_from_iter+0x10/0x10 [ 189.216677][ T3817] ? __check_object_size+0x54c/0x870 [ 189.216701][ T3817] ? __cfi___check_object_size+0x10/0x10 [ 189.216725][ T3817] copy_page_from_iter+0x1e5/0x2a0 [ 189.216755][ T3817] skb_copy_datagram_from_iter+0x300/0x6f0 [ 189.216785][ T3817] unix_stream_sendmsg+0x80f/0xfd0 [ 189.216816][ T3817] ? __cfi_unix_stream_sendmsg+0x10/0x10 [ 189.216842][ T3817] ? __check_object_size+0xdc/0x870 [ 189.216863][ T3817] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 189.216890][ T3817] ? __cfi___check_object_size+0x10/0x10 [ 189.216913][ T3817] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 189.216940][ T3817] ? security_socket_sendmsg+0x3d/0x100 [ 189.216969][ T3817] ____sys_sendmsg+0x99e/0xa00 [ 189.217000][ T3817] ? __sys_sendmsg_sock+0x50/0x50 [ 189.217030][ T3817] ? import_iovec+0x80/0xb0 [ 189.217050][ T3817] ___sys_sendmsg+0x2a6/0x370 [ 189.217079][ T3817] ? __sys_sendmsg+0x260/0x260 [ 189.217107][ T3817] ? proc_fail_nth_write+0x184/0x220 [ 189.217148][ T3817] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 189.217182][ T3817] ? __fget_files+0x2bc/0x330 [ 189.217210][ T3817] __x64_sys_sendmsg+0x1be/0x2a0 [ 189.217239][ T3817] ? fput+0x1a4/0x230 [ 189.217267][ T3817] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 189.217295][ T3817] ? ksys_write+0x1f3/0x260 [ 189.217320][ T3817] ? __kasan_check_read+0x15/0x20 [ 189.217343][ T3817] x64_sys_call+0x2a4c/0x2ee0 [ 189.217362][ T3817] do_syscall_64+0x57/0xf0 [ 189.217384][ T3817] ? clear_bhb_loop+0x50/0xa0 [ 189.217411][ T3817] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 189.217436][ T3817] RIP: 0033:0x7fd2c879e159 [ 189.217456][ T3817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.217473][ T3817] RSP: 002b:00007fd2c9604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.217497][ T3817] RAX: ffffffffffffffda RBX: 00007fd2c8a25fa0 RCX: 00007fd2c879e159 [ 189.217513][ T3817] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003 [ 189.217526][ T3817] RBP: 00007fd2c9604090 R08: 0000000000000000 R09: 0000000000000000 [ 189.217541][ T3817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.217554][ T3817] R13: 00007fd2c8a26038 R14: 00007fd2c8a25fa0 R15: 00007ffd6befcf78 [ 189.217572][ T3817] [ 189.262799][ T400] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 189.683981][ T400] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.692401][ T400] usb 3-1: config 0 has no interface number 0 [ 189.698913][ T400] usb 3-1: config 0 interface 41 has no altsetting 0 [ 189.707533][ T400] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 189.716865][ T400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.724990][ T400] usb 3-1: Product: syz [ 189.729359][ T400] usb 3-1: Manufacturer: syz [ 189.740020][ T400] usb 3-1: SerialNumber: syz [ 189.749354][ T400] usb 3-1: config 0 descriptor?? [ 189.982822][ T1115] tipc: Node number set to 2886997007 [ 190.004919][ T3822] FAULT_INJECTION: forcing a failure. [ 190.004919][ T3822] name failslab, interval 1, probability 0, space 0, times 0 [ 190.017767][ T3822] CPU: 0 UID: 0 PID: 3822 Comm: syz.5.1316 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 190.017808][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.017823][ T3822] Call Trace: [ 190.017831][ T3822] [ 190.017840][ T3822] __dump_stack+0x21/0x30 [ 190.017878][ T3822] dump_stack_lvl+0x140/0x1c0 [ 190.017910][ T3822] ? __cfi_dump_stack_lvl+0x10/0x10 [ 190.017942][ T3822] ? __kasan_check_write+0x18/0x20 [ 190.017966][ T3822] ? crypto_init_akcipher_ops_sig+0x8f/0xe0 [ 190.017991][ T3822] dump_stack+0x19/0x20 [ 190.018018][ T3822] should_fail_ex+0x3c2/0x510 [ 190.018045][ T3822] ? public_key_verify_signature+0x2f2/0xa40 [ 190.018079][ T3822] should_failslab+0xac/0x100 [ 190.018106][ T3822] __kmalloc_noprof+0x69/0x510 [ 190.018130][ T3822] ? public_key_verify_signature+0x2f2/0xa40 [ 190.018172][ T3822] public_key_verify_signature+0x2f2/0xa40 [ 190.018206][ T3822] ? __cfi_public_key_verify_signature+0x10/0x10 [ 190.018241][ T3822] ? asymmetric_key_generate_id+0x127/0x220 [ 190.018271][ T3822] x509_check_for_self_signed+0x367/0x470 [ 190.018295][ T3822] x509_cert_parse+0x649/0xbd0 [ 190.018326][ T3822] x509_key_preparse+0x6a/0x880 [ 190.018348][ T3822] ? __cfi_down_read+0x10/0x10 [ 190.018379][ T3822] asymmetric_key_preparse+0xb6/0x100 [ 190.018408][ T3822] __key_create_or_update+0x430/0xa90 [ 190.018429][ T3822] ? security_key_permission+0x3d/0x100 [ 190.018453][ T3822] ? key_create_or_update+0x70/0x70 [ 190.018473][ T3822] ? __kasan_kmalloc+0x96/0xb0 [ 190.018503][ T3822] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 190.018537][ T3822] key_create_or_update+0x47/0x70 [ 190.018557][ T3822] __se_sys_add_key+0x355/0x4b0 [ 190.018584][ T3822] ? __x64_sys_add_key+0xf0/0xf0 [ 190.018612][ T3822] ? __kasan_check_write+0x18/0x20 [ 190.018635][ T3822] ? fpregs_restore_userregs+0x11c/0x260 [ 190.018662][ T3822] __x64_sys_add_key+0xc3/0xf0 [ 190.018685][ T3822] x64_sys_call+0x195f/0x2ee0 [ 190.018705][ T3822] do_syscall_64+0x57/0xf0 [ 190.018726][ T3822] ? clear_bhb_loop+0x50/0xa0 [ 190.018753][ T3822] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 190.018778][ T3822] RIP: 0033:0x7fd2c879e159 [ 190.018799][ T3822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.018818][ T3822] RSP: 002b:00007fd2c9604028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 190.018844][ T3822] RAX: ffffffffffffffda RBX: 00007fd2c8a25fa0 RCX: 00007fd2c879e159 [ 190.018861][ T3822] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 190.018876][ T3822] RBP: 00007fd2c883506b R08: ffffffffffffffff R09: 0000000000000000 [ 190.018892][ T3822] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 190.018906][ T3822] R13: 00007fd2c8a26038 R14: 00007fd2c8a25fa0 R15: 00007ffd6befcf78 [ 190.018926][ T3822] [ 190.318649][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1317'. [ 190.584453][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1319'. [ 190.625050][ T36] audit: type=1400 audit(1789815021.226:488): avc: denied { write } for pid=3833 comm="syz.5.1321" path="socket:[39934]" dev="sockfs" ino=39934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.683221][ T317] usb 5-1: USB disconnect, device number 58 [ 191.562824][ T1115] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 191.713926][ T1115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.724478][ T1115] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.735107][ T1115] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 191.744354][ T1115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.752565][ T1115] usb 5-1: Product: syz [ 191.756912][ T1115] usb 5-1: Manufacturer: syz [ 191.761533][ T1115] usb 5-1: SerialNumber: syz [ 191.771157][ T1115] usb 5-1: config 0 descriptor?? [ 191.772986][ T400] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 191.787097][ T400] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 191.796964][ T400] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 191.814203][ T400] usb 3-1: USB disconnect, device number 61 [ 191.906802][ T3864] FAULT_INJECTION: forcing a failure. [ 191.906802][ T3864] name failslab, interval 1, probability 0, space 0, times 0 [ 191.919502][ T3864] CPU: 0 UID: 0 PID: 3864 Comm: syz.2.1334 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 191.919539][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.919552][ T3864] Call Trace: [ 191.919559][ T3864] [ 191.919568][ T3864] __dump_stack+0x21/0x30 [ 191.919602][ T3864] dump_stack_lvl+0x140/0x1c0 [ 191.919632][ T3864] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.919662][ T3864] dump_stack+0x19/0x20 [ 191.919690][ T3864] should_fail_ex+0x3c2/0x510 [ 191.919717][ T3864] ? asymmetric_key_generate_id+0x86/0x220 [ 191.919744][ T3864] should_failslab+0xac/0x100 [ 191.919768][ T3864] __kmalloc_noprof+0x69/0x510 [ 191.919789][ T3864] ? asymmetric_key_generate_id+0x86/0x220 [ 191.919815][ T3864] ? x509_note_OID+0x12a/0x190 [ 191.919843][ T3864] asymmetric_key_generate_id+0x86/0x220 [ 191.919871][ T3864] ? __cfi_x509_extract_key_data+0x10/0x10 [ 191.919892][ T3864] x509_process_extension+0x252/0xa20 [ 191.919914][ T3864] asn1_ber_decoder+0x14e2/0x1ff0 [ 191.919943][ T3864] ? asn1_ber_decoder+0x742/0x1ff0 [ 191.919973][ T3864] ? __cfi_asn1_ber_decoder+0x10/0x10 [ 191.920002][ T3864] ? kasan_save_alloc_info+0x3a/0x50 [ 191.920023][ T3864] ? __kasan_kmalloc+0x96/0xb0 [ 191.920059][ T3864] ? auto_movable_stats_account_group+0x110/0x140 [ 191.920084][ T3864] x509_cert_parse+0x1e3/0xbd0 [ 191.920115][ T3864] x509_key_preparse+0x6a/0x880 [ 191.920136][ T3864] ? __cfi_down_read+0x10/0x10 [ 191.920165][ T3864] asymmetric_key_preparse+0xb6/0x100 [ 191.920194][ T3864] __key_create_or_update+0x430/0xa90 [ 191.920214][ T3864] ? security_key_permission+0x3d/0x100 [ 191.920238][ T3864] ? key_create_or_update+0x70/0x70 [ 191.920259][ T3864] ? __kasan_kmalloc+0x96/0xb0 [ 191.920285][ T3864] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 191.920314][ T3864] key_create_or_update+0x47/0x70 [ 191.920335][ T3864] __se_sys_add_key+0x355/0x4b0 [ 191.920359][ T3864] ? __x64_sys_add_key+0xf0/0xf0 [ 191.920385][ T3864] __x64_sys_add_key+0xc3/0xf0 [ 191.920409][ T3864] x64_sys_call+0x195f/0x2ee0 [ 191.920430][ T3864] do_syscall_64+0x57/0xf0 [ 191.920472][ T3864] ? clear_bhb_loop+0x50/0xa0 [ 191.920500][ T3864] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 191.920525][ T3864] RIP: 0033:0x7f0588d9e159 [ 191.920548][ T3864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.920567][ T3864] RSP: 002b:00007f0589bd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 191.920592][ T3864] RAX: ffffffffffffffda RBX: 00007f0589025fa0 RCX: 00007f0588d9e159 [ 191.920608][ T3864] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 191.920624][ T3864] RBP: 00007f0589bd6090 R08: ffffffffffffffff R09: 0000000000000000 [ 191.920640][ T3864] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000002 [ 191.920654][ T3864] R13: 00007f0589026038 R14: 00007f0589025fa0 R15: 00007fffc8f84fe8 [ 191.920672][ T3864] [ 191.922813][ T31] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 192.356852][ T31] usb 6-1: device descriptor read/64, error -71 [ 192.622806][ T31] usb 6-1: device descriptor read/64, error -71 [ 192.872837][ T31] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 193.002895][ T31] usb 6-1: device descriptor read/64, error -71 [ 193.263548][ T31] usb 6-1: device descriptor read/64, error -71 [ 193.352790][ T359] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 193.372909][ T31] usb usb6-port1: attempt power cycle [ 193.513709][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.528068][ T359] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.540147][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.554084][ T359] usb 3-1: config 0 descriptor?? [ 193.740745][ T31] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 193.763054][ T359] usbhid 3-1:0.0: can't add hid device: -71 [ 193.770132][ T359] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.778689][ T31] usb 6-1: device descriptor read/8, error -71 [ 193.787719][ T359] usb 3-1: USB disconnect, device number 62 [ 193.913866][ T31] usb 6-1: device descriptor read/8, error -71 [ 194.153064][ T31] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 194.181732][ T31] usb 6-1: device descriptor read/8, error -71 [ 194.212793][ T359] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 194.318870][ T514] usb 5-1: USB disconnect, device number 59 [ 194.323593][ T31] usb 6-1: device descriptor read/8, error -71 [ 194.383991][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.400932][ T359] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 194.410723][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.424140][ T359] usb 3-1: config 0 descriptor?? [ 194.442909][ T31] usb usb6-port1: unable to enumerate USB device [ 194.450878][ T3887] FAULT_INJECTION: forcing a failure. [ 194.450878][ T3887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.464713][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.4.1343 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 194.464748][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.464761][ T3887] Call Trace: [ 194.464768][ T3887] [ 194.464777][ T3887] __dump_stack+0x21/0x30 [ 194.464812][ T3887] dump_stack_lvl+0x140/0x1c0 [ 194.464841][ T3887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 194.464870][ T3887] ? check_stack_object+0x138/0x150 [ 194.464894][ T3887] dump_stack+0x19/0x20 [ 194.464922][ T3887] should_fail_ex+0x3c2/0x510 [ 194.464950][ T3887] should_fail+0xf/0x20 [ 194.464972][ T3887] should_fail_usercopy+0x1e/0x30 [ 194.464999][ T3887] _copy_to_user+0x24/0xa0 [ 194.465028][ T3887] simple_read_from_buffer+0xed/0x160 [ 194.465058][ T3887] proc_fail_nth_read+0x1aa/0x220 [ 194.465089][ T3887] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 194.465119][ T3887] ? kvm_arch_dev_ioctl+0x417/0x990 [ 194.465140][ T3887] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 194.465161][ T3887] ? bpf_lsm_file_permission+0xd/0x20 [ 194.465190][ T3887] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 194.465219][ T3887] vfs_read+0x288/0xc70 [ 194.465241][ T3887] ? __cfi_vfs_read+0x10/0x10 [ 194.465262][ T3887] ? __kasan_check_write+0x18/0x20 [ 194.465284][ T3887] ? mutex_lock+0x97/0x1d0 [ 194.465310][ T3887] ? __cfi_mutex_lock+0x10/0x10 [ 194.465335][ T3887] ksys_read+0x145/0x260 [ 194.465357][ T3887] ? __cfi_ksys_read+0x10/0x10 [ 194.465380][ T3887] ? __kasan_check_write+0x18/0x20 [ 194.465400][ T3887] ? fput+0x1a4/0x230 [ 194.465428][ T3887] ? __kasan_check_read+0x15/0x20 [ 194.465449][ T3887] __x64_sys_read+0x7f/0x90 [ 194.465472][ T3887] x64_sys_call+0x2638/0x2ee0 [ 194.465493][ T3887] do_syscall_64+0x57/0xf0 [ 194.465521][ T3887] ? clear_bhb_loop+0x50/0xa0 [ 194.465549][ T3887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 194.465574][ T3887] RIP: 0033:0x7f6a1ed5e98e [ 194.465593][ T3887] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 194.465612][ T3887] RSP: 002b:00007f6a1fc3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.465638][ T3887] RAX: ffffffffffffffda RBX: 00007f6a1fc3e6c0 RCX: 00007f6a1ed5e98e [ 194.465656][ T3887] RDX: 000000000000000f RSI: 00007f6a1fc3e0a0 RDI: 0000000000000004 [ 194.465670][ T3887] RBP: 00007f6a1fc3e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.465684][ T3887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.465699][ T3887] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 194.465718][ T3887] [ 195.253184][ T359] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 195.260618][ T3878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'. [ 195.270382][ T359] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 195.848938][ T1115] usb 3-1: USB disconnect, device number 63 [ 195.849001][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 196.292841][ T1115] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 196.444442][ T1115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.454788][ T1115] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.465671][ T1115] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 196.475155][ T1115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.483391][ T1115] usb 3-1: Product: syz [ 196.487725][ T1115] usb 3-1: Manufacturer: syz [ 196.492393][ T1115] usb 3-1: SerialNumber: syz [ 196.498649][ T1115] usb 3-1: config 0 descriptor?? [ 196.588200][ T3917] netlink: 'syz.5.1355': attribute type 27 has an invalid length. [ 196.599083][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.606385][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.623025][ C1] net_ratelimit: 6971 callbacks suppressed [ 196.623049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.641151][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.653310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.665488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.677664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.690089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.702337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.714671][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.726835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 196.739191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 197.010548][ T3922] FAULT_INJECTION: forcing a failure. [ 197.010548][ T3922] name failslab, interval 1, probability 0, space 0, times 0 [ 197.033931][ T3922] CPU: 0 UID: 0 PID: 3922 Comm: syz.4.1356 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 197.033982][ T3922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.033997][ T3922] Call Trace: [ 197.034005][ T3922] [ 197.034014][ T3922] __dump_stack+0x21/0x30 [ 197.034055][ T3922] dump_stack_lvl+0x140/0x1c0 [ 197.034088][ T3922] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.034120][ T3922] ? mas_prev+0x47/0xa0 [ 197.034148][ T3922] dump_stack+0x19/0x20 [ 197.034178][ T3922] should_fail_ex+0x3c2/0x510 [ 197.034206][ T3922] should_failslab+0xac/0x100 [ 197.034234][ T3922] kmem_cache_alloc_noprof+0x42/0x410 [ 197.034258][ T3922] ? __anon_vma_prepare+0xec/0x590 [ 197.034283][ T3922] __anon_vma_prepare+0xec/0x590 [ 197.034307][ T3922] do_wp_page+0x2321/0x2e80 [ 197.034354][ T3922] ? plist_del+0x3f0/0x410 [ 197.034378][ T3922] ? folio_put+0x90/0x90 [ 197.034404][ T3922] ? __cfi__raw_spin_lock+0x10/0x10 [ 197.034427][ T3922] ? futex_wake+0x666/0x950 [ 197.034449][ T3922] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 197.034471][ T3922] handle_mm_fault+0x1017/0x1ba0 [ 197.034502][ T3922] ? __cfi_handle_mm_fault+0x10/0x10 [ 197.034528][ T3922] ? lock_vma_under_rcu+0x4cf/0x590 [ 197.034558][ T3922] ? __se_sys_futex+0x13c/0x320 [ 197.034590][ T3922] do_user_addr_fault+0x951/0x1230 [ 197.034613][ T3922] ? fpregs_restore_userregs+0x11c/0x260 [ 197.034643][ T3922] exc_page_fault+0x58/0xc0 [ 197.034670][ T3922] asm_exc_page_fault+0x2b/0x30 [ 197.034696][ T3922] RIP: 0033:0x7f6a1ec52c47 [ 197.034717][ T3922] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 197.034743][ T3922] RSP: 002b:00007f6a1fc3dfd0 EFLAGS: 00010246 [ 197.034765][ T3922] RAX: 00007f6a1ec52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 197.034781][ T3922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.034796][ T3922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.034811][ T3922] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 197.034825][ T3922] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 197.034845][ T3922] [ 197.034863][ T3922] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 197.635694][ T3934] EXT4-fs warning (device sda1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 197.827337][ T3934] FAULT_INJECTION: forcing a failure. [ 197.827337][ T3934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.849461][ T3934] CPU: 0 UID: 0 PID: 3934 Comm: syz.5.1361 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 197.849499][ T3934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.849513][ T3934] Call Trace: [ 197.849521][ T3934] [ 197.849530][ T3934] __dump_stack+0x21/0x30 [ 197.849566][ T3934] dump_stack_lvl+0x140/0x1c0 [ 197.849595][ T3934] ? __cfi_dump_stack_lvl+0x10/0x10 [ 197.849625][ T3934] ? vsnprintf+0x7b4/0x1ad0 [ 197.849655][ T3934] ? check_stack_object+0x10f/0x150 [ 197.849681][ T3934] dump_stack+0x19/0x20 [ 197.849709][ T3934] should_fail_ex+0x3c2/0x510 [ 197.849736][ T3934] should_fail+0xf/0x20 [ 197.849761][ T3934] should_fail_usercopy+0x1e/0x30 [ 197.849788][ T3934] _copy_from_user+0x20/0xa0 [ 197.849818][ T3934] kstrtouint_from_user+0xde/0x170 [ 197.849844][ T3934] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 197.849879][ T3934] ? selinux_file_permission+0x318/0xb60 [ 197.849904][ T3934] ? __cfi_selinux_file_permission+0x10/0x10 [ 197.849928][ T3934] proc_fail_nth_write+0x8f/0x220 [ 197.849959][ T3934] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 197.849991][ T3934] ? bpf_lsm_file_permission+0xd/0x20 [ 197.850020][ T3934] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 197.850049][ T3934] vfs_write+0x3c1/0xfd0 [ 197.850071][ T3934] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 197.850094][ T3934] ? __cfi_vfs_write+0x10/0x10 [ 197.850116][ T3934] ? __kasan_check_write+0x18/0x20 [ 197.850140][ T3934] ? mutex_lock+0x97/0x1d0 [ 197.850164][ T3934] ? __cfi_mutex_lock+0x10/0x10 [ 197.850190][ T3934] ksys_write+0x145/0x260 [ 197.850213][ T3934] ? xfd_validate_state+0x68/0x140 [ 197.850242][ T3934] ? __cfi_ksys_write+0x10/0x10 [ 197.850266][ T3934] ? __kasan_check_read+0x15/0x20 [ 197.850289][ T3934] __x64_sys_write+0x7f/0x90 [ 197.850313][ T3934] x64_sys_call+0x271c/0x2ee0 [ 197.850333][ T3934] do_syscall_64+0x57/0xf0 [ 197.850353][ T3934] ? clear_bhb_loop+0x50/0xa0 [ 197.850379][ T3934] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 197.850404][ T3934] RIP: 0033:0x7fd2c875e98e [ 197.850424][ T3934] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.850442][ T3934] RSP: 002b:00007fd2c9603fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.850472][ T3934] RAX: ffffffffffffffda RBX: 00007fd2c96046c0 RCX: 00007fd2c875e98e [ 197.850489][ T3934] RDX: 0000000000000001 RSI: 00007fd2c96040a0 RDI: 0000000000000004 [ 197.850505][ T3934] RBP: 00007fd2c9604090 R08: 0000000000000000 R09: 0000000000000000 [ 197.850519][ T3934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.850535][ T3934] R13: 00007fd2c8a26038 R14: 00007fd2c8a25fa0 R15: 00007ffd6befcf78 [ 197.850553][ T3934] [ 198.717219][ T3942] FAULT_INJECTION: forcing a failure. [ 198.717219][ T3942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.745525][ T3942] CPU: 0 UID: 0 PID: 3942 Comm: syz.4.1364 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 198.745566][ T3942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.745581][ T3942] Call Trace: [ 198.745588][ T3942] [ 198.745597][ T3942] __dump_stack+0x21/0x30 [ 198.745632][ T3942] dump_stack_lvl+0x140/0x1c0 [ 198.745661][ T3942] ? __cfi_dump_stack_lvl+0x10/0x10 [ 198.745691][ T3942] ? selinux_file_ioctl+0x732/0x1480 [ 198.745723][ T3942] dump_stack+0x19/0x20 [ 198.745750][ T3942] should_fail_ex+0x3c2/0x510 [ 198.745777][ T3942] should_fail+0xf/0x20 [ 198.745818][ T3942] should_fail_usercopy+0x1e/0x30 [ 198.745844][ T3942] _copy_from_user+0x20/0xa0 [ 198.745874][ T3942] vhost_vsock_dev_ioctl+0x141/0xdc0 [ 198.745915][ T3942] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 198.745945][ T3942] ? __fget_files+0x2bc/0x330 [ 198.745972][ T3942] ? bpf_lsm_file_ioctl+0xd/0x20 [ 198.746007][ T3942] ? security_file_ioctl+0x3e/0x110 [ 198.746029][ T3942] ? __cfi_vhost_vsock_dev_ioctl+0x10/0x10 [ 198.746060][ T3942] __se_sys_ioctl+0x123/0x1b0 [ 198.746087][ T3942] __x64_sys_ioctl+0x7f/0xa0 [ 198.746114][ T3942] x64_sys_call+0x1878/0x2ee0 [ 198.746134][ T3942] do_syscall_64+0x57/0xf0 [ 198.746155][ T3942] ? clear_bhb_loop+0x50/0xa0 [ 198.746183][ T3942] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 198.746209][ T3942] RIP: 0033:0x7f6a1ed9e159 [ 198.746229][ T3942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.746248][ T3942] RSP: 002b:00007f6a1fc3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.746275][ T3942] RAX: ffffffffffffffda RBX: 00007f6a1f025fa0 RCX: 00007f6a1ed9e159 [ 198.746293][ T3942] RDX: 0000000000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 198.746308][ T3942] RBP: 00007f6a1fc3e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.746323][ T3942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.746337][ T3942] R13: 00007f6a1f026038 R14: 00007f6a1f025fa0 R15: 00007ffe46c71a18 [ 198.746356][ T3942] [ 199.242920][ T514] usb 3-1: USB disconnect, device number 64 [ 199.268077][ T3944] netlink: 'syz.2.1365': attribute type 27 has an invalid length. [ 199.782774][ T514] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 199.842769][ T1634] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 199.934747][ T514] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.943411][ T514] usb 3-1: not running at top speed; connect to a high speed hub [ 199.951949][ T514] usb 3-1: config index 0 descriptor too short (expected 13031, got 139) [ 199.960984][ T514] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.981511][ T514] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.001853][ T514] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 200.014354][ T1634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.032832][ T1634] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 200.043672][ T514] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice=20.40 [ 200.062769][ T1634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.070938][ T514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.082847][ T1634] usb 5-1: config 0 descriptor?? [ 200.093982][ T514] usb 3-1: Product: syz [ 200.098202][ T514] usb 3-1: Manufacturer: syz [ 200.112879][ T514] usb 3-1: SerialNumber: syz [ 200.320874][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.335241][ T36] audit: type=1400 audit(1789815030.926:489): avc: denied { create } for pid=3950 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.363190][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.537542][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.554017][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.740350][ T514] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 200.755053][ T514] usb 3-1: 1:1 : sample bitwidth 190 in over sample bytes 3 [ 200.772955][ T514] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 200.793895][ T514] usb 3-1: unit 2 not found! [ 200.803026][ T514] usb 3-1: unit 0 not found! [ 200.829936][ T514] usb 3-1: USB disconnect, device number 65 [ 201.282417][ T3961] input: syz0 as /devices/virtual/input/input73 [ 201.618665][ T3963] FAULT_INJECTION: forcing a failure. [ 201.618665][ T3963] name failslab, interval 1, probability 0, space 0, times 0 [ 201.632749][ C1] net_ratelimit: 80287 callbacks suppressed [ 201.632774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.650770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.663254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.664775][ T3963] CPU: 0 UID: 0 PID: 3963 Comm: syz.2.1372 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 201.664806][ T3963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.664820][ T3963] Call Trace: [ 201.664828][ T3963] [ 201.664839][ T3963] __dump_stack+0x21/0x30 [ 201.664873][ T3963] dump_stack_lvl+0x140/0x1c0 [ 201.664902][ T3963] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.664939][ T3963] dump_stack+0x19/0x20 [ 201.664964][ T3963] should_fail_ex+0x3c2/0x510 [ 201.664991][ T3963] should_failslab+0xac/0x100 [ 201.665017][ T3963] kmem_cache_alloc_noprof+0x42/0x410 [ 201.665038][ T3963] ? __anon_vma_prepare+0xa5/0x590 [ 201.665060][ T3963] __anon_vma_prepare+0xa5/0x590 [ 201.665082][ T3963] do_wp_page+0x2321/0x2e80 [ 201.665106][ T3963] ? __cfi___futex_wait+0x10/0x10 [ 201.665127][ T3963] ? folio_put+0x90/0x90 [ 201.665149][ T3963] ? __cfi__raw_spin_lock+0x10/0x10 [ 201.665169][ T3963] ? futex_wake+0x666/0x950 [ 201.665187][ T3963] ? pte_offset_map_rw_nolock+0x236/0x2c0 [ 201.665207][ T3963] handle_mm_fault+0x1017/0x1ba0 [ 201.665233][ T3963] ? __cfi_handle_mm_fault+0x10/0x10 [ 201.665257][ T3963] ? lock_vma_under_rcu+0x4cf/0x590 [ 201.665283][ T3963] ? __se_sys_futex+0x13c/0x320 [ 201.665310][ T3963] do_user_addr_fault+0x951/0x1230 [ 201.665330][ T3963] ? fpregs_restore_userregs+0x11c/0x260 [ 201.665356][ T3963] exc_page_fault+0x58/0xc0 [ 201.665382][ T3963] asm_exc_page_fault+0x2b/0x30 [ 201.665405][ T3963] RIP: 0033:0x7f0588c52c47 [ 201.665424][ T3963] Code: 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 48 8b 59 38 <48> 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 [ 201.665442][ T3963] RSP: 002b:00007f0589bd5fd0 EFLAGS: 00010246 [ 201.665462][ T3963] RAX: 00007f0588c52c00 RBX: 0000000000000000 RCX: 0000000000000000 [ 201.665478][ T3963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.665491][ T3963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.665504][ T3963] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 201.665517][ T3963] R13: 00007f0589026038 R14: 00007f0589025fa0 R15: 00007fffc8f84fe8 [ 201.665536][ T3963] [ 201.665562][ T3963] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 201.675342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 201.782816][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 201.786608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.929740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 201.941888][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.954283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.962794][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 201.966419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.974686][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 201.983403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 201.992822][ T9] usb 6-1: config 179 has no interface number 0 [ 202.027254][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 202.058456][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 202.083780][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.108410][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 202.132775][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 202.167610][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 202.187805][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.207627][ T3965] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 202.342738][ C1] sched: DL replenish lagged too much [ 202.571382][ T3965] FAULT_INJECTION: forcing a failure. [ 202.571382][ T3965] name failslab, interval 1, probability 0, space 0, times 0 [ 202.603916][ T3965] CPU: 0 UID: 0 PID: 3965 Comm: syz.5.1373 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 202.603961][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.603976][ T3965] Call Trace: [ 202.603984][ T3965] [ 202.603994][ T3965] __dump_stack+0x21/0x30 [ 202.604031][ T3965] dump_stack_lvl+0x140/0x1c0 [ 202.604064][ T3965] ? __cfi_dump_stack_lvl+0x10/0x10 [ 202.604097][ T3965] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 202.604121][ T3965] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 202.604144][ T3965] dump_stack+0x19/0x20 [ 202.604175][ T3965] should_fail_ex+0x3c2/0x510 [ 202.604204][ T3965] should_failslab+0xac/0x100 [ 202.604233][ T3965] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 202.604257][ T3965] ? __sock_create+0x3a2/0x810 [ 202.604282][ T3965] ? __sys_socket+0xe1/0x1c0 [ 202.604306][ T3965] ? __d_alloc+0x42/0x8c0 [ 202.604327][ T3965] ? expand_files+0xda/0x6f0 [ 202.604355][ T3965] __d_alloc+0x42/0x8c0 [ 202.604377][ T3965] d_alloc_pseudo+0x23/0xc0 [ 202.604399][ T3965] alloc_file_pseudo+0xde/0x1f0 [ 202.604430][ T3965] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 202.604461][ T3965] ? _raw_spin_unlock+0x45/0x60 [ 202.604483][ T3965] sock_alloc_file+0xbe/0x2b0 [ 202.604506][ T3965] __sys_socket+0x14c/0x1c0 [ 202.604531][ T3965] __x64_sys_socket+0x7e/0x90 [ 202.604557][ T3965] x64_sys_call+0x2608/0x2ee0 [ 202.604577][ T3965] do_syscall_64+0x57/0xf0 [ 202.604597][ T3965] ? clear_bhb_loop+0x50/0xa0 [ 202.604624][ T3965] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 202.604650][ T3965] RIP: 0033:0x7fd2c879f9c7 [ 202.604670][ T3965] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.604690][ T3965] RSP: 002b:00007fd2c9602f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 202.604716][ T3965] RAX: ffffffffffffffda RBX: 00007fd2c8a25fa0 RCX: 00007fd2c879f9c7 [ 202.604734][ T3965] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 202.604749][ T3965] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 202.604765][ T3965] R10: 0000200000000e40 R11: 0000000000000286 R12: 0000000000000000 [ 202.604779][ T3965] R13: 00007fd2c8a26038 R14: 00007fd2c8a25fa0 R15: 00007ffd6befcf78 [ 202.604799][ T3965] [ 205.075353][ T9] usb 6-1: USB disconnect, device number 53 [ 205.085935][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.173577][ T1634] usbhid 5-1:0.0: can't add hid device: -32 [ 205.183444][ T1634] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 206.642763][ C0] net_ratelimit: 98943 callbacks suppressed [ 206.642787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.642796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.642889][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 206.648783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.661004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.672895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.685301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 206.697195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.709180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.721279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.615726][ T36] audit: type=1400 audit(1789815039.206:490): avc: denied { write } for pid=3972 comm="syz.5.1376" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.044500][ T36] audit: type=1400 audit(1789815039.206:491): avc: denied { open } for pid=3972 comm="syz.5.1376" path="/251/file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 211.652795][ C0] net_ratelimit: 110475 callbacks suppressed [ 211.652819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.652854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.658934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.671241][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 211.683173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.695409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.707476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.719487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.731604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.743873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.662743][ C1] net_ratelimit: 111404 callbacks suppressed [ 216.662766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.662775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.662876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.669017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 216.680902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.693072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.705232][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.717271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 216.729152][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.729249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.672742][ C1] net_ratelimit: 114286 callbacks suppressed [ 221.672765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.672811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.679016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 221.691143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.703117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.715263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.727716][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.739663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.751991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.764167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.682795][ C0] net_ratelimit: 115941 callbacks suppressed [ 226.682818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.682927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 226.688996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.701084][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.713077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.713156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.725124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 226.737059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 226.748909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.760981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.692770][ C0] net_ratelimit: 112070 callbacks suppressed [ 231.692794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.692878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 231.699135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.711142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.723133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.735278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 231.747252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.759242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 231.771336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.783256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.702807][ C0] net_ratelimit: 107770 callbacks suppressed [ 236.702831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.702913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 236.708962][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.721055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.733054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.745378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 236.757730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.769775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.781727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.793777][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.712759][ C1] net_ratelimit: 107361 callbacks suppressed [ 241.712782][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.712870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.718901][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 