last executing test programs: 9m57.741521892s ago: executing program 3 (id=3329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="36650f7852040f01c967360f0148fd0fc768000f01c83e3e710066b9fd0b00000f32660f2abe00000f38c9a1b930f30f32", 0x31}], 0x1, 0x10, &(0x7f0000000400)=[@efer={0x2, 0x9000}], 0x1) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f00000008c0)='-0', 0x2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000300)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[], [{@fsname={'fsname', 0x3d, '\xbd**\\:\xba&'}}], 0x3a}) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000080)) (async) mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x0, 0x1, 0x82030, r5, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f00000002c0)=0x1) (async) syz_usb_connect(0x5, 0x36, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) openat$cgroup_ro(r7, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) 9m57.419104937s ago: executing program 3 (id=3331): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) (fail_nth: 1) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 9m57.017832491s ago: executing program 3 (id=3334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 9m56.91075793s ago: executing program 3 (id=3336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x20044840) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) clock_settime(0x0, &(0x7f0000009ac0)={r2, r3+10000000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b58f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f210c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adf2f4bffaa10a377f66011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x4000000, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000800)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66925}}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r7, 0x401870cc, 0x0) 9m56.744918074s ago: executing program 3 (id=3339): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000066c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b58f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f210c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adf2f4bffaa10a377f66011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x4000000, 0x3, {0x80000000000000, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66925}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x401870cc, 0x0) 9m56.174268284s ago: executing program 3 (id=3340): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x250a41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200101000000b282af"], 0x0, 0x0, 0x0, 0x0}) 9m56.062618374s ago: executing program 32 (id=3340): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x250a41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200101000000b282af"], 0x0, 0x0, 0x0, 0x0}) 9m27.14358551s ago: executing program 4 (id=3453): sched_setscheduler(0x0, 0x5, &(0x7f0000000300)) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000300)) r0 = gettid() r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) (async) listen(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES8=r1], 0x0) (async) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES8=r1], 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000)={0x2, 0x8003, 0x3}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x80084, 0x9, 0x8076e, 0x1c, "00ef02ffffe40000000000010100"}) tkill(r0, 0x7) ptrace$cont(0x18, r0, 0xa, 0x10000) getpgid(r0) (async) r5 = getpgid(r0) ptrace$cont(0x9, r5, 0x7, 0xb) (async) ptrace$cont(0x9, r5, 0x7, 0xb) add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) 9m26.64099178s ago: executing program 4 (id=3457): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 9m25.665421559s ago: executing program 4 (id=3460): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) futex(&(0x7f0000000500)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) 9m25.514622936s ago: executing program 4 (id=3462): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 9m25.399493478s ago: executing program 4 (id=3463): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22048dc, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x84, &(0x7f0000000300)={0x2, 0x3, 0x0, 0x1}, 0x8, 0xdf8, 0x1000000, 0x0, 0x1, 0x0, 0x0}) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="8ca10e91", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x1fe}}], 0x18}}], 0x1, 0x20004084) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x5992c0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000000c0)) 9m24.486238502s ago: executing program 4 (id=3465): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 9m24.224483906s ago: executing program 33 (id=3465): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 7m12.202090796s ago: executing program 1 (id=4060): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x304}, "d1070a57c6553a3f", "10638000000000002056672d6da2b8d0", "6fff5d36", "3d3d8a0fd3038e91"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "783593d1f7fab582", "16722a78df80a39187a7b5d18b0e67e711a146a62409bde435dbb7f326bc86e6", "0682a1fa", "98025fc406853d7a"}, 0x38) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4060, 0xfdc, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES64], 0x40) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0xb, @raw_data="8e678ee69ce4c693530bb61c05a4ccc945dfd25a973616ac03000000ca26316a41c283f51ac2420000000000000008606481a199bf473005843ff497bab135830c6d28c2df1cf8c722a12408a0f47d333193672e5c208991629d2b67c9a7fe2eac2cc739c0a5000ebf0cd25475c374a1c228eac4faebe76e991c7ad7479b3e5ea039d00395406db941916c6d9fc8c2f3d5dac65513ac0828c80c041a836db3b54273fd7b70fffef3750670406bfbf009006e7c26b3e4ebf7000000000000000000000400"}) landlock_create_ruleset(&(0x7f0000000300)={0xab0, 0x3, 0x1, 0xab70, 0x3, 0x1}, 0x30, 0x1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x1, 0x1}, 0x725b89010d6d54df) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0xfffffffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040000}, 0x0) 7m12.102436136s ago: executing program 1 (id=4061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}}, 0x0) 7m12.043775411s ago: executing program 1 (id=4062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 7m11.937402517s ago: executing program 1 (id=4063): eventfd2(0x3, 0x80000) 7m11.873520092s ago: executing program 1 (id=4064): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x94) syz_ublk_setup_io_uring(0x45b3, &(0x7f0000000000)={0x0, 0x678f, 0x4000, 0x0, 0x85}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000780)='comm\x00') read$FUSE(r5, &(0x7f0000009a40)={0x2020}, 0x2020) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000040)=0xfffffa78, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x60902, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES8=r0], 0xb2) socketpair(0x1, 0x802, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="309497e8bcc8cc0000", @ANYRES16=r11, @ANYBLOB="01002cbd7000fe0f0000010000000c0002000200000000000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x30}}, 0x20000000) 7m8.678118822s ago: executing program 1 (id=4089): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x8) 6m53.675858081s ago: executing program 34 (id=4089): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2m9.21108537s ago: executing program 6 (id=4761): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xd80, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0xa, 0xfffffff7}, 0xd0, 0x9}}) 2m8.013243224s ago: executing program 6 (id=4764): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x1, 0x1}, 0x725b89010d6d54df) sendmsg$tipc(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, 0x0) 2m7.087713265s ago: executing program 6 (id=4767): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xb6, &(0x7f00000002c0)=@string={0xb6, 0x3, "9fb60f048232fee1ae93d4218479dc22e42e85a431953ceb6989fd5a19b99e06a58c9d456801f17919ef755455e1373fc21418021c2962a021f14d2699f72f0100907de580cb80b9b02c5d28c157856e4e78434dba5567f15f4af4b42c67fb2d3e54510bfa3c6951d36a5a0d5ae9e23b89dded5ea201829a2dd7662524f78db247c84fcc0e86cb81bf2ad4322b7e398cdf7b24d6178c5fa3366b31515f7346ee97b54c5883830e3786905693c7108b9d469e7f4b"}}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m0.757142963s ago: executing program 6 (id=4772): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 1m59.278133436s ago: executing program 6 (id=4775): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@v2={0x2000000, [{0x8000, 0x3}, {0x3, 0xff}]}, 0x14, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec000000", @ANYBLOB="33fafdfffffffbdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000000006700000014000400636169663000000000000000000000000800050006000000"], 0xec}, 0x1, 0x0, 0x0, 0xc044}, 0xc2010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r7, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406000005240004000d240f01800000000100fcff500424020209058103ff03000306090582020000020d0309050302"], 0x0) 1m53.061038314s ago: executing program 6 (id=4778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="016f08100105ad20996fd5"], 0xfd6c) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 1m37.688951521s ago: executing program 35 (id=4778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="016f08100105ad20996fd5"], 0xfd6c) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 1m1.977570109s ago: executing program 0 (id=4831): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x2, 0x2005, 0x9}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) close(0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) close_range(r1, 0xffffffffffffffff, 0x0) 59.574871313s ago: executing program 0 (id=4833): syz_ublk_setup_io_uring(0x5c13, 0x0, 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x220002) getuid() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) 55.664696504s ago: executing program 0 (id=4835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x2000000008, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x8000, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0xa, 0x2000, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e6010000005d960001000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c361265420606306003d8a00300", [0x10, 0x4]}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$FICLONE(r0, 0x40049409, r0) 52.378488022s ago: executing program 0 (id=4837): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40d02) writev(r0, &(0x7f0000001980)=[{&(0x7f00000000c0)="94", 0x1}, {&(0x7f0000001a00)="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", 0x1001}], 0x2) (fail_nth: 1) 51.559863787s ago: executing program 0 (id=4840): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}}, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0xa2, @SEQ_CONTROLLER=0xff, 0x7f, 0x7, 0x8}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x69}}]}, 0x20}, 0x1, 0x200000000, 0x0, 0x20048001}, 0x5800) 49.793473264s ago: executing program 0 (id=4843): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0xe0c81) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r3, 0x0, 0x8, 'syz1\x00', 0x0}) r4 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x9, 0x400102) sendmsg$nl_netfilter(r1, &(0x7f0000002d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="1a5732fd2c8928e0c41d3431641d0d47fd2f9d89a38708005000", @ANYRES32=r0, @ANYBLOB], 0x1414}}, 0x20002000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r7 = inotify_init() readv(r7, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x207f000) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 33.509374189s ago: executing program 36 (id=4843): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0xe0c81) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r3, 0x0, 0x8, 'syz1\x00', 0x0}) r4 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x9, 0x400102) sendmsg$nl_netfilter(r1, &(0x7f0000002d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000001900)=ANY=[@ANYBLOB="141400000b0b030029bd7000fbdbdf250000000908000b00ac1414aa0c005f00000000000000000014000300fe80000000000000000000000000003bab0c4812dca74a971d457e3fbdc5d7ef1b6d915ef60bae9a420197e190c33b7e56034b42a99b5a62c09ae85838c699f368a5f76784ecaf8fcc12dd9c45d5499e92c2b554ba91e523ba4a15b807c418d9a74676b3d9783c10c827bddf63d459843658109dd239e550fa30941f6503675f2f3ccfdc6d5ae2df0bae246d0140e4a4600d2f9665a2710bd5e185a817950391bf3456ce563fb0fd07578b6a344bd7ed39a16e9df4fa14981a3df70c534dd2f8b3099059cbc32495c42fc6fd5f60cc94a269507aab5295f851d12a741e993044626d58940a1f1bba246da8b82b67930df24484f10d6f76aa93d9fc2418f9fd7ba91f3d38f021c80ec8f4208f396ebdbb17b6bfce7c8d8f8ae72e10e86594d08b5b633834b778dca8a78421e49edf28a2127cc50a2f21aeb8b3a6c03c1901e92ca3719560f92ad4ca60acc7e5d993f4dfc9b5e3786eebf886ac2e3256ccd93f72eab5a2709f43af521eda55f54fdd6336cd95e6245675ee4233b35d2d44c94c1235800400ab8004001f8008005e00", @ANYRES32=r3, @ANYBLOB="6746be1cc0bf06ebe4c2796e598dedaaaca3af0c3b9742e19d0851bf33d369532d7561c6bd340ce1f124ecb1bf7f9f44d541a5e11f501ec905e75bed5b4d10b2d092ddacfc5cf4e5eaae7a88501d04aaec0061003f69d13c789f434abe7feae76d21a26a0c224e10c5b04d3c7d435a32af0f354ceaf186efac25ea34723e4a712019fa6bcd0ded03300b148e8101afed1a03ded62f2806ea660166c89ebb883ed995bd1f9fdf3ac126dbd7a6607dd73dd3b85975272e1af13c8dcfa07aa99cb9cf09aff511a715188ee063d415715396ca1f3ddc26bc29cb1899e5b2396e03c5ac688a827be956878df32a30b5d4f7c06735a4eb2686ee9647f4f42b4db4f6dbfab4a6a97988a12ba255097def226677cd8adedb945da69b7bd8741775c38cb3e7e04a019625f6ee5a18993603e2f140fdfeee1fcd63000729aeed0aeb008e00d751b46808673161e65139667508379d16f07bf4609dd3772a5afe46349bd99bf49776f173d05828c7e802320b7a02d02f603a2eef98649c6f6f64f0d7d8037f57b98b4221e0e018b04246a18d6bf7fb9c9065d01c100c14269d8dc952ab0176ba74328b9588fcb506a64c5236df96438176882ca45b25cd1d940b690779540ecbddd2729e268a69f619753f3c312175e22a5dcf16b6e1400eec0a0337c25f3b828e9f9f79c97c8a4d14815c3d18b9e3846d0ceaa3f057e8b4bba59645853ada7f52475701e696555c144f60ad05dcee2448bed8d2f902348158d0f97fdc920b56fc581a9ad84800d653dd58282723f868c2326ebd3512711a0c592163ca6ec07a89ce80100b6dc3ec695a4f1e10d128c76d1c46a9caa7c002f6e24aba9f8730f7e0b41432abbe7a08042dc96af93daea7dd3a1aecd5b3f18b1a46a570061b4d40b72ea256ca524b25e8b650ea96383f7dd5c5035ebdcef1aa70a27f27d5156f7a6e3d5e0fdcf79a8e24a1b90432b1767cf51d5770b36ea146a54690bdf4cb86d70a34026a7ffceff72579f9ff4f10bd1046a36462e7832d40612d8a71ab5e7e03d0e41ee51b3309222860a24b2c5a28b8a311486cb46096fe3f94ba2bcd8ac1e0c3104129e2d3b036c1c8a91fccf0f3bbb5a0045125f775c694bc51f85d2f2b68c321725d7f8d234af42bf10935c61e6085b00529a9069e8664460789defb1bb8cff8d65ae3bb010762014d4cb17e649b753e742989930eee8ebf64cc0e32379f95f8fb213d284d5b7dcf57612f6314e3dec0fe16c9d0b469631dc6ff6ddc2eefa5db283ab938b4f9b5c833b01e53375443e4990088e24b550dc00705529f9f70dfbb173cc532d729488692fa1c35b342f199975c561192742a183930f6a681cfa5bd065aa3bfe8a316d4a7cbece364eb737aa4675a56d5f3767d33844270f09d29f7e6aa0374ee253cfdbdef42c86e8b17f782acaf6ede0a98e2d4d4d7c1e2246da9b894bfea3f2c42c00b425772e5e7ade1a54c93ea4c05458da57c916b177d25acba79916228973c76e7aec874e60da9d20d7c60b74f828577ba90a8af909bead2c58685e61f5769e9b3147481eb72a083b47bf029413be1e15395a3b265fbf0d152c3893698ebddb20822a4e02c39d31651cc1bbc05df67d4cbaf7cc93b5c5f85ed1c5ec7a70746bc45ee236644f12214985e4c2a53c152d72cfd1edfcec123c4f4a46d4bceb5b05cdf18d67a670d8d2564e2e48535cd0b924032814c2c93f606cb431ad01a97a1f483326da44d5e09c0a9db0d954a03e9bc45ade63a241b1a16d06ebaa57cbeaac767cabd81eec6632c56a379f51e5ec7bb259205b142ddc876075ea349fd03ac52e707854d3ed841c51a6b036030e573d37eff0dde49f01cb04b244982e1727f3e8df48c4f7b5e21890ea1fdbfa289c5c7e8930d4777b7f1c7b729af69d977e227c2e6ebd06833ad323f79e71ce45eeb2314819e3561af82e2ad974fa16002038b001f86976e1b9bf52378bbfffd2ca72eab6552d049f05b4574d1593f06f90b58dd01759b29c00c64ae9623fc4d0c4d4e4523e93f1e13eaf86e7b1a4d31b5c2a024dd7c827a43ff97ed7e377c3a5c751429ed4a0e1afc058947a20b31e0b39c63f4709595300b54f51c9413cf397db468f4f10f9c94f23a31fa6314c28e00cb1d6c64001e8f68ffb316585005fb8a7eb1ccb96a5cf2ce817a691bd6501e66e559b641c7b8f3347660d25d7036be281ce583ddad071ce496481fbd2bec0447ba1a9e6be371cabd6ac018a57b1e7658efb2c3cf657deca45507341215ebe4de8782b62a5b7cd28faf737466988e747259b6fc99a8cdf5d6dc65c7fe632749271ff6656cf3831c0400000000000000a58fa807928a9d1593c7566fb5dae3973aa38fdd74da39ddf2c268c2d488a8c18c70c5e985b105361492d1eb347d4253b6f50163b9a5d5b1bf979e745fa55b8913961