last executing test programs: 13m49.191755458s ago: executing program 32 (id=53): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x8000) listen(r0, 0x0) listen(r0, 0x1) 13m46.091497226s ago: executing program 33 (id=141): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_targets\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 13m44.811742717s ago: executing program 34 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x68, 0x7d, 0x2, {{0x0, 0x4e, 0x40, 0x3, {0x1, 0x1, 0x5}, 0xc000000, 0x4, 0xcc0, 0x100, 0x5, 'wfdno', 0x3, '9p\x00', 0x1, '\x00', 0x12, ']$k{\\@$&%.(:@/z}}/'}, 0x5, 'rfdno'}}, 0x68) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 13m42.650227116s ago: executing program 35 (id=231): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 13m42.368313475s ago: executing program 36 (id=238): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000340)="05accb3a20", 0x5}], 0x1, 0x6) 13m41.2728957s ago: executing program 37 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 13m21.565530769s ago: executing program 9 (id=542): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x3, 0x9}) 13m21.504347541s ago: executing program 9 (id=543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0x7fffffffffffffff, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x1, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x29, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r0, &(0x7f00000083c0)="f79072a3c6047cb6a107d127b5d4cf7a2faba22282065b48499cfa0746014f4de4d4ed0fb0a385c88e67d0e121b4bfd8b64e956a808316cf6650a7d58432c1b236f64d0e3a4aeab239f23abde65e5e0b095e423a4cda71c063951c4199060492c9471e2b093443e8f453cb1164ec273de2a60593ba19ce90df98cab047b218bc60e2aa7d099a11735ce1924e7abbe6c567284721db899a8f2228d34f8ede2a84d33834c404e74b0f1f5c3464116193c05d9d6356a28819ecf3883bd7d401b2799c4f6538fc9370033d1dd6be79423bc391941a3127f6871c4e8a7e53a99931f45ff0edc45b8e444c12cafeab9258fe606ea0efe2b0dc0289a519b1b6843c7dd8336d71dfd10600caf55677e5bd9d1054d50e07e86471e4a99b0a2b9aabb83c53172dcb09d74a6ac434a64566b4df9426436682019c931a059d7a5a0562f0ed0bb8c92006bb9ac3bd0572a702e9ceadbbc3f7bcb563a0d78203f41aee7df1d75f80ffa930b74c271827c2eb982f59dd409953acdb6d07470dd2042f5315804c53a097439abaa276c5beea0d20905ca26fca5da2312535fa2e240ab7288cb37ef0447efa4573eee1efa26235ef9791a69c2797586fc3d148e58b767099f2fe8c899cf5e3e545e9364e99b57b4a52a01e536d5711f6779404afbfe09d65276349b4fa4f4d60a57979aefbc7defe05bc9bc445694a49811e341574d0d51debe5ac7b848477ffff363fa995f7c0ce52281305e0a590b9e35e469e3cfc1581cd10913f750a7dfbf66cd1b6dfd9771e7d180f327c7fcd5ebdc5867be3aa46438d34cad0b8c3f923ff446a55a5f5d57c2b19aeae755a25896780714c9a4fd71e396408a44b359a82b9e057798ad41bd0c34d6b060a23222c37129471b521c931997ea7c11586635c7ff3d0d675a2e65107d45902a13601c41dd071dc1565bf9152510ed966186cdc7b0fe834205ec89e87ebbf884e87b9461fe5ae4584bfa4cef69b246fe445c262a307ba3c395687d4851a3c6f30a2899eff147916e66466c2fc6b5d7f3617d41b9188076090512f17200e28b1dd427129ea40089cd7ce166cdc2f416efc7a2d4e30cc2e5371a835e77e7fa50a19e7da1a8719233231d1cf95cf04a1b05546de8d4c536183bb13bb8fc309d322d4903ca5f17d891f415d2c20b8af0d6e23694329ed01129845e155d99b8b953870a7a5a9ff02cd0f6f56ab59b9a8f1e11be63af690674b67a2113594bb4ab9deb3531efef49e89f383b66fc688ffa18334d62df977a1d7c818fa887e112da5ea289888fff099f86d50cfa74841f5e012ccc23dbd5ee08e764ebd68a960ff0cd1d022cdcf7d5392eb283a4d458f5e4a4088f7b7709247fdd6077057d328d3dbbdc39021306aeb148c4169aa9c55d26edd06733c434075d93801f484f61f9fda27ddd849f9508cb62c6b487abcca9ffe6d30d887e417cc2fabfe0cbeadfe83cc680655eaf02078b2bac9e24227e60a0842fffccd1f04be68bce7ac1b2135ed580e07663c5521500221645878e3f20dbdce7222f0e21e6a2c84e7205b32dd537352d86db2c548211786681bff41be480719bde8a7a5df3eab63073024fd82cdaed286ac9f1d55d6058764b89202a54d8a2ee9304e146bc55568ccfad4eddf97321d020135eabffd1dba725e3d16b3dcfe5dae22bb88445aee9d63254cd261efa3556df14ba43dd02d28c626dba20e68a458076ba586afd5cc1cc0440a1092fb655463aa24ef8327b9b2f8d1a2f052cf95f14426eda0243ac18a2e27bab271aed50f1308375a13b152ef9ec085d7472d79413f49b4c50938c0d78b33e702a78a284cf4e91fa7c9c611b46aa3dab44823f3b0aec9b78ef7dbb5ec1050b6c742227a39e5899acc347ed44f214e6f188c936c8e26db81cddd29b19372936f99f11bbe9b10e44cda2227060353fd8c38611ec170cd05bce3917774892f9d037dc06452210197022ebf0271dc34d6c5f302237d0318643aec71b759c09b1f47560b78705ebe25d53f92f5e496c6f91b8c9cec065586462b22ecd295629cc838d9a248156e0554cbbb8a116a5ef30e7f057b53d0bf3ba7e8db0c8838d03afbba97edc74757ab256a992438c850d22f0b920f337e992a90a49b905befd1ad814fb41ef7babe89cd25dd391ca71159d56ffca751c0a1d251c5963ba227a1ac076ae5d653fe4a630d1832189b24e811d8787661f1cab044ac5ab1efc79d1825c277028724e0b641cff921790c67f755baed0b9ab0ff80ac21ccda420db6d543a5448fb867ba4a666fd5d25a94551ddced4f3a39ef88ef7397c964a752d3050f11ab8bbb2e87c8c5b8f5dc5c44313e6b71c5e988c9a7521dceb707ed27bf598950f8fbe15a32856a55b95b3d74d8bd1913023a63c947e381af07f4aabe7acbb6222bf8e0103fdfc2390b74430458fe7e9b09f622aa62d257adfaabfa3575718e180c01d22a25576cdbc53db211109c88cdfd5fe477f63087f93ad65e79a1954aa71dea2a4150819b5f7b6498ad16622feb9702901c5569e04555693828b90a37a6a8d1eb4ba72d921ef5026768caedc788aa784e7bac06b50893c807e5b7e42d1ce80b71c6462d5b689bded9a87a96e9c7b2c9d21d1625dc2e701d5b3a96961e106d5eba6fc01388e47cdf8c94fc5596c97c8cbc31a8fa931b34de0a1a6be151c3f0f7c4613c7dd8923f922ab8073ea9eac5f4aeafde35917c47edb71230418f2139080c02028cdbb89beb85c177e1a7f969858e4ee95961ec229685ef084b5188acf355226557c7cd8a2a1bb1c2cdc9435b8d16a2810de47e1d9debb88d889c8119c95b74cb636a5adbb9ae6b12aa48540c0f25502e3dbba6c836f50bd2abbbd02309d854d6b5565d39cccb4310678e6533bad63197d7c8c68267362e10b32b68c53a4aa58b5abdab00df7ba286ad19b7ab2324bc0ae3d57afa018b9f3805e8821f974096d2572b20a2b801cf358a1438aff83ef05f71be00042b3ac8792817387bd1c08cdba0f2020ca93a034cf06c8e0c14b07b1092644d7bb782b335a95c01ae53e0bb7b0c07ab4d4d792f037cb9ca3a51e88e12802933442e5ac8d12c0020ec4d198f651f048a9ec0f91f0985fc7c2dd3b90c83afaea793ddf93c97ba86ec8921ed499850c936bf7d2bdb0ce439a1c2e6e3de11d8ef9031317cefb7d1de74cf16bb9d6a46c5d95b79e21cf6f8f9626ba29303c7e8322161c9e16ec49cfa414fed6958d69892750205abcdc9ebbfbe0a87d31f3857645e51e48a460fc78aba5e14ca15105911d43bc56b8f2c8e4f345fe7e4ad77e308b857fa15f11415c626b97e4d4a1376be9ab8ac139b3cc1d2e6e2030e36c75a5165f60132a26580313122da3a8f71fbd139649dd9502ba913af3b0cee15f5bbe5486c44d1f40e8496145ff75f57a9a3b15a50e31f4ca1fc31067afdce8cc131159b74553331133099a2d5ab172ebc6de9c5111dd6d45ebaf3b3e9bf6a2fb5414e74a8fafb90b6289569dbe8427a1f0c932a871f71f6912d830379455396432b6bfd14ca9796bc5da8299887471f5bea6b2e235cea832d60bca3697dc59ad2fbc30cc7138c125e861a326a77a4958fa2a1cd0de68a584f6c9664c6de3c53b23785b50b87f4b3191a736cb260a93877ff24ef886d954c13d80ae54874b64c22f5d82e71267ef917c81068feba5caf11e13de4710666289b5d69d235dfcf7b88cf1d86d1adb8e547f792f5f0ba58e4eb1db78b31c244430af3e665ebf90cd16739c253a19acbe9045611d9e986b17a70b367e628e8e758a1283c423884b46a3a7e1dab5bdb8358528a7f519eba93a1e4ed52b754752468bb2768489b149b77a07a6dedf14ce64ffc75f36f85a94b46cfa7445a1ee2fd488122b6a27e8c63530d845a0fe109d3a79fee2f32575901cea24bd7b94b8ef99a127627e27b801559a0851db05d7d24bbb02e80a9f1820d2bb9d78561cdc03296985b024806248328443d4a34ab06222213d6591f85b427d4a37b6d45323762019852bc3652953fbb11668f5520055c4c1ef14dd9fc03122092e8ce33a8534275f1112a7b0a91bd239843039ead53742bc5969eb9c09e38a5141b441f8c7d7b81d006b69d7cc3da903b507b096fbc08530a94ae4479b60f1c2b780efd190d2af778538b70c1cd33295d786bbfe13dd9fc6e684ef5c186cec8e1f919d6576f76bf1a24716154acf15afb365349b9871789e9ed598b22d5a40d7371b4d18aca9c12f910252e7b73bf4102b5f0b09ff0d70ccd18371699dee40df6bedeaaf2015674a4d1f5a93026e6c300b8e74b0f7ebf0ccbab18fd8e93afd2c7894a2fcd33518375a3e26a685bb1c26d084c2e5bc951e8be2ec5de30499ea334d867d2531cfdb45097d9d265d84a6b000f78810fcacd1e5f417b54bd99b59ba57c95b2b20a898aadda95b657c29de51b55f596463466a1fb0c4495f2af264dc63911118537acc3975bfa6497fcf1eadc9ad150a68130949c447268fe26fc5190603f047604091c2c157af6b92f02321103a68023970641c088bb892b1d7d440a9a5cddc548667559d73a83d591025797fe80ea840f54beb7ac1a611cad91dd78b3c1850bfdca227dd05244852ea70b4735c4556c55b4a1690ae90eb52cee2ff56a9c189886487835095a709a4e491f8b14693a86765aa8ff23229363c4c7cab052703bc034e77b3434f4b3112a0a504d35763c7bb4834ef969126713b4a2816ab1626a115911d20b75d0446b949dab278fe849dc26c49da27fca312b66a7edb7d7c8c4100864e0948723f7d5d3f35520c22cf230d7c639b82d83863864ed57bda1b7c35678cafefcfe554ab976d76b8a116dbc17a859bf9af07b8019bed095654adf04870882c9e6587bc4fe3de10db81fb66009d351280e79ef76facc4f951ae0364ed4660cf852ea04c61ae84115880e3909303a732b0bf790fa220d361672dc1d0c67ff9124c46d4a9725f63ecc2df4bc30411451d5b72c14cbfa944bd2835532dd62964d2cf4f47aaadce8564ba761297e567283b7e183ff1cf669162a18a4eac1a9fd3574cd70847740551ec301039b29c2d8bed0688dbf1689b5377dc10107010618c67c5e1e988edbd3f5a4365a62015ae866dfea438b6a224fa1936a063ada4a339b686e9728fa571229a7a59e22d842cf152f8bad84b28a85a6bbdf6bf2fa26815a3bdc9a97ece2ea265a5f09cf138ca861882cc1dd8594581a0c43f2e4c1d9155ca95774c3e058632ad0a4decceece5427e20b62ad395eb3d8878a4ed2686b935dfe02a430473898b16aea10767c823a0708049780f6754136074e991fbf41ddfd0b86065c28f714f713b1432cc48e98932d6936d548bd2148ce2d6df933354b317dea3123cdfafdc65dd62ad5567569d80db5b07da5c8592d61e6043eefc6bce7dc8e1b07d4adf8c0ae29998f6ed1febbed21e7d2a025d1329776c289a7268cfa3ba0bbd2444531c17fb386577356bbb92f86482d4dbac902eb0fd372fa88a3619be845b326b86b6f2da7d441c050a4dc9b8b912b8cbf1edddafa15d9e30c294b49637f6196dc94d5f3f056a76daeaacf53a5ef01aba0856b910bc274e16d9e7a6dfefd05481a3104419c2c3bc0e89db2fe2921a5ee470050e1a86da2dcf73334bb692e59820d5209f949b640023f31cc162b862b69ab26f06f0ba2d3cdf54d39030659e1396d4dadc019bc5537679b9c98fc028675e6c7a95c5e9147b3cd11627a86e4fbd4859f2e01eee3cd020686733ff6daa71d994a92e03e0c78a9bc81612bf8b976988e096eb56f200d6f2939e8f2d41f162ae1e40f338a47a6f66e62227f5a6b7ef797639e608c33f2cabc7762b168b587ccd8900445d5e564ba0aa3e7ad2401f309351015aa4c3951c96d0b5a421fe762a990ce9688d29295eabd8619a90c10086be1dde2dede953f9cbbcafab4d72396eb4c141296f5f757ae8575262e723d7ddd7e962aa2eb6dc4cfc9d37d65b08a672898bcc46e48d60686f384052096511cfc0071a8f67fcb45e4ac0c63c069eee1e407b30ee9653bb16784996da9b0c3730d53d2804f78dbb6607657d666c5e3df7592875af1b3fd7d2e4cc345f40cbfe3dfd910984d3b2a801608f4f36ddd341d5a885e26b84fc14b3996648476e32621e0b64bb47df1b489fbe4c38966c278b0ecdac411bd4e8edf4f4c27456ef930470d3ed9f8c176b60b348f02908cb630b43c19e032cbcd85662716edf54ce28b8381ca9fedda6faa3cd923e2b19d5ea2a7bb626372fcaf8b28178654e8e95e26bb0fa2517cbf21610166e878733a91deb02d3c147558a0673d6529b6059b6fa968db1c0d94c61c4c6bae693ea5ad779f8a38a6818139755e684c732b6f66aa63b01f9407ea6c438996572bd01f90b2c1dddb1bde4ca20b59ae510ef856c640ca84bd79dca6fe3f0da9601154ed1299b26f1393bf648c12edbc23fff0c5d463cb2cfaa796c9f61defbd66cbfec26e16b1ae2adf29f240bbdd0777493db05c9c37b62aac9158706f90c48b6a627ab0fc0e90cd06a6bac01fc4827f481dc790c0a4b21d3987852a7aa4c646eae9bf41717fa62ed5e8365652be6ad945f17c1770b10439db47e120ae9b886dae892deb278aa91dcc5c802be7e854f85b850da957d43a36c5d118e11cbdfa51516e47bc0975509df4b1840607c8576fc90bf8cea610d64891da74018c9232f9dd8b676e50f676416b205269ac8006755151eccaaf6aa8c049bb2cce72c627d658ce6e8f4d0c0d41ee2a8fbcffd87453de45792ba0ba2cbfb9fdbc2a384af56a1b09ac2dead6b5d1d28b739bf696bb2ed637835f50178fedaabd614ffad6bc86f77c55755ecaf4c4b76b0511cc2476b1ead11f58bf33adaf9c871f710b00c2b383acfd194b7d1bbeddba7bbdac21f74925d70c2b74701ce3a086f6339cd625f8d71e838d749f1a44a494783927f8d2120a2fdecb00545e7f3f6e367181d2d472cd395e5a4b8e0c8c98020031e2fad41ed233ff1012486a5f6881d971e071e339bce5ebcf2107c115fad68e6670fc0c477996dd40ed50838f76ec72fabd13fce7715997aeff5a4cef28c3a64286f3ba48e7d2d74afad37840e059fbc213e85a2a5703ef4b6c56260a24bbb7db599bdeae2b41b7ccb5091caf926beab01d003f5dcc527f0b0951e869d32f565c9175b01e2021a41cd652b2d1de665290e86144256d7be5fafedb4f366f2cf7d6ae63232fb267e200d90fea88cba1d8489b627ca1810962d11a9d0ec98de82a2bcaba51d0abd9733de4d03b949b84b9baca5581089d12eaa5dee383afa20413082059f924e99cf3e759a09ac1da6e8a9528e55e9e11cc9ef47cae7e3ea931aef14e88491eaf7e96fb9102b8b91ef07270c1a6853e804ce4fc1fa21570062341f93663f02c578375ab73d325fb9c8000090b3642f63138d74ec0937f5878ad43c4b927ec42d8ee7008600494283709e454dd0e6069d214befed5a3f0459c6085e2aa68e0b5af65ac4620a68cecdc3c9dd49853ed2f1c72fdc14106a611611672f279756f0869c420261be0997a444830e2efc46f8eaa888ff5134c941ef231cffe11efd696775a459465a79c99f19bfa6a9dd6397cfd20f6300de650d9b35a5dd7210fb65ae6fb35038c475dc8c649126376c0246cd958075d1499a10d200e20af518683584021723abc6ed12d6d04530ddfdde0f1a13f1251b14d64512ce07f57ba9e96487030255e272a5d1bc6c9a3baf1103ccdcaad97e178adc096739aae1e92b9efaa168d78586c3b86b5f7fd57ded05b5cc84bda11e94b8d17ca8f15ba2801de494d260f03d8a21e12bec6af1ec4978e9aba7b3748bc966c912d2a383ac74eb22c329cd124d1473f0359c676d165548ea19c9a9b34ce4ee1bb87c26aa30dd0a59b66c6f9b3ea11c4961dfdd3113005755ce16201721f8167cfc23eea8ab7d5aa0c566182d389c98c8d7477eef3e3e66b192e9966a5b2eb8cb1c055a97653057b8464bdb5ecac392a96e2449e0b7bd7616d82ac66063f5475b130f71ca5a4d927df458d7e74deb0c76b7f74729f081195acf1d4261b70150ca4405a65db0171020d9258843feb609cd630f305281bba36401851d20240fc36f4ea03f0f46e7443e1e8a73eeb7bb1b4425b1b2d54797314c28dbc0032563cf0eb28ba0a057837c97f45643ec26a8ae64ef2381aabe30d5f7c5a19c4048087215cbcef75a06d4ce0ac4a381232dabe4f25af1e9da8fc6dd4f0ad7f80ce44745db0097d087007c944baf8200f47a8a273dc5808c373ae44139ccc9e9e47737e911d0fca4198ca57f2b835cfd309d323159006cc223f67c63613de6a2081a82dbad12ad5fdd19e4cc620c99346acc55878788dfcf27d0fa7f2aba0d7bb762eb2e03bf7f8b79184f14769d647cd8d211feeeff57828ff946848b589cd1d73882a45e55eb14470b0f7e82c234c1abb8117b1a696db54cf78d7ab7e0ab24eb44dd2b1758a8b51dc4a2b7090271487d58e8759feba3416546b2e99afbb40ae9c001552c2626a3cdda500f76c03ae2e3aefc50d1e592d0d18e45517bb2184769073b8ee387bd2b8716581a3a7ec8b3f232babe53c23859230927d89ae77f7d0f3ab887ee6994accbb3bb55d7e073bf8d83b80fa12a706d4e64063250d06d332f99336b93d6c6ec2eb758c8d60c2dca276ea92904fe4bee8052f59f2ac346d188fa040b443ba3e06ea8e1af369afb08ff1c8e7301397a1a763252ced63ba64c815faa714ff3bf8a0004eb4425871998ba688f349fd39cb09e796fa4d28ccd8baed0e89eeb12de003e0d43e759f160ba0a63c14b8b95d4ca527571b1116c68af1cca70dc971fc4052a7d5f45c0f3bc09ffaee776893b92996ccb4ab98f33d8e1ac62a03388af6d7d9bb2d920ede3d39b58c4cc780d236d50a44ee3bace94029ca9f4ffc6a4d78be080f89e762aa13a5c461f1108f1f2b80fbd32c9bc2bcf9bf8e7f1f629fd040137a00a4d55f7155b5e24ba45fcada01c79e452f4f77eb3b076e4e152b6b23cdb20c4c1e0ae36b7145959d837985ac768619a5f8d409e87a87e023fe0cef4c3f595e555210053ce446a0f34ef066646158e70357620aa1e82f7ed36625983a919f11af2c6ae7e684caac70b76e846d08fe6c4e4461500ff70fe1fe24191158c77a63d43e89b383f8a0e28d112419f47d501f6ba60a51530a368c48d3f6e5e28f5b1d43731e3cdaaa0c37b7241f85576eeebd614ec79ffce7f637cdadceb25f8c71ba1bbdfc156f3b0b1b3ce519f32e031fd76e24754797ab5aac3db791addf847a46ba3cd767d0355ae54bb701a20028cc8e80e734656d5c625a1234a28519aa7c5d45ff9d2cead080941c0778615a045768e52f3e851ab20451e261f7212d453ea4444527bb7a996a425d142249c550dacaf1a135c504f0e8d6095572b1017f2ef87f279c7cf673b9aa0ccee34912d2d28af1d3dbbf7d34b43a4b7bcdd6ffae2d1322b8b5e112dce008b95360383f41658652125277eebab7c33fa771acf0dbcbeae2dbd1c212eb9985cc91b569f516b07f932d3135e8f0113082cec667d433843aae859973010499285530040a7c8336be43706182f63f7221325f391fc1500eef0b1591201096739cbfc1f7cbeb2b965851160b25e147f5f82ac6d3ca210e06ffabad99155ea34c01e951704b0b2b29a29dd64eee2d5a27268c5881729e407a7463744344a12efc5d48899c363f42414812f197906978eb47bf203f025832de1295773d1cc25467919eaae1ca58024f829380f210fba4640991597e6fc28359ea54d804dfd9aab44ac71ae491dc817b02241aea5876b50139c96e6eb389264cd32ec7334d15321600dfab45a7d8c74d7343712fa01c194a2f1de5bf8405f14eb1a45cf5bde933505446b82c1d2276f570e3b6e4b93c9accbd83d88002a84f7506d1a4336d1a2f90047e72342ac82d1a879210903b5c30826d8e7bc83e9b1c95e5eaad584806c1ebe3d8a0e3a727c0bd5c336d65a1181f7871c1d9d24f93658f6a97daca8e1d812a83094fe0c847712e71a6b6ffed1f953094d4e03752da66496d15bb1228983a91de4babded9e08dfedbc32a13402c9865ca0b173cfcc2b0fd5c060e0607cc7494272cd8146e0577094c360bbfd5c81d00a5493057c04ed34809bf6ae8c2465589afc193fc7f988f11d9d2893e713c3b04c77e6a9ffe3b59dfc101c147d429f74a1e4042cfc8b7e18e31026c4c4eff1a84f962d6cd73ec166b92b96b2caa3a865ba7433f2f85d5e0bc3f53da22faadd10a5aaab96a2d9d516e74987f33db2df645d88b672192d47bd967daad64b0a1cf69dc7f4b4934d9f6403c3f47f1a2173d393cc1efb3088001a2e7f73c244602be842a8a4a4cd383f2aa9f38052f788cb1a544037642c76644e52398c810b27f2eb1ac51cfb6b5fbcbacdcf6402a00f1b9be86c5d9ebb3d610248cde773d09670b5cc33d85cb9f29ef7d0af1544b24d79f35258b02e3272758094e731133e84fc16dbeee00a2357c0b77b5f9d0201e79141eeaf7b97c62ec7875e6e00d59161c6d7b150743069bbf1303754e15cedfa038994d501aa1df417ca2f1b29952b04c143e093f804427fa95f323a940890fa267ab22a344a125753c99ff12ab7b274e9e90ed01c2aff1082eca111858b9fba4621bd2748f4a47af1854938f82d8a9902f300f47f91aabb8204e082e0efa79e3b8d04888c5f221fb276984ad6fe80ebc616d57228173b9faceb24644edfa0d7a5312cbe3b7676f4a78638d551dbf6b13596e291d8378eb17dc4bb7c7cc362ae11033301f85fa7fe215533fed877b873174274d018e1786d06bf50f3a36bf44ca53ee3564212cf25fe64bb07856f563434f11f6fe5d52768db6c3a0293da0516a7944760dcec8eaa7aa7d1d6bf9bd3fb3aaa9f3ca2e0c56c836e68aa1f336f150ae4bc6c1e61ce629beeec69f6256fa770502a4658c17638f3ed9a8ffb8a11e25e13c6be153ef4a9f04e22a2e6816512ca30cf552fb05eff8be46596afa6dc17dd74d5280fe4147801a079d9a57caf637a9299a3c138d85a08ed95654d65702a1db4e705117c2d28c465151757a5cfa9367b2321f5538df3867ba22efda1a22941709b19751064899b60e062067e7a7df84adbd844ee504c1b9edfc0d89f8ec625832fa903e154c67f04325642c7dd8f94bedb27b69bad47523529287de2992c46bb1e83cb49698887253ed4b5e7dc2024f7d797fb1f4afe50a8684b6a7cf8215e994146c4125b9bb72d95c6839ef20801c269646c484c4b65386735e96faaef971306eccb5e2e267edc3c402dffd9efdad71894c8c8645d6a6c9e01aeb862d9aac2a8ea748b43ebc988d4cb933a0f1df929f2a6b84896b5616b9dcfa4e8690654a8d03aece5ef1676da42667c3118a2ef8ed55958699015a838f56b268366a2fd1f77ab5def3ce0142808bf0a687a416dfe48df1963ebc688069fb92fe8afe613f8a5676c07aae1bd166cdce6b0168c124050b7346430f7764c8265eda638c09fb56214ccf95941d154c7d7ee632891b926879f4abe9ce6db5f871335fa56091ca9375786e8ab6fcdfa7ff026fece5", 0x2000, &(0x7f000000cf00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c800)=ANY=[@ANYBLOB="3000000000000000ff0f0000000000000600000000000000070000000000006675736500"], 0x0, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 13m21.332411286s ago: executing program 9 (id=548): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xd18e, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m21.193172771s ago: executing program 9 (id=554): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x72}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) recvmmsg(r1, 0x0, 0x0, 0x40002000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r2, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x69015a58, 0xdcd, 0xff, 0x8, 0x3, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000340)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 13m21.056198706s ago: executing program 9 (id=557): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m20.952466558s ago: executing program 9 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', 0x0, 0x2210081, 0x0) 13m5.969585837s ago: executing program 38 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x2204c96, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', 0x0, 0x2210081, 0x0) 12m5.346018741s ago: executing program 3 (id=1764): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000b40)={{&(0x7f000074b000/0x2000)=nil, 0x2000}, 0x1}) 12m5.310078302s ago: executing program 3 (id=1765): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x106, 0x0, 0x0, 0x7dff0000}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="f50a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m2.906236039s ago: executing program 3 (id=1778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 12m2.824386251s ago: executing program 3 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 12m2.752972054s ago: executing program 3 (id=1780): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) 12m2.188532592s ago: executing program 3 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) open(0x0, 0x80242, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = gettid() r2 = getpid() socket$inet_udp(0x2, 0x2, 0x0) rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f00000003c0)={0xd, 0x1858, 0x6}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r3, &(0x7f0000000300)=""/176, 0xb0) 12m2.031446637s ago: executing program 39 (id=1792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) open(0x0, 0x80242, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r1 = gettid() r2 = getpid() socket$inet_udp(0x2, 0x2, 0x0) rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f00000003c0)={0xd, 0x1858, 0x6}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) read$watch_queue(r3, &(0x7f0000000300)=""/176, 0xb0) 8m23.856541849s ago: executing program 8 (id=4344): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x1f8) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="64c07075", @ANYRES8=r4, @ANYRESOCT=r4], 0x5) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x8b, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x45, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x10000855, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000040)={0x1, r8}) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000440)={0x3, r8, 0x1}) write$cgroup_subtree(r4, 0x0, 0x0) 8m20.676423s ago: executing program 8 (id=4370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x2, 0x353}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r1, r2, r4, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r5, &(0x7f0000000200)={0x0, 0x1aab, 0x10700, 0x0, 0x3a6}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x210, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x200, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 8m20.510393356s ago: executing program 8 (id=4371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x4, 0x3, 0xa000, 0x2000, &(0x7f000000a000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m20.38442588s ago: executing program 8 (id=4372): socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x2404c050) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x10, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents(r2, 0x0, 0x58) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) r7 = getpgrp(0xffffffffffffffff) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xca7, 0x0, 0x0, 0x1000, 0x100, r7, 0x0, 0xb8}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r3, r12, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0x2b9, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r11, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 8m20.305008902s ago: executing program 8 (id=4374): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffffffffb, 0xa00) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x2, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000040), &(0x7f0000000140)=""/199, 0xc7}) 8m20.109956058s ago: executing program 8 (id=4380): socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 12) 8m20.07156403s ago: executing program 40 (id=4380): socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) (fail_nth: 12) 7m27.216331636s ago: executing program 7 (id=5071): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000380), &(0x7f0000000440), 0x2, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x15, 0x1, 0x1) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f15b9409b0dffff110d0207be040205fe0506100a3f4300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0x78, 0x40, 0x0, 0xfffffffffffffe8c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x60000600) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000500)="9ae30000003c00f30f009c6366c735b5670f1cfdf30fc73452c4c2f997360f01d19a00800000dd002ef30f30660f388168fc660f7c9900000000"}], 0x1, 0xa9, &(0x7f0000000180)=[@cr4={0x1, 0x1402e}], 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000480)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f300f01fb66b9b709000066b85000000066ba000000000f30b8d09bbc8966efbafc0cedba43009f210066ed3626f00fc70d", 0x66}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x30020c80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fstatfs(r3, &(0x7f0000000080)=""/70) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r8, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3b5, 0x1fe}) r9 = dup(r7) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x7fff, 0x3, 0x4, 0x3ff, 0x2, 0xffffffa7, 0x1000, 0x9}}) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) socket(0x18, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) rt_sigqueueinfo(r11, 0x13, &(0x7f00000002c0)={0xf, 0x800, 0x2}) 7m26.992096644s ago: executing program 7 (id=5081): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000002300)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3ff, 0x3a, '.', 0x3a, '#:', 0x3a, './file0'}, 0x2a) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 7m26.991942834s ago: executing program 7 (id=5082): open_tree(0xffffffffffffffff, 0x0, 0x89801) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4c20, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x4a, @mcast2, 0x81}, 0x1c, 0x0}}], 0x2, 0x6b38deb179a2b498) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000000, &(0x7f0000000340)={[{@redirect_dir_on}, {@redirect_dir_on}, {@verity_on}, {@verity_off}, {@nfs_export_off}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}], [{@obj_user={'obj_user', 0x3d, '@.:'}}]}) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x2, 0x353}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r2, r3, r5, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r6, &(0x7f0000000200)={0x0, 0x1aab, 0x10700, 0x0, 0x3a6}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x210, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x200, 0x2, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 7m26.834934069s ago: executing program 7 (id=5088): setrlimit(0xf, &(0x7f0000000000)={0x0, 0xff}) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x3, 0x42}}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=r3], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7a010000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fbdbdf25010000000000000008410000004c00180000000862726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x200488d0}, 0x500d4) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x4, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000200)={0x0, 0x1460, 0x200, 0x1, 0xb2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b6, 0x10002, 0x1, 0x3ab, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7680, 0x4, 0x9, 0x2002008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf984, 0x2, 0x2, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x5200, 0x2, 0x21b, 0x0, r5}}], 0x4, &(0x7f0000001540)={0x2e, 0x36, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r9, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r11 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xffffffd, 0x0, @mcast1, @empty, 0xb6, 0x8000, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) 7m25.906592418s ago: executing program 7 (id=5098): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r0, 0x0, 0x89801) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x2, 0x353}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r1, r2, r4, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x600, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 7m25.8325543s ago: executing program 7 (id=5100): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xc1443000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="eeee", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x2, 0x80040) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FITHAW(r0, 0xc0045878) 7m25.798468062s ago: executing program 41 (id=5100): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r1, 0xc1443000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="eeee", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x2, 0x80040) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKRRPART(r1, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FITHAW(r0, 0xc0045878) 3m22.02420055s ago: executing program 0 (id=8569): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001d00)=""/4063, 0xfdf}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000002d00)=""/4106, 0x100a}, {&(0x7f0000000400)=""/242, 0xf2}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000000940)=""/97, 0x61}], 0x9}, 0x5e}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x5}, {{0x0, 0x0, 0x0}, 0x1f78}, {{0x0, 0x0, 0x0}, 0xfffb}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x2040, 0x0) 3m22.01164361s ago: executing program 0 (id=8572): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e26, 0xedf7d184, @remote, 0x6}, 0x1c) (async) r1 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac2(r1, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002b40), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7a) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x10}, 0x1c, 0x0}}], 0x1, 0x20002040) 3m18.591381079s ago: executing program 0 (id=8614): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000040)="10031200e0ff020002004788aa96a13bb10000110088e4b86d946790180d19af1765f237e8", 0x25, 0x28080, &(0x7f0000000140), 0x14) 3m18.555011131s ago: executing program 0 (id=8615): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$FICLONE(r0, 0x40049409, r1) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000006c0)=0x9, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xff9f, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x3, @initdev={0xac, 0x1e, 0x41, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc8, 0x0, 0x6}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20048801}, 0x20008050) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), r1) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0x2c00, 0x2, 0x1}, 0x18, 0x1) landlock_restrict_self(r7, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 3m18.24436077s ago: executing program 0 (id=8617): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00"], 0x48}, 0x1, 0x801}, 0x0) 3m18.243806841s ago: executing program 0 (id=8618): r0 = fsopen(&(0x7f0000000680)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x2, 0x353}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r1, r2, r4, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0xfdef, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f5, 0x800, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3m18.243627081s ago: executing program 42 (id=8618): r0 = fsopen(&(0x7f0000000680)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x2, 0x353}, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r1, r2, r4, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0xfdef, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f5, 0x800, 0x2, 0x21b, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m24.08650946s ago: executing program 1 (id=9580): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x20280) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x7, 0x38, [0x2, 0x100, 0x2, 0x4ff0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) sendmmsg$inet6(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000500)={0xa, 0x0, 0x5, @loopback={0xffffff7f00000000}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18}}], 0x1, 0x4000890) 1m24.032536711s ago: executing program 1 (id=9581): open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x1, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) close(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) eventfd(0xd33) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) connect$tipc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x0, 0x353}, &(0x7f0000000300), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r3, r4, r6, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m23.882023096s ago: executing program 1 (id=9582): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) (fail_nth: 1) 1m23.545017126s ago: executing program 1 (id=9584): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000']) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x40000) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x4e23, 0xfff, @empty, 0x31ba}, 0x1c, 0x0}, 0x20040041) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000000000)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r6) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="1c8e09fa", @ANYRES16=r8, @ANYBLOB="010029bd7000fddbdf25090000000500130005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r2, 0x0, 0x0) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f0000000180)) r10 = socket(0x2, 0x3, 0x6) bind$inet(r10, &(0x7f0000000080)={0x2, 0xfff3, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r10, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r10, &(0x7f00000001c0)="8ce2ad4d4f95e087a7", 0x9, 0x0, &(0x7f0000002400)={0x2, 0xffff, @multicast2}, 0x10) 1m23.451717289s ago: executing program 1 (id=9588): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff00000000000200f058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) 1m23.272271845s ago: executing program 1 (id=9591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000080)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x400, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1m23.228120547s ago: executing program 43 (id=9591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000080)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x400, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1m20.62828991s ago: executing program 5 (id=9620): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/rt_cache\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast1}, &(0x7f0000000080)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000000c0)='bridge0\x00') ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x16) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000100)=[{0x7fffffff, 0xfac5, 0x4, 0x73}, {0x4, 0x52d, 0x8, 0xffffffffffff2930}], 0x2, 0x20, 0x0, 0xa}) 1m20.323068569s ago: executing program 5 (id=9621): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) dup3(r3, r2, 0x80000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(&(0x7f0000000000)={0x20080522, r4}, &(0x7f0000000100)={0x4, 0xffffe875, 0x1, 0x3, 0x9, 0x89}) ptrace$pokeuser(0x6, r4, 0x0, 0xc0a) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x18, 0x15}, 0x0) prlimit64(r4, 0x7, &(0x7f0000000140)={0x0, 0xffffffffffdffffc}, 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14ecaed010181b66f81341e611052fc2cfdc91dfc20c07337bbfdb472df727c92b195c4ccb23ab301a8d8c2050611135ee65515614a1b49a28f8882f1dec08a32e73fdd8fa6705cdfab5a78626e9801b64513ddb90bf3ef19dd0bfd8db1dcc5064fd0e1143181f2bda58"], 0x18, 0x40000}}], 0x1, 0x4004080) 1m20.322939259s ago: executing program 5 (id=9622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m19.831705795s ago: executing program 5 (id=9623): dup(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setregid(0xee00, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x63, @string={0x63, 0x3, "ec0e89c537dc4ceb020fc47e5a567dfd24f461716cf44cec680dc43608c8212ff144e966bf53976d316d8042275ef36ffecebb023bb1521dae1c559a16fcb5eadbe9377f5fc857a110813e063f54fe05a00cca09b06d03777259d2f4d80c0eef57"}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000840)={0x40, 0x13, 0x2c, "8ce3be1d240ebe881d5d44821bf98c69918995d72e40f652422f900de879d621840ca38c1bcdb983cb1b20eb"}, 0x0, 0x0, 0x0, &(0x7f0000000940)}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x2, "ae29"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) 1m19.765636077s ago: executing program 6 (id=9624): open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x1, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) close(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) eventfd(0xd33) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) connect$tipc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x0, 0x353}, &(0x7f0000000300), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r3, r4, r6, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03", 0x2, 0x800, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m19.071344119s ago: executing program 4 (id=9626): getrandom(&(0x7f0000000380)=""/286, 0x11e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000000)=""/201, 0xc9, 0x2) mlock(&(0x7f000050a000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000100)=""/91, 0x5b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1m19.017316281s ago: executing program 2 (id=9627): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x8000000000002, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m18.908469014s ago: executing program 4 (id=9628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.807538898s ago: executing program 4 (id=9629): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x24}, 0x0) 1m18.74571939s ago: executing program 4 (id=9630): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffcfa, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x26}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffcfa, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x26}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) (async) 1m18.206482827s ago: executing program 2 (id=9631): socket$inet6(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) socket$netlink(0x10, 0x3, 0x12) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x0, 0xd2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r1, 0xcfa3e000) inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r3, 0x2}], 0x1, 0xf6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) listen(r4, 0x0) r5 = dup2(r4, r3) read(r2, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xf8, 0x4, {0xa, 0x4e21, 0xb, @empty, 0x1}}}, 0x3a) readv(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)) 1m18.040480052s ago: executing program 2 (id=9632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, &(0x7f0000000500)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0xfffffffa, {{0xa, 0x4e20, 0x97, @local, 0x2}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x7, @private2}}, {{0xa, 0x4e23, 0x52, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}]}, 0x190) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001400010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffff"], 0x1ac}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1m18.039660842s ago: executing program 6 (id=9633): syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000080) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r8, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0xffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0\x00') sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000040005"], 0x40}], 0x1}, 0x0) 1m17.820504409s ago: executing program 6 (id=9634): r0 = socket$netlink(0x10, 0x3, 0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000440)='dns_resolver\x00', &(0x7f0000000600)=@secondary) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800c62a9d5a"], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4040001}, 0x20008000) syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000204e150e5040000102030109027100030100d009080b010101ff2002090400000001012000092401ff010b11000008240a00040038000904010000010220000904010101010220000905010928020602080825018300e2e30009040200000102200009040201010102200009058209ff03ed01ea082501003f020600e6e49ff5412a19403aee136449df3ca46080e59c0e8f490ac3ecb4da043a1c2571f4a6a4390c90a891deff4d0cab39af3bf02284f7cff8f4364df1fd2a4ec8b825cf"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2000800}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42, 