241.730832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.742864][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.755139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.767218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.779003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.791387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 241.803122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.722759][ C1] net_ratelimit: 109628 callbacks suppressed [ 246.722784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.722788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.722868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.729038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 246.740858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.753019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.764971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.777057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 246.788951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 246.800902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.732794][ C0] net_ratelimit: 112832 callbacks suppressed [ 251.732817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.732895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 251.739038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.751030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.763242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.775475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 251.787487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.799432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.811433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.823466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.742751][ C0] net_ratelimit: 111760 callbacks suppressed [ 256.742775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.742880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 256.748971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.761143][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.773178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.785109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.797090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.809454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 256.821677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.833695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 261.752780][ C0] net_ratelimit: 115497 callbacks suppressed [ 261.752804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.752842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 261.759091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.771345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.783404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.795780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 261.807871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.819757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.831936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.843999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.762747][ C1] net_ratelimit: 115739 callbacks suppressed [ 266.762771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.762850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.769036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.781037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.793291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 266.805051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.817385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.829371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.841504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 266.853405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.772729][ C0] net_ratelimit: 114077 callbacks suppressed [ 271.772754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.772792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 271.778851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.791097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.803082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.815070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 271.827260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.839295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.851308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 271.863281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.782708][ C0] net_ratelimit: 114975 callbacks suppressed [ 276.782733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.782771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.788827][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.800915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.812984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.825064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 276.837042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.849067][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.861112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.873063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.792717][ C1] net_ratelimit: 110479 callbacks suppressed [ 281.792741][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 281.792859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.798859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.810968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.822893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.834868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.846802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.858838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.870783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 281.882647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.802778][ C0] net_ratelimit: 95791 callbacks suppressed [ 286.802803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.802917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 286.808809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.820806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.832819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.844846][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 286.856903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.868878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 286.880929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.893485][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.812751][ C0] net_ratelimit: 92069 callbacks suppressed [ 291.812775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.812829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.818883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.831313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.843334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.855643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 291.868034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.880037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.892262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.904854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.822742][ C0] net_ratelimit: 91954 callbacks suppressed [ 296.822767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.822959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 296.828934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.841098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 296.853104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.864958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.876935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.889042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 296.901089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.912967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.832729][ C0] net_ratelimit: 92877 callbacks suppressed [ 301.832754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.832806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 301.838788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.850761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.862814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.874818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.886730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.899001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.910797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.922972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 306.842731][ C1] net_ratelimit: 96003 callbacks suppressed [ 306.842754][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.842875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.848868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.861287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.873682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.885889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.898617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 306.910565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.922731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.935330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.852694][ C0] net_ratelimit: 92368 callbacks suppressed [ 311.852719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.852738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.852869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 