535c890e27d6b14525b77b4d067170f7d37cdce7748ed135755635e1011478768127039d0f28f9042127a5cbbd68039fa561757538eb606d290478d6883e0d7f71a8a43cee0b22cf45883a41fbbace65dcaa233d16980f3e55c4da00b1d2af9268b388df44cea3a42a3ed2d8acd601c9f18f082fa6625a43f232d5276efed04ffc885a5078de4d33a2fd24bf7dc201f567d8051544350d1acaaae08344aac9aac15bcdb9e5a9a05b6d217b0959120c541bd81e7e7a6369bf6d1cb5f940cbcfa9df6734b3d7339bfdc4c78c3630e25e41d9d94e106fc361dd6f76c747d6d5c018c22eabb51f1cfba7992713e621fb4b433acd4561a38e346d14ad25062a03fda0a8201ef078534a14535c400055d8c9e9735bc5ffefd196038ca1676b2fd0f45bbe38a9e1767a3338728aea265091da0646a870b6390fef33fd93577a9c724cf7f1e4056766778ae754eaa95bf1d4681fcd5970dbe12e0491a729000de7c30c0104a15b14dce6f093b87687f81beba8ded9620cebdffa0e057d7b7bc670882c91190278d16eda0579fa238efe076bb0a7064c8a434708d98e99380d846815bd2eb0fe7dd4322c5cb3ac780fe269b2f0550eddd75ced3d1fbd813424e6fbead06481e6b8903cb3c7ebab4fcb763dcc7d79809d9e516fadef9d881c79739bbfdd7a8ec0311ceab523d51e80d57595cf4dfb7b67d678de1a0422ee02affb3d5795ab1cd55a24bf015480ed0aefa9a89bf36407676850c16165cd086b760a6abed35a62ac05a7591c56fcfeda5f90deca19e232fbdc37b0a290cf65cb05663f27ae389ea1b8d427723cfdf735677ca60bc253239c3160835ff1723d4f4051ed2b45cb7c465798a292732a591276067f58badf8de198cf93be1c65f9ee67891c94523a05dd0f0c04c8fe2f2d2337292e8417c2028e87b1bccf473e8e630a072c14eb325fba79784e79d81f06d379f93f268b89c8e43b847c316aa2888688c1c51945591897bd2c1b90d139ec541cd1ccfdb4d1e39a065f029707ca2e80672a751e0c79f1daee173face1928aacdbe745adb5455283d57551e7cfee8fff041a205f6a1f474921cc128e657154691c091d49aba1832b43c48828b0b1ad930430657845d2cb3c2b3f945d6f2a849491a6fcb900ad33a0bc656abae9b663b6123666aed2dc00eea0eb44ac4a39e679a137607a7ae8f5d4035c525bdf51ab2c4b8180a3ac7a83429ca9b3dd7444ce7d4f963ab714b9173246377a3895ffdbb07d95d763b4690827c30f39c6f68ef0d404c81ae6aa98d27693381be40cfbb2749dd39b7b7c19b607f5ee2947b6ac2927befbeb8434a88bc0865aa6530b7f3806d161bc4b37803b2409086b7cd51329007ea4ad7df81ecb15738d1629965eb5581a9d59e98ecde45c6b75390800f1fdbd7e7e9625b512b68c2e3510093b7aca8821340cf2cc7633c0681791aeab7c669fe17ddd10b478fd2e960ef9223bf6b5894007e3fdae2d983bcb808850146bf1691931fcd2e1c660599d8aed73fae7470e083d66da338f7d64cda72a8e900847493bb7f5b49a5e33e7577f0558df383c9674ee8ef61587be5ff8c26da6eccc5c9ac5f41d7407a3e1eb935e1b19aa8ca04487ba551e1177652ce99f53c13594ca2b515c5ff155f754d46f73b1ca965c49f64a43ffc91f393a8b4abaaa48e2042129f143ef6ddeafb5e778793e1ab9f3eb6989ac27214fa0fed36938fd197d5481ae1d50ca671ac571c3e39cc687e2cef190898b38ffa7fdfbca2178561458b371fc81491171bb814c6c0e283480469f6507c4aa93715814cd30046caee818325e4471605a988c955a6f44d4590c5123f2ef51a6971279cd00aa4ab1afda5c284ad25b1cf598df81b7ae9ace17902a42ec68938e40094cd3a15e60cd37cf06758412f54ddb1c1f860352da1f9efa7d10075b635c076fd3d1a755a36a0d7ada33a1589f82282aa7a8b2f22480fb1e688a6f50db3b6c5356c2e00d2b27ab7a443f1141fb846355cb45182192445a4d87a95aec51c7fb32cd56d5f5cfb4200c047cd5fb3dbabe7aa2151d4de7ad06899a9d207cab71e79be851e242913c56b26f88613b0fc4534bea66d3351ae371930949150f43e4c48ed022ed34d31d53cd06d3a30658a461d3987a749f024d6c53001b380fc02cc49d8b7199425a376feb2c6fb71403a03ec829d3d5538aaabfba6750493fb63dab9228c7b96377b0412e1f7a246183ff149f3144e2843760eb36291170656fb5068466b3ee2313c3d6288218006ad729a4051c036fcf9380c66349d10db546f240a78253466b7a7bce3a66d3afe8c9307ccbe8c1003d649c9c39618fbcf150838fc6584fd48e72acd11f8a59f37892d81e4e29c72c7d8818ab96618b3d298f525ea6d548a9d5c8bcd2ea55cee29694577c8591013e3d74c51cff3441134ad9bcb0d3f2607516104553e345f737f660c8f5ef4fca4d7590ac45f13f1fccf8e554e264c34f83bcd47ea4a727d374665ba3e61a7624f75ca884e7ea2950d9ed5a586d811cd305cf59ac865e5731352943bf9a934d415911bb885219df17d940b02ad18e6918b74e9c87b43d1ee8fe569070a4b6579a8bacf04e3823fd111aadfcccfebc9d3d0f140c8d7543f99b0df1be8126b215a32ffc4b48541cb7e71fc5057aaafc19e933643c3278dea5a8258f15a19acd4cecc29b4fc3782f6e69b2f19f6052e698f96b4aff1466f851ac62180e562c5f481fee6f4c9a4cfb5276c286f6e2d16b21db259d3acfe7a21bf59e22676a6e7e2ce8ab73f567a74ffa5d1a45f2abb740673866e1a7723fe722d599a2dcf1e7587cb55299970b63bc7db5580321dd2c4cb22fc778ad4c269a204061b87d58babda9eb6126012ebc2c4082bfd62e56d6a3715c2ac700c880fc66ff5c079818c31fa62a20ed6c602620eb87bde0ab2b4b72f52f83fa4e123ab1924052d9151376bbe54c4dd2220e1abd8623f8324b54ff74e944cf6eca540b4ef7902763526e90873701dc015168d0856f219ade1e832eb233aef57a23bb33808c7f0b13753442c4dfff4cce0efbfcd02efee7dbbcb133b38506404a5b80f1979982cb46f0b3ff942b7b7d92abea4a8009d211d1cd04da83033642f23312b2cf1362d1a9b0aae7fd6e81aab92df133318319aae524b811f0d1735415efc3921e23aa45e3766f7790116775db8e33bba176efd6ea365cb84f985133d546781afe16612dfaeb301b4613eead5f9158e288155d69e10adbff8ff643b139d2e40901fb2329542daadc67b4bf89af9c2dc7c53d8a4a25c448ecb5701b303132c0537c28237e2ea9911a8b3d42a52496940369d16f49483df7783a0b79091250d6a542910a9a43d6217f75a9e09177f3b24e34afd18d71bbcfefad6a3cd125bde7b737c6945aee8db9166bf38cc0a10275d5129855bfcb4e56b2abdd874dd945b3290bc92d45784c61778b5e10a3308893b4eea8a430c803ef608cd13a9f7a20212e442b07d3d052e3c6e03633228e4a973f6ab63327e7146ba701d691f5d6fba6dfd8d9a8a8c086bf755edd941e93d967e2f077d69bd543c95600898cb264efe52c0d4dd8f7d54052bc005f86b0706f83737d64d8f824ddbc9b4d21397bd82f78fb0e7db37fd14b794a2c7891c7b6918a34036f05791c0fd4fb43a01ba12111dc04eaaad73d1727bba1696ad2a4d74ca67cc12180369ffbc5edccbb04bb5270bd2e23ba3317b690e8a522156c9f1a411d02f5c550d0c89abcd4f0c1d4a7a24084aeb523fbd9158a8edf95d78b2a4d95d418a2bf7484f619c92c1b9b87770eb34d377762fb3ec4dec502a7f82b696fe75070bf3fb15f90dd4bd650c02d7f7d9493e2bc8ec01783269476a79ead4bf0d2f0a69d75c5d5f25381a5fa9f2bad56498e17cbe9c146ad2b572076f1136ff4c2e8770ed7c1745581ca72fa651dde7a14daff8c83432d9c89436d818c071f6e5f3a7525ef6faab4ea1ad5cf46a278f393225286d04682a8dfc5aa09decbf2a9d952aa8e18289894895d6a1bafccb7a77a239857ada4f8ef8b87750cab15f72f64dd7d8bca71c16373effb49baaeb7fb4f679493225f7b11d0171bf1ab58644cab534533712424229290789b65d69671fe4a2efe28fea4fe73772480400f6800400088008004400", @ANYRES32=r4, @ANYBLOB="1a5732fd2c8928e0c41d3431641d0d47fd2f9d89a38708005000", @ANYRES32=r0, @ANYBLOB], 0x1414}}, 0x20002000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r7 = inotify_init() readv(r7, &(0x7f0000000140)=[{&(0x7f0000000280)=""/181, 0xb5}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x207f000) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 19.393595244s ago: executing program 5 (id=4864): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="cf0400000000fddbdf251300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x4040004) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="99c12abd7000445f00002e0000000a0001007770616e31000000"], 0x20}}, 0x4040040) 18.438913673s ago: executing program 5 (id=4865): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0x8008b705, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x2, 0x0, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{}, {0x77359400}}, &(0x7f00000004c0)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x58, 0x40000) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macvlan1\x00', @broadcast}) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010603010902120001000000000904"], 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) eventfd2(0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfa}, &(0x7f0000000040)=0x8) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r11, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6e636b206d656d00f700009b60777971343f62163551ebe5937a83b0b827d2637f959107676cd3931c24b338fa5fda23afbd381735c340b5e17aaa5439b683afbb7b1bc711b153cb4816adde8b3beb6828cbbd750f9050c7293757"], 0x9) r12 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r12, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) write$nci(r7, &(0x7f0000000600)=ANY=[], 0x14) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r14, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0xa0, r13, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'macvlan1\x00'}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1e}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008081}, 0x801) 11.262213985s ago: executing program 5 (id=4866): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 11.261698035s ago: executing program 2 (id=4867): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x1, 0x7fff}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x9}, 0x10) 9.819091878s ago: executing program 2 (id=4868): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000200)='wchan\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/234, 0xea}], 0x1, 0xfffffff6, 0x9) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/4100, 0x1004}, {&(0x7f0000004900)=""/4075, 0xfeb}, {&(0x7f0000003880)=""/4171, 0x104b}], 0x3}, 0x10002) 7.515625642s ago: executing program 2 (id=4869): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000015c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf2501abdf87f1001d0005ac0f00000000001400010020010000006d000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e893fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587559040000d750351dc076eb43d96208a46cf26fbe816b89f7cb81bff81a8b9482560956555ee923c65973deb0a9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000015c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf2501abdf87f1001d0005ac0f00000000001400010020010000006d000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e893fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587559040000d750351dc076eb43d96208a46cf26fbe816b89f7cb81bff81a8b9482560956555ee923c65973deb0a9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async) keyctl$link(0x8, 0x0, r1) (async) 6.750585823s ago: executing program 2 (id=4870): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msync(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) syz_open_dev$evdev(0x0, 0x2, 0x842) 6.741872073s ago: executing program 5 (id=4871): r0 = syz_ublk_setup_io_uring(0x1580, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000002c0)=@IORING_OP_SOCKET={0x2d, 0x21, 0x0, 0x4, 0x4, 0x0, 0x30, 0x0, 0x2, {0x0, 0x0, 0x7}}) r4 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40) read$hidraw(r4, &(0x7f00000008c0)=""/257, 0x101) (async, rerun: 32) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) (rerun: 32) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x401, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1ffc, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x7a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40086f52, &(0x7f0000000440)={0x3, &(0x7f0000000340)=[{0x24, '\x00', @data=0x4, 0xad}]}) 6.38353233s ago: executing program 2 (id=4872): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) fstatfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x81, 0x8}, 0x0, 0x1, 0x81, {0xf, 0x9}, 0x3a}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x35c, 0x0) 4.231491501s ago: executing program 5 (id=4873): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x99, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3}) 384.198932ms ago: executing program 5 (id=4874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) r5 = syz_usb_connect$uac3(0x4, 0xf6, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x6, 0xa0, 0x8, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xea}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x30, 0x9}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x1ff, 0x4, 0x1, 0x3, 0x1, 0xa30c, 0xf6bb, 0xfff}, @selector_unit={0xd, 0x24, 0xc, 0xb, 0x8, "de0cbeb13cc6fc5c"}, @cluster_info_segment={0x6, 0x20, 0x4, 0x3, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x9, 0x40, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x1000, 0x2, 0x9}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x1ff, 0x0, "c93d1826e24d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xe, 0xe, {0xa, 0x25, 0x25, 0x0, 0xb, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x8, 0x3, 0x1, 0x3, 0x1, 0xf, 0x6c09, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x5, 0x44, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x7, 0x87, {0xa, 0x25, 0x25, 0x6, 0xf, 0x401}}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x3, 0x92, 0x8, 0xd}, 0x73, &(0x7f0000000240)={0x5, 0xf, 0x73, 0x1, [@generic={0x6e, 0x10, 0x2, "8725a10816c28c16503b20f60b5877d9f0e0d6da2849d17038b58dbeb6f50d4dca8272d6525f569755fa4901e10015feab5ef8441567a26d2ab4db7a52d9cabff263a7d2e9489500735f41f997fb26ce584897be40f1f12050be01baaeb99f9161c0f111c1f63db4618978"}]}, 0x2, [{0x64, &(0x7f00000002c0)=@string={0x64, 0x3, "f4afe9e779095d327c171d9ecd7929c31e2fec41c03db48df9b616d2c6ec28eb66a08240785c14db50e28931a3fc218caa4c1c0ef76e9f96ad7afabe22cebf53d73070356b533a6c5649f56ac2d0cb312f821944ca246761c471dbc21ed2f34d9ab2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x0, 0x9, 0xd6, {0xd6, 0x21, "0ba1450bfaa2080c2f31c7a600d74bc6632c6b9b7a896df7852b4b8ff64b69e88f5b0fa56f4b6d298edb90256357bd8438458d7306d8e4e8f7a1bef9ce8acf75a3adc4179c103e87a88e31888f2552f4f3aec12ef06ea54aa631b3e111354625ac5e70fdb0a03ebce780e4527c3cc14ac6949592e17b27daf767f96306fd4eefc109bd86dbf7aefabba9ebab9275ba20c4deba62464fa198391e40e7e60b61d98d24b26294b514ecbc675de0ecf108dc8952c6093373fbb5a4b8a923c589337b67737181c46081d85521e64b79fdd1e6ecbdc2de"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x20, 0x1, 0x41, "a9f6e6799e0f68ae8ff4ea9057022361ea36b71b3db13a7ac1d51dd8857ff6eebc36477abe8ac0bc0084f8a520a27ab1db6fda199d1feb719a5e3a7ab6118d2d3a"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x7c}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 0s ago: executing program 2 (id=4875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x36, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000000)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) (async) r3 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3Y\xfd\xff\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862j~!\xd0\f\xfeV\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) r4 = memfd_create(0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000018) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r4, 0xb0390000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000840)=@IORING_OP_RECVMSG={0xa, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x0, {0x9}}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x22, 0xcf5, 0x0, 0x0, 0x1000, 0x6489, 0x0, 0x0, 0x8}}}, &(0x7f0000000940)) kernel console output (not intermixed with test programs): 89][T19171] R13: 00007fbff6346038 R14: 00007fbff6345fa0 R15: 00007ffd6e8ef6a8 [ 1150.751724][T19171] [ 1151.039072][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1151.459043][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1151.461533][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.461593][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1151.461623][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1151.461655][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1151.461681][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1151.463176][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1151.463205][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1151.463227][ T9] usb 3-1: Manufacturer: syz [ 1151.472247][ T9] usb 3-1: config 0 descriptor?? [ 1152.779488][ T9] rc_core: IR keymap rc-hauppauge not found [ 1152.779514][ T9] Registered IR keymap rc-empty [ 1152.779710][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1153.038945][ C1] net_ratelimit: 13523 callbacks suppressed [ 1153.038968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.038996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.039428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1153.039839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.040241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.040392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.040699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1153.040720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.041044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1153.041178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1153.726636][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1155.793202][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1155.801270][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 