0x2000000}}}, 0x10) ftruncate(r3, 0x3119c976) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockname$tipc(r5, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000400e0bffff400001020301090224000101fe1c0909049909210400020122ea0d090581030002078009"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606000009000600040007000300390c2402050302060254df000a092402050001031f04092403c6d445"], 0x0) 1m17.019271445s ago: executing program 2 (id=9635): r0 = socket$inet6(0xa, 0x80002, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x2d, 0x2, 0x0) madvise(&(0x7f0000896000/0x1000)=nil, 0x1000, 0x0) 1m14.904278242s ago: executing program 5 (id=9636): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX]) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/212, 0xd4}, {&(0x7f0000000880)=""/4080, 0xff0}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000001880)=""/130, 0x82}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0x1}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000140, 0x0) 1m14.136077017s ago: executing program 4 (id=9637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.351555602s ago: executing program 6 (id=9638): socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}, 0xf4ffffff}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1m10.87199154s ago: executing program 2 (id=9639): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140)) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220e0000001b4550182185f57586b34070f43f22a51994680aff1c9a60fde3b56ecebb8e537a377cc408f7e74b8eaecde6c6e8e3e733632fb92bca62737f4b1057ee27f26c3bf22fcc1f0cf5198a1220fec25e70752bc8fa96bdaf80eac06d5ada75fce9f7d3a680e7804ad65a83ab3e3a979b7f356f4c"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000002640)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x111542) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000100)={0x51, 0x1, 0xce58, {0x5, 0x200}, {0x9, 0x5}, @rumble={0x2, 0x81}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0002000104010800000000000000000a00000a0500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x51) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x4}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x2, 0x8, 0x0, 0x580, 0x6, 0x200002}) fsmount(0xffffffffffffffff, 0x1, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) syz_usb_connect(0x3, 0x5c1, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0xe6, 0xc6, 0x2f, 0x20, 0xc2e, 0x700, 0x8991, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5af, 0x2, 0x1, 0x5e, 0x50, 0x9, "", [{{0x9, 0x4, 0x91, 0x8, 0xe, 0x9b, 0x15, 0x56, 0xa, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "eb59"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xc, 0x3, 0x2}, [@obex={0x5, 0x24, 0x15, 0x7fff}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "72354c721a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x5, 0x1}}], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0xf7, 0xf, [@generic={0xeb, 0x31, "e86b24d1236b4118426c08dff13a2c6d0fe7f9b0c2ff128fecb4a6664b446e6e85b5b8c5fdd750c29cef0550583c80763224f236c7b55f1e104d1505c27e4428fd17f84d7b31b7e891de8bd4e90f3510726627d0c053984ee679a4a137e1d76eed08ade063e474aa78070a585a1779172ae206327ba95e49b0a4f6f77007d67ee5ec8c5538d5ca5f3d944ba8b120d9ad5b5165b2aa164279da2a18329a11014ece5000c93b09d56831d71482ccd0437d2676cce737428f875ec91dfa2588cc83319aa5436a90a13c01e5696c4ffc44a0efdb9c5eb77f902c73ccdbab529c16c09236b5323c01b521ec"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x8, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x90c8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xf}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x5, 0xc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0xc}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x78, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x3b0}, @generic={0x4a, 0x9, "a6f6700e2c9f56e148a90f2817636bbf8b53ce6298090c3dddd8ddd7a012fabebae51cc11796b0938ecd23791d927bf6d7137d71f649c235320ec5fdb0a60cb522ab51e6c9a730b0"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x2, 0xd, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x412c52751f37c218, 0x1, 0xd, 0xbe, [@generic={0xa7, 0xf, "1cb02cb1ca033d4290b3c3d63cf02b97a87ce9c7ab460389463af4cc9315c33199a89265ca33b55f0e6425b2b1693bc0f7f890112450ecffa8b942f2758ab5270b64925d8bcf45180936d4128db5c8093098dd6b4e024e0c7806981ca064fc2ab7ebe885127b4bc497bed17a01db08837ef441cbaf6d759b28d124169433ce0504d79116529630f81d4a8e78956760b05f7a2e6bc04f889d6951a4b983f3ae107f4c1bd1f3"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x7f, 0x82, 0xbf}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x50, 0x5, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x3, 0x7, 0x4, [@generic={0x98, 0xb, "67fd549edb2ef04cd28cd073631b3ffaa288a0f877fef98fb7b36ed5b855fdde37e23f17e09e47bbd73289e6150e50cc7e39244e3ec4e4c04eabd40d2886a0412838e42f9220c6ea9c3c661686a28a4eb50b6ebe6ea3ac5bcba803955b13e28224601bf95c000fc565db54b506aabd54dd517d4df293e80576ed9a84ff1e3b44f59ab2d3b7eb4c8285d70219f91c32ba7febf4cc3d33"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x17b}, @generic={0x8b, 0xe, "30f00b73eec7fb39ce7ccf21ad4a4577062fd62acd5e79c512ad2d9720ea05b717788dd06d14a7d80e9d0b1f21e3085e9c196976ab1ea658071ac12adacb5988f54e76981ea91ec940dd7d6c8c8cc12a286045d49feb0a5dec9c08f1c84ad908b3cfc29b0a66fa5075387b17c3c9790bccb33d3198f7cbb94a5f0df6bd47e9cf1a3519d16488f197c6"}]}}]}}, {{0x9, 0x4, 0xb7, 0x56, 0x8, 0x89, 0x49, 0x9b, 0x4, [@generic={0xb9, 0x8, "1c1f647420587dae7693e22562ed094e7eb0d6954f33623f292a681e4bfde100066eda49a4d024d18fad5030e21c55258002629873a0a3fa9cfd483519ffb218ceb5134b4eb89a625372ca1be0eb15fd65c942e62d88b3a0ab62d04e03b59343ed388588f2e78d70479dee25266c0bde1e50fc49b87d4acfcebf94149e2f38f6d1712aaddada243093977e574eedb18e326737cefb393f60167d61a9e67f07c78e9603abd178823a8b2def5e25e066072ced7907ec671c"}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "db63"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x86c9, 0x3, 0x4}, {0x6, 0x24, 0x1a, 0x80, 0x9}}], [{{0x9, 0x5, 0xb, 0x4, 0x400, 0x0, 0x6b, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x79, 0x9}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x1, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x2}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0xc, 0x7bf, 0x3, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xd}]}}, {{0x9, 0x5, 0xa, 0x2, 0x408, 0x7, 0x2, 0xa}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0xc, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5c, 0x7fff}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x5, 0x9, 0x40, [@generic={0x54, 0x23, "af87694b982805b6d70db9c07ed1d2b264d60ff49e033121d7783c2c0335fe231d53197b1502fd5e15811ceed1f1d39f6457e261b274ea357b3354ef3006ea3ed9f726334a80281dda80ab936b68a029a458"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4f5}]}}, {{0x9, 0x5, 0xf, 0x4, 0x628, 0x4, 0x5, 0xa6}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0x2, 0x3, 0x5, 0x10, 0xd}, 0x126, &(0x7f00000001c0)=ANY=[], 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x404}}, {0x21, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x83e}}]}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 1m1.576115587s ago: executing program 4 (id=9640): socket$inet6(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x15, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 58.475619696s ago: executing program 5 (id=9641): open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x1, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) close(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) eventfd(0xd33) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) connect$tipc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x0, 0x353}, &(0x7f0000000300), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r3, r4, r6, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03", 0x2, 0x800, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 58.094121138s ago: executing program 6 (id=9642): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0700000000000000cf696100"]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D\x00\b'], 0x16c}}, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000004"], 0x28) syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xfe, 0x46, 0x83, 0x8, 0x199e, 0x8002, 0xbb31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x4, 0xb0, 0x1, "", [{{0x9, 0x4, 0xe6, 0x4, 0x1, 0xe, 0x1, 0x0, 0x3, [], [{{0x9, 0x5, 0xd, 0x2, 0x8, 0xfd, 0x80, 0x2a}}]}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 57.441415399s ago: executing program 2 (id=9643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "e4f6388b796aad5c"}}}}}, 0x32) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40045506, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 46.185802448s ago: executing program 6 (id=9644): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote, 0x3}, 0x1c) accept4$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c, 0x800) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0xe851000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x7, 0x5, {{0x17, 0x4, 0x3, 0x25, 0x5c, 0x65, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0x21, [@broadcast, @broadcast, @empty]}, @rr={0x7, 0x7, 0x9f, [@loopback]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "6a6ea79675e796b0ec"}]}, @end, @lsrr={0x83, 0x1b, 0xbc, [@remote, @multicast1, @empty, @broadcast, @multicast1, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@empty}, &(0x7f0000000240)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 40.853364598s ago: executing program 44 (id=9640): socket$inet6(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x15, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 27.890455671s ago: executing program 45 (id=9641): open(&(0x7f00009e1000)='./file0\x00', 0x169841, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x1, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) close(0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) eventfd(0xd33) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) connect$tipc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f0000000140)=0x0) syz_ublk_setup_io_uring(0x7485, &(0x7f00000005c0)={0x0, 0xd74, 0x10, 0x0, 0x353}, &(0x7f0000000300), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_ublk_add_dev(r3, r4, r6, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03", 0x2, 0x800, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10000, 0x1, 0x3ab, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x9, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10000, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x5200, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 12.040347126s ago: executing program 46 (id=9644): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote, 0x3}, 0x1c) accept4$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c, 0x800) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x143a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0xe851000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x7, 0x5, {{0x17, 0x4, 0x3, 0x25, 0x5c, 0x65, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0x21, [@broadcast, @broadcast, @empty]}, @rr={0x7, 0x7, 0x9f, [@loopback]}, @cipso={0x86, 0x11, 0x3, [{0x6, 0xb, "6a6ea79675e796b0ec"}]}, @end, @lsrr={0x83, 0x1b, 0xbc, [@remote, @multicast1, @empty, @broadcast, @multicast1, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@empty}, &(0x7f0000000240)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 47 (id=9643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @random="c222a5fe422d", @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, "e4f6388b796aad5c"}}}}}, 0x32) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x40045506, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0xffffffd5, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x65}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.532199][T21825] usb 5-1: Using ep0 maxpacket: 32 [ 735.532700][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 735.550631][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 735.556678][T21825] usb 5-1: New USB device found, idVendor=05a2, idProduct=0025, bcdDevice= 0.40 [ 735.559739][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.576093][T21825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.579136][ T31] usb 2-1: config 0 descriptor?? [ 735.596317][T21825] usb 5-1: Product: syz [ 735.600508][T21825] usb 5-1: Manufacturer: syz [ 735.605096][T21825] usb 5-1: SerialNumber: syz [ 735.991649][T21830] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 736.028456][ T31] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 736.038336][ T31] plantronics 0003:047F:FFFF.004E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 736.060558][T23716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.070018][T23716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.083369][T21825] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 736.095422][T21825] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 736.108262][T21825] usb 5-1: USB disconnect, device number 93 [ 736.118714][T19786] udevd[19786]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 736.153356][T21830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.164435][T21830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.174260][T21830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 736.187300][T21830] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 736.196467][T21830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.205055][T21830] usb 3-1: config 0 descriptor?? [ 736.642592][ T36] audit: type=1400 audit(2000000108.802:38586): avc: denied { read } for pid=23738 comm="syz.2.9298" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 736.666820][ T36] audit: type=1400 audit(2000000108.802:38587): avc: denied { open } for pid=23738 comm="syz.2.9298" path="/133/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 736.691978][ T36] audit: type=1400 audit(2000000108.830:38588): avc: denied { ioctl } for pid=23738 comm="syz.2.9298" path="/133/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 736.700079][T21830] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 736.737769][T21830] plantronics 0003:047F:FFFF.004F: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 736.823465][ T36] audit: type=1400 audit(2000000108.970:38589): avc: denied { bind } for pid=23752 comm="syz.4.9303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 736.845297][ T36] audit: type=1400 audit(2000000108.989:38590): avc: denied { ioctl } for pid=23752 comm="syz.4.9303" path="socket:[242071]" dev="sockfs" ino=242071 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 737.073522][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9306'. [ 737.103008][ T36] audit: type=1400 audit(2000000109.214:38591): avc: denied { ioctl } for pid=23760 comm="syz.4.9306" path="socket:[242093]" dev="sockfs" ino=242093 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 737.144387][ T36] audit: type=1400 audit(2000000109.270:38592): avc: denied { mount } for pid=23738 comm="syz.2.9298" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 737.167384][ T36] audit: type=1400 audit(2000000109.270:38593): avc: denied { watch watch_reads } for pid=23738 comm="syz.2.9298" path="/133/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 737.338153][T21830] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 737.498366][T21830] usb 5-1: Using ep0 maxpacket: 16 [ 737.506195][T21830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 737.515014][T21830] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 737.522619][T21830] usb 5-1: can't read configurations, error -71 [ 737.790356][T21825] usb 2-1: USB disconnect, device number 46 [ 738.964799][T21830] usb 3-1: USB disconnect, device number 35 [ 739.169553][T23801] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9321'. [ 739.251278][T23811] FAULT_INJECTION: forcing a failure. [ 739.251278][T23811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.264527][T23811] CPU: 1 UID: 0 PID: 23811 Comm: syz.1.9326 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 739.264567][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 739.264583][T23811] Call Trace: [ 739.264592][T23811] [ 739.264601][T23811] __dump_stack+0x21/0x30 [ 739.264642][T23811] dump_stack_lvl+0x140/0x1c0 [ 739.264678][T23811] ? __cfi_dump_stack_lvl+0x10/0x10 [ 739.264715][T23811] ? check_stack_object+0x12b/0x150 [ 739.264749][T23811] dump_stack+0x19/0x20 [ 739.264782][T23811] should_fail_ex+0x3d7/0x530 [ 739.264806][T23811] should_fail+0xf/0x20 [ 739.264826][T23811] should_fail_usercopy+0x1e/0x30 [ 739.264851][T23811] _copy_to_user+0x24/0xa0 [ 739.264879][T23811] simple_read_from_buffer+0xed/0x160 [ 739.264913][T23811] proc_fail_nth_read+0x1aa/0x220 [ 739.264948][T23811] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 739.264984][T23811] ? bpf_lsm_file_permission+0xd/0x20 [ 739.265016][T23811] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 739.265051][T23811] vfs_read+0x286/0xcb0 [ 739.265076][T23811] ? __cfi_vfs_read+0x10/0x10 [ 739.265099][T23811] ? __kasan_check_write+0x18/0x20 [ 739.265124][T23811] ? mutex_lock+0x97/0x1d0 [ 739.265153][T23811] ? __cfi_mutex_lock+0x10/0x10 [ 739.265181][T23811] ? __fget_files+0x2c5/0x340 [ 739.265213][T23811] ksys_read+0x145/0x260 [ 739.265238][T23811] ? __cfi_ksys_read+0x10/0x10 [ 739.265264][T23811] ? __kasan_check_read+0x15/0x20 [ 739.265288][T23811] __x64_sys_read+0x7f/0x90 [ 739.265314][T23811] x64_sys_call+0x2638/0x2ee0 [ 739.265338][T23811] do_syscall_64+0x57/0xf0 [ 739.265363][T23811] ? clear_bhb_loop+0x50/0xa0 [ 739.265392][T23811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 739.265420][T23811] RIP: 0033:0x7fe97eb5d68e [ 739.265440][T23811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.265461][T23811] RSP: 002b:00007fe97f9aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.265487][T23811] RAX: ffffffffffffffda RBX: 00007fe97f9ab6c0 RCX: 00007fe97eb5d68e [ 739.265504][T23811] RDX: 000000000000000f RSI: 00007fe97f9ab0a0 RDI: 0000000000000004 [ 739.265520][T23811] RBP: 00007fe97f9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 739.265536][T23811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.265552][T23811] R13: 00007fe97ee16038 R14: 00007fe97ee15fa0 R15: 00007ffca7288ab8 [ 739.265578][T23811] [ 739.486249][T21830] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 739.690473][T21830] usb 5-1: Using ep0 maxpacket: 32 [ 739.708302][T21830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 132, changing to 11 [ 739.731746][T21830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 739.763794][T21830] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.818467][T21830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 739.833270][T21830] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 739.851557][T21830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.871309][T21830] usb 5-1: config 0 descriptor?? [ 739.912907][T23824] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=23824 comm=syz.2.9329 [ 740.223312][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 740.315626][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.331616][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.339000][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.373908][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.381001][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.388371][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.395065][ T31] usb 3-1: device descriptor read/64, error -71 [ 740.395956][T21830] uclogic 0003:5543:0005.0050: unknown main item tag 0x0 [ 740.409245][T21830] uclogic 