311.858748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.871009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.883180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.895459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.907514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.919736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.932986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.862728][ C1] net_ratelimit: 97513 callbacks suppressed [ 316.862753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 316.862761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.862959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.868915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.880944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.893024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 316.905367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.917374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.929580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.941648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.872705][ C0] net_ratelimit: 95831 callbacks suppressed [ 321.872729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.872825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.878841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.891804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.905153][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.917233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 321.929255][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.941849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.954346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.967007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 326.033303][ T3988] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.040572][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.074314][ T3988] bridge_slave_0: entered allmulticast mode [ 326.093640][ T3988] bridge_slave_0: entered promiscuous mode [ 326.478358][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.566025][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.593193][ T3988] bridge_slave_1: entered allmulticast mode [ 326.634160][ T3988] bridge_slave_1: entered promiscuous mode [ 326.882742][ C0] net_ratelimit: 94528 callbacks suppressed [ 326.882767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.882797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.888876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.901104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 326.913189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.925992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.938334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.950380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.962454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.974420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.572835][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.580110][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.612842][ T3985] bridge_slave_0: entered allmulticast mode [ 328.649062][ T3985] bridge_slave_0: entered promiscuous mode [ 329.085879][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.114645][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.121906][ T3985] bridge_slave_1: entered allmulticast mode [ 329.188810][ T3985] bridge_slave_1: entered promiscuous mode [ 329.735859][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.844871][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.869703][ T3989] bridge_slave_0: entered allmulticast mode [ 329.905180][ T3989] bridge_slave_0: entered promiscuous mode [ 330.003462][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.010645][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.053669][ T3990] bridge_slave_0: entered allmulticast mode [ 330.076722][ T3990] bridge_slave_0: entered promiscuous mode [ 330.495899][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.534716][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.542020][ T3989] bridge_slave_1: entered allmulticast mode [ 330.642754][ T3989] bridge_slave_1: entered promiscuous mode [ 330.871291][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.881786][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.013361][ T3990] bridge_slave_1: entered allmulticast mode [ 331.043134][ T3990] bridge_slave_1: entered promiscuous mode [ 331.892698][ C0] net_ratelimit: 95505 callbacks suppressed [ 331.892721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.892849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.899017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.911109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 331.923154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.934980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.947090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.959162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 331.971305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.983237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.902715][ C0] net_ratelimit: 105141 callbacks suppressed [ 336.902738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.902770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.908902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.921352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 336.934054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.945955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.958707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.970853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.983171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.995645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.912722][ C1] net_ratelimit: 101703 callbacks suppressed [ 341.912745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.912820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.919213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 341.932136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.945085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.957417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.969676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 341.981854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.993686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.005833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.922683][ C0] net_ratelimit: 97917 callbacks suppressed [ 346.922709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.922745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 346.928971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.941327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.953899][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.965946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.977938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.990531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.002310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.014545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 351.932699][ C1] net_ratelimit: 102947 callbacks suppressed [ 351.932724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 351.932726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.932788][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.938812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.950855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.963005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.974877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.986916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 351.998718][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.010722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.942736][ C0] net_ratelimit: 104611 callbacks suppressed [ 356.942761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.942854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.948894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.961329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 356.973194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.985397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.997548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.009676][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 357.021775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 357.033813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.377704][ T37] INFO: task syz.7.1299:3786 blocked for more than 123 seconds. [ 357.440615][ T37] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.496285][ T36] audit: type=1400 audit(1789815188.086:492): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1580]" dev="pipefs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 357.593636][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.602386][ T37] task:syz.7.1299 state:D stack:0 pid:3786 tgid:3786 ppid:3758 flags:0x00004006 [ 357.743899][ T37] Call Trace: [ 357.747255][ T37] [ 357.750220][ T37] __schedule+0x1496/0x20b0 [ 357.754824][ T37] ? __sched_text_start+0x10/0x10 [ 357.759886][ T37] ? __kasan_check_write+0x18/0x20 [ 357.765175][ T37] ? _raw_spin_lock+0x92/0x120 [ 357.770238][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 357.775665][ T37] schedule+0xc5/0x240 [ 357.780297][ T37] schedule_preempt_disabled+0x14/0x30 [ 357.785813][ T37] __mutex_lock+0x902/0x1b90 [ 357.790879][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 357.797830][ T37] ? __kasan_check_write+0x18/0x20 [ 357.803058][ T37] ? _raw_spin_lock+0x92/0x120 [ 357.808005][ T37] ? __kasan_check_write+0x18/0x20 [ 357.813313][ T37] ? wake_up_q+0x10a/0x1c0 [ 357.817744][ T37] ? __mutex_unlock_slowpath+0x48f/0x780 [ 357.823574][ T37] ? mutex_unlock+0x240/0x240 [ 357.828261][ T37] __mutex_lock_slowpath+0xe/0x20 [ 357.833326][ T37] mutex_lock+0x113/0x1d0 [ 357.837668][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 357.842614][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 357.847852][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 357.852993][ T37] rcu_barrier+0x4d/0x580 [ 357.857428][ T37] ? __kasan_slab_free+0x6a/0x80 [ 357.862384][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 357.867592][ T37] netdev_run_todo+0x118/0xce0 [ 357.872456][ T37] ? kvfree+0x39/0x50 [ 357.876570][ T37] ? netdev_state_change+0xaa/0x240 [ 357.882089][ T37] ? __cfi_netdev_run_todo+0x10/0x10 [ 357.887525][ T37] ? __cfi_tun_chr_close+0x10/0x10 [ 357.892688][ T37] rtnl_unlock+0x12/0x20 [ 357.896951][ T37] tun_chr_close+0xc5/0x150 [ 357.901572][ T37] __fput+0x20b/0xa30 [ 357.905843][ T37] ____fput+0x20/0x30 [ 357.909963][ T37] task_work_run+0x1e5/0x260 [ 357.914627][ T37] ? __cfi_task_work_run+0x10/0x10 [ 357.919867][ T37] ? free_nsproxy+0x223/0x290 [ 357.924578][ T37] do_exit+0xa46/0x2850 [ 357.928839][ T37] ? __cfi_do_exit+0x10/0x10 [ 357.933563][ T37] ? __kasan_check_write+0x18/0x20 [ 357.938683][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 357.943816][ T37] ? __kasan_check_read+0x15/0x20 [ 357.948937][ T37] do_group_exit+0x21f/0x2f0 [ 357.953560][ T37] ? cgroup_leave_frozen+0x16a/0x2a0 [ 357.958858][ T37] get_signal+0x134c/0x1490 [ 357.963387][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 357.968944][ T37] ? common_nsleep+0x93/0xb0 [ 357.973772][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 357.979933][ T37] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 357.985678][ T37] ? __kasan_check_read+0x15/0x20 [ 357.990797][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 357.996902][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 358.002489][ T37] do_syscall_64+0x63/0xf0 [ 358.006925][ T37] ? clear_bhb_loop+0x50/0xa0 [ 358.011706][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 358.017817][ T37] RIP: 0033:0x7f329615e98e [ 358.022244][ T37] RSP: 002b:00007f3296f95f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 358.030689][ T37] RAX: fffffffffffffdfc RBX: 00007f3296f966c0 RCX: 00007f329615e98e [ 358.038687][ T37] RDX: 00007f3296f95fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.046758][ T37] RBP: 00007f329623506b R08: 0000000000000000 R09: 0000000000000000 [ 358.054921][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.063007][ T37] R13: 00007f3296426038 R14: 00007f3296425fa0 R15: 00007ffe459ffd38 [ 358.071077][ T37] [ 358.094324][ T37] INFO: task syz.4.1370:3954 blocked for more than 124 seconds. [ 358.148804][ T37] Not tainted syzkaller #0 [ 358.153974][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.162793][ T37] task:syz.4.1370 state:D stack:0 pid:3954 tgid:3954 ppid:1199 flags:0x00004006 [ 358.173101][ T37] Call Trace: [ 358.176413][ T37] [ 358.179371][ T37] __schedule+0x1496/0x20b0 [ 358.183956][ T37] ? __sched_text_start+0x10/0x10 [ 358.189018][ T37] ? mutex_spin_on_owner+0xb9/0x460 [ 358.194280][ T37] ? __virt_addr_valid+0x2a1/0x370 [ 358.199455][ T37] ? __kasan_check_write+0x18/0x20 [ 358.204920][ T37] ? _raw_spin_lock+0x92/0x120 [ 358.209724][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 358.215062][ T37] schedule+0xc5/0x240 [ 358.219253][ T37] schedule_preempt_disabled+0x14/0x30 [ 358.224766][ T37] __mutex_lock+0x902/0x1b90 [ 358.229740][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 358.236672][ T37] ? wait_for_common+0x56d/0x650 [ 358.241648][ T37] ? xas_start+0x31e/0x3e0 [ 358.246276][ T37] __mutex_lock_slowpath+0xe/0x20 [ 358.251388][ T37] mutex_lock+0x113/0x1d0 [ 358.255987][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 358.260887][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 358.267449][ T37] ? xa_find+0x145/0x170 [ 358.271723][ T37] rcu_barrier+0x4d/0x580 [ 358.276136][ T37] ? __kasan_check_write+0x18/0x20 [ 358.281317][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 358.286898][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 358.292359][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 358.297199][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 358.302443][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 358.308240][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 358.314150][ T37] kvm_put_kvm+0xadf/0x12d0 [ 358.318880][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 358.324521][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 358.329858][ T37] kvm_vm_release+0x47/0x70 [ 358.334880][ T37] __fput+0x20b/0xa30 [ 358.339008][ T37] ____fput+0x20/0x30 [ 358.343058][ T37] task_work_run+0x1e5/0x260 [ 358.347778][ T37] ? __cfi_task_work_run+0x10/0x10 [ 358.353146][ T37] ? __kasan_check_write+0x18/0x20 [ 358.358315][ T37] do_exit+0xa46/0x2850 [ 358.362507][ T37] ? __cfi_do_exit+0x10/0x10 [ 358.367244][ T37] ? usleep_range_state+0x150/0x150 [ 358.372564][ T37] ? __hrtimer_init+0x74/0x1c0 [ 358.377681][ T37] ? __kasan_check_write+0x18/0x20 [ 358.382818][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 358.388021][ T37] do_group_exit+0x21f/0x2f0 [ 358.392620][ T37] ? __kasan_check_write+0x18/0x20 [ 358.397761][ T37] ? recalc_sigpending+0x184/0x1d0 [ 358.402895][ T37] get_signal+0x134c/0x1490 [ 358.407413][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 358.412973][ T37] ? common_nsleep+0x93/0xb0 [ 358.417770][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 358.424094][ T37] ? __se_sys_clock_nanosleep+0x321/0x3b0 [ 358.429850][ T37] ? __kasan_check_write+0x18/0x20 [ 358.435077][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 358.440653][ T37] do_syscall_64+0x63/0xf0 [ 358.445090][ T37] ? clear_bhb_loop+0x50/0xa0 [ 358.449875][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 358.455825][ T37] RIP: 0033:0x7f6a1ed5e98e [ 358.460357][ T37] RSP: 002b:00007ffe46c71af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 358.469254][ T37] RAX: 0000000000000000 RBX: 000055555f921500 RCX: 00007f6a1ed5e98e [ 358.477338][ T37] RDX: 00007ffe46c71b50 RSI: 0000000000000000 RDI: 0000000000000000 [ 358.485341][ T37] RBP: 00007f6a1f027da0 R08: 0000000000000000 R09: 0000000000000000 [ 358.493513][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000031bd8 [ 358.501545][ T37] R13: 00007f6a1f02609c R14: 0000000000031052 R15: 00007f6a1f026090 [ 358.509889][ T37] [ 358.934297][ T37] INFO: task syz.5.1376:3974 blocked for more than 125 seconds. [ 358.942354][ T37] Not tainted syzkaller #0 [ 359.006396][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 359.015242][ T37] task:syz.5.1376 state:D stack:0 pid:3974 tgid:3972 ppid:1356 flags:0x00004006 [ 359.025752][ T37] Call Trace: [ 359.029055][ T37] [ 359.032013][ T37] __schedule+0x1496/0x20b0 [ 359.036601][ T37] ? __sched_text_start+0x10/0x10 [ 359.042086][ T37] ? _raw_spin_trylock+0xb5/0x140 [ 359.047598][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 359.053464][ T37] ? wake_nocb_gp+0x120/0x1b0 [ 359.058403][ T37] ? rcu_barrier_entrain+0x382/0x530 [ 359.064036][ T37] schedule+0xc5/0x240 [ 359.068263][ T37] schedule_timeout+0xc7/0x3b0 [ 359.073287][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 359.078883][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 359.084584][ T37] ? rcu_barrier_handler+0x9b/0xe0 [ 359.089738][ T37] ? generic_exec_single+0x206/0x500 [ 359.095279][ T37] wait_for_common+0x368/0x650 [ 359.100166][ T37] ? wait_for_completion+0x40/0x40 [ 359.105328][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 359.110817][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x6d7/0x730 [ 359.117387][ T37] wait_for_completion+0x1c/0x40 [ 359.123174][ T37] rcu_barrier+0x45a/0x580 [ 359.127798][ T37] kvm_mmu_uninit_tdp_mmu+0x1ea/0x210 [ 359.133956][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 359.138763][ T37] kvm_arch_destroy_vm+0x395/0x410 [ 359.143931][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 359.149949][ T37] ? mmu_notifier_unregister+0x2e9/0x360 [ 359.155900][ T37] kvm_put_kvm+0xadf/0x12d0 [ 359.160576][ T37] ? kvm_irqfd_release+0x1b5/0x1d0 [ 359.165772][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 359.171021][ T37] kvm_vm_release+0x47/0x70 [ 359.175589][ T37] __fput+0x20b/0xa30 [ 359.179608][ T37] ____fput+0x20/0x30 [ 359.183750][ T37] task_work_run+0x1e5/0x260 [ 359.188372][ T37] ? __cfi_task_work_run+0x10/0x10 [ 359.193632][ T37] ? __kasan_check_write+0x18/0x20 [ 359.199055][ T37] do_exit+0xa46/0x2850 [ 359.203282][ T37] ? __cfi_do_exit+0x10/0x10 [ 359.208000][ T37] ? __kasan_check_write+0x18/0x20 [ 359.213188][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 359.218448][ T37] do_group_exit+0x21f/0x2f0 [ 359.223205][ T37] ? __kasan_check_write+0x18/0x20 [ 359.228666][ T37] ? recalc_sigpending+0x184/0x1d0 [ 359.234011][ T37] get_signal+0x134c/0x1490 [ 359.238567][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 359.244285][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 359.250776][ T37] ? ksys_mmap_pgoff+0xfa/0x1e0 [ 359.256016][ T37] ? __kasan_check_write+0x18/0x20 [ 359.261357][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 