1156.631065][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.651906][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.669075][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.690172][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.709081][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.729054][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.759125][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.779071][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1156.799066][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1157.659034][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1158.049133][ C1] net_ratelimit: 17717 callbacks suppressed [ 1158.049157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1158.049163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.049492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.049512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.049893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.050355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1158.050694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.050904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1158.051098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1158.051255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.639660][T19203] FAULT_INJECTION: forcing a failure. [ 1160.639660][T19203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.639702][T19203] CPU: 1 UID: 0 PID: 19203 Comm: syz.0.4633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1160.639735][T19203] Tainted: [L]=SOFTLOCKUP [ 1160.639744][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1160.639758][T19203] Call Trace: [ 1160.639767][T19203] [ 1160.639777][T19203] dump_stack_lvl+0xe8/0x150 [ 1160.639809][T19203] should_fail_ex+0x467/0x600 [ 1160.639849][T19203] _copy_to_user+0x31/0xb0 [ 1160.639879][T19203] simple_read_from_buffer+0xe1/0x170 [ 1160.639911][T19203] proc_fail_nth_read+0x1be/0x230 [ 1160.639942][T19203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1160.639971][T19203] ? rw_verify_area+0x250/0x4d0 [ 1160.640002][T19203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1160.640026][T19203] vfs_read+0x219/0xa90 [ 1160.640064][T19203] ? __pfx_vfs_read+0x10/0x10 [ 1160.640095][T19203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1160.640126][T19203] ? lockdep_hardirqs_on+0x7a/0x110 [ 1160.640154][T19203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1160.640181][T19203] ? mutex_lock_nested+0x152/0x1d0 [ 1160.640215][T19203] ? fdget_pos+0x252/0x320 [ 1160.640250][T19203] ksys_read+0x156/0x270 [ 1160.640281][T19203] ? __pfx_ksys_read+0x10/0x10 [ 1160.640309][T19203] ? rt_spin_unlock+0x163/0x200 [ 1160.640338][T19203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.640362][T19203] do_syscall_64+0x174/0x580 [ 1160.640390][T19203] ? trace_irq_disable+0x3b/0x140 [ 1160.640419][T19203] ? clear_bhb_loop+0x40/0x90 [ 1160.640446][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.640468][T19203] RIP: 0033:0x7f1588ced68e [ 1160.640490][T19203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1160.640509][T19203] RSP: 002b:00007f1586f64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1160.640542][T19203] RAX: ffffffffffffffda RBX: 00007f1586f656c0 RCX: 00007f1588ced68e [ 1160.640559][T19203] RDX: 000000000000000f RSI: 00007f1586f650a0 RDI: 0000000000000005 [ 1160.640573][T19203] RBP: 00007f1586f65090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.640587][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.640601][T19203] R13: 00007f1588fa6128 R14: 00007f1588fa6090 R15: 00007ffc2e2c5978 [ 1160.640637][T19203] [ 1160.704209][ T9] mceusb 3-1:0.0: Registered  with mce emulator interface version 1 [ 1160.704235][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1160.729605][ T9] usb 3-1: USB disconnect, device number 118 [ 1162.639007][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1163.059168][ C1] net_ratelimit: 16375 callbacks suppressed [ 1163.059194][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1163.059563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.059979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1163.060272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.060651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.061148][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.061465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.062744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.063081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.063496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1163.122512][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1163.140961][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1163.140996][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.196997][ T9] usb 3-1: config 0 descriptor?? [ 1165.156426][ T9] usb 3-1: can't set config #0, error -71 [ 1165.163241][ T9] usb 3-1: USB disconnect, device number 119 [ 1165.225263][T19230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.225983][T19230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.069180][ C1] net_ratelimit: 14560 callbacks suppressed [ 1168.069206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.069699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1168.070030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.070131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.070428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.070473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.070909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1168.070958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1168.071256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1168.071303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.079551][ C1] net_ratelimit: 15344 callbacks suppressed [ 1173.079575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.080104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1173.080131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.080559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.080634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.081074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.081085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.081470][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.081605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1173.081971][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.622843][T19272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.624005][T19272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.018115][T19265] syzkaller1: entered promiscuous mode [ 1174.018142][T19265] syzkaller1: entered allmulticast mode [ 1174.477643][T19278] FAULT_INJECTION: forcing a failure. [ 1174.477643][T19278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.477686][T19278] CPU: 1 UID: 0 PID: 19278 Comm: syz.6.4664 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1174.477717][T19278] Tainted: [L]=SOFTLOCKUP [ 1174.477725][T19278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1174.477738][T19278] Call Trace: [ 1174.477747][T19278] [ 1174.477756][T19278] dump_stack_lvl+0xe8/0x150 [ 1174.477788][T19278] should_fail_ex+0x467/0x600 [ 1174.477827][T19278] _copy_from_user+0x2d/0xb0 [ 1174.477854][T19278] ___sys_sendmsg+0x1c6/0x360 [ 1174.477893][T19278] ? __lock_acquire+0x683/0x2ce0 [ 1174.477928][T19278] ? __pfx____sys_sendmsg+0x10/0x10 [ 1174.477996][T19278] ? __fget_files+0x2a/0x420 [ 1174.478021][T19278] ? __fget_files+0x3a8/0x420 [ 1174.478057][T19278] __x64_sys_sendmsg+0x1b7/0x290 [ 1174.478091][T19278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1174.478140][T19278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.478165][T19278] do_syscall_64+0x174/0x580 [ 1174.478193][T19278] ? trace_irq_disable+0x3b/0x140 [ 1174.478222][T19278] ? clear_bhb_loop+0x40/0x90 [ 1174.478251][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.478273][T19278] RIP: 0033:0x7fbff60cce59 [ 1174.478295][T19278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.478313][T19278] RSP: 002b:00007fbff4326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1174.478338][T19278] RAX: ffffffffffffffda RBX: 00007fbff6345fa0 RCX: 00007fbff60cce59 [ 1174.478354][T19278] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1174.478367][T19278] RBP: 00007fbff4326090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.478381][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.478394][T19278] R13: 00007fbff6346038 R14: 00007fbff6345fa0 R15: 00007ffd6e8ef6a8 [ 1174.478429][T19278] [ 1174.730930][T19276] tipc: Started in network mode [ 1174.730968][T19276] tipc: Node identity 0200000000000000ff0f, cluster identity 4711 [ 1177.325682][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.369006][ T5600] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1177.579125][ T5600] usb 7-1: Using ep0 maxpacket: 8 [ 1177.942018][ T5600] usb 7-1: config 0 interface 0 altsetting 95 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.942059][ T5600] usb 7-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.942084][ T5600] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1177.942123][ T5600] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1177.942148][ T5600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.999745][ T5600] usb 7-1: config 0 descriptor?? [ 1178.089104][ C1] net_ratelimit: 14473 callbacks suppressed [ 1178.089130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.089584][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.089664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1178.090074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.090164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.090524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.091118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1178.091498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.091956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.092401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.413952][T19282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.415283][T19282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.372403][ T5600] usbhid 7-1:0.0: can't add hid device: -71 [ 1179.372543][ T5600] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1179.507015][ T5600] usb 7-1: USB disconnect, device number 18 [ 1181.114767][ T5600] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1181.737269][T19316] FAULT_INJECTION: forcing a failure. [ 1181.737269][T19316] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.737312][T19316] CPU: 1 UID: 0 PID: 19316 Comm: syz.2.4678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1181.737343][T19316] Tainted: [L]=SOFTLOCKUP [ 1181.737352][T19316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1181.737365][T19316] Call Trace: [ 1181.737374][T19316] [ 1181.737385][T19316] dump_stack_lvl+0xe8/0x150 [ 1181.737419][T19316] should_fail_ex+0x467/0x600 [ 1181.737460][T19316] should_failslab+0xa8/0x100 [ 1181.737491][T19316] __kmalloc_noprof+0xfb/0x790 [ 1181.737516][T19316] ? tomoyo_realpath_from_path+0xef/0x640 [ 1181.737551][T19316] ? tomoyo_realpath_from_path+0xef/0x640 [ 1181.737592][T19316] tomoyo_realpath_from_path+0xef/0x640 [ 1181.737637][T19316] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1181.737666][T19316] tomoyo_path_number_perm+0x246/0x5f0 [ 1181.737699][T19316] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1181.737727][T19316] ? __lock_acquire+0x683/0x2ce0 [ 1181.737773][T19316] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1181.737802][T19316] ? hook_file_ioctl+0x1f3/0x600 [ 1181.737831][T19316] ? lockdep_hardirqs_on+0x7a/0x110 [ 1181.737880][T19316] ? __fget_files+0x2a/0x420 [ 1181.737908][T19316] ? __fget_files+0x2a/0x420 [ 1181.737930][T19316] ? __fget_files+0x3a8/0x420 [ 1181.737954][T19316] ? __fget_files+0x2a/0x420 [ 1181.737982][T19316] security_file_ioctl+0xc3/0x2a0 [ 1181.738012][T19316] __se_sys_ioctl+0x47/0x170 [ 1181.738044][T19316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.738069][T19316] do_syscall_64+0x174/0x580 [ 1181.738101][T19316] ? trace_irq_disable+0x3b/0x140 [ 1181.738130][T19316] ? clear_bhb_loop+0x40/0x90 [ 1181.738158][T19316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.738181][T19316] RIP: 0033:0x7fd0bd2bce59 [ 1181.738203][T19316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1181.738222][T19316] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1181.738255][T19316] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1181.738271][T19316] RDX: 0000000000000000 RSI: 0000000000008934 RDI: 0000000000000003 [ 1181.738285][T19316] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.738299][T19316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.738312][T19316] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1181.738348][T19316] [ 1181.813533][T19316] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1181.976886][ T5600] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1181.976917][ T5600] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.976964][ T5600] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1181.976986][ T5600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.005021][ T5600] usb 7-1: config 0 descriptor?? [ 1182.387675][T14953] usb 7-1: USB disconnect, device number 19 [ 1183.099176][ C0] net_ratelimit: 13214 callbacks suppressed [ 1183.099202][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.099288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.099536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.099828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1183.100018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.100204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.100359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.100662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.101191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1183.101659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1186.182044][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1186.182070][T19338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4688'. [ 1187.134739][T14953] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1187.259022][T14953] usb 7-1: device descriptor read/64, error -71 [ 1187.519221][T14953] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1187.699021][T14953] usb 7-1: device descriptor read/64, error -71 [ 1188.069588][T14953] usb usb7-port1: attempt power cycle [ 1188.109138][ C0] net_ratelimit: 16267 callbacks suppressed [ 1188.109164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.109480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1188.109813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.110217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.110580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.110691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1188.110955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.111048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1188.111413][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1188.111449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.458991][ T5600] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1189.868512][ T5600] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1189.868544][ T5600] usb 3-1: config 0 has no interface number 0 [ 1189.872535][ T5600] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1189.872568][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.872598][ T5600] usb 3-1: Product: syz [ 1189.872614][ T5600] usb 3-1: Manufacturer: syz [ 1189.872629][ T5600] usb 3-1: SerialNumber: syz [ 1189.893207][ T5600] usb 3-1: config 0 descriptor?? [ 1190.729015][ T5600] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1191.107390][ T5600] usb 3-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1191.107420][ T5600] usb 3-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1191.377061][T19358] FAULT_INJECTION: forcing a failure. [ 1191.377061][T19358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.377112][T19358] CPU: 1 UID: 0 PID: 19358 Comm: syz.0.4693 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1191.377143][T19358] Tainted: [L]=SOFTLOCKUP [ 1191.377151][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1191.377163][T19358] Call Trace: [ 1191.377172][T19358] [ 