0003:5543:0005.0050: No inputs registered, leaving [ 740.417232][T21830] uclogic 0003:5543:0005.0050: hidraw0: USB HID v1.01 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 740.527227][T23846] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9336'. [ 740.537767][T23807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.547465][T23807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.566440][ T311] usb 5-1: USB disconnect, device number 96 [ 740.602937][T23852] loop6: detected capacity change from 0 to 8 [ 740.620206][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.630441][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.640284][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.650557][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.656543][ T31] usb 3-1: device descriptor read/64, error -71 [ 740.664848][T23852] loop6: unable to read partition table [ 740.671704][T23852] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 740.671724][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.695413][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.703591][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.713806][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.727936][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.738159][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.746406][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.756655][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.767442][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.777694][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.795127][T23857] netlink: 'syz.4.9338': attribute type 27 has an invalid length. [ 740.803187][T23857] FAULT_INJECTION: forcing a failure. [ 740.803187][T23857] name failslab, interval 1, probability 0, space 0, times 0 [ 740.815910][T23857] CPU: 0 UID: 0 PID: 23857 Comm: syz.4.9338 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 740.815943][T23857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 740.815958][T23857] Call Trace: [ 740.815965][T23857] [ 740.815974][T23857] __dump_stack+0x21/0x30 [ 740.816013][T23857] dump_stack_lvl+0x140/0x1c0 [ 740.816048][T23857] ? __cfi_dump_stack_lvl+0x10/0x10 [ 740.816083][T23857] ? synchronize_rcu_expedited+0x728/0x970 [ 740.816115][T23857] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 740.816146][T23857] ? rwsem_read_trylock+0x274/0x5b0 [ 740.816209][T23857] dump_stack+0x19/0x20 [ 740.816253][T23857] should_fail_ex+0x3d7/0x530 [ 740.816276][T23857] should_failslab+0xac/0x100 [ 740.816303][T23857] kmem_cache_alloc_node_noprof+0x45/0x420 [ 740.816339][T23857] ? __alloc_skb+0x108/0x370 [ 740.816368][T23857] __alloc_skb+0x108/0x370 [ 740.816396][T23857] rtmsg_ifinfo_build_skb+0x85/0x270 [ 740.816421][T23857] rtmsg_ifinfo+0x91/0x1a0 [ 740.816444][T23857] __dev_notify_flags+0x100/0x5b0 [ 740.816465][T23857] ? dev_set_rx_mode+0x223/0x2c0 [ 740.816487][T23857] ? __cfi___dev_notify_flags+0x10/0x10 [ 740.816509][T23857] ? __dev_change_flags+0x4e6/0x6c0 [ 740.816530][T23857] ? irq_work_queue+0xc2/0x160 [ 740.816560][T23857] ? vprintk_emit+0x3e3/0x650 [ 740.816588][T23857] ? __cfi___dev_change_flags+0x10/0x10 [ 740.816611][T23857] ? __cfi_vprintk_emit+0x10/0x10 [ 740.816639][T23857] ? unwind_get_return_address+0x51/0x90 [ 740.816668][T23857] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 740.816696][T23857] dev_change_flags+0xe9/0x1a0 [ 740.816719][T23857] do_setlink+0xc20/0x4280 [ 740.816746][T23857] ? __cfi__printk+0x10/0x10 [ 740.816773][T23857] ? nlmsg_parse_deprecated_strict+0x130/0x130 [ 740.816801][T23857] ? kasan_save_track+0x4f/0x80 [ 740.816826][T23857] ? kasan_save_alloc_info+0x40/0x50 [ 740.816859][T23857] ? __kasan_kmalloc+0x96/0xb0 [ 740.816886][T23857] ? __kmalloc_cache_noprof+0x23c/0x470 [ 740.816915][T23857] ? __nla_validate+0x70/0x70 [ 740.816946][T23857] ? kasan_save_alloc_info+0x40/0x50 [ 740.816979][T23857] ? __kasan_kmalloc+0x96/0xb0 [ 740.817007][T23857] rtnl_newlink+0x10ec/0x2240 [ 740.817031][T23857] ? rtnl_newlink+0xb11/0x2240 [ 740.817056][T23857] ? __cfi_rtnl_newlink+0x10/0x10 [ 740.817078][T23857] ? cred_has_capability+0x296/0x3a0 [ 740.817111][T23857] ? __kernel_text_address+0x11/0x40 [ 740.817142][T23857] ? selinux_perf_event_alloc+0x110/0x110 [ 740.817178][T23857] ? stack_trace_save+0xaa/0x100 [ 740.817206][T23857] ? __cfi_mutex_lock+0x10/0x10 [ 740.817233][T23857] ? ns_capable+0x90/0xf0 [ 740.817253][T23857] ? netlink_net_capable+0x129/0x160 [ 740.817283][T23857] ? __cfi_rtnl_newlink+0x10/0x10 [ 740.817316][T23857] rtnetlink_rcv_msg+0x8be/0xa40 [ 740.817349][T23857] ? avc_has_perm_noaudit+0x26c/0x360 [ 740.817386][T23857] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 740.817411][T23857] ? avc_has_perm_noaudit+0x28a/0x360 [ 740.817435][T23857] ? avc_has_perm+0x155/0x240 [ 740.817458][T23857] netlink_rcv_skb+0x256/0x4f0 [ 740.817488][T23857] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 740.817513][T23857] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 740.817554][T23857] ? netlink_autobind+0x1c0/0x1c0 [ 740.817574][T23857] ? is_vmalloc_addr+0x11/0x40 [ 740.817602][T23857] rtnetlink_rcv+0x20/0x30 [ 740.817625][T23857] netlink_unicast+0x8c0/0xa60 [ 740.817654][T23857] netlink_sendmsg+0x7fe/0xb10 [ 740.817674][T23857] ? __cfi_netlink_sendmsg+0x10/0x10 [ 740.817695][T23857] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 740.817719][T23857] ? security_socket_sendmsg+0x3d/0x100 [ 740.817746][T23857] ? __cfi_netlink_sendmsg+0x10/0x10 [ 740.817765][T23857] ____sys_sendmsg+0x9de/0xa30 [ 740.817798][T23857] ? __import_iovec+0x5ad/0x7c0 [ 740.817825][T23857] ? __sys_sendmsg_sock+0x50/0x50 [ 740.817858][T23857] ? import_iovec+0x80/0xb0 [ 740.817884][T23857] ___sys_sendmsg+0x2a6/0x370 [ 740.817904][T23857] ? __sys_sendmsg+0x2a0/0x2a0 [ 740.817935][T23857] ? proc_fail_nth_write+0x184/0x220 [ 740.817965][T23857] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 740.818002][T23857] __x64_sys_sendmsg+0x1fb/0x2d0 [ 740.818021][T23857] ? fput+0x1a4/0x240 [ 740.818047][T23857] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 740.818066][T23857] ? ksys_write+0x1f3/0x260 [ 740.818089][T23857] ? __kasan_check_read+0x15/0x20 [ 740.818110][T23857] x64_sys_call+0x2a4c/0x2ee0 [ 740.818131][T23857] do_syscall_64+0x57/0xf0 [ 740.818152][T23857] ? clear_bhb_loop+0x50/0xa0 [ 740.818176][T23857] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 740.818200][T23857] RIP: 0033:0x7f43a079ce59 [ 740.818218][T23857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.818236][T23857] RSP: 002b:00007f43a16fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.818258][T23857] RAX: ffffffffffffffda RBX: 00007f43a0a15fa0 RCX: 00007f43a079ce59 [ 740.818274][T23857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 740.818289][T23857] RBP: 00007f43a16fe090 R08: 0000000000000000 R09: 0000000000000000 [ 740.818303][T23857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.818316][T23857] R13: 00007f43a0a16038 R14: 00007f43a0a15fa0 R15: 00007ffe54189ad8 [ 740.818341][T23857] [ 740.939400][ T31] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 741.342758][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.349985][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.399472][T23861] netlink: 'syz.4.9340': attribute type 4 has an invalid length. [ 741.473604][T21830] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 741.481914][ T31] usb 3-1: device descriptor read/64, error -71 [ 741.565574][ T6577] Bluetooth: hci1: Frame reassembly failed (-84) [ 741.573590][T23869] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 741.633850][T21830] usb 2-1: Using ep0 maxpacket: 16 [ 741.641396][T21830] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 741.650530][T21830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.658602][T21830] usb 2-1: Product: syz [ 741.662758][T21830] usb 2-1: Manufacturer: syz [ 741.667508][T21830] usb 2-1: SerialNumber: syz [ 741.751426][ T31] usb 3-1: device descriptor read/64, error -71 [ 741.869119][ T31] usb usb3-port1: attempt power cycle [ 742.211854][T23871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.220773][T23871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.232291][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 742.254997][ T31] usb 3-1: device descriptor read/8, error -71 [ 742.393712][ T31] usb 3-1: device descriptor read/8, error -71 [ 742.649071][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 742.671524][ T31] usb 3-1: device descriptor read/8, error -71 [ 742.810519][ T31] usb 3-1: device descriptor read/8, error -71 [ 742.937668][ T31] usb usb3-port1: unable to enumerate USB device [ 743.030635][T23876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=23876 comm=syz.6.9346 [ 743.073864][T23878] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9347'. [ 743.717635][ T5979] Bluetooth: hci1: command 0x1003 tx timeout [ 743.717642][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 743.735435][T21830] usb 2-1: MIDIStreaming interface descriptor not found [ 743.762783][T21830] usb 2-1: USB disconnect, device number 47 [ 743.783305][T22441] udevd[22441]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 743.814276][T21825] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0 [ 743.827820][T21825] hid-generic 0000:0000:0000.0051: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.859391][T23907] fido_id[23907]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.893578][T23909] netlink: 'syz.4.9357': attribute type 12 has an invalid length. [ 743.932522][T23911] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9358'. [ 744.325713][T23935] netlink: 'syz.1.9362': attribute type 27 has an invalid length. [ 744.368385][ T6592] Bluetooth: hci1: Frame reassembly failed (-84) [ 744.379230][T23937] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 746.538816][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 746.538816][ T5979] Bluetooth: hci1: command 0x1003 tx timeout [ 752.395565][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 752.395587][ T36] audit: type=1400 audit(2000000126.546:38595): avc: denied { create } for pid=23942 comm="syz.2.9366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 752.404729][T23946] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9368'. [ 752.683223][T21830] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 752.758069][ T31] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 752.843554][T21830] usb 5-1: Using ep0 maxpacket: 32 [ 752.843557][ T1391] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 752.857358][T21830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.868288][T21830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.878049][T21830] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 752.887134][T21830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.895684][T21830] usb 5-1: config 0 descriptor?? [ 752.902037][T21830] hub 5-1:0.0: USB hub found [ 752.930177][ T31] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 752.940995][ T31] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.953838][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 752.960459][ T31] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 752.969564][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.978325][ T31] usb 3-1: config 0 descriptor?? [ 752.983664][T23959] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 753.003798][ T1391] usb 2-1: Using ep0 maxpacket: 32 [ 753.010488][ T1391] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.018932][ T1391] usb 2-1: config 7 has an invalid interface number: 194 but max is 0 [ 753.027337][ T1391] usb 2-1: config 7 has no interface number 0 [ 753.033611][ T1391] usb 2-1: config 7 interface 194 has no altsetting 0 [ 753.042944][ T1391] usb 2-1: New USB device found, idVendor=0572, idProduct=1324, bcdDevice=aa.65 [ 753.052042][ T1391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.060115][ T1391] usb 2-1: Product: syz [ 753.064303][ T1391] usb 2-1: Manufacturer: syz [ 753.068975][ T1391] usb 2-1: SerialNumber: syz [ 753.115378][T21830] hub 5-1:0.0: 1 port detected [ 753.126984][T21830] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 753.143180][T21830] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 753.152753][T23969] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 753.164527][T21830] usbhid 5-1:0.0: can't add hid device: -71 [ 753.170505][T21830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 753.207258][T21830] usb 5-1: USB disconnect, device number 97 [ 753.213712][T23959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.228019][T23959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.356835][ T1391] usb 2-1: USB disconnect, device number 48 [ 753.451657][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 753.458827][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 753.471106][ T31] usb 3-1: USB disconnect, device number 40 [ 754.033639][T23978] rust_binder: Error while translating object. [ 754.033690][T23978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 754.040022][T23978] rust_binder: 23977:23978 transaction to 23977 failed: EINVAL [ 754.140981][T23986] rust_binder: Error while translating object. [ 754.149260][T23986] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 754.155424][T23986] rust_binder: 23985:23986 transaction to 23985 failed: EINVAL [ 754.165299][T23986] FAULT_INJECTION: forcing a failure. [ 754.165299][T23986] name failslab, interval 1, probability 0, space 0, times 0 [ 754.185505][T23986] CPU: 1 UID: 0 PID: 23986 Comm: syz.2.9379 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 754.185542][T23986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.185553][T23986] Call Trace: [ 754.185560][T23986] [ 754.185567][T23986] __dump_stack+0x21/0x30 [ 754.185596][T23986] dump_stack_lvl+0x140/0x1c0 [ 754.185621][T23986] ? __cfi_dump_stack_lvl+0x10/0x10 [ 754.185646][T23986] ? selinux_file_open+0x46c/0x630 [ 754.185663][T23986] ? __cfi_selinux_file_open+0x10/0x10 [ 754.185680][T23986] dump_stack+0x19/0x20 [ 754.185703][T23986] should_fail_ex+0x3d7/0x530 [ 754.185719][T23986] should_failslab+0xac/0x100 [ 754.185741][T23986] kmem_cache_alloc_node_noprof+0x45/0x420 [ 754.185760][T23986] ? __alloc_skb+0x108/0x370 [ 754.185783][T23986] __alloc_skb+0x108/0x370 [ 754.185804][T23986] tcp_stream_alloc_skb+0x43/0x370 [ 754.185830][T23986] tcp_sendmsg_locked+0xeb5/0x4b70 [ 754.185856][T23986] ? __asan_memcpy+0x5a/0x80 [ 754.185900][T23986] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 754.185936][T23986] ? __kasan_check_write+0x18/0x20 [ 754.185953][T23986] ? proc_fail_nth_write+0x184/0x220 [ 754.185979][T23986] ? __cfi_tcp_sendmsg+0x10/0x10 [ 754.186004][T23986] tcp_sendmsg+0x3e/0xd0 [ 754.186028][T23986] ? __cfi_tcp_sendmsg+0x10/0x10 [ 754.186053][T23986] inet_sendmsg+0xb7/0x120 [ 754.186071][T23986] ? __cfi_inet_sendmsg+0x10/0x10 [ 754.186089][T23986] __sys_sendto+0x5ea/0x700 [ 754.186131][T23986] ? __cfi___sys_sendto+0x10/0x10 [ 754.186155][T23986] ? __kasan_check_write+0x18/0x20 [ 754.186173][T23986] ? __cfi_ksys_write+0x10/0x10 [ 754.186191][T23986] __x64_sys_sendto+0xe9/0x100 [ 754.186226][T23986] x64_sys_call+0x2c2c/0x2ee0 [ 754.186241][T23986] do_syscall_64+0x57/0xf0 [ 754.186256][T23986] ? clear_bhb_loop+0x50/0xa0 [ 754.186275][T23986] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 754.186292][T23986] RIP: 0033:0x7fdd0ff9ce59 [ 754.186306][T23986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.186319][T23986] RSP: 002b:00007fdd10e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 754.186336][T23986] RAX: ffffffffffffffda RBX: 00007fdd10215fa0 RCX: 00007fdd0ff9ce59 [ 754.186348][T23986] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 754.186359][T23986] RBP: 00007fdd10e04090 R08: 0000000000000000 R09: 0000000000000000 [ 754.186371][T23986] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 754.186381][T23986] R13: 00007fdd10216038 R14: 00007fdd10215fa0 R15: 00007ffce8f77928 [ 754.186395][T23986] [ 754.691103][T23991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 754.691152][T23991] rust_binder: 23990:23991 transaction to 23990 failed: ENOMEM [ 755.673260][T24021] netlink: 'syz.4.9391': attribute type 27 has an invalid length. [ 755.696750][T24019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 755.696783][T24019] rust_binder: 24018:24019 transaction to 24018 failed: EINVAL [ 755.740642][T24019] rust_binder: Read failure Err(EAGAIN) in pid:426 [ 755.969454][T24042] Unsupported ieee802154 address type: 0 [ 756.486373][T24066] netlink: 'syz.4.9408': attribute type 63 has an invalid length. [ 756.494411][T24066] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9408'. [ 756.589083][T24072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42590 sclass=netlink_route_socket pid=24072 comm=syz.2.9410 [ 756.665350][T24081] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 756.683554][ T36] audit: type=1400 audit(2000000130.560:38596): avc: denied { sqpoll } for pid=24079 comm="syz.6.9414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 756.703290][T24081] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 756.843856][ T36] audit: type=1400 audit(2000000130.710:38597): avc: denied { read write } for pid=24094 comm="syz.6.9419" name="file0" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 756.890732][ T36] audit: type=1400 audit(2000000130.710:38598): avc: denied { open } for pid=24094 comm="syz.6.9419" path="/200/file0" dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 757.076577][ T1391] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 757.096345][ T1391] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.00 Device [syz1] on syz0 [ 757.161807][T24106] fido_id[24106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 757.354773][T24125] netlink: 408 bytes leftover after parsing attributes in process `syz.2.9429'. [ 757.438530][T21830] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 757.630857][T21830] usb 2-1: Using ep0 maxpacket: 16 [ 757.641813][T21830] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 757.662925][T21830] usb 2-1: config 0 has no interface number 0 [ 757.671482][T21830] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 757.692536][T21830] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 757.714218][T21830] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 757.728959][T21830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.747886][T21830] usb 2-1: Product: syz [ 757.753282][T21830] usb 2-1: Manufacturer: syz [ 757.763672][T21830] usb 2-1: SerialNumber: syz [ 757.774121][T21830] usb 2-1: config 0 descriptor?? [ 757.785346][T24108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 757.792751][T24108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 758.016426][T24108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 758.023620][T24108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 758.369772][T24163] overlayfs: failed to resolve './bus': -2 [ 758.475136][T21830] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 758.498884][T21830] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 758.515813][T21830] asix 2-1:0.34: probe with driver asix failed with error -32 [ 758.838393][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 759.009377][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 759.022491][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 759.041420][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.054058][ T31] usb 3-1: Product: syz [ 759.061710][ T31] usb 3-1: Manufacturer: syz [ 759.072058][ T31] usb 3-1: SerialNumber: syz [ 759.301102][ T31] usb 3-1: selecting invalid altsetting 1 [ 