359.267167][ T37] do_syscall_64+0x63/0xf0 [ 359.271718][ T37] ? clear_bhb_loop+0x50/0xa0 [ 359.276478][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 359.282410][ T37] RIP: 0033:0x7fd2c879e159 [ 359.287083][ T37] RSP: 002b:00007fd2c95e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 359.295848][ T37] RAX: 0000200000000000 RBX: 00007fd2c8a26090 RCX: 00007fd2c879e159 [ 359.304267][ T37] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 359.312451][ T37] RBP: 00007fd2c883506b R08: ffffffffffffffff R09: 000000006a855000 [ 359.320779][ T37] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 359.329189][ T37] R13: 00007fd2c8a26128 R14: 00007fd2c8a26090 R15: 00007ffd6befcf78 [ 359.337683][ T37] [ 360.818691][ T37] NMI backtrace for cpu 1 [ 360.818715][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 360.818748][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.818762][ T37] Call Trace: [ 360.818770][ T37] [ 360.818780][ T37] __dump_stack+0x21/0x30 [ 360.818815][ T37] dump_stack_lvl+0x140/0x1c0 [ 360.818845][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 360.818884][ T37] dump_stack+0x19/0x20 [ 360.818913][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 360.818936][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 360.818956][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 360.818987][ T37] ? sched_show_task+0x371/0x530 [ 360.819016][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.819045][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 360.819074][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 360.819095][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 360.819126][ T37] cpumask_backtrace+0x1f/0x30 [ 360.819145][ T37] watchdog+0xe45/0xf90 [ 360.819169][ T37] ? __kasan_check_write+0x18/0x20 [ 360.819195][ T37] ? __cfi_watchdog+0x10/0x10 [ 360.819218][ T37] ? __kasan_check_read+0x15/0x20 [ 360.819241][ T37] ? __kthread_parkme+0x12f/0x180 [ 360.819264][ T37] ? schedule+0xc5/0x240 [ 360.819286][ T37] kthread+0x2c4/0x360 [ 360.819310][ T37] ? __cfi_watchdog+0x10/0x10 [ 360.819333][ T37] ? __cfi_kthread+0x10/0x10 [ 360.819358][ T37] ret_from_fork+0x64/0xa0 [ 360.819387][ T37] ? __cfi_kthread+0x10/0x10 [ 360.819411][ T37] ret_from_fork_asm+0x1a/0x30 [ 360.819434][ T37] [ 360.819443][ T37] Sending NMI from CPU 1 to CPUs 0: [ 361.036218][ C0] NMI backtrace for cpu 0 [ 361.036234][ C0] CPU: 0 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 361.036258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.036268][ C0] RIP: 0010:unwind_next_frame+0x8/0x6b0 [ 361.036295][ C0] Code: c1 03 38 c1 7c 96 48 89 df e8 24 cd 9b 00 eb 8c 66 90 b8 81 63 34 74 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 48 89 fb 49 be 00 00 00 00 [ 361.036309][ C0] RSP: 0018:ffffc90000007178 EFLAGS: 00000202 [ 361.036326][ C0] RAX: 0000000000000001 RBX: ffffc90000007240 RCX: 0000000000000e00 [ 361.036338][ C0] RDX: dffffc0000000000 RSI: ffffffff8516e4b5 RDI: ffffc90000007188 [ 361.036351][ C0] RBP: ffffc90000007178 R08: ffffc90000007250 R09: ffffc90000007248 [ 361.036363][ C0] R10: 0000000000000007 R11: ffffffff8175a7a0 R12: ffff88810367a600 [ 361.036375][ C0] R13: ffff8881215bc000 R14: ffffffff8175a7a0 R15: ffffc90000007188 [ 361.036388][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 361.036403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.036415][ C0] CR2: 000055735b1bbaf8 CR3: 000000010c7c4000 CR4: 00000000003526b0 [ 361.036432][ C0] Call Trace: [ 361.036438][ C0] [ 361.036446][ C0] arch_stack_walk+0x138/0x170 [ 361.036464][ C0] ? br_handle_frame_finish+0x385/0x1620 [ 361.036483][ C0] stack_trace_save+0xaa/0x100 [ 361.036501][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 361.036519][ C0] ? fib6_table_lookup+0x855/0x980 [ 361.036540][ C0] kasan_save_track+0x3e/0x80 [ 361.036558][ C0] ? kasan_save_track+0x3e/0x80 [ 361.036575][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 361.036591][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 361.036609][ C0] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 361.036627][ C0] ? __alloc_skb+0x10c/0x360 [ 361.036645][ C0] ? fdb_notify+0x78/0x150 [ 361.036665][ C0] ? br_fdb_update+0x5b7/0x6c0 [ 361.036685][ C0] ? br_handle_frame_finish+0x385/0x1620 [ 361.036706][ C0] kasan_save_alloc_info+0x3a/0x50 [ 361.036721][ C0] __kasan_slab_alloc+0x73/0x90 [ 361.036746][ C0] kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 361.036763][ C0] ? __alloc_skb+0x10c/0x360 [ 361.036781][ C0] __alloc_skb+0x10c/0x360 [ 361.036799][ C0] fdb_notify+0x78/0x150 [ 361.036819][ C0] br_fdb_update+0x5b7/0x6c0 [ 361.036841][ C0] ? __cfi_br_fdb_update+0x10/0x10 [ 361.036861][ C0] ? kmem_cache_free+0x1bd/0x4f0 [ 361.036878][ C0] ? sk_skb_reason_drop+0xd8/0x310 [ 361.036897][ C0] ? ip6_mc_input+0x433/0x680 [ 361.036922][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 361.036941][ C0] ? process_backlog+0x472/0xaf0 [ 361.036960][ C0] ? __napi_poll+0xcd/0x600 [ 361.036978][ C0] ? net_rx_action+0x5dc/0xd70 [ 361.036997][ C0] ? handle_softirqs+0x1aa/0x620 [ 361.037013][ C0] br_handle_frame_finish+0x385/0x1620 [ 361.037029][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 361.037046][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 361.037064][ C0] br_handle_frame+0x5a5/0xba0 [ 361.037081][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 361.037096][ C0] __netif_receive_skb_core+0xfc4/0x3a70 [ 361.037116][ C0] ? __kfree_skb+0x18f/0x210 [ 361.037134][ C0] ? ip6_mc_input+0x433/0x680 [ 361.037153][ C0] ? ip6_mc_input+0x433/0x680 [ 361.037172][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 361.037190][ C0] ? __asan_memset+0x39/0x50 [ 361.037206][ C0] ? qdisc_run_end+0x120/0x120 [ 361.037224][ C0] ? __cfi_ip6_mc_input+0x10/0x10 [ 361.037261][ C0] ? ip6_rcv_finish+0x341/0x3c0 [ 361.037280][ C0] ? ipv6_rcv+0xf1/0x240 [ 361.037297][ C0] ? __cfi_arp_process+0x10/0x10 [ 361.037315][ C0] ? __cfi_ipv6_rcv+0x10/0x10 [ 361.037334][ C0] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 361.037353][ C0] process_backlog+0x40b/0xaf0 [ 361.037375][ C0] __napi_poll+0xcd/0x600 [ 361.037393][ C0] net_rx_action+0x5dc/0xd70 [ 361.037415][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 361.037434][ C0] ? sched_clock+0x44/0x60 [ 361.037455][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 361.037479][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 361.037501][ C0] handle_softirqs+0x1aa/0x620 [ 361.037518][ C0] ? __cfi_tlb_remove_table_rcu+0x10/0x10 [ 361.037539][ C0] __do_softirq+0xf/0x16 [ 361.037556][ C0] do_softirq+0xb8/0x110 [ 361.037571][ C0] [ 361.037577][ C0] [ 361.037584][ C0] ? __cfi_do_softirq+0x10/0x10 [ 361.037599][ C0] ? __kasan_slab_free+0x6a/0x80 [ 361.037619][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 361.037640][ C0] __local_bh_enable_ip+0x74/0x80 [ 361.037656][ C0] rcu_do_batch+0x590/0xcb0 [ 361.037674][ C0] ? rcu_core+0xcc0/0xcc0 [ 361.037688][ C0] ? __kasan_check_write+0x18/0x20 [ 361.037705][ C0] ? __kasan_check_read+0x15/0x20 [ 361.037720][ C0] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 361.037737][ C0] rcu_nocb_cb_kthread+0x533/0xb60 [ 361.037754][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 361.037771][ C0] ? __kasan_check_write+0x18/0x20 [ 361.037786][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 361.037802][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 361.037817][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 361.037833][ C0] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 361.037850][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 361.037867][ C0] ? __kasan_check_read+0x15/0x20 [ 361.037883][ C0] ? __kthread_parkme+0x12f/0x180 [ 361.037900][ C0] ? schedule+0xc5/0x240 [ 361.037923][ C0] kthread+0x2c4/0x360 [ 361.037940][ C0] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 361.037956][ C0] ? __cfi_kthread+0x10/0x10 [ 361.037974][ C0] ret_from_fork+0x64/0xa0 [ 361.037996][ C0] ? __cfi_kthread+0x10/0x10 [ 361.038014][ C0] ret_from_fork_asm+0x1a/0x30 [ 361.038030][ C0] [ 361.952707][ C0] net_ratelimit: 82105 callbacks suppressed [ 361.952733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.952741][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.952893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 361.958748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.970831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.982837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.994827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 362.007117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.018943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 362.030931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.962728][ C0] net_ratelimit: 104049 callbacks suppressed [ 366.962760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.962820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.968839][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.980919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 366.992769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.005040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 367.017038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.029004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:0e:58:4e:39:91:e7, vlan:0) [ 367.040876][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 367.053024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)