1191.377182][T19358] dump_stack_lvl+0xe8/0x150 [ 1191.377215][T19358] should_fail_ex+0x467/0x600 [ 1191.377253][T19358] _copy_from_user+0x2d/0xb0 [ 1191.377280][T19358] ___sys_sendmsg+0x1c6/0x360 [ 1191.377311][T19358] ? __lock_acquire+0x683/0x2ce0 [ 1191.377345][T19358] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.377412][T19358] ? __fget_files+0x2a/0x420 [ 1191.377436][T19358] ? __fget_files+0x3a8/0x420 [ 1191.377468][T19358] __x64_sys_sendmsg+0x1b7/0x290 [ 1191.377499][T19358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.377548][T19358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.377572][T19358] do_syscall_64+0x174/0x580 [ 1191.377601][T19358] ? trace_irq_disable+0x3b/0x140 [ 1191.377629][T19358] ? clear_bhb_loop+0x40/0x90 [ 1191.377657][T19358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.377679][T19358] RIP: 0033:0x7f1588d2ce59 [ 1191.377701][T19358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.377719][T19358] RSP: 002b:00007f1586f86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.377750][T19358] RAX: ffffffffffffffda RBX: 00007f1588fa5fa0 RCX: 00007f1588d2ce59 [ 1191.377768][T19358] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1191.377784][T19358] RBP: 00007f1586f86090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.377798][T19358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.377812][T19358] R13: 00007f1588fa6038 R14: 00007f1588fa5fa0 R15: 00007ffc2e2c5978 [ 1191.377846][T19358] [ 1191.572558][T19351] input: syz1 as /devices/virtual/input/input88 [ 1193.118935][ C1] net_ratelimit: 13482 callbacks suppressed [ 1193.118957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1193.119286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.119647][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.120065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1193.120388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.120740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.121171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1193.121467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.121820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1193.122246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1193.559486][T19366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.728007][T19366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.121342][T19379] FAULT_INJECTION: forcing a failure. [ 1194.121342][T19379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.121384][T19379] CPU: 1 UID: 0 PID: 19379 Comm: syz.5.4701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1194.121415][T19379] Tainted: [L]=SOFTLOCKUP [ 1194.121423][T19379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1194.121436][T19379] Call Trace: [ 1194.121445][T19379] [ 1194.121455][T19379] dump_stack_lvl+0xe8/0x150 [ 1194.121495][T19379] should_fail_ex+0x467/0x600 [ 1194.121543][T19379] _copy_from_user+0x2d/0xb0 [ 1194.121570][T19379] ___sys_sendmsg+0x1c6/0x360 [ 1194.121601][T19379] ? __lock_acquire+0x683/0x2ce0 [ 1194.121636][T19379] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.121704][T19379] ? __fget_files+0x2a/0x420 [ 1194.121728][T19379] ? __fget_files+0x3a8/0x420 [ 1194.121764][T19379] __x64_sys_sendmsg+0x1b7/0x290 [ 1194.121797][T19379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1194.121847][T19379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.121872][T19379] do_syscall_64+0x174/0x580 [ 1194.121901][T19379] ? trace_irq_disable+0x3b/0x140 [ 1194.121930][T19379] ? clear_bhb_loop+0x40/0x90 [ 1194.121958][T19379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.121981][T19379] RIP: 0033:0x7f5de49fce59 [ 1194.122001][T19379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.122020][T19379] RSP: 002b:00007f5de2c2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.122044][T19379] RAX: ffffffffffffffda RBX: 00007f5de4c76090 RCX: 00007f5de49fce59 [ 1194.122061][T19379] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1194.122075][T19379] RBP: 00007f5de2c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.122088][T19379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.122101][T19379] R13: 00007f5de4c76128 R14: 00007f5de4c76090 R15: 00007fff35ddc4b8 [ 1194.122134][T19379] [ 1195.087394][T19382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.090005][T19382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.128903][ C1] net_ratelimit: 15095 callbacks suppressed [ 1198.128928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.129387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1198.129726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.129933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1198.130102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.130648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1198.130917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.131232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.131619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1198.131885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1198.848006][T19395] FAULT_INJECTION: forcing a failure. [ 1198.848006][T19395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.848048][T19395] CPU: 1 UID: 0 PID: 19395 Comm: syz.5.4708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1198.848080][T19395] Tainted: [L]=SOFTLOCKUP [ 1198.848089][T19395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1198.848104][T19395] Call Trace: [ 1198.848113][T19395] [ 1198.848123][T19395] dump_stack_lvl+0xe8/0x150 [ 1198.848156][T19395] should_fail_ex+0x467/0x600 [ 1198.848196][T19395] _copy_from_user+0x2d/0xb0 [ 1198.848225][T19395] ___sys_recvmsg+0x173/0x5a0 [ 1198.848264][T19395] ? __pfx____sys_recvmsg+0x10/0x10 [ 1198.848305][T19395] ? __fget_files+0x2a/0x420 [ 1198.848349][T19395] ? __fget_files+0x3a8/0x420 [ 1198.848385][T19395] __x64_sys_recvmsg+0x1b4/0x290 [ 1198.848419][T19395] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1198.848470][T19395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.848496][T19395] do_syscall_64+0x174/0x580 [ 1198.848534][T19395] ? trace_irq_disable+0x3b/0x140 [ 1198.848563][T19395] ? clear_bhb_loop+0x40/0x90 [ 1198.848591][T19395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.848614][T19395] RIP: 0033:0x7f5de49fce59 [ 1198.848634][T19395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.848654][T19395] RSP: 002b:00007f5de2c2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1198.848679][T19395] RAX: ffffffffffffffda RBX: 00007f5de4c76090 RCX: 00007f5de49fce59 [ 1198.848696][T19395] RDX: 0000000000000000 RSI: 0000200000003980 RDI: 0000000000000003 [ 1198.848710][T19395] RBP: 00007f5de2c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.848723][T19395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.848737][T19395] R13: 00007f5de4c76128 R14: 00007f5de4c76090 R15: 00007fff35ddc4b8 [ 1198.848772][T19395] [ 1203.138965][ C0] net_ratelimit: 17058 callbacks suppressed [ 1203.138987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.139300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.140410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.140531][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.140857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1203.140875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.141353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.141363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1203.141702][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1203.141732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1204.891660][T19417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.892355][T19417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.149123][ C1] net_ratelimit: 16877 callbacks suppressed [ 1208.149147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.149200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.149543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.149570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.149998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.150095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1208.150376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1208.150467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.150892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1208.151379][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1213.160354][ C0] net_ratelimit: 16928 callbacks suppressed [ 1213.160378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.160766][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.161302][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.161722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.163694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.164100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.164658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.165072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.166839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.167239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1215.209085][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1215.721739][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.721771][ T9] usb 7-1: config 0 has no interface number 0 [ 1215.747865][ T9] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1215.747910][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.747933][ T9] usb 7-1: Product: syz [ 1215.747948][ T9] usb 7-1: Manufacturer: syz [ 1215.747965][ T9] usb 7-1: SerialNumber: syz [ 1215.799276][ T9] usb 7-1: config 0 descriptor?? [ 1218.169160][ C1] net_ratelimit: 16641 callbacks suppressed [ 1218.169185][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.169326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.169628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.169669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.170132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.170158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1218.170514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1218.170553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.171001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1218.171518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1218.475964][ T9] usb 7-1: can't set config #0, error -71 [ 1218.974299][ T9] usb 7-1: USB disconnect, device number 23 [ 1219.501985][T19475] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1219.586471][T19477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.599175][T19477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.364476][T19487] FAULT_INJECTION: forcing a failure. [ 1221.364476][T19487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.364520][T19487] CPU: 0 UID: 0 PID: 19487 Comm: syz.5.4735 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1221.364553][T19487] Tainted: [L]=SOFTLOCKUP [ 1221.364562][T19487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.364576][T19487] Call Trace: [ 1221.364585][T19487] [ 1221.364595][T19487] dump_stack_lvl+0xe8/0x150 [ 1221.364628][T19487] should_fail_ex+0x467/0x600 [ 1221.364671][T19487] _copy_to_user+0x31/0xb0 [ 1221.364700][T19487] simple_read_from_buffer+0xe1/0x170 [ 1221.364733][T19487] proc_fail_nth_read+0x1be/0x230 [ 1221.364763][T19487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.364791][T19487] ? rw_verify_area+0x250/0x4d0 [ 1221.364828][T19487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1221.364851][T19487] vfs_read+0x219/0xa90 [ 1221.364890][T19487] ? __pfx_vfs_read+0x10/0x10 [ 1221.364922][T19487] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1221.364952][T19487] ? lockdep_hardirqs_on+0x7a/0x110 [ 1221.364981][T19487] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1221.365009][T19487] ? mutex_lock_nested+0x152/0x1d0 [ 1221.365043][T19487] ? fdget_pos+0x252/0x320 [ 1221.365079][T19487] ksys_read+0x156/0x270 [ 1221.365110][T19487] ? __pfx_ksys_read+0x10/0x10 [ 1221.365148][T19487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.365172][T19487] do_syscall_64+0x174/0x580 [ 1221.365199][T19487] ? trace_irq_disable+0x3b/0x140 [ 1221.365228][T19487] ? clear_bhb_loop+0x40/0x90 [ 1221.365254][T19487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.365277][T19487] RIP: 0033:0x7f5de49bd68e [ 1221.365298][T19487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1221.365318][T19487] RSP: 002b:00007f5de2c2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.365352][T19487] RAX: ffffffffffffffda RBX: 00007f5de2c2d6c0 RCX: 00007f5de49bd68e [ 1221.365370][T19487] RDX: 000000000000000f RSI: 00007f5de2c2d0a0 RDI: 0000000000000004 [ 1221.365384][T19487] RBP: 00007f5de2c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.365398][T19487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.365412][T19487] R13: 00007f5de4c76128 R14: 00007f5de4c76090 R15: 00007fff35ddc4b8 [ 1221.365449][T19487] [ 1221.399716][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1221.549032][ T9] usb 7-1: device descriptor read/64, error -71 [ 1221.914927][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1223.179169][ C0] net_ratelimit: 15243 callbacks suppressed [ 1223.179194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.179543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.179997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.180348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.181810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.182135][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.182307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1223.182599][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1223.182793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1223.182954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1227.864480][T19498] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1228.189033][ C1] net_ratelimit: 14823 callbacks suppressed [ 1228.189055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.189452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.189916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1228.190206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.190541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.190923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1228.191217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.191581][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1228.191615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1228.192082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1228.200641][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1228.779633][T19523] FAULT_INJECTION: forcing a failure. [ 1228.779633][T19523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.779675][T19523] CPU: 1 UID: 0 PID: 19523 Comm: syz.2.4743 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1228.779707][T19523] Tainted: [L]=SOFTLOCKUP [ 1228.779716][T19523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1228.779730][T19523] Call Trace: [ 1228.779739][T19523] [ 1228.779749][T19523] dump_stack_lvl+0xe8/0x150 [ 1228.779781][T19523] should_fail_ex+0x467/0x600 [ 1228.779821][T19523] _copy_from_user+0x2d/0xb0 [ 1228.779849][T19523] ___sys_recvmsg+0x173/0x5a0 [ 1228.779887][T19523] ? __pfx____sys_recvmsg+0x10/0x10 [ 1228.779923][T19523] ? __fget_files+0x2a/0x420 [ 1228.779967][T19523] ? __fget_files+0x3a8/0x420 [ 1228.780001][T19523] do_recvmmsg+0x320/0x7f0 [ 1228.780042][T19523] ? __pfx_do_recvmmsg+0x10/0x10 [ 1228.780074][T19523] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1228.780114][T19523] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1228.780152][T19523] __x64_sys_recvmmsg+0x198/0x250 [ 1228.780188][T19523] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1228.780229][T19523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.780255][T19523] do_syscall_64+0x174/0x580 [ 1228.780283][T19523] ? trace_irq_disable+0x3b/0x140 [ 1228.780312][T19523] ? clear_bhb_loop+0x40/0x90 [ 1228.780340][T19523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.780362][T19523] RIP: 0033:0x7fd0bd2bce59 [ 1228.780384][T19523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.780403][T19523] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1228.780429][T19523] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1228.780446][T19523] RDX: 0000000000000001 RSI: 0000200000008540 RDI: 0000000000000003 [ 1228.780461][T19523] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.780476][T19523] R10: 0000000000002040 R11: 0000000000000246 R12: 0000000000000001 [ 1228.780491][T19523] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1228.780530][T19523] [ 1228.793183][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1228.793248][ T9] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1228.793271][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.798409][ T9] usb 7-1: config 0 descriptor?? [ 1228.805887][T19516] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1229.096619][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1229.096774][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1229.189002][ T9] usb 7-1: USB disconnect, device number 26 [ 1229.442661][T19529] netlink: 208 bytes leftover after parsing attributes in process `syz.6.4745'. [ 1229.553202][T19533] FAULT_INJECTION: forcing a failure. [ 1229.553202][T19533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.553244][T19533] CPU: 1 UID: 0 PID: 19533 Comm: syz.0.4747 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1229.553284][T19533] Tainted: [L]=SOFTLOCKUP [ 1229.553293][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1229.553306][T19533] Call Trace: [ 1229.553316][T19533] [ 1229.553327][T19533] dump_stack_lvl+0xe8/0x150 [ 1229.553359][T19533] should_fail_ex+0x467/0x600 [ 1229.553399][T19533] _copy_from_user+0x2d/0xb0 [ 1229.553427][T19533] ___sys_sendmsg+0x1c6/0x360 [ 1229.553459][T19533] ? __lock_acquire+0x683/0x2ce0 [ 1229.553494][T19533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.553561][T19533] ? __fget_files+0x2a/0x420 [ 1229.553586][T19533] ? __fget_files+0x3a8/0x420 [ 1229.553622][T19533] __x64_sys_sendmsg+0x1b7/0x290 [ 1229.553655][T19533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1229.553706][T19533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.553732][T19533] do_syscall_64+0x174/0x580 [ 1229.553760][T19533] ? trace_irq_disable+0x3b/0x140 [ 1229.553788][T19533] ? clear_bhb_loop+0x40/0x90 [ 1229.553816][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.553838][T19533] RIP: 0033:0x7f1588d2ce59 [ 1229.553860][T19533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.553880][T19533] RSP: 002b:00007f1586f86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1229.553905][T19533] RAX: ffffffffffffffda RBX: 00007f1588fa5fa0 RCX: 00007f1588d2ce59 [ 1229.553921][T19533] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1229.553935][T19533] RBP: 00007f1586f86090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.553953][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.553967][T19533] R13: 00007f1588fa6038 R14: 00007f1588fa5fa0 R15: 00007ffc2e2c5978 [ 1229.554003][T19533] [ 1229.908999][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1230.069151][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1230.071526][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.071563][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1230.071588][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1230.071613][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1230.071635][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1230.071659][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1230.073357][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1230.073388][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1230.073411][ T9] usb 7-1: SerialNumber: syz [ 1232.313147][ T9] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1232.313507][ T9] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1232.487361][ T9] usb 7-1: USB disconnect, device number 27 [ 1232.605436][T19538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.627222][T19538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.670601][ T5612] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1233.198941][ C1] net_ratelimit: 14343 callbacks suppressed [ 1233.198967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1233.199301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.199495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.199697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.199901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.200155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1233.200424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.200478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1233.200811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1233.200876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.539599][T19550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.569479][T19550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.718001][T19555] afs: Bad value for 'source' [ 1234.906546][T19553] FAULT_INJECTION: forcing a failure. [ 1234.906546][T19553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1234.906589][T19553] CPU: 1 UID: 0 PID: 19553 Comm: syz.2.4755 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1234.906620][T19553] Tainted: [L]=SOFTLOCKUP [ 1234.906629][T19553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1234.906642][T19553] Call Trace: [ 1234.906651][T19553] [ 1234.906661][T19553] dump_stack_lvl+0xe8/0x150 [ 1234.906691][T19553] should_fail_ex+0x467/0x600 [ 1234.906728][T19553] _copy_from_user+0x2d/0xb0 [ 1234.906753][T19553] ___sys_sendmsg+0x1c6/0x360 [ 1234.906782][T19553] ? __lock_acquire+0x683/0x2ce0 [ 1234.906817][T19553] ? __pfx____sys_sendmsg+0x10/0x10 [ 1234.906884][T19553] ? __fget_files+0x2a/0x420 [ 1234.906909][T19553] ? __fget_files+0x3a8/0x420 [ 1234.906945][T19553] __x64_sys_sendmsg+0x1b7/0x290 [ 1234.906979][T19553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1234.907028][T19553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.907053][T19553] do_syscall_64+0x174/0x580 [ 1234.907082][T19553] ? trace_irq_disable+0x3b/0x140 [ 1234.907111][T19553] ? clear_bhb_loop+0x40/0x90 [ 1234.907138][T19553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.907161][T19553] RIP: 0033:0x7fd0bd2bce59 [ 1234.907183][T19553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.907202][T19553] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1234.907237][T19553] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1234.907255][T19553] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1234.907271][T19553] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.907285][T19553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.907299][T19553] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1234.907333][T19553] [ 1238.208963][ C1] net_ratelimit: 15275 callbacks suppressed [ 1238.208977][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.208988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.209380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.209380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.209850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1238.209929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.210196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.210459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1238.210592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1238.211049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1238.476407][T19564] FAULT_INJECTION: forcing a failure. [ 1238.476407][T19564] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.476448][T19564] CPU: 0 UID: 0 PID: 19564 Comm: syz.0.4758 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1238.476481][T19564] Tainted: [L]=SOFTLOCKUP [ 1238.476490][T19564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1238.476504][T19564] Call Trace: [ 1238.476513][T19564] [ 1238.476523][T19564] dump_stack_lvl+0xe8/0x150 [ 1238.476555][T19564] should_fail_ex+0x467/0x600 [ 1238.476595][T19564] should_failslab+0xa8/0x100 [ 1238.476625][T19564] __kmalloc_noprof+0xfb/0x790 [ 1238.476650][T19564] ? tomoyo_realpath_from_path+0xef/0x640 [ 1238.476685][T19564] ? tomoyo_realpath_from_path+0xef/0x640 [ 1238.476727][T19564] tomoyo_realpath_from_path+0xef/0x640 [ 1238.476772][T19564] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1238.476802][T19564] tomoyo_path_number_perm+0x246/0x5f0 [ 1238.476835][T19564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1238.476862][T19564] ? __lock_acquire+0x683/0x2ce0 [ 1238.476908][T19564] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1238.476936][T19564] ? hook_file_ioctl+0x1f3/0x600 [ 1238.476965][T19564] ? lockdep_hardirqs_on+0x7a/0x110 [ 1238.477014][T19564] ? __fget_files+0x2a/0x420 [ 1238.477051][T19564] ? __fget_files+0x2a/0x420 [ 1238.477074][T19564] ? __fget_files+0x3a8/0x420 [ 1238.477097][T19564] ? __fget_files+0x2a/0x420 [ 1238.477130][T19564] security_file_ioctl+0xc3/0x2a0 [ 1238.477160][T19564] __se_sys_ioctl+0x47/0x170 [ 1238.477191][T19564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.477215][T19564] do_syscall_64+0x174/0x580 [ 1238.477244][T19564] ? trace_irq_disable+0x3b/0x140 [ 1238.477272][T19564] ? clear_bhb_loop+0x40/0x90 [ 1238.477299][T19564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.477322][T19564] RIP: 0033:0x7f1588d2ce59 [ 1238.477344][T19564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1238.477363][T19564] RSP: 002b:00007f1586f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.477388][T19564] RAX: ffffffffffffffda RBX: 00007f1588fa5fa0 RCX: 00007f1588d2ce59 [ 1238.477404][T19564] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1238.477420][T19564] RBP: 00007f1586f86090 R08: 0000000000000000 R09: 0000000000000000 [ 1238.477435][T19564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.477449][T19564] R13: 00007f1588fa6038 R14: 00007f1588fa5fa0 R15: 00007ffc2e2c5978 [ 1238.477485][T19564] [ 1238.477586][T19564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1238.772078][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.833039][T19563] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1240.744723][T19575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.752326][T19575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.067397][T19579] netlink: 'syz.2.4766': attribute type 11 has an invalid length. [ 1242.129152][T11104] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1242.592602][T11104] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1242.592661][T11104] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1242.592686][T11104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.651449][T11104] usb 7-1: config 0 descriptor?? [ 1242.662936][T19582] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1243.218968][ C1] net_ratelimit: 14262 callbacks suppressed [ 1243.218993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1243.219328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.219464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.219714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.220104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.220169][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1243.220561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.220707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1243.220944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1243.221210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1247.670794][T11104] usbhid 7-1:0.0: can't add hid device: -71 [ 1247.670936][T11104] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1247.731914][T11104] usb 7-1: USB disconnect, device number 28 [ 1248.229326][ C0] net_ratelimit: 17512 callbacks suppressed [ 1248.229351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.229407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1248.229690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.229790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.230165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.230261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.230517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1248.230790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1248.231178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1248.231623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1249.409251][T19606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4776'. [ 1250.696814][T19609] FAULT_INJECTION: forcing a failure. [ 1250.696814][T19609] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.696856][T19609] CPU: 1 UID: 0 PID: 19609 Comm: syz.2.4773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1250.696898][T19609] Tainted: [L]=SOFTLOCKUP [ 1250.696907][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1250.696921][T19609] Call Trace: [ 1250.696929][T19609] [ 1250.696940][T19609] dump_stack_lvl+0xe8/0x150 [ 1250.696973][T19609] should_fail_ex+0x467/0x600 [ 1250.697014][T19609] should_failslab+0xa8/0x100 [ 1250.697045][T19609] __kmalloc_noprof+0xfb/0x790 [ 1250.697069][T19609] ? tomoyo_realpath_from_path+0xef/0x640 [ 1250.697102][T19609] ? tomoyo_realpath_from_path+0xef/0x640 [ 1250.697143][T19609] tomoyo_realpath_from_path+0xef/0x640 [ 1250.697188][T19609] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1250.697218][T19609] tomoyo_path_number_perm+0x246/0x5f0 [ 1250.697251][T19609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1250.697279][T19609] ? __lock_acquire+0x683/0x2ce0 [ 1250.697326][T19609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1250.697353][T19609] ? hook_file_ioctl+0x1f3/0x600 [ 1250.697378][T19609] ? lockdep_hardirqs_on+0x7a/0x110 [ 1250.697427][T19609] ? __fget_files+0x2a/0x420 [ 1250.697456][T19609] ? __fget_files+0x2a/0x420 [ 1250.697479][T19609] ? __fget_files+0x3a8/0x420 [ 1250.697501][T19609] ? __fget_files+0x2a/0x420 [ 1250.697530][T19609] security_file_ioctl+0xc3/0x2a0 [ 1250.697560][T19609] __se_sys_ioctl+0x47/0x170 [ 1250.697592][T19609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.697617][T19609] do_syscall_64+0x174/0x580 [ 1250.697646][T19609] ? trace_irq_disable+0x3b/0x140 [ 1250.697675][T19609] ? clear_bhb_loop+0x40/0x90 [ 1250.697703][T19609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.697726][T19609] RIP: 0033:0x7fd0bd2bce59 [ 1250.697748][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1250.697768][T19609] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.697794][T19609] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1250.697810][T19609] RDX: 0000200000000140 RSI: 0000000040bc5311 RDI: 0000000000000003 [ 1250.697824][T19609] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.697838][T19609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.697851][T19609] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1250.697896][T19609] [ 1250.697906][T19609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1252.979080][T11104] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1253.238876][ C1] net_ratelimit: 17453 callbacks suppressed [ 1253.238910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.238926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.239376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1253.239415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.239709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.239760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1253.240112][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.240712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1253.241055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1253.241217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1254.685716][ T5600] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.685839][ T5600] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1254.747833][ T5600] usb 3-1: USB disconnect, device number 120 [ 1255.165587][T19616] FAULT_INJECTION: forcing a failure. [ 1255.165587][T19616] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.165628][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.2.4777 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1255.165659][T19616] Tainted: [L]=SOFTLOCKUP [ 1255.165668][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1255.165681][T19616] Call Trace: [ 1255.165690][T19616] [ 1255.165700][T19616] dump_stack_lvl+0xe8/0x150 [ 1255.165733][T19616] should_fail_ex+0x467/0x600 [ 1255.165775][T19616] should_failslab+0xa8/0x100 [ 1255.165804][T19616] __kmalloc_noprof+0xfb/0x790 [ 1255.165830][T19616] ? tomoyo_realpath_from_path+0xef/0x640 [ 1255.165863][T19616] ? tomoyo_realpath_from_path+0xef/0x640 [ 1255.165905][T19616] tomoyo_realpath_from_path+0xef/0x640 [ 1255.165956][T19616] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1255.165985][T19616] tomoyo_path_number_perm+0x246/0x5f0 [ 1255.166017][T19616] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1255.166046][T19616] ? __lock_acquire+0x683/0x2ce0 [ 1255.166097][T19616] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1255.166125][T19616] ? hook_file_ioctl+0x1f3/0x600 [ 1255.166153][T19616] ? lockdep_hardirqs_on+0x7a/0x110 [ 1255.166202][T19616] ? __fget_files+0x2a/0x420 [ 1255.166232][T19616] ? __fget_files+0x2a/0x420 [ 1255.166254][T19616] ? __fget_files+0x3a8/0x420 [ 1255.166277][T19616] ? __fget_files+0x2a/0x420 [ 1255.166306][T19616] security_file_ioctl+0xc3/0x2a0 [ 1255.166336][T19616] __se_sys_ioctl+0x47/0x170 [ 1255.166368][T19616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.166394][T19616] do_syscall_64+0x174/0x580 [ 1255.166422][T19616] ? trace_irq_disable+0x3b/0x140 [ 1255.166450][T19616] ? clear_bhb_loop+0x40/0x90 [ 1255.166478][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.166501][T19616] RIP: 0033:0x7fd0bd2bce59 [ 1255.166522][T19616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.166542][T19616] RSP: 002b:00007fd0bb4d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.166568][T19616] RAX: ffffffffffffffda RBX: 00007fd0bd536180 RCX: 00007fd0bd2bce59 [ 1255.166585][T19616] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 1255.166600][T19616] RBP: 00007fd0bb4d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.166613][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.166627][T19616] R13: 00007fd0bd536218 R14: 00007fd0bd536180 R15: 00007ffd8f4b9998 [ 1255.166663][T19616] [ 1255.538175][T19616] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1256.665597][T19622] befs: (nullb0): No write support. Marking filesystem read-only [ 1256.922461][T19622] befs: (nullb0): invalid magic header [ 1258.249100][ C1] net_ratelimit: 15766 callbacks suppressed [ 1258.249125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.249124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.249525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.249532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.250116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1258.250459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.250963][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1258.251182][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.251450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1258.251559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1258.809525][T19632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.810226][T19632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.565539][T19619] syzkaller1: entered promiscuous mode [ 1260.565569][T19619] syzkaller1: entered allmulticast mode [ 1262.127001][T19644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.130461][T19644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.147623][T19644] syz.0.4784 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1263.259021][ C0] net_ratelimit: 15915 callbacks suppressed [ 1263.259044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.259204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.260317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.260438][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.260785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1263.260835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.261114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.261297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1263.261512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1263.261643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1267.757830][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.758569][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.269270][ C1] net_ratelimit: 17070 callbacks suppressed [ 1268.269287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.269295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.269655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.269784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.270306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1268.270683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.271040][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.271127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1268.271378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1268.271673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1272.328183][T19666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.343248][T19666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.745556][T19678] netlink: 'syz.2.4791': attribute type 21 has an invalid length. [ 1273.278901][ C1] net_ratelimit: 15657 callbacks suppressed [ 1273.278928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.279360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.279398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1273.279724][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.279833][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.280124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.280330][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.280577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1273.280804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1273.280905][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1273.598625][T12711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.659169][T12711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.671456][T12711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.687605][T12711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.688631][T12711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1276.429112][T12711] Bluetooth: hci0: command tx timeout [ 1276.667704][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4795'. [ 1278.177559][T19700] FAULT_INJECTION: forcing a failure. [ 1278.177559][T19700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.177601][T19700] CPU: 0 UID: 0 PID: 19700 Comm: syz.2.4797 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1278.177628][T19700] Tainted: [L]=SOFTLOCKUP [ 1278.177635][T19700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1278.177646][T19700] Call Trace: [ 1278.177653][T19700] [ 1278.177660][T19700] dump_stack_lvl+0xe8/0x150 [ 1278.177688][T19700] should_fail_ex+0x467/0x600 [ 1278.177722][T19700] _copy_from_user+0x2d/0xb0 [ 1278.177745][T19700] do_sock_getsockopt+0x200/0x7e0 [ 1278.177775][T19700] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1278.177814][T19700] ? __fget_files+0x3a8/0x420 [ 1278.177833][T19700] ? __fget_files+0x2a/0x420 [ 1278.177860][T19700] __x64_sys_getsockopt+0x1aa/0x250 [ 1278.177891][T19700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.177911][T19700] do_syscall_64+0x174/0x580 [ 1278.177933][T19700] ? trace_irq_disable+0x3b/0x140 [ 1278.177958][T19700] ? clear_bhb_loop+0x40/0x90 [ 1278.177980][T19700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.177999][T19700] RIP: 0033:0x7fd0bd2bce59 [ 1278.178017][T19700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.178033][T19700] RSP: 002b:00007fd0bb4d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1278.178054][T19700] RAX: ffffffffffffffda RBX: 00007fd0bd536180 RCX: 00007fd0bd2bce59 [ 1278.178068][T19700] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 1278.178079][T19700] RBP: 00007fd0bb4d4090 R08: 00002000000000c0 R09: 0000000000000000 [ 1278.178092][T19700] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1278.178104][T19700] R13: 00007fd0bd536218 R14: 00007fd0bd536180 R15: 00007ffd8f4b9998 [ 1278.178135][T19700] [ 1278.289009][ C1] net_ratelimit: 13570 callbacks suppressed [ 1278.289030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.289515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1278.289840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.290234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.290689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1278.291008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.291386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.291849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1278.292181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.292569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1278.449153][T12711] Bluetooth: hci0: command tx timeout [ 1280.151682][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.160158][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.518925][T12711] Bluetooth: hci0: command tx timeout [ 1282.601402][T12711] Bluetooth: hci0: command tx timeout [ 1283.298919][ C1] net_ratelimit: 14204 callbacks suppressed [ 1283.298953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1283.299191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.299287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.299610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.299695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.300170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1283.300497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.300907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1283.301015][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1283.301344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.246102][T19738] FAULT_INJECTION: forcing a failure. [ 1286.246102][T19738] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.246144][T19738] CPU: 0 UID: 0 PID: 19738 Comm: syz.2.4805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1286.246176][T19738] Tainted: [L]=SOFTLOCKUP [ 1286.246184][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.246197][T19738] Call Trace: [ 1286.246206][T19738] [ 1286.246216][T19738] dump_stack_lvl+0xe8/0x150 [ 1286.246248][T19738] should_fail_ex+0x467/0x600 [ 1286.246288][T19738] should_failslab+0xa8/0x100 [ 1286.246317][T19738] __kmalloc_noprof+0xfb/0x790 [ 1286.246342][T19738] ? tomoyo_realpath_from_path+0xef/0x640 [ 1286.246377][T19738] ? tomoyo_realpath_from_path+0xef/0x640 [ 1286.246429][T19738] tomoyo_realpath_from_path+0xef/0x640 [ 1286.246474][T19738] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1286.246503][T19738] tomoyo_path_number_perm+0x246/0x5f0 [ 1286.246535][T19738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1286.246563][T19738] ? __lock_acquire+0x683/0x2ce0 [ 1286.246610][T19738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1286.246637][T19738] ? hook_file_ioctl+0x1f3/0x600 [ 1286.246667][T19738] ? lockdep_hardirqs_on+0x7a/0x110 [ 1286.246717][T19738] ? __fget_files+0x2a/0x420 [ 1286.246746][T19738] ? __fget_files+0x2a/0x420 [ 1286.246769][T19738] ? __fget_files+0x3a8/0x420 [ 1286.246792][T19738] ? __fget_files+0x2a/0x420 [ 1286.246821][T19738] security_file_ioctl+0xc3/0x2a0 [ 1286.246850][T19738] __se_sys_ioctl+0x47/0x170 [ 1286.246881][T19738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.246905][T19738] do_syscall_64+0x174/0x580 [ 1286.246937][T19738] ? trace_irq_disable+0x3b/0x140 [ 1286.246964][T19738] ? clear_bhb_loop+0x40/0x90 [ 1286.246992][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.247014][T19738] RIP: 0033:0x7fd0bd2bce59 [ 1286.247035][T19738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.247055][T19738] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.247081][T19738] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1286.247097][T19738] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000003 [ 1286.247111][T19738] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.247125][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.247139][T19738] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1286.247174][T19738] [ 1286.252850][T19738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1286.391576][T19741] FAULT_INJECTION: forcing a failure. [ 1286.391576][T19741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1286.391616][T19741] CPU: 0 UID: 0 PID: 19741 Comm: syz.2.4808 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1286.391644][T19741] Tainted: [L]=SOFTLOCKUP [ 1286.391652][T19741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1286.391664][T19741] Call Trace: [ 1286.391672][T19741] [ 1286.391680][T19741] dump_stack_lvl+0xe8/0x150 [ 1286.391710][T19741] should_fail_ex+0x467/0x600 [ 1286.391744][T19741] _copy_from_user+0x2d/0xb0 [ 1286.391768][T19741] do_fcntl+0x949/0x19e0 [ 1286.391797][T19741] ? __fget_files+0x2a/0x420 [ 1286.391820][T19741] ? __pfx_do_fcntl+0x10/0x10 [ 1286.391851][T19741] ? __fget_files+0x2a/0x420 [ 1286.391874][T19741] ? __fget_files+0x2a/0x420 [ 1286.391902][T19741] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1286.391931][T19741] __se_sys_fcntl+0xcb/0x160 [ 1286.391957][T19741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.391979][T19741] do_syscall_64+0x174/0x580 [ 1286.392005][T19741] ? trace_irq_disable+0x3b/0x140 [ 1286.392030][T19741] ? clear_bhb_loop+0x40/0x90 [ 1286.392054][T19741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.392073][T19741] RIP: 0033:0x7fd0bd2bce59 [ 1286.392092][T19741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.392110][T19741] RSP: 002b:00007fd0bb4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1286.392132][T19741] RAX: ffffffffffffffda RBX: 00007fd0bd536090 RCX: 00007fd0bd2bce59 [ 1286.392147][T19741] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000003 [ 1286.392159][T19741] RBP: 00007fd0bb4f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.392172][T19741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.392184][T19741] R13: 00007fd0bd536128 R14: 00007fd0bd536090 R15: 00007ffd8f4b9998 [ 1286.392215][T19741] [ 1288.308956][ C1] net_ratelimit: 14906 callbacks suppressed [ 1288.308981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.309443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1288.309669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.310009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.310054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1288.312196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.312538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.313832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.314120][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1288.314600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1289.771219][T19757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.777413][T19757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.193057][ T5600] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1291.401334][ T5600] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1291.401372][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1291.401401][ T5600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1291.404354][ T5600] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1291.404384][ T5600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.404405][ T5600] usb 3-1: Product: syz [ 1291.404421][ T5600] usb 3-1: Manufacturer: syz [ 1291.404438][ T5600] usb 3-1: SerialNumber: syz [ 1291.430849][ T5600] usb 3-1: config 0 descriptor?? [ 1293.319116][ C1] net_ratelimit: 14240 callbacks suppressed [ 1293.319141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1293.319535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.319975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.320010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.320332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.320665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1293.320790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.321069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1293.321137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1293.321523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.328984][ C1] net_ratelimit: 15003 callbacks suppressed [ 1298.329009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.329571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.330166][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1298.330657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.331240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.331851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1298.332327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.332849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1298.333467][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1298.333917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1300.455113][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.975831][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1303.339550][ C0] net_ratelimit: 11991 callbacks suppressed [ 1303.339575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.339902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.340367][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.340709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.342334][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.342683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.343146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.343503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1303.344044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1303.344515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1303.592216][T19812] ieee802154 phy0 wpan0: encryption failed: -22 [ 1303.717793][T19812] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4825'. [ 1305.352250][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4827'. [ 1305.517420][T19674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.517801][T19674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.537293][T19674] bridge_slave_0: entered allmulticast mode [ 1305.625896][T19674] bridge_slave_0: entered promiscuous mode [ 1305.767323][T19674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.767684][T19674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.768037][T19674] bridge_slave_1: entered allmulticast mode [ 1305.831640][T19674] bridge_slave_1: entered promiscuous mode [ 1308.349224][ C1] net_ratelimit: 13786 callbacks suppressed [ 1308.349249][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.349718][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1308.350051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.350452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.350906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1308.351211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.351663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.352126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1308.352478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1308.352871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1309.249704][T19674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.385178][T19674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.527062][T19674] team0: Port device team_slave_0 added [ 1311.224488][T19674] team0: Port device team_slave_1 added [ 1313.358966][ C1] net_ratelimit: 14624 callbacks suppressed [ 1313.358993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.359395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.359858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1313.360121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.360231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.360454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.360624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1313.360923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.361096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1313.361266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1313.733184][ T5600] iguanair 3-1:0.0: failed to get version [ 1313.733696][ T5600] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 1314.762397][T19674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.762417][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.762449][T19674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.907062][T19674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.907082][T19674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1314.907111][T19674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.999173][ T5600] usb 3-1: USB disconnect, device number 121 [ 1315.651570][T19674] hsr_slave_0: entered promiscuous mode [ 1315.678544][T19674] hsr_slave_1: entered promiscuous mode [ 1315.703887][T19674] debugfs: 'hsr0' already exists in 'hsr' [ 1315.703921][T19674] Cannot create hsr debugfs directory [ 1316.194843][T19859] FAULT_INJECTION: forcing a failure. [ 1316.194843][T19859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.194886][T19859] CPU: 0 UID: 0 PID: 19859 Comm: syz.0.4837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1316.194918][T19859] Tainted: [L]=SOFTLOCKUP [ 1316.194926][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1316.194940][T19859] Call Trace: [ 1316.194949][T19859] [ 1316.194959][T19859] dump_stack_lvl+0xe8/0x150 [ 1316.194993][T19859] should_fail_ex+0x467/0x600 [ 1316.195034][T19859] _copy_from_user+0x2d/0xb0 [ 1316.195063][T19859] snd_rawmidi_kernel_write1+0x397/0x620 [ 1316.195175][T19859] snd_rawmidi_write+0x5bc/0xbc0 [ 1316.195218][T19859] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1316.195246][T19859] ? __asan_memset+0x22/0x50 [ 1316.195310][T19859] ? apparmor_file_permission+0x1f4/0x300 [ 1316.195341][T19859] ? bpf_lsm_file_permission+0x9/0x20 [ 1316.195367][T19859] ? security_file_permission+0x75/0x260 [ 1316.195395][T19859] ? rw_verify_area+0x209/0x4d0 [ 1316.195429][T19859] vfs_writev+0x4c4/0x990 [ 1316.195453][T19859] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1316.195486][T19859] ? __pfx_vfs_writev+0x10/0x10 [ 1316.195522][T19859] ? __fget_files+0x2a/0x420 [ 1316.195552][T19859] ? __fget_files+0x3a8/0x420 [ 1316.195583][T19859] ? __fget_files+0x2a/0x420 [ 1316.195616][T19859] do_writev+0x15a/0x2e0 [ 1316.195640][T19859] ? __pfx_do_writev+0x10/0x10 [ 1316.195670][T19859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.195695][T19859] do_syscall_64+0x174/0x580 [ 1316.195723][T19859] ? trace_irq_disable+0x3b/0x140 [ 1316.195754][T19859] ? clear_bhb_loop+0x40/0x90 [ 1316.195781][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.195804][T19859] RIP: 0033:0x7f1588d2ce59 [ 1316.195825][T19859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.195844][T19859] RSP: 002b:00007f1586f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1316.195868][T19859] RAX: ffffffffffffffda RBX: 00007f1588fa5fa0 RCX: 00007f1588d2ce59 [ 1316.195885][T19859] RDX: 0000000000000002 RSI: 0000200000001980 RDI: 0000000000000003 [ 1316.195900][T19859] RBP: 00007f1586f86090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.195914][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.195927][T19859] R13: 00007f1588fa6038 R14: 00007f1588fa5fa0 R15: 00007ffc2e2c5978 [ 1316.195961][T19859] [ 1317.604227][T19867] FAULT_INJECTION: forcing a failure. [ 1317.604227][T19867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.604268][T19867] CPU: 1 UID: 0 PID: 19867 Comm: syz.5.4839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1317.604299][T19867] Tainted: [L]=SOFTLOCKUP [ 1317.604308][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.604321][T19867] Call Trace: [ 1317.604330][T19867] [ 1317.604339][T19867] dump_stack_lvl+0xe8/0x150 [ 1317.604372][T19867] should_fail_ex+0x467/0x600 [ 1317.604413][T19867] _copy_from_user+0x2d/0xb0 [ 1317.604440][T19867] ___sys_sendmsg+0x1c6/0x360 [ 1317.604470][T19867] ? __lock_acquire+0x683/0x2ce0 [ 1317.604506][T19867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.604574][T19867] ? __fget_files+0x2a/0x420 [ 1317.604598][T19867] ? __fget_files+0x3a8/0x420 [ 1317.604634][T19867] __x64_sys_sendmsg+0x1b7/0x290 [ 1317.604682][T19867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.604730][T19867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.604754][T19867] do_syscall_64+0x174/0x580 [ 1317.604783][T19867] ? trace_irq_disable+0x3b/0x140 [ 1317.604809][T19867] ? clear_bhb_loop+0x40/0x90 [ 1317.604834][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.604854][T19867] RIP: 0033:0x7f5de49fce59 [ 1317.604874][T19867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.604893][T19867] RSP: 002b:00007f5de2c4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.604918][T19867] RAX: ffffffffffffffda RBX: 00007f5de4c75fa0 RCX: 00007f5de49fce59 [ 1317.604934][T19867] RDX: 0000000000005800 RSI: 0000200000000080 RDI: 0000000000000003 [ 1317.604949][T19867] RBP: 00007f5de2c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.604963][T19867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.604976][T19867] R13: 00007f5de4c76038 R14: 00007f5de4c75fa0 R15: 00007fff35ddc4b8 [ 1317.605012][T19867] [ 1318.369317][ C1] net_ratelimit: 14462 callbacks suppressed [ 1318.369343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.369878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1318.370274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.370719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.372832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.378671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.379277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1318.379286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1318.379633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1318.380051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1321.768986][T14953] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1321.769278][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1322.089135][T14953] usb 3-1: device descriptor read/64, error -32 [ 1322.348983][T14953] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1323.146566][T14953] usb 3-1: Using ep0 maxpacket: 32 [ 1323.378853][ C1] net_ratelimit: 17108 callbacks suppressed [ 1323.378877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1323.378906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.379217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.379594][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.379640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.379995][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1323.380105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1323.380443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.380832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1323.381298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1324.163348][T14953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.163380][T14953] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1326.066392][T14953] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1326.066436][T14953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.066458][T14953] usb 3-1: Product: syz [ 1326.066474][T14953] usb 3-1: Manufacturer: syz [ 1326.213881][T14953] usb 3-1: config 0 descriptor?? [ 1327.056805][T14953] usb 3-1: can't set config #0, error -71 [ 1327.126531][T19886] FAULT_INJECTION: forcing a failure. [ 1327.126531][T19886] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.126572][T19886] CPU: 0 UID: 0 PID: 19886 Comm: syz.5.4847 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1327.126604][T19886] Tainted: [L]=SOFTLOCKUP [ 1327.126612][T19886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1327.126625][T19886] Call Trace: [ 1327.126634][T19886] [ 1327.126644][T19886] dump_stack_lvl+0xe8/0x150 [ 1327.126675][T19886] should_fail_ex+0x467/0x600 [ 1327.126714][T19886] should_failslab+0xa8/0x100 [ 1327.126741][T19886] ? do_getname+0x2e/0x250 [ 1327.126763][T19886] kmem_cache_alloc_noprof+0x9e/0x680 [ 1327.126789][T19886] ? do_getname+0x2e/0x250 [ 1327.126817][T19886] do_getname+0x2e/0x250 [ 1327.126836][T19886] ? __se_sys_renameat+0x25/0x2c0 [ 1327.126863][T19886] __se_sys_renameat+0x31/0x2c0 [ 1327.126886][T19886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.126911][T19886] do_syscall_64+0x174/0x580 [ 1327.126948][T19886] ? trace_irq_disable+0x3b/0x140 [ 1327.126978][T19886] ? clear_bhb_loop+0x40/0x90 [ 1327.127005][T19886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.127027][T19886] RIP: 0033:0x7f5de49fce59 [ 1327.127048][T19886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.127067][T19886] RSP: 002b:00007f5de2c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1327.127092][T19886] RAX: ffffffffffffffda RBX: 00007f5de4c75fa0 RCX: 00007f5de49fce59 [ 1327.127109][T19886] RDX: ffffffffffffffff RSI: 0000200000000440 RDI: ffffffffffffffff [ 1327.127126][T19886] RBP: 00007f5de2c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.127140][T19886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.127155][T19886] R13: 00007f5de4c76038 R14: 00007f5de4c75fa0 R15: 00007fff35ddc4b8 [ 1327.127190][T19886] [ 1327.473168][T14953] usb 3-1: USB disconnect, device number 123 [ 1327.844373][T19890] input: syz0 as /devices/virtual/input/input90 [ 1328.390315][ C0] net_ratelimit: 16233 callbacks suppressed [ 1328.390339][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.390700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.391127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.391595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.392017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.392384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.393834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.394206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.394593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1328.394988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.399163][ C1] net_ratelimit: 15430 callbacks suppressed [ 1333.399187][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1333.399502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.399889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.400361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1333.400721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.401111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1333.401218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.401610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1333.401630][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1333.401960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1334.624661][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1334.858527][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1335.020531][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1335.022385][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1335.029137][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1335.810929][T14953] usb 1-1: USB disconnect, device number 49 [ 1336.257321][ T5612] Bluetooth: hci1: unexpected cc 0x0c57 length: 133 > 33 [ 1336.257405][ T5612] Bluetooth: hci1: unexpected event for opcode 0x0c57 [ 1338.199904][ T5612] Bluetooth: hci4: command tx timeout [ 1338.408874][ C1] net_ratelimit: 13288 callbacks suppressed [ 1338.408899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.409440][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1338.409549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.409815][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.409951][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.410306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1338.410348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.410822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1338.410830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1338.411201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1339.120944][T19929] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1339.234408][T19927] sit0: left promiscuous mode [ 1339.474281][T19933] FAULT_INJECTION: forcing a failure. [ 1339.474281][T19933] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.474322][T19933] CPU: 0 UID: 0 PID: 19933 Comm: syz.2.4858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1339.474352][T19933] Tainted: [L]=SOFTLOCKUP [ 1339.474361][T19933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1339.474374][T19933] Call Trace: [ 1339.474383][T19933] [ 1339.474393][T19933] dump_stack_lvl+0xe8/0x150 [ 1339.474424][T19933] should_fail_ex+0x467/0x600 [ 1339.474461][T19933] should_failslab+0xa8/0x100 [ 1339.474489][T19933] ? do_getname+0x2e/0x250 [ 1339.474510][T19933] kmem_cache_alloc_noprof+0x9e/0x680 [ 1339.474536][T19933] ? do_getname+0x2e/0x250 [ 1339.474564][T19933] do_getname+0x2e/0x250 [ 1339.474583][T19933] ? getname_flags+0x11/0x20 [ 1339.474607][T19933] path_listxattrat+0xd9/0x3f0 [ 1339.474644][T19933] ? __pfx_path_listxattrat+0x10/0x10 [ 1339.474685][T19933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.474710][T19933] do_syscall_64+0x174/0x580 [ 1339.474738][T19933] ? trace_irq_disable+0x3b/0x140 [ 1339.474776][T19933] ? clear_bhb_loop+0x40/0x90 [ 1339.474804][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.474825][T19933] RIP: 0033:0x7fd0bd2bce59 [ 1339.474851][T19933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.474870][T19933] RSP: 002b:00007fd0bb516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 1339.474894][T19933] RAX: ffffffffffffffda RBX: 00007fd0bd535fa0 RCX: 00007fd0bd2bce59 [ 1339.474910][T19933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1339.474924][T19933] RBP: 00007fd0bb516090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.474938][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.474951][T19933] R13: 00007fd0bd536038 R14: 00007fd0bd535fa0 R15: 00007ffd8f4b9998 [ 1339.474986][T19933] [ 1340.303446][ T5612] Bluetooth: hci4: command tx timeout [ 1342.426509][T12711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1342.499902][T12711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1342.516635][T12711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1342.534415][T12711] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1342.535297][T12711] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1343.158955][ T5612] Bluetooth: hci4: command tx timeout [ 1343.418865][ C1] net_ratelimit: 16396 callbacks suppressed [ 1343.418889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.419293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.419752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1343.420081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.420080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.420422][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.420483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1343.420845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1343.420940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1343.421280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1345.002783][ T5612] Bluetooth: hci5: command tx timeout [ 1345.238921][ T5612] Bluetooth: hci4: command tx timeout [ 1347.079071][ T5612] Bluetooth: hci5: command tx timeout [ 1348.428996][ C1] net_ratelimit: 15220 callbacks suppressed [ 1348.429021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.429443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.429782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.429920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1348.430253][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.430254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.430642][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.430703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1348.431114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1348.431446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1348.622457][T19674] netdevsim netdevsim7: probe with driver netdevsim failed with error -12 [ 1349.672663][ T5612] Bluetooth: hci5: command tx timeout [ 1352.546047][ T5612] Bluetooth: hci5: command tx timeout [ 1353.438963][ C1] net_ratelimit: 15211 callbacks suppressed [ 1353.438988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.439459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1353.439790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.439814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.440145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.440180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.440539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1353.440724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1353.441090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1353.441491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.448901][ C1] net_ratelimit: 14991 callbacks suppressed [ 1358.448927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.449068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.449330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.450396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1358.450515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.450841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.450859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.451255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1358.451257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1358.451747][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1361.013778][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'. [ 1361.642135][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.458942][ C0] net_ratelimit: 16400 callbacks suppressed [ 1363.458968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.459152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.459323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.459680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1363.460015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.460403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1363.460812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.460877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:4e:76:b1:ce:94:98, vlan:0) [ 1363.461151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1363.461207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1366.958154][T18657] bridge_slave_1: left allmulticast mode [ 1367.001102][T18657] bridge_slave_1: left promiscuous mode [ 1367.083225][T18657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.890888][T18657] bridge_slave_0: left allmulticast mode [ 1367.890930][T18657] bridge_slave_0: left promiscuous mode [ 1367.891233][T18657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.255050][T20003] ================================================================== [ 1368.255129][T20003] BUG: KASAN: use-after-free in kvm_setup_guest_pvclock+0x439/0x620 [ 1368.255223][T20003] Read of size 4 at addr ffff88804bd18320 by task syz.2.4875/20003 [ 1368.255241][T20003] [ 1368.255282][T20003] CPU: 1 UID: 0 PID: 20003 Comm: syz.2.4875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1368.255313][T20003] Tainted: [L]=SOFTLOCKUP [ 1368.255322][T20003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.255336][T20003] Call Trace: [ 1368.255346][T20003] [ 1368.255355][T20003] dump_stack_lvl+0xe8/0x150 [ 1368.255380][T20003] print_address_description+0x55/0x1e0 [ 1368.255464][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.255492][T20003] print_report+0x58/0x70 [ 1368.255518][T20003] kasan_report+0x117/0x150 [ 1368.255547][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.255581][T20003] kvm_setup_guest_pvclock+0x439/0x620 [ 1368.255613][T20003] ? __pfx_kvm_setup_guest_pvclock+0x10/0x10 [ 1368.255648][T20003] ? kvm_get_time_scale+0x75/0x140 [ 1368.255679][T20003] kvm_guest_time_update+0xa32/0xe60 [ 1368.255713][T20003] ? xa_find_after+0xae/0x430 [ 1368.255751][T20003] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 1368.255779][T20003] ? xa_find_after+0xae/0x430 [ 1368.255819][T20003] vcpu_run+0x150d/0x73e0 [ 1368.255866][T20003] ? __pfx___css_rstat_updated+0x10/0x10 [ 1368.255944][T20003] ? __lock_acquire+0x683/0x2ce0 [ 1368.255984][T20003] ? __pfx_vcpu_run+0x10/0x10 [ 1368.256008][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.256036][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.256069][T20003] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 1368.256098][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.256129][T20003] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1368.256201][T20003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1368.256228][T20003] ? hook_file_ioctl+0x1f3/0x600 [ 1368.256269][T20003] ? __fget_files+0x2a/0x420 [ 1368.256295][T20003] ? __fget_files+0x2a/0x420 [ 1368.256317][T20003] ? __fget_files+0x3a8/0x420 [ 1368.256338][T20003] ? __fget_files+0x2a/0x420 [ 1368.256363][T20003] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1368.256388][T20003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1368.256418][T20003] __se_sys_ioctl+0xff/0x170 [ 1368.256447][T20003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.256471][T20003] do_syscall_64+0x174/0x580 [ 1368.256498][T20003] ? trace_irq_disable+0x3b/0x140 [ 1368.256526][T20003] ? clear_bhb_loop+0x40/0x90 [ 1368.256552][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.256574][T20003] RIP: 0033:0x7fd0bd2bce59 [ 1368.256594][T20003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.256614][T20003] RSP: 002b:00007fd0bb4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.256640][T20003] RAX: ffffffffffffffda RBX: 00007fd0bd536090 RCX: 00007fd0bd2bce59 [ 1368.256657][T20003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1368.256672][T20003] RBP: 00007fd0bd352e6f R08: 0000000000000000 R09: 0000000000000000 [ 1368.256687][T20003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.256702][T20003] R13: 00007fd0bd536128 R14: 00007fd0bd536090 R15: 00007ffd8f4b9998 [ 1368.256728][T20003] [ 1368.256736][T20003] [ 1368.256742][T20003] The buggy address belongs to the physical page: [ 1368.256780][T20003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x4bd18 [ 1368.256802][T20003] flags: 0x80000000000000(node=0|zone=1) [ 1368.256829][T20003] raw: 0080000000000000 ffffea0001136bc8 ffff8880b8742f70 0000000000000000 [ 1368.256848][T20003] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1368.256861][T20003] page dumped because: kasan: bad access detected [ 1368.256872][T20003] page_owner tracks the page as freed [ 1368.256880][T20003] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 20001, tgid 20001 (syz.2.4875), ts 1368175302699 [ 1368.256923][T20003] post_alloc_hook+0x1f9/0x250 [ 1368.256945][T20003] get_page_from_freelist+0x264c/0x26c0 [ 1368.256970][T20003] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 1368.256994][T20003] alloc_pages_mpol+0xce/0x280 [ 1368.257018][T20003] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1368.257042][T20003] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1368.257066][T20003] do_pte_missing+0x835/0x28f0 [ 1368.257091][T20003] handle_mm_fault+0xe0b/0x1520 [ 1368.257110][T20003] do_user_addr_fault+0xa4d/0x1340 [ 1368.257134][T20003] exc_page_fault+0x6a/0xc0 [ 1368.257157][T20003] asm_exc_page_fault+0x26/0x30 [ 1368.257175][T20003] page last free pid 20002 tgid 20001 ts 1368251570501 stack trace: [ 1368.257191][T20003] __free_frozen_pages+0x10de/0x11c0 [ 1368.257211][T20003] __folio_put+0x30f/0x3c0 [ 1368.257259][T20003] __kvm_gpc_refresh+0x1277/0x1710 [ 1368.257281][T20003] __kvm_gpc_activate+0x289/0x3b0 [ 1368.257303][T20003] kvm_xen_vcpu_set_attr+0x1d3/0x1190 [ 1368.257346][T20003] kvm_arch_vcpu_ioctl+0x1467/0x23f0 [ 1368.257375][T20003] kvm_vcpu_ioctl+0x7e6/0xfe0 [ 1368.257399][T20003] __se_sys_ioctl+0xff/0x170 [ 1368.257426][T20003] do_syscall_64+0x174/0x580 [ 1368.257450][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.257471][T20003] [ 1368.257477][T20003] Memory state around the buggy address: [ 1368.257489][T20003] ffff88804bd18200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1368.257505][T20003] ffff88804bd18280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1368.257521][T20003] >ffff88804bd18300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1368.257533][T20003] ^ [ 1368.257543][T20003] ffff88804bd18380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1368.257558][T20003] ffff88804bd18400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1368.257570][T20003] ================================================================== [ 1368.469700][ C0] net_ratelimit: 14062 callbacks suppressed [ 1368.469721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.470069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.470369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.471586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, v[ 1368.471586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.471877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.472218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.473408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.473752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.474060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.475280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1368.912030][T20003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1368.912058][T20003] CPU: 1 UID: 0 PID: 20003 Comm: syz.2.4875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1368.912086][T20003] Tainted: [L]=SOFTLOCKUP [ 1368.912093][T20003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.912104][T20003] Call Trace: [ 1368.912111][T20003] [ 1368.912119][T20003] vpanic+0x56c/0xa60 [ 1368.912150][T20003] ? __pfx_vpanic+0x10/0x10 [ 1368.912177][T20003] panic+0xc5/0xd0 [ 1368.912199][T20003] ? __pfx_panic+0x10/0x10 [ 1368.912223][T20003] ? preempt_schedule_thunk+0x16/0x40 [ 1368.912248][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912270][T20003] ? preempt_schedule_thunk+0x16/0x40 [ 1368.912294][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912316][T20003] check_panic_on_warn+0x89/0xb0 [ 1368.912338][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912360][T20003] end_report+0x73/0x170 [ 1368.912379][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912401][T20003] kasan_report+0x128/0x150 [ 1368.912421][T20003] ? kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912448][T20003] kvm_setup_guest_pvclock+0x439/0x620 [ 1368.912472][T20003] ? __pfx_kvm_setup_guest_pvclock+0x10/0x10 [ 1368.912498][T20003] ? kvm_get_time_scale+0x75/0x140 [ 1368.912521][T20003] kvm_guest_time_update+0xa32/0xe60 [ 1368.912543][T20003] ? xa_find_after+0xae/0x430 [ 1368.912571][T20003] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 1368.912592][T20003] ? xa_find_after+0xae/0x430 [ 1368.912622][T20003] vcpu_run+0x150d/0x73e0 [ 1368.912641][T20003] ? __pfx___css_rstat_updated+0x10/0x10 [ 1368.912680][T20003] ? __lock_acquire+0x683/0x2ce0 [ 1368.912715][T20003] ? __pfx_vcpu_run+0x10/0x10 [ 1368.912733][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.912754][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.912779][T20003] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 1368.912800][T20003] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 1368.912823][T20003] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1368.912847][T20003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1368.912868][T20003] ? hook_file_ioctl+0x1f3/0x600 [ 1368.912897][T20003] ? __fget_files+0x2a/0x420 [ 1368.912916][T20003] ? __fget_files+0x2a/0x420 [ 1368.912933][T20003] ? __fget_files+0x3a8/0x420 [ 1368.912949][T20003] ? __fget_files+0x2a/0x420 [ 1368.912968][T20003] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1368.912995][T20003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1368.913016][T20003] __se_sys_ioctl+0xff/0x170 [ 1368.913039][T20003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.913056][T20003] do_syscall_64+0x174/0x580 [ 1368.913077][T20003] ? trace_irq_disable+0x3b/0x140 [ 1368.913097][T20003] ? clear_bhb_loop+0x40/0x90 [ 1368.913116][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.913133][T20003] RIP: 0033:0x7fd0bd2bce59 [ 1368.913148][T20003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.913164][T20003] RSP: 002b:00007fd0bb4f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.913183][T20003] RAX: ffffffffffffffda RBX: 00007fd0bd536090 RCX: 00007fd0bd2bce59 [ 1368.913197][T20003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1368.913208][T20003] RBP: 00007fd0bd352e6f R08: 0000000000000000 R09: 0000000000000000 [ 1368.913220][T20003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.913231][T20003] R13: 00007fd0bd536128 R14: 00007fd0bd536090 R15: 00007ffd8f4b9998 [ 1368.913250][T20003] [ 1368.913530][T20003] Kernel Offset: disabled