759.311743][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 759.322440][ T31] usb 3-1: USB disconnect, device number 41 [ 759.334108][T23950] udevd[23950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 759.789461][ T31] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 759.857033][T24187] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9451'. [ 759.960411][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 759.967126][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 759.975744][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 759.988547][ T31] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 759.997887][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.006044][ T31] usb 5-1: Product: syz [ 760.010329][ T31] usb 5-1: Manufacturer: syz [ 760.015166][ T31] usb 5-1: SerialNumber: syz [ 760.131413][ T1391] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 760.238983][ T31] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 760.247278][ T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 760.303541][ T1391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.314640][ T1391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.324719][ T1391] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 760.337866][ T1391] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 760.347059][ T1391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.364034][ T944] usb 2-1: USB disconnect, device number 49 [ 760.371091][ T1391] usb 3-1: config 0 descriptor?? [ 760.405147][T24189] overlayfs: failed to resolve './bus': -2 [ 760.708517][ T31] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 760.823274][ T1391] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x7 [ 760.830822][ T1391] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x3 [ 760.838980][ T1391] plantronics 0003:047F:FFFF.0053: unbalanced delimiter at end of report description [ 760.848811][ T1391] plantronics 0003:047F:FFFF.0053: parse failed [ 760.848963][T24208] overlayfs: failed to resolve './bus': -2 [ 760.855440][ T1391] plantronics 0003:047F:FFFF.0053: probe with driver plantronics failed with error -22 [ 760.927364][ T31] usb 5-1: USB disconnect, device number 99 [ 760.937137][T23949] udevd[23949]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 761.040463][ T1391] usb 3-1: USB disconnect, device number 42 [ 761.049001][ T944] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 761.211429][ T944] usb 2-1: Using ep0 maxpacket: 16 [ 761.222564][ T944] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 761.230640][ T944] usb 2-1: config 0 has no interface number 0 [ 761.236972][ T944] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 761.248973][ T944] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 761.260478][ T944] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 761.270013][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.278065][ T944] usb 2-1: Product: syz [ 761.282239][ T944] usb 2-1: Manufacturer: syz [ 761.286882][ T944] usb 2-1: SerialNumber: syz [ 761.292500][ T944] usb 2-1: config 0 descriptor?? [ 761.297810][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.305011][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.527128][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.534393][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 761.969384][ T1391] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 761.977150][ T944] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 761.987535][ T944] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 761.997887][ T944] asix 2-1:0.34: probe with driver asix failed with error -61 [ 762.025646][T24266] FAULT_INJECTION: forcing a failure. [ 762.025646][T24266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.038916][T24266] CPU: 1 UID: 0 PID: 24266 Comm: syz.2.9483 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 762.038963][T24266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.038974][T24266] Call Trace: [ 762.038981][T24266] [ 762.038988][T24266] __dump_stack+0x21/0x30 [ 762.039016][T24266] dump_stack_lvl+0x140/0x1c0 [ 762.039040][T24266] ? __cfi_dump_stack_lvl+0x10/0x10 [ 762.039065][T24266] ? stack_depot_save_flags+0x38/0x800 [ 762.039083][T24266] ? stack_trace_save+0xaa/0x100 [ 762.039103][T24266] dump_stack+0x19/0x20 [ 762.039125][T24266] should_fail_ex+0x3d7/0x530 [ 762.039141][T24266] should_fail_alloc_page+0xec/0x110 [ 762.039163][T24266] __alloc_pages_noprof+0x1c0/0x7e0 [ 762.039186][T24266] ? x64_sys_call+0xe69/0x2ee0 [ 762.039203][T24266] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 762.039238][T24266] ? avc_has_perm_noaudit+0x26c/0x360 [ 762.039258][T24266] __pud_alloc+0xb0/0x8f0 [ 762.039277][T24266] ? avc_has_perm+0x155/0x240 [ 762.039293][T24266] ? __cfi___pud_alloc+0x10/0x10 [ 762.039311][T24266] ? __cfi_avc_has_perm+0x10/0x10 [ 762.039327][T24266] ? kasan_save_alloc_info+0x40/0x50 [ 762.039352][T24266] handle_mm_fault+0x1906/0x1bf0 [ 762.039372][T24266] ? __cfi_handle_mm_fault+0x10/0x10 [ 762.039390][T24266] ? find_vma+0xd3/0x120 [ 762.039407][T24266] ? lock_mm_and_find_vma+0xb8/0x390 [ 762.039433][T24266] do_user_addr_fault+0x4c9/0x11e0 [ 762.039450][T24266] exc_page_fault+0x58/0xc0 [ 762.039490][T24266] asm_exc_page_fault+0x2b/0x30 [ 762.039539][T24266] RIP: 0010:__get_user_nocheck_8+0xa/0x20 [ 762.039566][T24266] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 <48> 8b 10 31 c0 0f 01 ca e9 49 62 03 00 90 90 90 90 90 90 90 90 90 [ 762.039580][T24266] RSP: 0018:ffffc9000168fb58 EFLAGS: 00050202 [ 762.039596][T24266] RAX: 00002000000001c0 RBX: 0000000000004205 RCX: ffff8881208f0000 [ 762.039610][T24266] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00007ffffffff000 [ 762.039627][T24266] RBP: ffffc9000168fde0 R08: ffff8881208f0000 R09: 000000000000001d [ 762.039640][T24266] R10: 0000000000004211 R11: 0000000000000000 R12: 0000000000004205 [ 762.039651][T24266] R13: ffff888107f1df00 R14: 00007ffffffff000 R15: 00002000000001c0 [ 762.039667][T24266] ? ptrace_request+0xa3d/0x1cd0 [ 762.039686][T24266] ? __kasan_check_write+0x18/0x20 [ 762.039703][T24266] ? __cfi_ptrace_request+0x10/0x10 [ 762.039720][T24266] ? task_rq_lock+0xda/0x2e0 [ 762.039736][T24266] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 762.039754][T24266] ? wait_task_inactive+0x322/0x590 [ 762.039775][T24266] ? __cfi_wait_task_inactive+0x10/0x10 [ 762.039793][T24266] ? __kasan_check_write+0x18/0x20 [ 762.039809][T24266] ? mutex_unlock+0x90/0x240 [ 762.039831][T24266] arch_ptrace+0x29a/0x410 [ 762.039862][T24266] __se_sys_ptrace+0x152/0x3d0 [ 762.039879][T24266] ? __x64_sys_ptrace+0xc0/0xc0 [ 762.039898][T24266] __x64_sys_ptrace+0x9f/0xc0 [ 762.039915][T24266] x64_sys_call+0x2d88/0x2ee0 [ 762.039932][T24266] do_syscall_64+0x57/0xf0 [ 762.039949][T24266] ? clear_bhb_loop+0x50/0xa0 [ 762.039968][T24266] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 762.039988][T24266] RIP: 0033:0x7fdd0ff9ce59 [ 762.040001][T24266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.040016][T24266] RSP: 002b:00007fdd10e04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 762.040033][T24266] RAX: ffffffffffffffda RBX: 00007fdd10215fa0 RCX: 00007fdd0ff9ce59 [ 762.040047][T24266] RDX: 0000000000000002 RSI: 0000000000000201 RDI: 0000000000004205 [ 762.040058][T24266] RBP: 00007fdd10e04090 R08: 0000000000000000 R09: 0000000000000000 [ 762.040070][T24266] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 762.040081][T24266] R13: 00007fdd10216038 R14: 00007fdd10215fa0 R15: 00007ffce8f77928 [ 762.040096][T24266] [ 762.440052][T24272] netlink: 'syz.2.9485': attribute type 12 has an invalid length. [ 762.459245][T24274] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9486'. [ 762.506679][ T1391] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 762.515802][ T1391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.523820][ T1391] usb 5-1: Product: syz [ 762.528327][ T1391] usb 5-1: Manufacturer: syz [ 762.532943][ T1391] usb 5-1: SerialNumber: syz [ 763.009874][ T1391] rtl8150 5-1:1.0: couldn't reset the device [ 763.016018][ T1391] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 763.027054][ T1391] usb 5-1: USB disconnect, device number 100 [ 763.070180][T21825] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 763.230363][T21825] usb 3-1: Using ep0 maxpacket: 16 [ 763.236618][T21825] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 763.244994][T21825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.255142][T21825] usb 3-1: config 0 has no interface number 0 [ 763.262619][T21825] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 763.271654][T21825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.279688][T21825] usb 3-1: Product: syz [ 763.283911][T21825] usb 3-1: Manufacturer: syz [ 763.288514][T21825] usb 3-1: SerialNumber: syz [ 763.293713][T21825] usb 3-1: config 0 descriptor?? [ 763.299950][T21825] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 763.306378][T21825] usb 3-1: No valid video chain found. [ 763.539212][T24290] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 763.655733][T24301] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9495'. [ 763.707629][T21825] usb 3-1: USB disconnect, device number 43 [ 763.994537][ T1391] usb 2-1: USB disconnect, device number 50 [ 764.053575][T24320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9497'. [ 764.124764][T24324] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8471 sclass=netlink_xfrm_socket pid=24324 comm=syz.2.9501 [ 764.166524][T24330] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9504'. [ 764.373771][ T1391] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 764.555412][ T1391] usb 2-1: Using ep0 maxpacket: 16 [ 764.562281][ T1391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.573224][ T1391] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.583004][ T1391] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.596099][ T1391] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 764.605312][ T1391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.614130][ T1391] usb 2-1: config 0 descriptor?? [ 764.726467][ T944] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 764.795913][T24348] rust_binder: Error while translating object. [ 764.795950][T24348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 764.802300][T24348] rust_binder: 24347:24348 transaction to 24347 failed: EINVAL [ 764.908048][ T944] usb 3-1: Using ep0 maxpacket: 16 [ 764.922011][ T944] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 764.930156][ T944] usb 3-1: config 0 has no interface number 0 [ 764.936285][ T944] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 764.946303][ T944] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 764.957754][ T944] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 764.966887][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.974914][ T944] usb 3-1: Product: syz [ 764.979086][ T944] usb 3-1: Manufacturer: syz [ 764.983730][ T944] usb 3-1: SerialNumber: syz [ 764.989216][ T944] usb 3-1: config 0 descriptor?? [ 764.994593][T24346] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 765.001898][T24346] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 765.069919][ T1391] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0054/input/input37 [ 765.090020][ T1391] sony 0003:054C:03D5.0054: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 765.223740][T24346] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 765.230987][T24346] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 765.263809][ T1391] usb 2-1: USB disconnect, device number 51 [ 765.324836][T21825] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 765.486303][T21825] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 765.494677][T21825] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 765.502960][T21825] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 765.511880][T21825] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 765.522702][T21825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 765.532474][T21825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 765.547753][T21825] usb 5-1: string descriptor 0 read error: -22 [ 765.554973][T21825] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 765.564079][T21825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.572784][T21825] usb 5-1: config 0 descriptor?? [ 765.578683][T21825] hub 5-1:0.0: bad descriptor, ignoring hub [ 765.584643][T21825] hub 5-1:0.0: probe with driver hub failed with error -5 [ 765.666546][ T944] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 765.676656][ T944] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 765.686997][ T944] asix 3-1:0.34: probe with driver asix failed with error -61 [ 765.831469][ T36] audit: type=1326 audit(2000000139.113:38599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24355 comm="syz.1.9511" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe97eb9ce59 code=0x0 [ 765.901925][ T944] usb 5-1: USB disconnect, device number 101 [ 766.190392][T21825] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 766.352211][T21825] usb 2-1: unable to get BOS descriptor or descriptor too short [ 766.360916][T21825] usb 2-1: config 254 has an invalid interface number: 205 but max is 0 [ 766.369534][T21825] usb 2-1: config 254 has no interface number 0 [ 766.376544][T21825] usb 2-1: config 254 interface 205 has no altsetting 0 [ 766.385234][T21825] usb 2-1: Dual-Role OTG device on HNP port [ 766.391500][T21825] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice= 1.2e [ 766.401211][T21825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.409495][T21825] usb 2-1: Product: syz [ 766.413749][T21825] usb 2-1: Manufacturer: syz [ 766.422538][T21825] usb 2-1: SerialNumber: syz [ 766.443750][T24359] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 766.642511][T24357] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=24357 comm=syz.1.9511 [ 767.002095][T24362] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9513'. [ 767.383435][ T36] audit: type=1400 audit(2000000140.564:38600): avc: denied { associate } for pid=24378 comm="syz.4.9516" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 767.399520][T24379] tmpfs: Bad value for 'nr_blocks' [ 767.642437][T24395] netlink: 'syz.4.9520': attribute type 4 has an invalid length. [ 767.650844][T24395] netlink: 'syz.4.9520': attribute type 4 has an invalid length. [ 767.680299][T24395] netlink: 'syz.4.9520': attribute type 4 has an invalid length. [ 767.713152][ T944] usb 3-1: USB disconnect, device number 44 [ 767.756481][T24397] netlink: 'syz.2.9521': attribute type 11 has an invalid length. [ 767.768694][T24397] tmpfs: Bad value for 'nr_inodes' [ 767.773933][ T36] audit: type=1400 audit(2000000140.929:38601): avc: denied { mounton } for pid=24396 comm="syz.2.9521" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 767.862480][T24399] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9522'. [ 767.914734][T24348] FAULT_INJECTION: forcing a failure. [ 767.914734][T24348] name fail_futex, interval 1, probability 0, space 0, times 1 [ 767.927788][T24348] CPU: 0 UID: 0 PID: 24348 Comm: syz.6.9508 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 767.927840][T24348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.927872][T24348] Call Trace: [ 767.927880][T24348] [ 767.927889][T24348] __dump_stack+0x21/0x30 [ 767.927930][T24348] dump_stack_lvl+0x140/0x1c0 [ 767.927963][T24348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 767.927996][T24348] ? avc_has_perm_noaudit+0x28a/0x360 [ 767.928024][T24348] dump_stack+0x19/0x20 [ 767.928053][T24348] should_fail_ex+0x3d7/0x530 [ 767.928083][T24348] should_fail+0xf/0x20 [ 767.928101][T24348] get_futex_key+0x22c/0x940 [ 767.928149][T24348] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 767.928181][T24348] ? __cfi_get_futex_key+0x10/0x10 [ 767.928212][T24348] futex_wake+0x150/0x950 [ 767.928234][T24348] ? remove_wait_queue+0x132/0x150 [ 767.928273][T24348] ? __kasan_check_write+0x18/0x20 [ 767.928297][T24348] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 767.928319][T24348] ? __cfi_futex_wake+0x10/0x10 [ 767.928340][T24348] ? perf_lock_task_context+0x397/0x450 [ 767.928368][T24348] ? __perf_event_period+0x490/0x490 [ 767.928392][T24348] ? mutex_unlock+0x90/0x240 [ 767.928421][T24348] do_futex+0x37d/0x510 [ 767.928451][T24348] ? __kasan_check_read+0x15/0x20 [ 767.928491][T24348] ? __cfi_do_futex+0x10/0x10 [ 767.928524][T24348] ? __kasan_check_write+0x18/0x20 [ 767.928547][T24348] mm_release+0x15f/0x300 [ 767.928575][T24348] ? exit_mm_release+0x50/0x50 [ 767.928604][T24348] ? futex_exit_release+0x11d/0x1f0 [ 767.928636][T24348] exit_mm_release+0x29/0x50 [ 767.928664][T24348] do_exit+0x7ff/0x2720 [ 767.928697][T24348] ? _raw_spin_unlock_bh+0x54/0x60 [ 767.928721][T24348] ? tcp_release_cb+0x14d/0x4c0 [ 767.928754][T24348] ? __cfi_do_exit+0x10/0x10 [ 767.928784][T24348] ? __cfi_tcp_release_cb+0x10/0x10 [ 767.928818][T24348] ? _raw_spin_lock_bh+0x96/0x130 [ 767.928841][T24348] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 767.928865][T24348] ? __kasan_check_write+0x18/0x20 [ 767.928890][T24348] ? __kasan_check_write+0x18/0x20 [ 767.928914][T24348] ? _raw_spin_lock_irq+0x93/0x120 [ 767.928937][T24348] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 767.928963][T24348] do_group_exit+0x229/0x2f0 [ 767.928994][T24348] ? __kasan_check_write+0x18/0x20 [ 767.929017][T24348] get_signal+0x1398/0x14e0 [ 767.929052][T24348] arch_do_signal_or_restart+0xbc/0x760 [ 767.929085][T24348] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 767.929112][T24348] syscall_exit_to_user_mode+0x57/0xb0 [ 767.929145][T24348] do_syscall_64+0x63/0xf0 [ 767.929168][T24348] ? clear_bhb_loop+0x50/0xa0 [ 767.929196][T24348] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 767.929223][T24348] RIP: 0033:0x7fdfb499ce59 [ 767.929243][T24348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.929263][T24348] RSP: 002b:00007fdfb33f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 767.929288][T24348] RAX: fffffffffffffe00 RBX: 00007fdfb4c15fa0 RCX: 00007fdfb499ce59 [ 767.929306][T24348] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 767.929323][T24348] RBP: 00007fdfb33f7090 R08: 0000000000000000 R09: 0000000000000000 [ 767.929339][T24348] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 767.929355][T24348] R13: 00007fdfb4c16038 R14: 00007fdfb4c15fa0 R15: 00007fff30350928 [ 767.929376][T24348] [ 768.289793][T24407] netlink: 388 bytes leftover after parsing attributes in process `syz.6.9524'. [ 768.552016][ T1391] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 768.596843][T24427] FAULT_INJECTION: forcing a failure. [ 768.596843][T24427] name failslab, interval 1, probability 0, space 0, times 0 [ 768.609582][T24427] CPU: 1 UID: 0 PID: 24427 Comm: syz.4.9530 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 768.609619][T24427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.609635][T24427] Call Trace: [ 768.609644][T24427] [ 768.609653][T24427] __dump_stack+0x21/0x30 [ 768.609695][T24427] dump_stack_lvl+0x140/0x1c0 [ 768.609729][T24427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 768.609772][T24427] dump_stack+0x19/0x20 [ 768.609804][T24427] should_fail_ex+0x3d7/0x530 [ 768.609840][T24427] should_failslab+0xac/0x100 [ 768.609869][T24427] kmem_cache_alloc_node_noprof+0x45/0x420 [ 768.609906][T24427] ? selinux_perf_event_alloc+0x110/0x110 [ 768.609939][T24427] ? __alloc_skb+0x108/0x370 [ 768.609967][T24427] __alloc_skb+0x108/0x370 [ 768.609994][T24427] create_monitor_ctrl_open+0x15d/0x8c0 [ 768.610023][T24427] ? selinux_capable+0x38/0x50 [ 768.610049][T24427] ? bpf_lsm_capable+0xd/0x20 [ 768.610081][T24427] ? hci_sock_gen_cookie+0x120/0x120 [ 768.610107][T24427] ? ns_capable+0x90/0xf0 [ 768.610129][T24427] hci_sock_ioctl+0x3b8/0x9e0 [ 768.610155][T24427] sock_do_ioctl+0x115/0x330 [ 768.610179][T24427] ? sock_show_fdinfo+0xd0/0xd0 [ 768.610202][T24427] ? __cfi_vfs_write+0x10/0x10 [ 768.610224][T24427] ? __kasan_check_write+0x18/0x20 [ 768.610245][T24427] ? mutex_unlock+0x90/0x240 [ 768.610291][T24427] sock_ioctl+0x5b5/0x7f0 [ 768.610315][T24427] ? __cfi_sock_ioctl+0x10/0x10 [ 768.610339][T24427] ? __fget_files+0x2c5/0x340 [ 768.610367][T24427] ? bpf_lsm_file_ioctl+0xd/0x20 [ 768.610395][T24427] ? security_file_ioctl+0x3e/0x110 [ 768.610440][T24427] ? __cfi_sock_ioctl+0x10/0x10 [ 768.610463][T24427] __se_sys_ioctl+0x132/0x1b0 [ 768.610489][T24427] __x64_sys_ioctl+0x7f/0xa0 [ 768.610512][T24427] x64_sys_call+0x1878/0x2ee0 [ 768.610533][T24427] do_syscall_64+0x57/0xf0 [ 768.610554][T24427] ? clear_bhb_loop+0x50/0xa0 [ 768.610579][T24427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 768.610604][T24427] RIP: 0033:0x7f43a079ce59 [ 768.610641][T24427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.610661][T24427] RSP: 002b:00007f43a16fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.610685][T24427] RAX: ffffffffffffffda RBX: 00007f43a0a15fa0 RCX: 00007f43a079ce59 [ 768.610704][T24427] RDX: 0000200000000240 RSI: 00000000800448f0 RDI: 0000000000000004 [ 768.610721][T24427] RBP: 00007f43a16fe090 R08: 0000000000000000 R09: 0000000000000000 [ 768.610737][T24427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.610758][T24427] R13: 00007f43a0a16038 R14: 00007f43a0a15fa0 R15: 00007ffe54189ad8 [ 768.610779][T24427] [ 768.610916][T24427] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 768.920387][T24429] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9531'. [ 768.936733][ T1391] usb 3-1: device descriptor read/64, error -71 [ 769.051415][T21825] usb_ehset_test 2-1:254.205: probe with driver usb_ehset_test failed with error -32 [ 769.073785][T21825] usb 2-1: USB disconnect, device number 52 [ 769.121237][ T36] audit: type=1326 audit(2000000142.202:38602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.9533" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe97eb9ce59 code=0x0 [ 769.203856][ T1391] usb 3-1: device descriptor read/64, error -71 [ 769.374831][T21827] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 769.460323][ T1391] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 769.536302][T21827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 769.546145][T21827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 769.555907][T21827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 769.565627][T21827] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 769.577513][T21827] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 769.586604][T21827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.594652][T21827] usb 5-1: Product: syz [ 769.598843][T21827] usb 5-1: Manufacturer: syz [ 769.603468][T21827] usb 5-1: SerialNumber: syz [ 769.608617][T21827] usb 5-1: config 0 descriptor?? [ 769.610011][ T1391] usb 3-1: device descriptor read/64, error -71 [ 769.617413][T21827] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 769.830326][T24438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.838987][T24438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.850163][T21827] scsi host1: usb-storage 5-1:0.0 [ 769.858462][T21827] usb 5-1: USB disconnect, device number 102 [ 769.877059][ T1391] usb 3-1: device descriptor read/64, error -71 [ 769.996412][ T1391] usb usb3-port1: attempt power cycle [ 770.006874][ T36] audit: type=1400 audit(2000000143.025:38603): avc: denied { ioctl } for pid=24443 comm="syz.1.9535" path="/dev/ttynull" dev="devtmpfs" ino=29 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 770.368678][ T1391] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 770.391121][ T1391] usb 3-1: device descriptor read/8, error -71 [ 770.422037][T21827] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 770.544630][ T1391] usb 3-1: device descriptor read/8, error -71 [ 770.564259][T21827] usb 2-1: device descriptor read/64, error -71 [ 770.817465][ T1391] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 770.817492][T21827] usb 2-1: device descriptor read/64, error -71 [ 770.838942][ T944] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 770.847601][ T1391] usb 3-1: device descriptor read/8, error -71 [ 770.988444][ T944] usb 5-1: device descriptor read/64, error -71 [ 770.995761][ T1391] usb 3-1: device descriptor read/8, error -71 [ 771.084625][T21827] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 771.116720][ T1391] usb usb3-port1: unable to enumerate USB device [ 771.223505][T21827] usb 2-1: device descriptor read/64, error -71 [ 771.244897][ T944] usb 5-1: device descriptor read/64, error -71 [ 771.480015][T21827] usb 2-1: device descriptor read/64, error -71 [ 771.501384][ T944] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 771.512022][T24459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9541'. [ 771.522272][ T36] audit: type=1400 audit(2000000144.438:38604): avc: denied { accept } for pid=24458 comm="syz.2.9541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 771.597659][T21827] usb usb2-port1: attempt power cycle [ 771.604011][T24461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.612842][T24461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.640322][ T944] usb 5-1: device descriptor read/64, error -71 [ 771.747703][T24463] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9542'. [ 771.864708][T21825] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 771.896767][ T944] usb 5-1: device descriptor read/64, error -71 [ 771.932909][T24468] FAULT_INJECTION: forcing a failure. [ 771.932909][T24468] name failslab, interval 1, probability 0, space 0, times 0 [ 771.947249][T24468] CPU: 1 UID: 0 PID: 24468 Comm: syz.6.9543 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 771.947271][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.947282][T24468] Call Trace: [ 771.947286][T24468] [ 771.947292][T24468] __dump_stack+0x21/0x30 [ 771.947318][T24468] dump_stack_lvl+0x140/0x1c0 [ 771.947338][T24468] ? __cfi_dump_stack_lvl+0x10/0x10 [ 771.947359][T24468] ? __cfi_avc_has_perm+0x10/0x10 [ 771.947376][T24468] ? kasan_save_alloc_info+0x40/0x50 [ 771.947400][T24468] dump_stack+0x19/0x20 [ 771.947419][T24468] should_fail_ex+0x3d7/0x530 [ 771.947434][T24468] should_failslab+0xac/0x100 [ 771.947479][T24468] __kmalloc_cache_noprof+0x41/0x470 [ 771.947524][T24468] ? vhost_task_create+0x12c/0x400 [ 771.947542][T24468] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 771.947562][T24468] vhost_task_create+0x12c/0x400 [ 771.947578][T24468] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 771.947598][T24468] ? __cfi_vhost_task_create+0x10/0x10 [ 771.947627][T24468] ? __cfi_vhost_task_fn+0x10/0x10 [ 771.947643][T24468] ? __kasan_check_write+0x18/0x20 [ 771.947657][T24468] ? mutex_lock+0x97/0x1d0 [ 771.947675][T24468] ? __cfi_mutex_lock+0x10/0x10 [ 771.947692][T24468] ? kernel_text_address+0xa9/0xe0 [ 771.947717][T24468] kvm_mmu_post_init_vm+0x161/0x300 [ 771.947739][T24468] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 771.947780][T24468] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 771.947802][T24468] ? kstrtoull+0x13b/0x1e0 [ 771.947824][T24468] ? kstrtouint+0x78/0xf0 [ 771.947846][T24468] ? ioctl_has_perm+0x1bc/0x500 [ 771.947861][T24468] ? __asan_memcpy+0x5a/0x80 [ 771.947876][T24468] ? ioctl_has_perm+0x408/0x500 [ 771.947890][T24468] ? has_cap_mac_admin+0xd0/0xd0 [ 771.947904][T24468] ? __kasan_check_write+0x18/0x20 [ 771.947919][T24468] ? mutex_lock_killable+0x97/0x1d0 [ 771.947939][T24468] ? __cfi_mutex_lock_killable+0x10/0x10 [ 771.947959][T24468] ? proc_fail_nth_write+0x184/0x220 [ 771.947983][T24468] kvm_vcpu_ioctl+0xa48/0x1000 [ 771.948000][T24468] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 771.948016][T24468] ? __cfi_vfs_write+0x10/0x10 [ 771.948031][T24468] ? __kasan_check_write+0x18/0x20 [ 771.948046][T24468] ? mutex_unlock+0x90/0x240 [ 771.948065][T24468] ? __cfi_mutex_unlock+0x10/0x10 [ 771.948084][T24468] ? __fget_files+0x2c5/0x340 [ 771.948103][T24468] ? __fget_files+0x2c5/0x340 [ 771.948121][T24468] ? bpf_lsm_file_ioctl+0xd/0x20 [ 771.948151][T24468] ? security_file_ioctl+0x3e/0x110 [ 771.948201][T24468] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 771.948216][T24468] __se_sys_ioctl+0x132/0x1b0 [ 771.948235][T24468] __x64_sys_ioctl+0x7f/0xa0 [ 771.948253][T24468] x64_sys_call+0x1878/0x2ee0 [ 771.948269][T24468] do_syscall_64+0x57/0xf0 [ 771.948284][T24468] ? clear_bhb_loop+0x50/0xa0 [ 771.948303][T24468] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 771.948321][T24468] RIP: 0033:0x7fdfb499ce59 [ 771.948334][T24468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.948347][T24468] RSP: 002b:00007fdfb33f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.948364][T24468] RAX: ffffffffffffffda RBX: 00007fdfb4c15fa0 RCX: 00007fdfb499ce59 [ 771.948377][T24468] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 771.948387][T24468] RBP: 00007fdfb33f7090 R08: 0000000000000000 R09: 0000000000000000 [ 771.948397][T24468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.948407][T24468] R13: 00007fdfb4c16038 R14: 00007fdfb4c15fa0 R15: 00007fff30350928 [ 771.948421][T24468] [ 772.299650][T21827] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 772.321586][ T944] usb usb5-port1: attempt power cycle [ 772.336114][T21827] usb 2-1: device descriptor read/8, error -71 [ 772.356240][T21825] usb 3-1: device descriptor read/64, error -71 [ 772.475041][T21827] usb 2-1: device descriptor read/8, error -71 [ 772.623377][T21825] usb 3-1: device descriptor read/64, error -71 [ 772.687495][ T944] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 772.709959][ T944] usb 5-1: device descriptor read/8, error -71 [ 772.730235][T21827] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 772.774162][T21827] usb 2-1: device descriptor read/8, error -71 [ 772.850274][ T944] usb 5-1: device descriptor read/8, error -71 [ 772.890840][T21825] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 772.913176][T21827] usb 2-1: device descriptor read/8, error -71 [ 773.029484][T21825] usb 3-1: device descriptor read/64, error -71 [ 773.038309][T21827] usb usb2-port1: unable to enumerate USB device [ 773.114945][ T944] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 773.137431][ T944] usb 5-1: device descriptor read/8, error -71 [ 773.276416][ T944] usb 5-1: device descriptor read/8, error -71 [ 773.296587][T21825] usb 3-1: device descriptor read/64, error -71 [ 773.385954][T24495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24495 comm=syz.6.9550 [ 773.403839][ T944] usb usb5-port1: unable to enumerate USB device [ 773.414224][T21825] usb usb3-port1: attempt power cycle [ 773.417376][T24497] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9551'. [ 773.421010][T24495] netlink: 348 bytes leftover after parsing attributes in process `syz.6.9550'. [ 773.777465][T21825] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 773.799912][T21825] usb 3-1: device descriptor read/8, error -71 [ 773.873695][T21827] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 773.938913][T21825] usb 3-1: device descriptor read/8, error -71 [ 774.033965][T21827] usb 2-1: Using ep0 maxpacket: 16 [ 774.040351][T21827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.050490][T21827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.061016][T21827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.070101][T21827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.078122][T21827] usb 2-1: Product: syz [ 774.082285][T21827] usb 2-1: Manufacturer: syz [ 774.086886][T21827] usb 2-1: SerialNumber: syz [ 774.172869][ T944] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 774.194219][T21825] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 774.216731][T21825] usb 3-1: device descriptor read/8, error -71 [ 774.316212][T21827] usb 2-1: 0:2 : does not exist [ 774.323973][T21827] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 774.336690][T21827] usb 2-1: USB disconnect, device number 57 [ 774.347642][ T944] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 774.356668][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 774.363979][T23950] udevd[23950]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 774.368482][ T944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 774.393897][T21825] usb 3-1: device descriptor read/8, error -71 [ 774.395713][ T944] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 774.413367][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.421421][ T944] usb 5-1: Product: syz [ 774.425641][ T944] usb 5-1: Manufacturer: syz [ 774.430286][ T944] usb 5-1: SerialNumber: syz [ 774.435670][ T944] usb 5-1: config 0 descriptor?? [ 774.525620][T21825] usb usb3-port1: unable to enumerate USB device [ 774.656643][T24513] netlink: 'syz.4.9557': attribute type 27 has an invalid length. [ 774.676215][T21827] usb 5-1: USB disconnect, device number 107 [ 774.717033][T24515] netlink: 'syz.2.9558': attribute type 12 has an invalid length. [ 774.972093][T24525] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9562'. [ 775.122470][T24532] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 775.124046][ T944] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 775.274182][ T944] usb 3-1: device descriptor read/64, error -71 [ 775.337395][T24546] /dev/rnullb0: Can't open blockdev [ 775.529967][ T944] usb 3-1: device descriptor read/64, error -71 [ 775.794307][ T944] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 775.946760][ T944] usb 3-1: device descriptor read/64, error -71 [ 776.213898][ T944] usb 3-1: device descriptor read/64, error -71 [ 776.334051][ T944] usb usb3-port1: attempt power cycle [ 776.608841][T24583] FAULT_INJECTION: forcing a failure. [ 776.608841][T24583] name failslab, interval 1, probability 0, space 0, times 0 [ 776.637315][T24583] CPU: 0 UID: 0 PID: 24583 Comm: syz.1.9582 Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 776.637349][T24583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.637364][T24583] Call Trace: [ 776.637370][T24583] [ 776.637378][T24583] __dump_stack+0x21/0x30 [ 776.637413][T24583] dump_stack_lvl+0x140/0x1c0 [ 776.637441][T24583] ? __cfi_dump_stack_lvl+0x10/0x10 [ 776.637478][T24583] ? release_sock+0x171/0x1f0 [ 776.637504][T24583] dump_stack+0x19/0x20 [ 776.637531][T24583] should_fail_ex+0x3d7/0x530 [ 776.637551][T24583] should_failslab+0xac/0x100 [ 776.637576][T24583] kmem_cache_alloc_node_noprof+0x45/0x420 [ 776.637598][T24583] ? netlink_data_ready+0x20/0x20 [ 776.637627][T24583] ? __alloc_skb+0x108/0x370 [ 776.637653][T24583] __alloc_skb+0x108/0x370 [ 776.637678][T24583] netlink_alloc_large_skb+0xf7/0x1b0 [ 776.637706][T24583] netlink_sendmsg+0x594/0xb10 [ 776.637726][T24583] ? __cfi_netlink_sendmsg+0x10/0x10 [ 776.637745][T24583] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 776.637768][T24583] ? security_socket_sendmsg+0x3d/0x100 [ 776.637794][T24583] ? __cfi_netlink_sendmsg+0x10/0x10 [ 776.637812][T24583] sock_write_iter+0x445/0x490 [ 776.637834][T24583] ? __cfi_sock_write_iter+0x10/0x10 [ 776.637856][T24583] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 776.637887][T24583] vfs_write+0x761/0xf90 [ 776.637908][T24583] ? __cfi_vfs_write+0x10/0x10 [ 776.637932][T24583] ksys_write+0x145/0x260 [ 776.637952][T24583] ? __cfi_ksys_write+0x10/0x10 [ 776.637974][T24583] ? __kasan_check_read+0x15/0x20 [ 776.637994][T24583] __x64_sys_write+0x7f/0x90 [ 776.638020][T24583] x64_sys_call+0x271c/0x2ee0 [ 776.638040][T24583] do_syscall_64+0x57/0xf0 [ 776.638060][T24583] ? clear_bhb_loop+0x50/0xa0 [ 776.638085][T24583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 776.638107][T24583] RIP: 0033:0x7fe97eb9ce59 [ 776.638125][T24583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.638143][T24583] RSP: 002b:00007fe97f9ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.638166][T24583] RAX: ffffffffffffffda RBX: 00007fe97ee15fa0 RCX: 00007fe97eb9ce59 [ 776.638182][T24583] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 776.638197][T24583] RBP: 00007fe97f9ab090 R08: 0000000000000000 R09: 0000000000000000 [ 776.638211][T24583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.638224][T24583] R13: 00007fe97ee16038 R14: 00007fe97ee15fa0 R15: 00007ffca7288ab8 [ 776.638242][T24583] [ 776.727047][ T944] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 776.910566][T24585] IPv6: Can't replace route, no match found [ 776.966001][ T36] audit: type=1400 audit(2000000149.538:38605): avc: denied { name_bind } for pid=24586 comm="syz.1.9584" src=65523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 776.997723][ T944] usb 3-1: device descriptor read/8, error -71 [ 777.135027][ T6556] bridge_slave_1: left allmulticast mode [ 777.146792][ T6556] bridge_slave_1: left promiscuous mode [ 777.154352][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.165141][ T944] usb 3-1: device descriptor read/8, error -71 [ 777.176235][ T6556] bridge_slave_0: left allmulticast mode [ 777.181905][ T6556] bridge_slave_0: left promiscuous mode [ 777.197040][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.408402][T24611] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.415555][T24611] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.423918][ T944] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 777.431524][T24611] bridge_slave_0: entered allmulticast mode [ 777.438130][T24611] bridge_slave_0: entered promiscuous mode [ 777.444567][T24611] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.451609][T24611] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.458740][T24611] bridge_slave_1: entered allmulticast mode [ 777.471274][T24611] bridge_slave_1: entered promiscuous mode [ 777.477622][ T944] usb 3-1: device descriptor read/8, error -71 [ 777.524908][T24611] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.532002][T24611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.539326][T24611] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.546376][T24611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.566329][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.574027][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.583323][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.590396][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.600145][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.607227][ T6571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.635171][ T944] usb 3-1: device descriptor read/8, error -71 [ 777.649724][T24611] veth0_vlan: entered promiscuous mode [ 777.662647][T24611] veth1_macvtap: entered promiscuous mode [ 777.752787][ T944] usb usb3-port1: unable to enumerate USB device [ 777.910313][T24629] rust_binder: Error while translating object. [ 777.910347][T24629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 777.916655][T24629] rust_binder: 24628:24629 transaction to 24628 failed: EINVAL [ 777.945165][T21825] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 778.094694][T21825] usb 5-1: device descriptor read/64, error -71 [ 778.126366][T24632] overlayfs: empty lowerdir [ 778.361862][T21825] usb 5-1: device descriptor read/64, error -71 [ 778.516379][ T36] audit: type=1400 audit(2000000150.989:38606): avc: denied { mount } for pid=24655 comm="syz.5.9609" name="/" dev="configfs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 778.541975][T24658] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9610'. [ 778.560168][T24660] syzkaller1: entered promiscuous mode [ 778.565741][T24660] syzkaller1: entered allmulticast mode [ 778.580333][T24662] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 778.618259][T21825] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 778.789438][T21825] usb 5-1: device descriptor read/64, error -71 [ 778.853387][T21828] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 779.013637][T21828] usb 3-1: Using ep0 maxpacket: 32 [ 779.019968][T21828] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 779.028562][T21828] usb 3-1: config 0 has no interface number 0 [ 779.036329][T21828] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 779.045712][T21825] usb 5-1: device descriptor read/64, error -71 [ 779.052160][T21828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.061043][T21828] usb 3-1: Product: syz [ 779.065387][T21828] usb 3-1: Manufacturer: syz [ 779.070056][T21828] usb 3-1: SerialNumber: syz [ 779.075633][T21828] usb 3-1: config 0 descriptor?? [ 779.083243][T21828] smsc95xx v2.0.0 [ 779.174018][T21825] usb usb5-port1: attempt power cycle [ 779.512241][T21828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 779.523081][T21828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 779.547932][T21825] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 779.573688][T21825] usb 5-1: device descriptor read/8, error -71 [ 779.720280][T21825] usb 5-1: device descriptor read/8, error -71 [ 779.753288][T24675] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 779.772913][ T36] audit: type=1400 audit(2000000152.168:38607): avc: denied { create } for pid=24676 comm="syz.5.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 779.829050][T24682] bridge0: port 3(veth0_to_bridge) entered blocking state [ 779.836229][T24682] bridge0: port 3(veth0_to_bridge) entered disabled state [ 779.843640][T24682] veth0_to_bridge: entered allmulticast mode [ 779.850352][T24682] veth0_to_bridge: entered promiscuous mode [ 779.856385][T24682] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 779.868839][T24682] bridge0: port 3(veth0_to_bridge) entered blocking state [ 779.875997][T24682] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 779.960541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.972637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.984808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.996856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.008972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.021027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.033140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.045176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.057288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.069307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.597781][T21825] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 780.628331][T21825] usb 5-1: device descriptor read/8, error -71 [ 780.773911][T21825] usb 5-1: device descriptor read/8, error -71 [ 780.839312][T21828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 780.860965][T21828] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 780.878906][T21828] usb 3-1: USB disconnect, device number 57 [ 780.895894][T21825] usb usb5-port1: unable to enumerate USB device [ 780.916450][T21829] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 781.130762][T21829] usb 6-1: Using ep0 maxpacket: 16 [ 781.151326][T21829] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 781.177225][T21829] usb 6-1: config 0 has no interface number 0 [ 781.215081][T21829] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 781.246744][T21829] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 781.286787][T21829] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 781.310717][T21829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.347254][T21829] usb 6-1: Product: syz [ 781.364896][T21829] usb 6-1: Manufacturer: syz [ 781.416709][T21829] usb 6-1: SerialNumber: syz [ 781.481885][T21829] usb 6-1: config 0 descriptor?? [ 781.525203][T24692] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 781.553237][T24692] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 781.850203][T24692] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 781.866853][T24692] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 781.984343][T21825] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 782.151948][T21825] usb 5-1: device descriptor read/64, error -71 [ 782.310112][T21829] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 41 [ 782.437621][T21825] usb 5-1: device descriptor read/64, error -71 [ 782.659992][T24719] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=95 sclass=netlink_xfrm_socket pid=24719 comm=syz.6.9634 [ 782.687482][ T36] audit: type=1400 audit(2000000154.891:38608): avc: denied { read } for pid=24718 comm="syz.6.9634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 782.707987][T24715] netlink: 348 bytes leftover after parsing attributes in process `syz.2.9632'. [ 782.722309][T24719] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=24719 comm=syz.6.9634 [ 782.746611][T21825] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 782.946117][T21825] usb 5-1: device descriptor read/64, error -71 [ 783.386611][T21825] usb 5-1: device descriptor read/64, error -71 [ 783.567553][T21825] usb usb5-port1: attempt power cycle [ 784.028385][T21830] usb 6-1: USB disconnect, device number 2 [ 785.307669][ C0] net_ratelimit: 162964 callbacks suppressed [ 785.307694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.307736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.314195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.325818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.338025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 785.349815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.361809][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.373552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.385959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.397548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.729505][T21825] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 785.983692][ T36] audit: type=1400 audit(2000000157.979:38609): avc: denied { create } for pid=24721 comm="syz.2.9635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 786.452391][T21825] usb 5-1: device not accepting address 114, error -71 [ 790.661395][ C1] net_ratelimit: 206324 callbacks suppressed [ 790.661416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.661857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.667545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.679594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.691500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.703485][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.715346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.727725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.739242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 790.751187][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 790.774883][ C0] sched: DL replenish lagged too much [ 796.015095][ C1] net_ratelimit: 202411 callbacks suppressed [ 796.015122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.015446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.021226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.033390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.045219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.057185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.069060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.081279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.093187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.105339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.368792][ C1] net_ratelimit: 203232 callbacks suppressed [ 801.368816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.369190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.374961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.387349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.399054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.411032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.422755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.434785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.446736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.458722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 802.182881][T21825] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 802.539446][T21825] usb 3-1: device descriptor read/64, error -71 [ 806.722508][ C1] net_ratelimit: 205661 callbacks suppressed [ 806.722530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.722916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.728660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.741002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.752700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.764659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.776402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.788425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.800403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.812349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 812.076231][ C1] net_ratelimit: 200149 callbacks suppressed [ 812.076264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.076296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.082354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.095030][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.106456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.118484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.130216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.142262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.154213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 812.166284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.429906][ C1] net_ratelimit: 209917 callbacks suppressed [ 817.429928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.430329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.436055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.448136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.460063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.472051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.483998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.496108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 817.507984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 817.520097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.783642][ C0] net_ratelimit: 214056 callbacks suppressed [ 822.783666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 822.783706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.790129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.801750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.813846][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.825658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.837610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.849556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.862162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.873533][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.137335][ C1] net_ratelimit: 216741 callbacks suppressed [ 828.137357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.137933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.143562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.155810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.167555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.179470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.191411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.203609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 828.215357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.227479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 833.491013][ C1] net_ratelimit: 212505 callbacks suppressed [ 833.491035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.491160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.497274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.509273][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.521182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.534057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.545209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.557269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.568997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 833.581039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.844739][ C0] net_ratelimit: 202212 callbacks suppressed [ 838.844762][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.844770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.844923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.850990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.862812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.874817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.886753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.899781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.911009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 838.923095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.198429][ C0] net_ratelimit: 210498 callbacks suppressed [ 844.198451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.198453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.198560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.204681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.216477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.228930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.240551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.252616][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.264364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.276343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.552150][ C1] net_ratelimit: 206981 callbacks suppressed [ 849.552175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.552516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.558409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.570401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 849.582182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.594518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.606209][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.618107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.629850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 849.641949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.905865][ C1] net_ratelimit: 209586 callbacks suppressed [ 854.905889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.906000][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.912081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.923971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.935812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.947894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.959891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.971798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.983575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 854.996207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 860.259556][ C0] net_ratelimit: 201648 callbacks suppressed [ 860.259578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.259592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.259727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.265883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.277602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.289927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.301558][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.313669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.325398][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.337518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.613254][ C1] net_ratelimit: 203183 callbacks suppressed [ 865.613277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.613315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.619456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.631429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.643229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.655248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.667225][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.679195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 865.690960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.703656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 870.966970][ C1] net_ratelimit: 211183 callbacks suppressed [ 870.966990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.967368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.973117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.985222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.997180][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.009063][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.020999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.033100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 871.044922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 871.057265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 876.320672][ C0] net_ratelimit: 209679 callbacks suppressed [ 876.320697][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.320705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.320853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.327270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.338943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.351122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.362874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.374789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.386680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 876.398799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.674394][ C1] net_ratelimit: 211912 callbacks suppressed [ 881.674416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.674443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.680635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.692804][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.704615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.716484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.728440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.740497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 881.752343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 881.764780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.028080][ C1] net_ratelimit: 214791 callbacks suppressed [ 887.028103][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.028345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 887.034262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.046284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.058097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.070211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.082014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.094345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.105926][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 887.118488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.381812][ C1] net_ratelimit: 219995 callbacks suppressed [ 892.381835][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.381852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 892.387970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.400089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.411929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.423885][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.435657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.448023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.459684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 892.471665][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.735496][ C1] net_ratelimit: 208890 callbacks suppressed [ 897.735521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.735544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 897.741689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.753666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.765462][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.777778][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.789554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.801878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.813360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 897.825512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.089225][ C1] net_ratelimit: 202640 callbacks suppressed [ 903.089248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.089249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.089436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.095388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.107438][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.119346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.131368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.143146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 903.155770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 903.167051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.442898][ C0] net_ratelimit: 203506 callbacks suppressed [ 908.442921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.442959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:68:d1:9e:c2, vlan:0) [ 908.449628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.461098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.473044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 908.484969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.497548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.508900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.520951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.532687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.796598][ C1] net_ratelimit: 200116 callbacks suppressed [ 913.796621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.796984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.802743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.814846][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 913.826748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.838792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.850453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.862577][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.874390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.886804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.150327][ C1] net_ratelimit: 207013 callbacks suppressed [ 919.150350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.150476][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.156574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.168644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.180643][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.192586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.204395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.216929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 919.228341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.240279][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.504042][ C0] net_ratelimit: 206952 callbacks suppressed [ 924.504066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.504068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.504220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.510314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 924.522123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.534155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.546077][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.558084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.569794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.582196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.857716][ C0] net_ratelimit: 207118 callbacks suppressed [ 929.857737][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.857749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.857855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.864369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.875800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.887854][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 929.899648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.911650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.923576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.935546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.211442][ C1] net_ratelimit: 219608 callbacks suppressed [ 935.211464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.211470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.211715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.217561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.229709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.241486][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.253685][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 935.265390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.277535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 935.289366][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.565169][ C1] net_ratelimit: 214736 callbacks suppressed [ 940.565194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.565233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.571419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.583525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.595341][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.607546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.619169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.631306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.643066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 940.654932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.918850][ C1] net_ratelimit: 212826 callbacks suppressed [ 945.918876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.919191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.925034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.936999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 945.948825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.960938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.972750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.984756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 945.996490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 946.009108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.272595][ C1] net_ratelimit: 210376 callbacks suppressed [ 951.272621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.272743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.278796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.290816][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.302581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.314683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.326639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.338767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 951.350431][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 951.362641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 952.623984][ T37] INFO: task syz.4.9640:24738 blocked for more than 125 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 952.758437][ T36] audit: type=1400 audit(2000000314.005:38610): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1954]" dev="pipefs" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 952.832891][ T37] Not tainted syzkaller #0 [ 952.837878][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 954.641181][ T37] task:syz.4.9640 state:D stack:0 pid:24738 tgid:24738 ppid:23044 flags:0x00004004 [ 955.954277][ T37] Call Trace: [ 955.957613][ T37] [ 955.960558][ T37] __schedule+0x14ce/0x2100 [ 956.134796][ T37] ? __sched_text_start+0x10/0x10 [ 956.139898][ T37] ? __sched_text_start+0x10/0x10 [ 956.338768][ T37] ? __kasan_check_write+0x18/0x20 [ 956.343947][ T37] ? llist_add_batch+0x10f/0x1f0 [ 956.626280][ C1] net_ratelimit: 207926 callbacks suppressed [ 956.626312][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.626323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.626616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 956.632474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:32:68:d1:9e:c2, vlan:0) [ 956.644511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.656377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.668309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.680237][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.692402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 956.703990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.156225][ T37] schedule+0xc5/0x240 [ 958.160403][ T37] schedule_timeout+0xc7/0x3b0 [ 958.291248][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 958.422380][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 958.427995][ T37] ? generic_exec_single+0x1fd/0x500 [ 958.999815][ T37] ? __cfi_rcu_barrier_handler+0x10/0x10 [ 959.005516][ T37] wait_for_common+0x369/0x650 [ 959.267071][ T37] ? wait_for_completion+0x40/0x40 [ 959.272251][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 960.388398][ T37] ? xa_find+0x145/0x170 [ 960.392711][ T37] wait_for_completion+0x1c/0x40 [ 960.397702][ T37] rcu_barrier+0x415/0x540 [ 960.412391][T24769] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 960.473331][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 960.478770][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 960.563210][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 960.568475][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 961.361388][T24769] CPU: 0 UID: 0 PID: 24769 Comm: syz-executor Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 961.361427][T24769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 961.361441][T24769] Call Trace: [ 961.361448][T24769] [ 961.361457][T24769] __dump_stack+0x21/0x30 [ 961.361490][T24769] dump_stack_lvl+0x140/0x1c0 [ 961.361525][T24769] ? __cfi_dump_stack_lvl+0x10/0x10 [ 961.361556][T24769] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 961.361580][T24769] dump_stack+0x19/0x20 [ 961.361609][T24769] warn_alloc+0x1e7/0x2c0 [ 961.361638][T24769] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 961.361662][T24769] ? __cfi_warn_alloc+0x10/0x10 [ 961.361691][T24769] ? __get_vm_area_node+0x201/0x3d0 [ 961.361721][T24769] ? kcov_ioctl+0x5d/0x5a0 [ 961.361744][T24769] __vmalloc_node_range_noprof+0x6aa/0x1480 [ 961.361779][T24769] ? locks_remove_posix+0x358/0x570 [ 961.361803][T24769] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 961.361835][T24769] ? expand_files+0xd5/0x6e0 [ 961.361862][T24769] vmalloc_user_noprof+0x77/0x90 [ 961.361892][T24769] ? kcov_ioctl+0x5d/0x5a0 [ 961.361913][T24769] kcov_ioctl+0x5d/0x5a0 [ 961.361934][T24769] ? bpf_lsm_file_ioctl+0xd/0x20 [ 961.361960][T24769] ? security_file_ioctl+0x3e/0x110 [ 961.361990][T24769] ? __cfi_kcov_ioctl+0x10/0x10 [ 961.362012][T24769] __se_sys_ioctl+0x132/0x1b0 [ 961.362037][T24769] __x64_sys_ioctl+0x7f/0xa0 [ 961.362049][ T37] ? __kasan_check_write+0x18/0x20 [ 961.362061][T24769] x64_sys_call+0x1878/0x2ee0 [ 961.362081][T24769] do_syscall_64+0x57/0xf0 [ 961.362149][T24769] ? clear_bhb_loop+0x50/0xa0 [ 961.362246][T24769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 961.362297][T24769] RIP: 0033:0x7fe02cb9caeb [ 961.362344][T24769] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 961.362389][T24769] RSP: 002b:00007ffc135a5460 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.362446][T24769] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fe02cb9caeb [ 961.362483][T24769] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 961.362522][T24769] RBP: 00007fe02ce164e8 R08: 0000000000000000 R09: 0000000000000000 [ 961.362557][T24769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.362587][T24769] R13: 0000000000000003 R14: 00007ffc135a5718 R15: 0000000000000000 [ 961.362632][T24769] [ 961.362650][T24769] Mem-Info: [ 961.373969][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 961.373998][ T37] kvm_put_kvm+0xb04/0x12c0 [ 961.374019][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 961.374042][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 961.374075][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 961.374105][ T37] kvm_vm_release+0x47/0x70 [ 961.374135][ T37] __fput+0x1fe/0xa00 [ 961.374162][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 961.374185][ T37] ____fput+0x20/0x30 [ 961.374212][ T37] task_work_run+0x1e5/0x260 [ 961.374240][ T37] ? __cfi_task_work_run+0x10/0x10 [ 961.374269][ T37] ? __kasan_check_read+0x15/0x20 [ 961.374289][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 961.374319][ T37] resume_user_mode_work+0x35/0x50 [ 961.374340][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 961.374370][ T37] do_syscall_64+0x63/0xf0 [ 961.374390][ T37] ? clear_bhb_loop+0x50/0xa0 [ 961.374415][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 961.374439][ T37] RIP: 0033:0x7f43a079ce59 [ 961.374456][ T37] RSP: 002b:00007ffe54189c38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 961.374479][ T37] RAX: 0000000000000000 RBX: 00007f43a0a17da0 RCX: 00007f43a079ce59 [ 961.374495][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 961.374509][ T37] RBP: 00007f43a0a17da0 R08: 0000000000000006 R09: 0000000000000000 [ 961.374524][ T37] R10: 00007f43a0a17cb0 R11: 0000000000000246 R12: 00000000000bb3df [ 961.374540][ T37] R13: 00007f43a0a1609c R14: 00000000000bb37a R15: 00007ffe54189d40 [ 961.374559][ T37] [ 961.374602][ T37] INFO: task syz.5.9641:24745 blocked for more than 133 seconds. [ 961.374619][ T37] Not tainted syzkaller #0 [ 961.374631][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 961.374640][ T37] task:syz.5.9641 state:D stack:0 pid:24745 tgid:24745 ppid:24611 flags:0x00004004 [ 961.374687][ T37] Call Trace: [ 961.374695][ T37] [ 961.374704][ T37] __schedule+0x14ce/0x2100 [ 961.374733][ T37] ? __sched_text_start+0x10/0x10 [ 961.374760][ T37] ? __kasan_check_write+0x18/0x20 [ 961.374783][ T37] ? __mutex_add_waiter+0x184/0x2a0 [ 961.374815][ T37] ? __kasan_check_write+0x18/0x20 [ 961.374838][ T37] ? trace_contention_begin+0xc0/0xc0 [ 961.374882][ T37] schedule+0xc5/0x240 [ 961.374906][ T37] schedule_preempt_disabled+0x14/0x30 [ 961.374932][ T37] __mutex_lock+0x960/0x1bc0 [ 961.374964][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 961.375000][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 961.375023][ T37] ? wait_for_common+0x570/0x650 [ 961.375070][ T37] ? xas_start+0x31e/0x3e0 [ 961.375097][ T37] ? xas_load+0x394/0x3d0 [ 961.375125][ T37] __mutex_lock_slowpath+0xe/0x20 [ 961.375156][ T37] mutex_lock+0x113/0x1d0 [ 961.375185][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 961.375216][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 961.375250][ T37] ? xa_find+0x145/0x170 [ 961.375280][ T37] rcu_barrier+0x4d/0x540 [ 961.375309][ T37] ? __kasan_check_write+0x18/0x20 [ 961.375333][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 961.375372][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 961.375405][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 961.375439][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 961.375464][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 961.375488][ T37] ? __kasan_check_write+0x18/0x20 [ 961.375513][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 961.375542][ T37] kvm_put_kvm+0xb04/0x12c0 [ 961.375566][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 961.375594][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 961.375630][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 961.375667][ T37] kvm_vm_release+0x47/0x70 [ 961.375701][ T37] __fput+0x1fe/0xa00 [ 961.375746][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 961.375773][ T37] ____fput+0x20/0x30 [ 961.375804][ T37] task_work_run+0x1e5/0x260 [ 961.375837][ T37] ? __cfi_task_work_run+0x10/0x10 [ 961.375877][ T37] ? __kasan_check_write+0x18/0x20 [ 961.375902][ T37] resume_user_mode_work+0x35/0x50 [ 961.375926][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 961.375960][ T37] do_syscall_64+0x63/0xf0 [ 961.375984][ T37] ? clear_bhb_loop+0x50/0xa0 [ 961.376012][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 961.981595][ C0] net_ratelimit: 188544 callbacks suppressed [ 961.981613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981921][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 961.981969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 962.272285][ T37] RIP: 0033:0x7f465899ce59 [ 962.276752][ T37] RSP: 002b:00007ffffdecd668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 962.285231][ T37] RAX: 0000000000000000 RBX: 00007f4658c17da0 RCX: 00007f465899ce59 [ 962.293264][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 962.301273][ T37] RBP: 00007f4658c17da0 R08: 00007f4658c16128 R09: 0000000000000000 [ 962.309274][ T37] R10: 00000000003ffc2c R11: 0000000000000246 R12: 00000000000bbaaa [ 962.317292][ T37] R13: 00007f4658c15fac R14: 00000000000bba78 R15: 00007f4658c15fa0 [ 962.325309][ T37] [ 962.344812][T24769] active_anon:4967 inactive_anon:57 isolated_anon:0 [ 962.344812][T24769] active_file:26163 inactive_file:3170 isolated_file:0 [ 962.344812][T24769] unevictable:0 dirty:9 writeback:0 [ 962.344812][T24769] slab_reclaimable:3658 slab_unreclaimable:177189 [ 962.344812][T24769] mapped:25186 shmem:160 pagetables:474 [ 962.344812][T24769] sec_pagetables:0 bounce:0 [ 962.344812][T24769] kernel_misc_reclaimable:0 [ 962.344812][T24769] free:1414026 free_pcp:1562 free_cma:0 [ 962.472852][ T37] NMI backtrace for cpu 0 [ 962.472873][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 d58365df94cd5f4886b4f3ec3f08a458f2157066 [ 962.472901][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 962.472915][ T37] Call Trace: [ 962.472923][ T37] [ 962.472931][ T37] __dump_stack+0x21/0x30 [ 962.472966][ T37] dump_stack_lvl+0x140/0x1c0 [ 962.472995][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 962.473027][ T37] dump_stack+0x19/0x20 [ 962.473056][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 962.473076][ T37] ? rcu_read_unlock_special+0x14d/0x440 [ 962.473107][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 962.473127][ T37] ? sched_show_task+0x371/0x530 [ 962.473157][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 962.473186][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 962.473216][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 962.473245][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 962.473267][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 962.473296][ T37] watchdog+0xdad/0xf00 [ 962.473318][ T37] ? __kasan_check_write+0x18/0x20 [ 962.473341][ T37] ? __cfi_watchdog+0x10/0x10 [ 962.473364][ T37] ? __kasan_check_read+0x15/0x20 [ 962.473384][ T37] ? __kthread_parkme+0x137/0x180 [ 962.473406][ T37] ? schedule+0xc5/0x240 [ 962.473428][ T37] kthread+0x2c9/0x370 [ 962.473452][ T37] ? __cfi_watchdog+0x10/0x10 [ 962.473473][ T37] ? __cfi_kthread+0x10/0x10 [ 962.473497][ T37] ret_from_fork+0x67/0xa0 [ 962.473515][ T37] ? __cfi_kthread+0x10/0x10 [ 962.473540][ T37] ret_from_fork_asm+0x1a/0x30 [ 962.473562][ T37] [ 962.473570][ T37] Sending NMI from CPU 0 to CPUs 1: