last executing test programs: 1m12.837597057s ago: executing program 3 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) 1m12.406649182s ago: executing program 3 (id=322): r0 = socket$kcm(0x21, 0x2, 0xa) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80000000) ioprio_set$pid(0x3, 0x0, 0x6000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000080fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="131152cd018dc134030000000800170005000000"], 0x30}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000109600000e000000e80000000000000010000000000000001001000001000100"], 0x28}, 0x0) 1m11.531519688s ago: executing program 3 (id=324): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prlimit64(0x0, 0x8, &(0x7f0000000240)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x10000000, 0x400, 0x1000}) socket$unix(0x1, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f000000e000/0x1000)=nil, 0x1, 0x0, 0x3b}) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mlockall(0x7) 1m11.062299962s ago: executing program 3 (id=328): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)={0x8, 0x0, [{0x5000, 0xfb, &(0x7f00000003c0)=""/251}, {0xeeee0000, 0x30, &(0x7f00000004c0)=""/48}, {0x60000, 0xc9, &(0x7f0000000bc0)=""/201}, {0xe000, 0xe2, &(0x7f00000005c0)=""/226}, {0xeeee8000, 0xc1, &(0x7f0000000d80)=""/193}, {0x2, 0xd2, &(0x7f00000007c0)=""/210}, {0x50000, 0xc4, &(0x7f00000008c0)=""/196}, {0x2000, 0xbe, &(0x7f00000009c0)=""/190}]}) r1 = dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000240)={0x0, 0x0, 0x100, 0x3, 0x1db}, &(0x7f00000000c0), &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) r5 = syz_io_uring_setup(0x811, &(0x7f0000000340)={0x0, 0x8424, 0x10, 0x7, 0x202, 0x0, r1}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)) r6 = syz_io_uring_setup(0x1d2c, &(0x7f0000000540)={0x0, 0x4c8, 0x400, 0x3, 0x38, 0x0, r2}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00), &(0x7f0000000d40)=0x0) syz_io_uring_submit(r7, r3, r8, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1, {}, 0x1}) syz_ublk_add_dev(r2, 0x0, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28002, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000290000003b0000006c000201000000002400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b'], 0x40}, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = userfaultfd(0x801) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000003900)={0x0, 0x6c6d, 0x20, 0x2, 0x154}, &(0x7f0000003980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x206c, 0x8000, 0x1, 0x307}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa669, 0x81400, 0xa02, 0xad, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb3c, 0x8000, 0x0, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd12e, 0x6040, 0x1, 0x1d8, 0x0, r6}}], 0x4, &(0x7f0000004c00)={0x2e, 0x11, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xbf2}, 0x0, r9, '\x00', {0xfffc, 0x4a06, 0x0, &(0x7f0000003c00)=@buf_1k="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"}}, &(0x7f0000004c80)) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001dc0), 0xffffffffffffffff) ioctl$UFFDIO_WRITEPROTECT(r12, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000180)={0x90, 0xff, 0x20000}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000, 0x8) 1m10.737711685s ago: executing program 3 (id=330): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000080)={0x0, @motion_det}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x7b, 0xb92, 0x53, @dev={0xfe, 0x80, '\x00', 0x3e}, @local, 0x8000, 0x8000, 0xfffffff8, 0x7fff}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="94ae75e16e9bc61b04cc08d08e45d6629286fdbc4bf96a2eb2db7b15a409afc31893f6727c170ff91cce41f74a3ce1cf566639565eb37b5754a7b299c66c44e383b199e34c5d5451fed39477f548f2e67843c2f852051ee88938c59a3e86fa6fa1de0f1892b07156c0699e722814a21b657806f94679418ead2ec297ac9ee323a799c5665ff47f94027fb404edac43785f6e8737d1f726c75d4c576ea2031a9aa7207e724e948936ca4d794adfef594026bd16985ea1db2a07c6457329857899c2e3c383701e2a7e7698fc3be6c3f454", 0xd0}, {&(0x7f0000000380)="19c656259cb16d90", 0x8}, {&(0x7f00000003c0)="c356b65212d95a5f5c978c38d7df16b35c41d7fba75fc0453cb81d971f663c838f9fe67aee8a6931e21db23edbc2583ac3752e75c31ea7adbd44dcd2451bc27e2df791671e2a443fdec4be2204fddc4db00ec7f200", 0x55}, {&(0x7f0000000440)="6e070e09aac063382f030548d4be9c44df91299ffe573f70690eef7723be7c8309d0ac71cb282c7a30c2e083e9432de664dbb4e4536b41e2ebcd89c1a8693a0218931ab8ff768beef03a147cbdb84b4127d8b9034c6964d1f879def796136ba346b40e4cf140f38d4a203f9ad8ed267026de3034abfeccd241937df39cc242463d010c8d9398286a6809ae55df5bece8631dd9b05ef6046c55ce40428a8a299894acf615431290ec41deb233757e03f653565e3628643b62fc5eabef0ff885ce2598f0418fb2da34158176bd6946dec521ebeae2be0cc66a2abdbc8ec781502bd075313a18", 0xe5}], 0x4, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x41) io_uring_enter(r0, 0x6a00, 0xadc, 0x44, &(0x7f0000000600), 0x8) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000680)={0x1, 0x1, @stop_pts=0xfffffffffffffffb}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r3, 0x29, 0x9, 0x0, 0x80, 0x1, @private0, @empty, 0x1, 0x700, 0xfffffff9, 0x6}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000900)={0x1, 0xfffffff9, 0x1}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000940)={[{0x1ff, 0xff, 0x4, 0x96, 0x2, 0xa3, 0x9, 0x9, 0x3f, 0x2, 0x9e, 0x7, 0x8000000000000001}, {0x8, 0x50e, 0x9, 0x6, 0x40, 0xf, 0x5, 0x53, 0x0, 0x7, 0x0, 0x3}, {0x9, 0x8000, 0x2, 0x6, 0xd, 0x4, 0x7b, 0x90, 0xc, 0x5, 0x7, 0xfc, 0x3}], 0x4de}) mount(&(0x7f00000009c0)=@rnullb, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='ocfs2\x00', 0x20000, &(0x7f0000000a80)='/dev/video2\x00') ioctl$COMEDI_SUBDINFO(r1, 0x80486402, &(0x7f0000000ac0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x800) write$sndseq(r5, &(0x7f0000000cc0)=[{0x9, 0x40, 0xc, 0xff, @tick=0x7fffffff, {0x6, 0x8}, {0x7e, 0x5}, @note={0xf2, 0x6, 0x4, 0x10, 0xf}}, {0x1, 0x2, 0x8, 0x80, @tick, {0x8, 0x77}, {0x8, 0xfc}, @result={0x2, 0xfffffff9}}, {0xd, 0x4, 0x9, 0x7, @tick, {0x80, 0x2}, {0xf, 0x61}, @ext={0x8a, &(0x7f0000000c00)="d58209e5dfa70572f233cd57a7ce501ad7104c1fe4b2373838df8d5a06a34b5f5a41c87bbc7e34b07f5fd7bfd9e045bc70275c2265211aba43e4e5764ad81687e4fecb534a7583ffdb50a925ebf41e39fa6a3d744c34444aaa31a7d3314c20c9180f3d781f92b3d853441403000c7b4a970d025b63717e9a3d5bb78deb3119aee0410d739f587b6275f1"}}], 0x54) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000d40)={0x5, 0xf917}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000dc0)=0x401) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000e40)={0x3, 0x1, &(0x7f0000000e00)={&(0x7f0000ffa000/0x3000)=nil, 0xb000, 0x3ff}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000f40)={&(0x7f0000000e80)=""/146, 0x92, 0x6, 0x3}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r1) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x74, r8, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044000}, 0x1) r9 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x50, 0x6f, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xfcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0x9, 0x2}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x110, 0x0, 0x40, 0x1, 0x20, 0x3}, 0x144, &(0x7f0000001180)={0x5, 0xf, 0x144, 0x6, [@generic={0xb0, 0x10, 0xb, "3329e0405b21dfad2ffbf7216446228950323aaa58edc2275627195776a87576d5279cb39b2d5ee622223cd4fa39dfc181eeb2e23b7d4c065ca5dd3925d2c6ebb950428667a5be54f3913cfd85420fb868c2eabfcf7d51e9ae5b2bdf48de3bb815738e5ba78bba30689ab7040c220efe47209e4c9276bd5ee1ac4a07449df26c7d1d0320ea3d831064527bec1fcc518d48622d0f9459a8d506e6e335cea3de37db245a452bf7b9be47f08c83c9"}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x1, 0xf000, 0x7f, [0xff60, 0x0, 0x0, 0x0, 0xffc000, 0x3f0f]}, @generic={0x4f, 0x10, 0xa, "9416c65484184ceffcdc5ae1a7023c5ed46b6c6fa845d3cd18479a71c1fe58af92612ec14d0e58d1a3f2284a1761c5efded310fee9cc8a42fda0560504ab8197fde1ac6cb463afcbb867effe"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x40, 0x7, 0xb, 0x16}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x1, 0x13}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe, 0x9, 0xa}]}, 0x4, [{0x102, &(0x7f0000001300)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x41c}}, {0xb6, &(0x7f00000014c0)=@string={0xb6, 0x3, "69ed7a7af53462378a887f0de20ee21a4a6f8674191f8d5a706ea7adaabe45c4ee3f2aea07c8f489e22ecc102285ef556195d1c5a76fb0b01e5210ac443b55f463d03917a21a5b87fd6f5b77fac0b623fde03649ddd44f2c6234a6bf22d22ea75e77c27b626187ba67f8dcc587b32b1008c50b0c872b492db323c78187afb01300a044ba3e471efcdab4b7fcb999eac3f37c334e2efd34424f1cc828f69fbf332e97e6371d02a521dce800a6ffd5ef5970976888"}}]}) syz_usb_control_io$hid(r9, &(0x7f00000017c0)={0x24, &(0x7f0000001600)={0x20, 0x9, 0xc4, {0xc4, 0x30, "1ac6605fa11625a3acbbee62182bcfcb08bfd17db6fb96659a5f69628e4ad742b07f88db9d1e5f0a81d29b7eaa15d699c7b19c973ead9d3743dfb9b021020414de2930cb2af94e77119a0b5cd5bb37faed558727b6ae28058b6257f926f620dcb4c4699c49ea5a57c437e7cd6941a16bae8a684f0a85045a9033da1bf259d9b9c498080fdb92443d20320a8c4a815a0d5456bea7245bc5bb6250a38b172009946686f9eb8320d8f006af8a58f307a6ab2447cef58efcbffa8f8ed04c1fc6fd487415"}}, &(0x7f0000001700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5d11d408672615d6}}, &(0x7f0000001740)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "357e999e"}]}}, &(0x7f0000001780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x1cf}}}}, &(0x7f0000001a00)={0x2c, &(0x7f0000001800)={0x40, 0x11, 0x15, "2bf3cf18dff1bccbfd24e452c7cfa57e0e0a2f7968"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x6a}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0xcc}, &(0x7f00000018c0)={0x20, 0x1, 0xdb, "80b9f6c6ac65fde927a108fa8a1dcbff1a4b8880450ee8cbbadac235205e6f742d8a516135289a15e970ce3d213d7ed8c754f3e66aa042a3f6083e06d3dff9f87a41b5003f86ce9c13a45acc43040845147d85b38e3cb189af90845972474b5d65f0a41f8fdc85898c0858d6408299e931690bedde1d6734c8748a20850740b5bc45dfdf3eb4066aa8d6adc02900314096efd7f5a0982ddf1eb5f4efb442fad09a3407759a06b081ae4ff023a112c636aef89367e1e3a44350bd45eeb88dad52aaa86c8991f6945f647779b9241bc1b4fcb6ac1a6cc6ed9eee6905"}, &(0x7f00000019c0)={0x20, 0x3, 0x1, 0x5}}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000001a40), &(0x7f0000001a80)='./file0\x00', 0x8, 0x2) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000001d00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c00)={0xac, 0x0, 0x110, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '\'\\%*'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000000) 1m10.217570227s ago: executing program 3 (id=334): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111080, 0x0) r1 = openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x208c1, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001a80)="7cdb015fbb1990080000", 0xa}], 0x2}, 0x24000008) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000f8ffffff000000005a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184b0000ffffffff0000000000000000850000008300000018120000d808d9252c9ecad07136db9d344ecd5ab6d524c79c49404c7da123aabf8863f22e24543452a75850aa8c46f46cad0d41b8239e66af68d20944b3eb9aacdd6a5eee638e1e2fe297e3bad45c5bcd13580139174193ccb6d6e792550c0fa8e6bd3d0b2dde09686ba3a7f9e8ab907e628839ae77a821e439c03d861217a7bc9fcac867c6", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000170000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)) 54.216056735s ago: executing program 32 (id=334): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111080, 0x0) r1 = openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x208c1, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001a80)="7cdb015fbb1990080000", 0xa}], 0x2}, 0x24000008) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x1f, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000f8ffffff000000005a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184b0000ffffffff0000000000000000850000008300000018120000d808d9252c9ecad07136db9d344ecd5ab6d524c79c49404c7da123aabf8863f22e24543452a75850aa8c46f46cad0d41b8239e66af68d20944b3eb9aacdd6a5eee638e1e2fe297e3bad45c5bcd13580139174193ccb6d6e792550c0fa8e6bd3d0b2dde09686ba3a7f9e8ab907e628839ae77a821e439c03d861217a7bc9fcac867c6", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000170000008500000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)) 26.233748385s ago: executing program 1 (id=406): r0 = syz_open_dev$audion(&(0x7f0000000000), 0xffffffffffffffff, 0x8000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x46ba, 0x8000, 0x6}) syz_open_dev$MSR(&(0x7f0000000080), 0xe, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x10, 0xffb4}, {0x2, 0x4}, {0x2, 0x9}, {0x8, 0x4}, {0x9, 0x5}]}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000240)={0x8, 'wg1\x00', {'vlan0\x00'}, 0x42}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x0, 0x10, 0x1, 0xe, {{0xb, 0x4, 0x0, 0x7, 0x2c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0x17, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @local, @broadcast]}, @end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x30, 0x26, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x5}, {0x2, 0x7}, {0x7}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480)='vlan0\x00', 0x102, &(0x7f00000004c0)={@align=0x1, {0x4, 0xc, 0x62f, 0x8}}, 0x9, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x8b}) ioctl$KVM_RUN(r0, 0xae80, 0x0) close(0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ']'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000800)={r3, 0x1, 0xfffffffd, 0x6c, 0x8}, 0x1) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000840)={{r3}, 0x0, 0x6, 0x4}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000880), 0x0) r4 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$smackfs_labels_list(r4, &(0x7f0000000900)={[{'vlan0\x00'}, {'/dev/cpu/#/msr\x00'}, {']'}, {'(}:]\\'}, {'\':'}]}, 0x23) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 25.406778052s ago: executing program 1 (id=409): syz_emit_ethernet(0x88, 0x0, 0x0) 23.65492712s ago: executing program 1 (id=412): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01060301090212000100000000090400000010", @ANYRES16=r0], 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003940)={0x82, 0x14, 0x22}, 0x18) file_getattr(0xffffffffffffff9c, &(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000006040), 0x18, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x10}, 0x94) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd701004005c4202aa000006000100050000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) 19.266889276s ago: executing program 1 (id=416): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) 16.108430968s ago: executing program 2 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x6e37b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 14.67139563s ago: executing program 1 (id=422): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = getpgrp(0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@private1, 0x2000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a}, {0x0, 0x0, 0x4, 0x2, 0x8000000000000}, {0x8, 0x9544, 0x65e, 0xa78a}, 0x100, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x40}, 0x4d3, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x79}}, 0x20008004) 12.42278048s ago: executing program 2 (id=424): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) (async, rerun: 32) r2 = mq_open(&(0x7f0000000080)='/\\\x00', 0x800, 0x46, &(0x7f00000000c0)={0x8, 0x4, 0x4ce2635a, 0x5}) (rerun: 32) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x1, 0x99, &(0x7f0000000100)=""/153}) (async, rerun: 64) r3 = userfaultfd(0x800) (rerun: 64) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x483}) (async, rerun: 32) fsetxattr$security_smack_transmute(r2, &(0x7f0000000240), &(0x7f0000000280), 0x4, 0x0) (async, rerun: 32) r4 = dup3(r2, r0, 0x80000) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[r5, r1], 0x2) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r6, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x44880) (async) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000500)=0x3ff) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000540)=@assoc_value={0x0, 0x49}, 0x8) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f00000005c0)={0x8, r8}) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000600)=""/26, 0x1a, 0x40010101, &(0x7f0000000640)={0xa, 0x4e24, 0x0, @private2, 0x9}, 0x1c) getpeername$netlink(r5, &(0x7f0000000680), &(0x7f00000006c0)=0xc) write(r2, &(0x7f0000000700)="433beb9edf8c87b74f154504c343d5278791752ded824bae742c374bed8bc563dce1ae7ecc8b8ab7cb58158bcdd5909b563d36b82c20bc54cb6ec51a65176750d681fd72f57a05", 0x47) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c00)={0x0, &(0x7f0000000780)=[@rdmsr={0x66, 0x18, {0xbc3}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0xfffffffffffffb78, 0x1}}, @cpuid={0x64, 0x18, {0x6, 0x401}}, @cpuid={0x64, 0x18, {0x10000, 0x4}}, @wr_crn={0x67, 0x20, {0x3, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control32=0x4016, 0x10000, 0x7, 0x9}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x0, 0x5}}, @nested_load_code={0x12e, 0x52, {0x3, "4e0fc76b26410fc71a6564430f38f90e45f8c442ed45e166b8ee000f00d0b9060a0000b80c000000ba000000000f300fc71e0f001066450ff4cc"}}, @wr_drn={0x68, 0x20, {0x2, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xa}, @wr_drn={0x68, 0x20, {0x0, 0x7fffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5, 0xfffffffffffffff7}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @uexit={0x0, 0x18}, @set_irq_handler={0xc8, 0x20, {0x1c, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x69, 0x7ff, 0xffffffff, 0xffff}}, @in_dx={0x69, 0x20, {0x5d7, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xe277}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x10000}, @nested_load_code={0x12e, 0x6f, {0x3, "66baa00066b80f0066efd9f9470fe99108000000c401e9e1fa400f23b848b8f7ff0000000000000f23d80f21f835800000b00f23f867f241ad420f231066baf80cb870f76f84ef66bafc0cb800000000eff20f78c30000"}}, @nested_load_code={0x12e, 0x50, {0x2, "66baa100ec0f23650f35b805000000b9af5483360f01c10f30450f01b1def6fce0c4a2cd47a20070000066b830018ec8440fdbe62e0f01df"}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0x461}) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f0000000c40)={0xa000, 0xffff1000, 0x9, 0x2, 0x3}) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000d00)={0x0, 0x80000001, 0x7, 0x2, 0x6}, 0x14) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000d40)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x4, 0x8, 0x2, 0x0, 0x16, 0x1, 0x80}, 0x9c) (rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000e00)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000e40)='totmaps\x00') sendmmsg$nfc_llcp(r5, &(0x7f00000010c0)=[{&(0x7f0000000ec0)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0xee, 0x3, "f5febcdfe7bae4d5963881c644764bc7fb3aabc2e3634718276ee270b75e353afb3560555e375f10e3dc93162ee8296641b24a4b2cf30570c46ca17b22d289", 0x1a}, 0x60, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="6eded76efa82ccea4a72a489f0f4c0f4937219f716d390041bd21704b7c8daf709694a628119a100b8e67f8a6e83d61da988eb30b65836772ab7358c2d337dd14d0dd10c386da537891b31da006b543ce1f65b4cc4c2ba26f69913115ae303065a2d23f9257951707223", 0x6a}], 0x1, &(0x7f0000001000)={0x88, 0x101, 0x5, "6fd38bdf01db748de308b6b738031248b40bdeb0d2afd1fa682ff7b5c4f8efe4c09e5969a74eeeb5a74907d8ab83503c19573c07bec371747d63dafbf51d092466093890b45bec51d4fd1c95c7c3eb196dc353c9e2888469f9ad9be9d28df372c029541e2e3de8d64c7b694f4e8f1d52898b99b6c1"}, 0x88, 0x1}], 0x1, 0x4802) 10.666086247s ago: executing program 4 (id=425): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) r1 = memfd_create(&(0x7f00000002c0)='\x00\x0e\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\xd6\xe3\x00\x9f\xd7\xbe4Z\xaa\xca\'\xfc>\x98\xaa\x8e\xe1\xfc\xbc\xed\x9b\xa2\x9ei\xd5\x02\xf6rY\xc4\xecB5\x00\x00\x04\x00\xdd\x9d\x9e_\x00\xa1\x01\x00\x00\x00B\x98S\xdf\"\xa4\xc2<\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\\xff\x7f\xff\xff\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\b\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\xb1:\xca\xaa\x99e\xf4\x15\xb1\xe1l\x8c-\f\n\xf9\xc1\x95\x1f\xe5\xa4\xa0\x00\xbc\xc8\x9cm$:\xd3\x7f\x807c\x13\x84\x87\x00\x91A:P\xb8M\x061\x8fPDn\n\xd0\xa3\xdcd\x05\x17q\xa4\x82 7\xb5|d\x01\x86\xaf\xce+\xc3\xd4=\xbb\xe3\x8c%CGB\x17+(\xa0\x9a\x8b\xd2E\xd69\xdc\xd5\x80', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000240)=0x9, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 10.469385323s ago: executing program 0 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x3, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 9.369884005s ago: executing program 0 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x3, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 8.203324779s ago: executing program 0 (id=428): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) r1 = memfd_create(&(0x7f00000002c0)='\x00\x0e\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\xd6\xe3\x00\x9f\xd7\xbe4Z\xaa\xca\'\xfc>\x98\xaa\x8e\xe1\xfc\xbc\xed\x9b\xa2\x9ei\xd5\x02\xf6rY\xc4\xecB5\x00\x00\x04\x00\xdd\x9d\x9e_\x00\xa1\x01\x00\x00\x00B\x98S\xdf\"\xa4\xc2<\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\\xff\x7f\xff\xff\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\b\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\xb1:\xca\xaa\x99e\xf4\x15\xb1\xe1l\x8c-\f\n\xf9\xc1\x95\x1f\xe5\xa4\xa0\x00\xbc\xc8\x9cm$:\xd3\x7f\x807c\x13\x84\x87\x00\x91A:P\xb8M\x061\x8fPDn\n\xd0\xa3\xdcd\x05\x17q\xa4\x82 7\xb5|d\x01\x86\xaf\xce+\xc3\xd4=\xbb\xe3\x8c%CGB\x17+(\xa0\x9a\x8b\xd2E\xd69\xdc\xd5\x80', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000240)=0x9, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 7.384277531s ago: executing program 4 (id=429): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000240)={0x8, 0x580, &(0x7f0000000100)="f147f1b7269b16c5eba8e08252496a281741bcffb756bc5add205d167fa01f4dbbaf1811046093591959fdfbe5b7a1ff07b3b0dbb7f3ee82302532104439d37383966c28ed1560fa32bf66ae9a61b3eb93acf97967c89de8f522fc6cfe57a809316abe1c84154efc59e42b67692f70929a55614d24f768", &(0x7f0000000280)="e651468b383306", 0x77, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010025bd7000000000001c00e2ffffffff0000080000080001"], 0x24}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r10, 0x7) splice(r10, 0x0, r9, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r11, 0x81, 0xb) timer_delete(r7) bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0) 6.704579198s ago: executing program 0 (id=430): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@mark={{0xfffffffffffffe6a, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x21, 0x1, 0x24, 0x6}}], 0x78}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x8000, 0x6, 0x6, 0xfc}, 0x1c) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x24c0c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000340)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000000000000beff0000"], 0x50) 6.468078654s ago: executing program 4 (id=431): r0 = syz_open_dev$evdev(&(0x7f0000000700), 0xffffffffffff268f, 0x2000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000040)=0x5, 0x4) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000740)=""/234) 4.665119098s ago: executing program 2 (id=432): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3010000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.882410995s ago: executing program 2 (id=433): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184000) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x424, 0x3f3, 0x400, 0x70bd2d, 0x25dfdbfd, {0x5, 0x2, 0x2e, [0xf, 0x1, 0x1, 0x1, 0x9, 0x490e, 0x9, 0x7f, 0x100, 0xf, 0x2, 0x8, 0x5, 0x0, 0x1, 0x7, 0x9, 0x4, 0x5, 0xcd, 0x80000001, 0xee51, 0x6, 0x1, 0x5, 0x3, 0x5, 0x200, 0x2, 0x7, 0x6, 0xc479, 0x200, 0x6, 0x5, 0xa8, 0x3, 0x2ab, 0x0, 0x4, 0xc7, 0x498, 0x3, 0x4, 0x5, 0x4000, 0x9, 0x2, 0x2, 0x83b, 0x4, 0x8, 0xfffffff9, 0xe, 0xc8cd, 0x2, 0x3, 0x0, 0x0, 0x7ff00000, 0x6, 0x2d, 0x129, 0x3], [0xfffff032, 0x2e, 0x6, 0x3, 0x1, 0x3, 0x1, 0xeb65, 0x9, 0xfffffff7, 0x3, 0x6, 0x2, 0x795, 0x4, 0x7, 0x1, 0xdad, 0x6, 0xb85, 0x8, 0x86, 0x100, 0x1, 0x101, 0x7, 0x0, 0x8, 0x9, 0x5, 0x5, 0x8, 0x900, 0x0, 0x1, 0x5, 0x5, 0x2, 0x5, 0x1a35, 0x1, 0x9, 0xdb82, 0x50b1, 0xfffffffb, 0xff, 0x3, 0x6736bda5, 0x6, 0x0, 0x7, 0xfffffae7, 0xc12a, 0x200, 0x0, 0x1, 0x2, 0x0, 0x2, 0x9, 0x7, 0x7f, 0x200, 0xb], [0x80, 0x8, 0xae, 0x9, 0xf1, 0x8b9, 0x5eabfaa6, 0x7f, 0x8, 0x3, 0x1a, 0x100, 0x8, 0xc, 0xc, 0x5, 0x7, 0x3, 0xa, 0x4, 0x2, 0xb, 0x7, 0x100, 0x5, 0x8, 0x6, 0x2, 0x6e, 0x3480000, 0x5, 0x4, 0x3, 0x3, 0x9, 0x4, 0x0, 0xa, 0x0, 0x7, 0x9, 0x101, 0x7, 0x4, 0x9, 0xfffffff4, 0x7, 0x0, 0xffffff9f, 0x0, 0x7, 0x7000000, 0x5, 0x1cc3, 0x7, 0x3, 0x4, 0x8, 0x5, 0xb7, 0xfffffffa, 0x8, 0x8, 0x19e0], [0x5, 0xff, 0x3, 0x7, 0x76c, 0x5, 0x6b08, 0x0, 0x6, 0x0, 0xb, 0x101, 0xd168, 0x0, 0xe, 0x2, 0xfffff000, 0x2, 0x8000, 0xfded, 0x0, 0x2, 0x1, 0x6, 0x5, 0x8, 0x4, 0x7, 0x7, 0x0, 0x9, 0x7, 0x101, 0x2, 0x9, 0x9, 0x1, 0x11, 0x8, 0x7a4d, 0x3ff, 0x0, 0x8001, 0xe, 0x2a, 0x7f, 0x5, 0x7, 0x6, 0x9, 0x2, 0x9, 0xe1b0, 0xffff, 0x8, 0x1, 0xaa6, 0x1, 0x1, 0x8b2, 0x5, 0x10, 0xfffffffc, 0x7], 0x4, [':+@\x00']}, ["", "", "", "", "", ""]}, 0x424}}, 0x40080) dup3(r4, r3, 0x80000) fcntl$setstatus(r3, 0x4, 0x2400) 2.882024095s ago: executing program 4 (id=434): syz_emit_ethernet(0x88, 0x0, 0x0) 2.705514251s ago: executing program 0 (id=435): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3010000}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.509424953s ago: executing program 4 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x3, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x3}, {{@in=@private, 0x4d4, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x7, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 2.128091845s ago: executing program 2 (id=437): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.070199478s ago: executing program 1 (id=438): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) r1 = memfd_create(&(0x7f00000002c0)='\x00\x0e\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\xd6\xe3\x00\x9f\xd7\xbe4Z\xaa\xca\'\xfc>\x98\xaa\x8e\xe1\xfc\xbc\xed\x9b\xa2\x9ei\xd5\x02\xf6rY\xc4\xecB5\x00\x00\x04\x00\xdd\x9d\x9e_\x00\xa1\x01\x00\x00\x00B\x98S\xdf\"\xa4\xc2<\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\\xff\x7f\xff\xff\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\b\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\xb1:\xca\xaa\x99e\xf4\x15\xb1\xe1l\x8c-\f\n\xf9\xc1\x95\x1f\xe5\xa4\xa0\x00\xbc\xc8\x9cm$:\xd3\x7f\x807c\x13\x84\x87\x00\x91A:P\xb8M\x061\x8fPDn\n\xd0\xa3\xdcd\x05\x17q\xa4\x82 7\xb5|d\x01\x86\xaf\xce+\xc3\xd4=\xbb\xe3\x8c%CGB\x17+(\xa0\x9a\x8b\xd2E\xd69\xdc\xd5\x80', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000240)=0x9, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 883.841682ms ago: executing program 2 (id=439): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) r1 = memfd_create(&(0x7f00000002c0)='\x00\x0e\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\xd6\xe3\x00\x9f\xd7\xbe4Z\xaa\xca\'\xfc>\x98\xaa\x8e\xe1\xfc\xbc\xed\x9b\xa2\x9ei\xd5\x02\xf6rY\xc4\xecB5\x00\x00\x04\x00\xdd\x9d\x9e_\x00\xa1\x01\x00\x00\x00B\x98S\xdf\"\xa4\xc2<\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\\xff\x7f\xff\xff\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\b\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\xb1:\xca\xaa\x99e\xf4\x15\xb1\xe1l\x8c-\f\n\xf9\xc1\x95\x1f\xe5\xa4\xa0\x00\xbc\xc8\x9cm$:\xd3\x7f\x807c\x13\x84\x87\x00\x91A:P\xb8M\x061\x8fPDn\n\xd0\xa3\xdcd\x05\x17q\xa4\x82 7\xb5|d\x01\x86\xaf\xce+\xc3\xd4=\xbb\xe3\x8c%CGB\x17+(\xa0\x9a\x8b\xd2E\xd69\xdc\xd5\x80', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000240)=0x9, 0x8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) 869.117274ms ago: executing program 4 (id=440): getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000006c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x6f, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = epoll_create1(0x80000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000400)={0x2000}) close(r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200003e9c00008500000086000000bf91000000000000b7020000000020008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r5, 0x11, 0x64, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) epoll_create(0x1) keyctl$search(0xa, 0x0, &(0x7f0000000440)='keyring\x00', 0x0, 0x0) 0s ago: executing program 0 (id=441): syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100020ff4d41030088000a85c010203010902120001030780d80904"], 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x400c004) kernel console output (not intermixed with test programs): 000200000006040 RDI: 0000000000000007 [ 182.278861][ T6228] RBP: 00007f2e8d5f5090 R08: 0000000000000000 R09: 0000000000000000 [ 182.278874][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.278887][ T6228] R13: 00007f2e8f646128 R14: 00007f2e8f646090 R15: 00007fffa433d3a8 [ 182.278919][ T6228] [ 183.195910][ T6233] fuse: Bad value for 'fd' [ 184.490874][ T6210] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 184.490899][ T6210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.135'. [ 184.533021][ T6242] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 185.553881][ C0] net_ratelimit: 6743 callbacks suppressed [ 185.553904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.554302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.554750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.555164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.555648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.556041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 185.556423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 185.556807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.557245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.557634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.536602][ T5781] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 187.243965][ T5781] usb 2-1: device descriptor read/64, error -71 [ 187.405529][ T6253] FAULT_INJECTION: forcing a failure. [ 187.405529][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.405566][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.2.144 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.405591][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 187.405604][ T6253] Call Trace: [ 187.405612][ T6253] [ 187.405621][ T6253] dump_stack_lvl+0xe8/0x150 [ 187.405660][ T6253] should_fail_ex+0x467/0x600 [ 187.405697][ T6253] _copy_from_user+0x2d/0xb0 [ 187.405722][ T6253] __sys_bpf+0x2e7/0xd90 [ 187.405757][ T6253] ? __pfx___sys_bpf+0x10/0x10 [ 187.405787][ T6253] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.405826][ T6253] ? rt_mutex_slowunlock+0x219/0x460 [ 187.405873][ T6253] ? ksys_write+0x248/0x270 [ 187.405903][ T6253] ? __pfx_ksys_write+0x10/0x10 [ 187.405933][ T6253] __x64_sys_bpf+0xba/0xd0 [ 187.405967][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.405991][ T6253] do_syscall_64+0x174/0x580 [ 187.406025][ T6253] ? trace_irq_disable+0x3b/0x140 [ 187.406060][ T6253] ? clear_bhb_loop+0x40/0x90 [ 187.406088][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.406110][ T6253] RIP: 0033:0x7f5061dade59 [ 187.406136][ T6253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.406155][ T6253] RSP: 002b:00007f505ffe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.406177][ T6253] RAX: ffffffffffffffda RBX: 00007f5062036090 RCX: 00007f5061dade59 [ 187.406192][ T6253] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 187.406206][ T6253] RBP: 00007f505ffe5090 R08: 0000000000000000 R09: 0000000000000000 [ 187.406218][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.406230][ T6253] R13: 00007f5062036128 R14: 00007f5062036090 R15: 00007ffcf04b0b68 [ 187.406263][ T6253] [ 188.173970][ T5781] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.246105][ T5708] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 189.186176][ T5708] usb 4-1: config 0 has no interfaces? [ 189.186218][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.186243][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.491411][ T5708] usb 4-1: config 0 descriptor?? [ 190.430297][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.458839][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.479980][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.524309][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.563963][ C1] net_ratelimit: 10062 callbacks suppressed [ 190.563986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:a1:aa:74:38:01, vlan:0) [ 190.589097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.613549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 190.613566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.613989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 190.614306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.614723][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.628314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.629272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.632790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.646565][ T5708] usb 4-1: USB disconnect, device number 6 [ 192.147629][ T6268] FAULT_INJECTION: forcing a failure. [ 192.147629][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.147670][ T6268] CPU: 1 UID: 0 PID: 6268 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.147732][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 192.147746][ T6268] Call Trace: [ 192.147755][ T6268] [ 192.147764][ T6268] dump_stack_lvl+0xe8/0x150 [ 192.147807][ T6268] should_fail_ex+0x467/0x600 [ 192.147846][ T6268] _copy_from_user+0x2d/0xb0 [ 192.147871][ T6268] ___sys_sendmsg+0x1c6/0x360 [ 192.147896][ T6268] ? __lock_acquire+0x683/0x2ce0 [ 192.147924][ T6268] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.147983][ T6268] ? __fget_files+0x2a/0x420 [ 192.148004][ T6268] ? __fget_files+0x3a8/0x420 [ 192.148036][ T6268] __x64_sys_sendmsg+0x1b7/0x290 [ 192.148062][ T6268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.148103][ T6268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.148128][ T6268] do_syscall_64+0x174/0x580 [ 192.148163][ T6268] ? trace_irq_disable+0x3b/0x140 [ 192.148198][ T6268] ? clear_bhb_loop+0x40/0x90 [ 192.148225][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.148270][ T6268] RIP: 0033:0x7f13a7cdde59 [ 192.148291][ T6268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.148310][ T6268] RSP: 002b:00007f13a5f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.148334][ T6268] RAX: ffffffffffffffda RBX: 00007f13a7f65fa0 RCX: 00007f13a7cdde59 [ 192.148350][ T6268] RDX: 0000000000004040 RSI: 0000200000000e40 RDI: 0000000000000004 [ 192.148365][ T6268] RBP: 00007f13a5f36090 R08: 0000000000000000 R09: 0000000000000000 [ 192.148378][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.148391][ T6268] R13: 00007f13a7f66038 R14: 00007f13a7f65fa0 R15: 00007ffc1df2d8f8 [ 192.148426][ T6268] [ 192.466491][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 192.724568][ T5708] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.840474][ T6274] FAULT_INJECTION: forcing a failure. [ 192.840474][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.840511][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.840547][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 192.840561][ T6274] Call Trace: [ 192.840568][ T6274] [ 192.840579][ T6274] dump_stack_lvl+0xe8/0x150 [ 192.840617][ T6274] should_fail_ex+0x467/0x600 [ 192.840655][ T6274] _copy_from_user+0x2d/0xb0 [ 192.840680][ T6274] ___sys_sendmsg+0x1c6/0x360 [ 192.840703][ T6274] ? __lock_acquire+0x683/0x2ce0 [ 192.840730][ T6274] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.840789][ T6274] ? __fget_files+0x2a/0x420 [ 192.840810][ T6274] ? __fget_files+0x3a8/0x420 [ 192.840841][ T6274] __x64_sys_sendmsg+0x1b7/0x290 [ 192.840868][ T6274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.840910][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.840935][ T6274] do_syscall_64+0x174/0x580 [ 192.840967][ T6274] ? trace_irq_disable+0x3b/0x140 [ 192.841002][ T6274] ? clear_bhb_loop+0x40/0x90 [ 192.841028][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.841052][ T6274] RIP: 0033:0x7f2684bede59 [ 192.841072][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.841091][ T6274] RSP: 002b:00007f2682e25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.841114][ T6274] RAX: ffffffffffffffda RBX: 00007f2684e76090 RCX: 00007f2684bede59 [ 192.841131][ T6274] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 192.841145][ T6274] RBP: 00007f2682e25090 R08: 0000000000000000 R09: 0000000000000000 [ 192.841158][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.841171][ T6274] R13: 00007f2684e76128 R14: 00007f2684e76090 R15: 00007ffd459a6848 [ 192.841203][ T6274] [ 194.290427][ T6276] loop5: detected capacity change from 0 to 7 [ 194.776973][ T6276] Dev loop5: unable to read RDB block 7 [ 194.777036][ T6276] loop5: unable to read partition table [ 194.777245][ T6276] loop5: partition table beyond EOD, truncated [ 194.777265][ T6276] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 195.241562][ T822] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.574162][ C1] net_ratelimit: 7117 callbacks suppressed [ 195.574179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.574454][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.574760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.575867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.576786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.578070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.578520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.578816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.579019][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 195.579340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 196.365502][ T822] usb 5-1: device descriptor read/64, error -71 [ 196.613973][ T822] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.854316][ T822] usb 5-1: device descriptor read/64, error -71 [ 196.976500][ T822] usb usb5-port1: attempt power cycle [ 197.066094][ T6307] netlink: 'syz.1.161': attribute type 4 has an invalid length. [ 197.434967][ T822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 197.467584][ T822] usb 5-1: device descriptor read/8, error -71 [ 197.719507][ T822] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.167245][ T6320] FAULT_INJECTION: forcing a failure. [ 198.167245][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.167297][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.2.164 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.167325][ T6320] Tainted: [L]=SOFTLOCKUP [ 198.167332][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 198.167345][ T6320] Call Trace: [ 198.167354][ T6320] [ 198.167363][ T6320] dump_stack_lvl+0xe8/0x150 [ 198.167402][ T6320] should_fail_ex+0x467/0x600 [ 198.167431][ T822] usb 5-1: device descriptor read/8, error -71 [ 198.167437][ T6320] _copy_to_user+0x31/0xb0 [ 198.167465][ T6320] simple_read_from_buffer+0xe1/0x170 [ 198.167492][ T6320] proc_fail_nth_read+0x1be/0x230 [ 198.167517][ T6320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.167543][ T6320] ? rw_verify_area+0x250/0x4d0 [ 198.167567][ T6320] ? __fget_files+0x2a/0x420 [ 198.167589][ T6320] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.167611][ T6320] vfs_read+0x219/0xa90 [ 198.167645][ T6320] ? __pfx_vfs_read+0x10/0x10 [ 198.167684][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.167718][ T6320] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.167751][ T6320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.167782][ T6320] ? mutex_lock_nested+0x152/0x1d0 [ 198.167829][ T6320] ? fdget_pos+0x252/0x320 [ 198.167859][ T6320] ksys_read+0x156/0x270 [ 198.167888][ T6320] ? __pfx_ksys_read+0x10/0x10 [ 198.167922][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.167946][ T6320] do_syscall_64+0x174/0x580 [ 198.167979][ T6320] ? trace_irq_disable+0x3b/0x140 [ 198.168013][ T6320] ? clear_bhb_loop+0x40/0x90 [ 198.168042][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.168064][ T6320] RIP: 0033:0x7f5061d6e68e [ 198.168085][ T6320] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.168103][ T6320] RSP: 002b:00007f5060005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.168125][ T6320] RAX: ffffffffffffffda RBX: 00007f50600066c0 RCX: 00007f5061d6e68e [ 198.168145][ T6320] RDX: 000000000000000f RSI: 00007f50600060a0 RDI: 0000000000000004 [ 198.168159][ T6320] RBP: 00007f5060006090 R08: 0000000000000000 R09: 0000000000000000 [ 198.168171][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.168184][ T6320] R13: 00007f5062036038 R14: 00007f5062035fa0 R15: 00007ffcf04b0b68 [ 198.168218][ T6320] [ 198.296094][ T822] usb usb5-port1: unable to enumerate USB device [ 198.685970][ T6327] loop8: detected capacity change from 0 to 7 [ 198.829849][ T6332] FAULT_INJECTION: forcing a failure. [ 198.829849][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.829888][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.3.167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.829918][ T6332] Tainted: [L]=SOFTLOCKUP [ 198.829925][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 198.829938][ T6332] Call Trace: [ 198.829946][ T6332] [ 198.829955][ T6332] dump_stack_lvl+0xe8/0x150 [ 198.829993][ T6332] should_fail_ex+0x467/0x600 [ 198.830031][ T6332] _copy_from_user+0x2d/0xb0 [ 198.830065][ T6332] ___sys_sendmsg+0x1c6/0x360 [ 198.830088][ T6332] ? __lock_acquire+0x683/0x2ce0 [ 198.830116][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.830179][ T6332] ? __fget_files+0x2a/0x420 [ 198.830201][ T6332] ? __fget_files+0x3a8/0x420 [ 198.830234][ T6332] __x64_sys_sendmsg+0x1b7/0x290 [ 198.830260][ T6332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.830302][ T6332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.830328][ T6332] do_syscall_64+0x174/0x580 [ 198.830362][ T6332] ? trace_irq_disable+0x3b/0x140 [ 198.830397][ T6332] ? clear_bhb_loop+0x40/0x90 [ 198.830425][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.830447][ T6332] RIP: 0033:0x7f2e8f3bde59 [ 198.830467][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.830485][ T6332] RSP: 002b:00007f2e8d5f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.830509][ T6332] RAX: ffffffffffffffda RBX: 00007f2e8f646090 RCX: 00007f2e8f3bde59 [ 198.830525][ T6332] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 198.830539][ T6332] RBP: 00007f2e8d5f5090 R08: 0000000000000000 R09: 0000000000000000 [ 198.830553][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.830566][ T6332] R13: 00007f2e8f646128 R14: 00007f2e8f646090 R15: 00007fffa433d3a8 [ 198.830599][ T6332] [ 199.561577][ T6327] Dev loop8: unable to read RDB block 7 [ 199.561632][ T6327] loop8: unable to read partition table [ 199.561817][ T6327] loop8: partition table beyond EOD, truncated [ 199.602320][ T6327] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 199.930490][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.930573][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.583995][ C0] net_ratelimit: 6696 callbacks suppressed [ 200.584017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.584513][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.584911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.585324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.585781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.586233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.586687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.587077][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 200.587454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 200.588079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.427038][ T6358] FAULT_INJECTION: forcing a failure. [ 203.427038][ T6358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.427077][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.2.175 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 203.427111][ T6358] Tainted: [L]=SOFTLOCKUP [ 203.427119][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 203.427132][ T6358] Call Trace: [ 203.427140][ T6358] [ 203.427149][ T6358] dump_stack_lvl+0xe8/0x150 [ 203.427193][ T6358] should_fail_ex+0x467/0x600 [ 203.427232][ T6358] _copy_from_user+0x2d/0xb0 [ 203.427256][ T6358] __sys_bpf+0x2e7/0xd90 [ 203.427287][ T6358] ? __pfx___sys_bpf+0x10/0x10 [ 203.427312][ T6358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 203.427351][ T6358] ? rt_mutex_slowunlock+0x219/0x460 [ 203.427392][ T6358] ? ksys_write+0x248/0x270 [ 203.427436][ T6358] ? __pfx_ksys_write+0x10/0x10 [ 203.427469][ T6358] __x64_sys_bpf+0xba/0xd0 [ 203.427494][ T6358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.427512][ T6358] do_syscall_64+0x174/0x580 [ 203.427538][ T6358] ? trace_irq_disable+0x3b/0x140 [ 203.427566][ T6358] ? clear_bhb_loop+0x40/0x90 [ 203.427587][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.427604][ T6358] RIP: 0033:0x7f5061dade59 [ 203.427624][ T6358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.427638][ T6358] RSP: 002b:00007f5060006028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.427657][ T6358] RAX: ffffffffffffffda RBX: 00007f5062035fa0 RCX: 00007f5061dade59 [ 203.427671][ T6358] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 203.427681][ T6358] RBP: 00007f5060006090 R08: 0000000000000000 R09: 0000000000000000 [ 203.427704][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.427714][ T6358] R13: 00007f5062036038 R14: 00007f5062035fa0 R15: 00007ffcf04b0b68 [ 203.427741][ T6358] [ 205.523977][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.594342][ C1] net_ratelimit: 5757 callbacks suppressed [ 205.594362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.595291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.596861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.597280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.607281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.621598][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.636672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.643747][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.656346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.683502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 205.706732][ T10] usb 4-1: device descriptor read/64, error -71 [ 206.934975][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 207.065331][ T10] usb 4-1: device descriptor read/64, error -71 [ 207.185467][ T10] usb usb4-port1: attempt power cycle [ 207.710487][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.737055][ T10] usb 4-1: device descriptor read/8, error -71 [ 208.443878][ T5768] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 208.444029][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.464140][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 208.464259][ T10] usb 4-1: device descriptor read/8, error -32 [ 208.584036][ T10] usb usb4-port1: unable to enumerate USB device [ 208.647159][ T5768] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.647191][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.722394][ T5768] usb 5-1: config 0 descriptor?? [ 208.854043][ T822] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 208.934874][ T5768] cp210x 5-1:0.0: cp210x converter detected [ 209.029960][ T5768] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 209.029990][ T5768] cp210x 5-1:0.0: querying part number failed [ 209.063942][ T822] usb 3-1: device descriptor read/64, error -71 [ 209.514646][ T822] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 209.609198][ T5768] usb 5-1: cp210x converter now attached to ttyUSB0 [ 209.830958][ T5708] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 210.450827][ T822] usb 3-1: device descriptor read/64, error -71 [ 210.604207][ C1] net_ratelimit: 6753 callbacks suppressed [ 210.604229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.604563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.605007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 210.605320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.606536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.606938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.607388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.608666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:a1:aa:74:38:01, vlan:0) [ 210.608990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.609464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 210.853407][ T822] usb usb3-port1: attempt power cycle [ 211.662830][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.662879][ T5708] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.662903][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.733981][ T31] usb 5-1: USB disconnect, device number 13 [ 211.803907][ T822] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 212.377649][ T5708] usb 2-1: config 0 descriptor?? [ 212.398445][ T822] usb 3-1: device descriptor read/8, error -71 [ 212.414754][ T5708] usb 2-1: can't set config #0, error -71 [ 212.661908][ T5708] usb 2-1: USB disconnect, device number 7 [ 212.696386][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 212.720770][ T31] cp210x 5-1:0.0: device disconnected [ 212.949993][ T6420] FAULT_INJECTION: forcing a failure. [ 212.949993][ T6420] name failslab, interval 1, probability 0, space 0, times 0 [ 212.950031][ T6420] CPU: 1 UID: 0 PID: 6420 Comm: syz.0.194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.950071][ T6420] Tainted: [L]=SOFTLOCKUP [ 212.950081][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 212.950094][ T6420] Call Trace: [ 212.950102][ T6420] [ 212.950111][ T6420] dump_stack_lvl+0xe8/0x150 [ 212.950151][ T6420] should_fail_ex+0x467/0x600 [ 212.950187][ T6420] should_failslab+0xa8/0x100 [ 212.950214][ T6420] __kmalloc_noprof+0xfe/0x780 [ 212.950235][ T6420] ? rcu_is_watching+0x15/0xb0 [ 212.950262][ T6420] ? tomoyo_realpath_from_path+0xef/0x640 [ 212.950287][ T6420] ? tomoyo_realpath_from_path+0xef/0x640 [ 212.950321][ T6420] tomoyo_realpath_from_path+0xef/0x640 [ 212.950360][ T6420] ? tomoyo_path_number_perm+0x219/0x5f0 [ 212.950398][ T6420] tomoyo_path_number_perm+0x246/0x5f0 [ 212.950438][ T6420] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.950471][ T6420] ? __lock_acquire+0x683/0x2ce0 [ 212.950510][ T6420] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 212.950544][ T6420] ? hook_file_ioctl+0x1f3/0x600 [ 212.950575][ T6420] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.950628][ T6420] ? __fget_files+0x2a/0x420 [ 212.950654][ T6420] ? __fget_files+0x2a/0x420 [ 212.950672][ T6420] ? __fget_files+0x3a8/0x420 [ 212.950692][ T6420] ? __fget_files+0x2a/0x420 [ 212.950716][ T6420] security_file_ioctl+0xc3/0x2a0 [ 212.950741][ T6420] __se_sys_ioctl+0x47/0x170 [ 212.950768][ T6420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.950793][ T6420] do_syscall_64+0x174/0x580 [ 212.950824][ T6420] ? trace_irq_disable+0x3b/0x140 [ 212.950859][ T6420] ? clear_bhb_loop+0x40/0x90 [ 212.950887][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.950909][ T6420] RIP: 0033:0x7f2684bede59 [ 212.950929][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.950946][ T6420] RSP: 002b:00007f2682e25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.950969][ T6420] RAX: ffffffffffffffda RBX: 00007f2684e76090 RCX: 00007f2684bede59 [ 212.950985][ T6420] RDX: 0000200000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 212.950998][ T6420] RBP: 00007f2682e25090 R08: 0000000000000000 R09: 0000000000000000 [ 212.951012][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.951025][ T6420] R13: 00007f2684e76128 R14: 00007f2684e76090 R15: 00007ffd459a6848 [ 212.951065][ T6420] [ 212.951087][ T6420] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.463834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 215.614029][ C0] net_ratelimit: 11432 callbacks suppressed [ 215.614054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.614459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.614861][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 215.615179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 215.615570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.615695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.615921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.616286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.616690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.617080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.557487][ T6448] FAULT_INJECTION: forcing a failure. [ 216.557487][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.557525][ T6448] CPU: 1 UID: 0 PID: 6448 Comm: syz.0.207 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.557554][ T6448] Tainted: [L]=SOFTLOCKUP [ 216.557561][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.557574][ T6448] Call Trace: [ 216.557582][ T6448] [ 216.557590][ T6448] dump_stack_lvl+0xe8/0x150 [ 216.557628][ T6448] should_fail_ex+0x467/0x600 [ 216.557665][ T6448] _copy_from_user+0x2d/0xb0 [ 216.557689][ T6448] do_sock_getsockopt+0x200/0x7e0 [ 216.557717][ T6448] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 216.557755][ T6448] ? __fget_files+0x3a8/0x420 [ 216.557776][ T6448] ? __fget_files+0x2a/0x420 [ 216.557813][ T6448] __x64_sys_getsockopt+0x1aa/0x250 [ 216.557842][ T6448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.557866][ T6448] do_syscall_64+0x174/0x580 [ 216.557900][ T6448] ? trace_irq_disable+0x3b/0x140 [ 216.557936][ T6448] ? clear_bhb_loop+0x40/0x90 [ 216.557963][ T6448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.557984][ T6448] RIP: 0033:0x7f2684bede59 [ 216.558004][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.558021][ T6448] RSP: 002b:00007f2682e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 216.558042][ T6448] RAX: ffffffffffffffda RBX: 00007f2684e75fa0 RCX: 00007f2684bede59 [ 216.558058][ T6448] RDX: 000000000000001d RSI: 0000000000000084 RDI: 0000000000000004 [ 216.558070][ T6448] RBP: 00007f2682e46090 R08: 0000200000000080 R09: 0000000000000000 [ 216.558084][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.558096][ T6448] R13: 00007f2684e76038 R14: 00007f2684e75fa0 R15: 00007ffd459a6848 [ 216.558128][ T6448] [ 219.758854][ T6469] FAULT_INJECTION: forcing a failure. [ 219.758854][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 219.758892][ T6469] CPU: 1 UID: 0 PID: 6469 Comm: syz.0.215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 219.758922][ T6469] Tainted: [L]=SOFTLOCKUP [ 219.758929][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 219.758942][ T6469] Call Trace: [ 219.758950][ T6469] [ 219.758959][ T6469] dump_stack_lvl+0xe8/0x150 [ 219.758999][ T6469] should_fail_ex+0x467/0x600 [ 219.759036][ T6469] should_failslab+0xa8/0x100 [ 219.759064][ T6469] __kmalloc_noprof+0xfe/0x780 [ 219.759084][ T6469] ? rcu_is_watching+0x15/0xb0 [ 219.759111][ T6469] ? tomoyo_realpath_from_path+0xef/0x640 [ 219.759138][ T6469] ? tomoyo_realpath_from_path+0xef/0x640 [ 219.759174][ T6469] tomoyo_realpath_from_path+0xef/0x640 [ 219.759212][ T6469] ? tomoyo_path_number_perm+0x219/0x5f0 [ 219.759248][ T6469] tomoyo_path_number_perm+0x246/0x5f0 [ 219.759287][ T6469] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.759323][ T6469] ? __lock_acquire+0x683/0x2ce0 [ 219.759361][ T6469] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.759395][ T6469] ? hook_file_ioctl+0x1f3/0x600 [ 219.759426][ T6469] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.759477][ T6469] ? __fget_files+0x2a/0x420 [ 219.759502][ T6469] ? __fget_files+0x2a/0x420 [ 219.759522][ T6469] ? __fget_files+0x3a8/0x420 [ 219.759541][ T6469] ? __fget_files+0x2a/0x420 [ 219.759566][ T6469] security_file_ioctl+0xc3/0x2a0 [ 219.759602][ T6469] __se_sys_ioctl+0x47/0x170 [ 219.759629][ T6469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.759653][ T6469] do_syscall_64+0x174/0x580 [ 219.759688][ T6469] ? clear_bhb_loop+0x40/0x90 [ 219.759714][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.759737][ T6469] RIP: 0033:0x7f2684bede59 [ 219.759756][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.759773][ T6469] RSP: 002b:00007f2682e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.759795][ T6469] RAX: ffffffffffffffda RBX: 00007f2684e75fa0 RCX: 00007f2684bede59 [ 219.759810][ T6469] RDX: 0000000000000000 RSI: 00000000c0287c02 RDI: 0000000000000003 [ 219.759822][ T6469] RBP: 00007f2682e46090 R08: 0000000000000000 R09: 0000000000000000 [ 219.759834][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.759846][ T6469] R13: 00007f2684e76038 R14: 00007f2684e75fa0 R15: 00007ffd459a6848 [ 219.759884][ T6469] [ 219.779938][ T6469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.624211][ C1] net_ratelimit: 7732 callbacks suppressed [ 220.624233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.624639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.625646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.626748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 220.633729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 220.639230][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.641534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.641555][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.641865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.641870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.341803][ T198] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 221.693915][ T198] usb 2-1: Using ep0 maxpacket: 16 [ 221.696218][ T198] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.696244][ T198] usb 2-1: config 0 has no interface number 0 [ 221.696291][ T198] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.696317][ T198] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.696356][ T198] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 221.696389][ T198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.707919][ T198] usb 2-1: config 0 descriptor?? [ 222.175821][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 222.175851][ T37] audit: type=1326 audit(1784139839.294:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.222656][ T37] audit: type=1326 audit(1784139839.344:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.222710][ T37] audit: type=1326 audit(1784139839.344:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.250289][ T37] audit: type=1326 audit(1784139839.344:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.484287][ T198] hid (null): global environment stack underflow [ 222.579579][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 222.579618][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 222.579772][ T5603] Bluetooth: hci4: command 0x0406 tx timeout [ 222.579795][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 222.579818][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 222.649405][ T37] audit: type=1326 audit(1784139839.394:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.649451][ T37] audit: type=1326 audit(1784139839.774:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.720620][ T37] audit: type=1326 audit(1784139839.824:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.720680][ T37] audit: type=1326 audit(1784139839.824:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.720727][ T37] audit: type=1326 audit(1784139839.824:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.748131][ T37] audit: type=1326 audit(1784139839.874:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.4.220" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fb7d8ecde59 code=0x7ffc0000 [ 222.849790][ T198] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 222.849975][ T198] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 222.850031][ T198] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 222.850094][ T198] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 222.877555][ T198] uclogic 0003:28BD:0071.0001: probe with driver uclogic failed with error -71 [ 223.483409][ T198] usb 2-1: USB disconnect, device number 8 [ 224.782713][ T6490] could not allocate digest TFM handle blake2b-256-generic [ 224.822305][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 224.842204][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 224.996180][ T6503] FAULT_INJECTION: forcing a failure. [ 224.996180][ T6503] name failslab, interval 1, probability 0, space 0, times 0 [ 224.996212][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.3.228 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.996236][ T6503] Tainted: [L]=SOFTLOCKUP [ 224.996242][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 224.996254][ T6503] Call Trace: [ 224.996261][ T6503] [ 224.996268][ T6503] dump_stack_lvl+0xe8/0x150 [ 224.996301][ T6503] should_fail_ex+0x467/0x600 [ 224.996333][ T6503] should_failslab+0xa8/0x100 [ 224.996360][ T6503] __kmalloc_noprof+0xfe/0x780 [ 224.996380][ T6503] ? rcu_is_watching+0x15/0xb0 [ 224.996407][ T6503] ? tomoyo_realpath_from_path+0xef/0x640 [ 224.996434][ T6503] ? tomoyo_realpath_from_path+0xef/0x640 [ 224.996468][ T6503] tomoyo_realpath_from_path+0xef/0x640 [ 224.996506][ T6503] ? tomoyo_path_number_perm+0x219/0x5f0 [ 224.996543][ T6503] tomoyo_path_number_perm+0x246/0x5f0 [ 224.996587][ T6503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 224.996627][ T6503] ? __lock_acquire+0x683/0x2ce0 [ 224.996662][ T6503] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.996694][ T6503] ? hook_file_ioctl+0x1f3/0x600 [ 224.996723][ T6503] ? lockdep_hardirqs_on+0x7a/0x110 [ 224.996775][ T6503] ? __fget_files+0x2a/0x420 [ 224.996798][ T6503] ? __fget_files+0x2a/0x420 [ 224.996818][ T6503] ? __fget_files+0x3a8/0x420 [ 224.996838][ T6503] ? __fget_files+0x2a/0x420 [ 224.996863][ T6503] security_file_ioctl+0xc3/0x2a0 [ 224.996888][ T6503] __se_sys_ioctl+0x47/0x170 [ 224.996917][ T6503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.996941][ T6503] do_syscall_64+0x174/0x580 [ 224.996972][ T6503] ? trace_irq_disable+0x3b/0x140 [ 224.997005][ T6503] ? clear_bhb_loop+0x40/0x90 [ 224.997031][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.997049][ T6503] RIP: 0033:0x7f2e8f3bde59 [ 224.997065][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.997078][ T6503] RSP: 002b:00007f2e8d616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.997097][ T6503] RAX: ffffffffffffffda RBX: 00007f2e8f645fa0 RCX: 00007f2e8f3bde59 [ 224.997112][ T6503] RDX: 0000200000000340 RSI: 00000000c0287c02 RDI: 0000000000000003 [ 224.997122][ T6503] RBP: 00007f2e8d616090 R08: 0000000000000000 R09: 0000000000000000 [ 224.997132][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.997141][ T6503] R13: 00007f2e8f646038 R14: 00007f2e8f645fa0 R15: 00007fffa433d3a8 [ 224.997167][ T6503] [ 225.032774][ T6503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.633869][ C1] net_ratelimit: 8992 callbacks suppressed [ 225.633887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.635292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:a1:aa:74:38:01, vlan:0) [ 225.635639][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.636168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 225.636555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.636933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.637012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.637330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.637559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 225.637880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 225.981342][ T6513] FAULT_INJECTION: forcing a failure. [ 225.981342][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 225.981379][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.1.233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 225.981410][ T6513] Tainted: [L]=SOFTLOCKUP [ 225.981417][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 225.981430][ T6513] Call Trace: [ 225.981438][ T6513] [ 225.981448][ T6513] dump_stack_lvl+0xe8/0x150 [ 225.981487][ T6513] should_fail_ex+0x467/0x600 [ 225.981525][ T6513] should_failslab+0xa8/0x100 [ 225.981551][ T6513] __kmalloc_noprof+0xfe/0x780 [ 225.981571][ T6513] ? rcu_is_watching+0x15/0xb0 [ 225.981597][ T6513] ? tomoyo_realpath_from_path+0xef/0x640 [ 225.981622][ T6513] ? tomoyo_realpath_from_path+0xef/0x640 [ 225.981658][ T6513] tomoyo_realpath_from_path+0xef/0x640 [ 225.981696][ T6513] ? tomoyo_path_number_perm+0x219/0x5f0 [ 225.981731][ T6513] tomoyo_path_number_perm+0x246/0x5f0 [ 225.981770][ T6513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 225.981805][ T6513] ? __lock_acquire+0x683/0x2ce0 [ 225.981842][ T6513] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.981875][ T6513] ? hook_file_ioctl+0x1f3/0x600 [ 225.981905][ T6513] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.981956][ T6513] ? __fget_files+0x2a/0x420 [ 225.981981][ T6513] ? __fget_files+0x2a/0x420 [ 225.982000][ T6513] ? __fget_files+0x3a8/0x420 [ 225.982020][ T6513] ? __fget_files+0x2a/0x420 [ 225.982045][ T6513] security_file_ioctl+0xc3/0x2a0 [ 225.982070][ T6513] __se_sys_ioctl+0x47/0x170 [ 225.982098][ T6513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.982122][ T6513] do_syscall_64+0x174/0x580 [ 225.982162][ T6513] ? trace_irq_disable+0x3b/0x140 [ 225.982198][ T6513] ? clear_bhb_loop+0x40/0x90 [ 225.982226][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.982247][ T6513] RIP: 0033:0x7f13a7cdde59 [ 225.982268][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.982285][ T6513] RSP: 002b:00007f13a5f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.982312][ T6513] RAX: ffffffffffffffda RBX: 00007f13a7f65fa0 RCX: 00007f13a7cdde59 [ 225.982328][ T6513] RDX: 0000200000000240 RSI: 0000000080885659 RDI: 0000000000000003 [ 225.982341][ T6513] RBP: 00007f13a5f36090 R08: 0000000000000000 R09: 0000000000000000 [ 225.982355][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.982367][ T6513] R13: 00007f13a7f66038 R14: 00007f13a7f65fa0 R15: 00007ffc1df2d8f8 [ 225.982400][ T6513] [ 226.000023][ T6513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.750409][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 226.960661][ T31] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 226.960691][ T31] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 226.960711][ T31] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.960730][ T31] usb 3-1: config 220 has no interface number 2 [ 226.960798][ T31] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.960824][ T31] usb 3-1: config 220 interface 0 has no altsetting 0 [ 226.960842][ T31] usb 3-1: config 220 interface 76 has no altsetting 0 [ 226.960860][ T31] usb 3-1: config 220 interface 1 has no altsetting 0 [ 227.050982][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 227.051013][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.051034][ T31] usb 3-1: Product: syz [ 227.051049][ T31] usb 3-1: Manufacturer: syz [ 227.051064][ T31] usb 3-1: SerialNumber: syz [ 228.539865][ T6536] FAULT_INJECTION: forcing a failure. [ 228.539865][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 228.539903][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.3.242 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 228.539933][ T6536] Tainted: [L]=SOFTLOCKUP [ 228.539941][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 228.539958][ T6536] Call Trace: [ 228.539967][ T6536] [ 228.539976][ T6536] dump_stack_lvl+0xe8/0x150 [ 228.540015][ T6536] should_fail_ex+0x467/0x600 [ 228.540053][ T6536] should_failslab+0xa8/0x100 [ 228.540079][ T6536] kmem_cache_alloc_noprof+0xa4/0x650 [ 228.540113][ T6536] ? do_getname+0x2e/0x250 [ 228.540145][ T6536] ? do_getname+0x2e/0x250 [ 228.540176][ T6536] ? rt_mutex_slowunlock+0x219/0x460 [ 228.540209][ T6536] do_getname+0x2e/0x250 [ 228.540238][ T6536] ? getname_flags+0x11/0x20 [ 228.540272][ T6536] do_sys_openat2+0xcc/0x200 [ 228.540311][ T6536] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.540346][ T6536] ? ksys_write+0x248/0x270 [ 228.540375][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 228.540415][ T6536] __x64_sys_openat+0x138/0x170 [ 228.540549][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.540577][ T6536] do_syscall_64+0x174/0x580 [ 228.540610][ T6536] ? trace_irq_disable+0x3b/0x140 [ 228.540645][ T6536] ? clear_bhb_loop+0x40/0x90 [ 228.540672][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.540694][ T6536] RIP: 0033:0x7f2e8f37e68e [ 228.540716][ T6536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.540735][ T6536] RSP: 002b:00007f2e8d615ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 228.540758][ T6536] RAX: ffffffffffffffda RBX: 00007f2e8d6166c0 RCX: 00007f2e8f37e68e [ 228.540773][ T6536] RDX: 0000000000000002 RSI: 00007f2e8d615f90 RDI: ffffffffffffff9c [ 228.540787][ T6536] RBP: 00007f2e8d616090 R08: 0000000000000000 R09: 0000000000000000 [ 228.540799][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.540811][ T6536] R13: 00007f2e8f646038 R14: 00007f2e8f645fa0 R15: 00007fffa433d3a8 [ 228.540844][ T6536] [ 228.724054][ T5598] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.019077][ T5598] usb 2-1: Using ep0 maxpacket: 16 [ 229.024815][ T5598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.024842][ T5598] usb 2-1: config 0 has no interfaces? [ 229.069241][ T5598] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 229.069271][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.069292][ T5598] usb 2-1: Product: syz [ 229.069306][ T5598] usb 2-1: Manufacturer: syz [ 229.069319][ T5598] usb 2-1: SerialNumber: syz [ 229.128553][ T5598] usb 2-1: config 0 descriptor?? [ 230.645681][ C1] net_ratelimit: 7187 callbacks suppressed [ 230.645742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.649805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.650177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.653064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.653584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.721616][ T6543] lo speed is unknown, defaulting to 1000 [ 230.736401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.736781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.737220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.737550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 230.737923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 231.896520][ T31] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 231.896554][ T31] uvcvideo 3-1:220.0: No valid video chain found. [ 231.896639][ T31] usb 3-1: selecting invalid altsetting 0 [ 232.178660][ T31] usb 3-1: selecting invalid altsetting 0 [ 232.178702][ T31] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 232.306447][ T31] usb 3-1: USB disconnect, device number 9 [ 232.867737][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.024013][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 233.068449][ T9] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 233.068518][ T9] usb 5-1: config 0 has no interface number 1 [ 233.092043][ T9] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 233.092075][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.092096][ T9] usb 5-1: Product: syz [ 233.092111][ T9] usb 5-1: Manufacturer: syz [ 233.092126][ T9] usb 5-1: SerialNumber: syz [ 233.217218][ T5598] usb 2-1: USB disconnect, device number 9 [ 233.270252][ T9] usb 5-1: config 0 descriptor?? [ 233.628075][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 233.655970][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.656620][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.799561][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.800220][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.714492][ T9] viperboard 5-1:0.61: version 0.00 found at bus 005 address 014 [ 235.025441][ T6571] FAULT_INJECTION: forcing a failure. [ 235.025441][ T6571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.025475][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.252 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 235.025500][ T6571] Tainted: [L]=SOFTLOCKUP [ 235.025507][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 235.025518][ T6571] Call Trace: [ 235.025524][ T6571] [ 235.025531][ T6571] dump_stack_lvl+0xe8/0x150 [ 235.025563][ T6571] should_fail_ex+0x467/0x600 [ 235.025592][ T6571] _copy_to_user+0x31/0xb0 [ 235.025612][ T6571] simple_read_from_buffer+0xe1/0x170 [ 235.025635][ T6571] proc_fail_nth_read+0x1be/0x230 [ 235.025656][ T6571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.025675][ T6571] ? rw_verify_area+0x250/0x4d0 [ 235.025694][ T6571] ? __fget_files+0x2a/0x420 [ 235.025711][ T6571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.025728][ T6571] vfs_read+0x219/0xa90 [ 235.025754][ T6571] ? __pfx_vfs_read+0x10/0x10 [ 235.025778][ T6571] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 235.025806][ T6571] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.025834][ T6571] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 235.025862][ T6571] ? mutex_lock_nested+0x152/0x1d0 [ 235.025884][ T6571] ? fdget_pos+0x252/0x320 [ 235.025908][ T6571] ksys_read+0x156/0x270 [ 235.025933][ T6571] ? __pfx_ksys_read+0x10/0x10 [ 235.025966][ T6571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.025989][ T6571] do_syscall_64+0x174/0x580 [ 235.026021][ T6571] ? trace_irq_disable+0x3b/0x140 [ 235.026056][ T6571] ? clear_bhb_loop+0x40/0x90 [ 235.026082][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.026105][ T6571] RIP: 0033:0x7f2e8f37e68e [ 235.026126][ T6571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.026145][ T6571] RSP: 002b:00007f2e8d5f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.026168][ T6571] RAX: ffffffffffffffda RBX: 00007f2e8d5f56c0 RCX: 00007f2e8f37e68e [ 235.026185][ T6571] RDX: 000000000000000f RSI: 00007f2e8d5f50a0 RDI: 0000000000000003 [ 235.026198][ T6571] RBP: 00007f2e8d5f5090 R08: 0000000000000000 R09: 0000000000000000 [ 235.026211][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.026224][ T6571] R13: 00007f2e8f646128 R14: 00007f2e8f646090 R15: 00007fffa433d3a8 [ 235.026260][ T6571] [ 235.506459][ T822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.655497][ C1] net_ratelimit: 8788 callbacks suppressed [ 235.655518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.655555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.655915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.656018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.656344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.656783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 235.659228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.659531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.659902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.660215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 236.159473][ T6575] FAULT_INJECTION: forcing a failure. [ 236.159473][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.159524][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.3.254 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.159553][ T6575] Tainted: [L]=SOFTLOCKUP [ 236.159560][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 236.159572][ T6575] Call Trace: [ 236.159580][ T6575] [ 236.159588][ T6575] dump_stack_lvl+0xe8/0x150 [ 236.159623][ T6575] should_fail_ex+0x467/0x600 [ 236.159659][ T6575] _copy_to_user+0x31/0xb0 [ 236.159682][ T6575] simple_read_from_buffer+0xe1/0x170 [ 236.159707][ T6575] proc_fail_nth_read+0x1be/0x230 [ 236.159726][ T6575] ? __lock_acquire+0x683/0x2ce0 [ 236.159748][ T6575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.159771][ T6575] ? rw_verify_area+0x250/0x4d0 [ 236.159793][ T6575] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.159824][ T6575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.159843][ T6575] vfs_read+0x219/0xa90 [ 236.159873][ T6575] ? __pfx_vfs_read+0x10/0x10 [ 236.159899][ T6575] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.159932][ T6575] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.159965][ T6575] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.159999][ T6575] ? mutex_lock_nested+0x152/0x1d0 [ 236.160025][ T6575] ? fdget_pos+0x252/0x320 [ 236.160056][ T6575] ksys_read+0x156/0x270 [ 236.160086][ T6575] ? __pfx_ksys_read+0x10/0x10 [ 236.160120][ T6575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.160145][ T6575] do_syscall_64+0x174/0x580 [ 236.160177][ T6575] ? trace_irq_disable+0x3b/0x140 [ 236.160211][ T6575] ? clear_bhb_loop+0x40/0x90 [ 236.160239][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.160261][ T6575] RIP: 0033:0x7f2e8f37e68e [ 236.160282][ T6575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.160301][ T6575] RSP: 002b:00007f2e8d615fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.160324][ T6575] RAX: ffffffffffffffda RBX: 00007f2e8d6166c0 RCX: 00007f2e8f37e68e [ 236.160339][ T6575] RDX: 000000000000000f RSI: 00007f2e8d6160a0 RDI: 0000000000000004 [ 236.160352][ T6575] RBP: 00007f2e8d616090 R08: 0000000000000000 R09: 0000000000000000 [ 236.160365][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.160377][ T6575] R13: 00007f2e8f646038 R14: 00007f2e8f645fa0 R15: 00007fffa433d3a8 [ 236.160415][ T6575] [ 236.213929][ T822] usb 1-1: device descriptor read/64, error -71 [ 237.356532][ T822] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 237.563396][ T6584] tmpfs: Cannot enable quota on remount [ 239.676068][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.728147][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 239.728180][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 240.369735][ T6598] fuse: Unknown parameter 'use00000000000000000000' [ 240.634018][ T9] viperboard 5-1:0.0: version 0.00 found at bus 005 address 014 [ 240.665929][ C1] net_ratelimit: 9223 callbacks suppressed [ 240.665949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.666349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.666746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.666979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.667304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 240.667537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.676286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.684044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.684443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.684923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.198746][ T9] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 241.198780][ T9] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 241.534403][ T9] usb 5-1: USB disconnect, device number 14 [ 243.661665][ T822] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 243.889905][ T822] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 243.889941][ T822] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 243.922655][ T822] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 243.922686][ T822] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 243.922708][ T822] usb 1-1: Manufacturer: syz [ 243.922724][ T822] usb 1-1: SerialNumber: syz [ 244.787680][ T6634] FAULT_INJECTION: forcing a failure. [ 244.787680][ T6634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.787713][ T6634] CPU: 1 UID: 0 PID: 6634 Comm: syz.4.276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.787750][ T6634] Tainted: [L]=SOFTLOCKUP [ 244.787757][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 244.787773][ T6634] Call Trace: [ 244.787780][ T6634] [ 244.787787][ T6634] dump_stack_lvl+0xe8/0x150 [ 244.787822][ T6634] should_fail_ex+0x467/0x600 [ 244.787861][ T6634] _copy_from_user+0x2d/0xb0 [ 244.787880][ T6634] ___sys_sendmsg+0x1c6/0x360 [ 244.787898][ T6634] ? __lock_acquire+0x683/0x2ce0 [ 244.787918][ T6634] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.787963][ T6634] ? __fget_files+0x2a/0x420 [ 244.787979][ T6634] ? __fget_files+0x3a8/0x420 [ 244.788003][ T6634] __x64_sys_sendmsg+0x1b7/0x290 [ 244.788023][ T6634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.788055][ T6634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.788074][ T6634] do_syscall_64+0x174/0x580 [ 244.788102][ T6634] ? trace_irq_disable+0x3b/0x140 [ 244.788131][ T6634] ? clear_bhb_loop+0x40/0x90 [ 244.788152][ T6634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.788170][ T6634] RIP: 0033:0x7fb7d8ecde59 [ 244.788187][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.788202][ T6634] RSP: 002b:00007fb7d7126028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.788219][ T6634] RAX: ffffffffffffffda RBX: 00007fb7d9155fa0 RCX: 00007fb7d8ecde59 [ 244.788232][ T6634] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 244.788243][ T6634] RBP: 00007fb7d7126090 R08: 0000000000000000 R09: 0000000000000000 [ 244.788257][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.788269][ T6634] R13: 00007fb7d9156038 R14: 00007fb7d9155fa0 R15: 00007ffc76cc27b8 [ 244.788293][ T6634] [ 245.005293][ T822] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 245.055870][ T822] usb 1-1: USB disconnect, device number 7 [ 245.674003][ C0] net_ratelimit: 5266 callbacks suppressed [ 245.674023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.674472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.674887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 245.675266][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.675769][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 245.676161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.676617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.676958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.677372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 245.677752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 246.368967][ T6646] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 248.333119][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 248.515098][ T10] usb 1-1: config index 0 descriptor too short (expected 19083, got 27) [ 248.515130][ T10] usb 1-1: config 45 has an invalid descriptor of length 233, skipping remainder of the config [ 248.515151][ T10] usb 1-1: config 45 has 0 interfaces, different from the descriptor's value: 13 [ 248.515190][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.515213][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.453901][ T10] usb 1-1: string descriptor 0 read error: -71 [ 250.592915][ T10] usb 1-1: USB disconnect, device number 8 [ 250.732936][ C0] net_ratelimit: 11081 callbacks suppressed [ 250.732988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.879705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 250.946350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 250.946706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 250.947141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.999322][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.999756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 251.000111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.000477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.062435][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.872174][ T6679] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 252.089523][ T6683] FAULT_INJECTION: forcing a failure. [ 252.089523][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.089565][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.1.293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.089594][ T6683] Tainted: [L]=SOFTLOCKUP [ 252.089602][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 252.089616][ T6683] Call Trace: [ 252.089625][ T6683] [ 252.089634][ T6683] dump_stack_lvl+0xe8/0x150 [ 252.089672][ T6683] should_fail_ex+0x467/0x600 [ 252.089711][ T6683] _copy_from_user+0x2d/0xb0 [ 252.089742][ T6683] ___sys_sendmsg+0x1c6/0x360 [ 252.089766][ T6683] ? __lock_acquire+0x683/0x2ce0 [ 252.089793][ T6683] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.089853][ T6683] ? __fget_files+0x2a/0x420 [ 252.089875][ T6683] ? __fget_files+0x3a8/0x420 [ 252.089907][ T6683] __x64_sys_sendmsg+0x1b7/0x290 [ 252.089935][ T6683] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.089977][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.090002][ T6683] do_syscall_64+0x174/0x580 [ 252.090036][ T6683] ? trace_irq_disable+0x3b/0x140 [ 252.090072][ T6683] ? clear_bhb_loop+0x40/0x90 [ 252.090100][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.090123][ T6683] RIP: 0033:0x7f13a7cdde59 [ 252.090143][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.090162][ T6683] RSP: 002b:00007f13a5ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.090192][ T6683] RAX: ffffffffffffffda RBX: 00007f13a7f66180 RCX: 00007f13a7cdde59 [ 252.090207][ T6683] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 252.090220][ T6683] RBP: 00007f13a5ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 252.090232][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.090245][ T6683] R13: 00007f13a7f66218 R14: 00007f13a7f66180 R15: 00007ffc1df2d8f8 [ 252.090277][ T6683] [ 254.519999][ T6681] bond1: (slave geneve2): making interface the new active one [ 254.728769][ T6681] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 255.228849][ T2362] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.336163][ T153] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.353215][ T1428] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.353266][ T1428] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 255.738956][ C1] net_ratelimit: 10856 callbacks suppressed [ 255.738978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.740119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 255.740444][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.742196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.742651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.743155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.743742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.744509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 255.744947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.745315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.823982][ T822] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.048075][ T822] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 256.048107][ T822] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 256.048127][ T822] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 256.048147][ T822] usb 5-1: config 220 has no interface number 2 [ 256.048218][ T822] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 256.048247][ T822] usb 5-1: config 220 interface 0 has no altsetting 0 [ 256.048266][ T822] usb 5-1: config 220 interface 76 has no altsetting 0 [ 256.048284][ T822] usb 5-1: config 220 interface 1 has no altsetting 0 [ 256.110255][ T822] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 256.110288][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.110389][ T822] usb 5-1: Product: syz [ 256.110406][ T822] usb 5-1: Manufacturer: syz [ 256.110422][ T822] usb 5-1: SerialNumber: syz [ 256.546687][ T6711] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 256.772639][ T6712] vivid-007: ================= START STATUS ================= [ 256.772786][ T6712] vivid-007: Enable Output Cropping: true [ 256.772822][ T6712] vivid-007: Enable Output Composing: true [ 256.772841][ T6712] vivid-007: Enable Output Scaler: true [ 256.772861][ T6712] vivid-007: Tx RGB Quantization Range: Automatic [ 256.772880][ T6712] vivid-007: Transmit Mode: HDMI [ 256.772898][ T6712] vivid-007: Hotplug Present: 0x00000000 [ 256.772924][ T6712] vivid-007: RxSense Present: 0x00000000 [ 256.772944][ T6712] vivid-007: EDID Present: 0x00000000 [ 256.772965][ T6712] vivid-007: ================== END STATUS ================== [ 259.121380][ T822] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 259.121419][ T822] uvcvideo 5-1:220.0: No valid video chain found. [ 259.121456][ T822] usb 5-1: selecting invalid altsetting 0 [ 259.237772][ T822] usb 5-1: selecting invalid altsetting 0 [ 259.237816][ T822] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 259.320650][ T822] usb 5-1: USB disconnect, device number 15 [ 260.096040][ T6711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.165671][ T6711] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 260.398277][ T6703] lo speed is unknown, defaulting to 1000 [ 260.747213][ C0] net_ratelimit: 11097 callbacks suppressed [ 260.747237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.747703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 260.747768][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.748705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.749753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.750201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.750276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.750572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.750702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.750973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 261.373069][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.373142][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.339500][ T6770] FAULT_INJECTION: forcing a failure. [ 264.339500][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 264.339539][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.4.323 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.339569][ T6770] Tainted: [L]=SOFTLOCKUP [ 264.339577][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 264.339590][ T6770] Call Trace: [ 264.339598][ T6770] [ 264.339607][ T6770] dump_stack_lvl+0xe8/0x150 [ 264.339645][ T6770] should_fail_ex+0x467/0x600 [ 264.339685][ T6770] should_failslab+0xa8/0x100 [ 264.339713][ T6770] kmem_cache_alloc_node_noprof+0xae/0x670 [ 264.339760][ T6770] ? __alloc_skb+0x1d7/0x7a0 [ 264.339791][ T6770] ? __alloc_skb+0x1d7/0x7a0 [ 264.339829][ T6770] __alloc_skb+0x1d7/0x7a0 [ 264.339867][ T6770] netlink_sendmsg+0x5d4/0xb40 [ 264.339902][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.339928][ T6770] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 264.339967][ T6770] ? __kernel_text_address+0xd/0x30 [ 264.339989][ T6770] ? unwind_get_return_address+0x4d/0x90 [ 264.340016][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.340039][ T6770] sock_sendmsg_nosec+0x13a/0x180 [ 264.340073][ T6770] sock_write_iter+0x2e4/0x3f0 [ 264.340104][ T6770] ? __pfx_sock_write_iter+0x10/0x10 [ 264.340151][ T6770] do_iter_readv_writev+0x624/0x8d0 [ 264.340184][ T6770] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 264.340219][ T6770] ? bpf_lsm_file_permission+0x9/0x20 [ 264.340250][ T6770] ? security_file_permission+0x75/0x260 [ 264.340276][ T6770] ? rw_verify_area+0x209/0x4d0 [ 264.340305][ T6770] vfs_writev+0x34c/0x990 [ 264.340342][ T6770] ? do_raw_spin_lock+0x12b/0x2f0 [ 264.340377][ T6770] ? __pfx_vfs_writev+0x10/0x10 [ 264.340427][ T6770] ? __fget_files+0x2a/0x420 [ 264.340453][ T6770] ? __fget_files+0x3a8/0x420 [ 264.340474][ T6770] ? __fget_files+0x2a/0x420 [ 264.340504][ T6770] do_writev+0x15a/0x2e0 [ 264.340541][ T6770] ? __pfx_do_writev+0x10/0x10 [ 264.340583][ T6770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.340608][ T6770] do_syscall_64+0x174/0x580 [ 264.340642][ T6770] ? trace_irq_disable+0x3b/0x140 [ 264.340677][ T6770] ? clear_bhb_loop+0x40/0x90 [ 264.340705][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.340726][ T6770] RIP: 0033:0x7fb7d8ecde59 [ 264.340746][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.340772][ T6770] RSP: 002b:00007fb7d7126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 264.340796][ T6770] RAX: ffffffffffffffda RBX: 00007fb7d9155fa0 RCX: 00007fb7d8ecde59 [ 264.340812][ T6770] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 264.340827][ T6770] RBP: 00007fb7d7126090 R08: 0000000000000000 R09: 0000000000000000 [ 264.340841][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.340854][ T6770] R13: 00007fb7d9156038 R14: 00007fb7d9155fa0 R15: 00007ffc76cc27b8 [ 264.340889][ T6770] [ 265.754148][ C0] net_ratelimit: 9482 callbacks suppressed [ 265.754167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.754490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.754782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.755158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.755421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.759506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.759950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.760218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.760511][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.764260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 266.352244][ T6796] FAULT_INJECTION: forcing a failure. [ 266.352244][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.352285][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.1.335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.352315][ T6796] Tainted: [L]=SOFTLOCKUP [ 266.352323][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 266.352337][ T6796] Call Trace: [ 266.352346][ T6796] [ 266.352355][ T6796] dump_stack_lvl+0xe8/0x150 [ 266.352395][ T6796] should_fail_ex+0x467/0x600 [ 266.352435][ T6796] _copy_from_user+0x2d/0xb0 [ 266.352461][ T6796] ___sys_sendmsg+0x1c6/0x360 [ 266.352485][ T6796] ? __lock_acquire+0x683/0x2ce0 [ 266.352512][ T6796] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.352573][ T6796] ? __fget_files+0x2a/0x420 [ 266.352595][ T6796] ? __fget_files+0x3a8/0x420 [ 266.352627][ T6796] __x64_sys_sendmsg+0x1b7/0x290 [ 266.352655][ T6796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.352697][ T6796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.352722][ T6796] do_syscall_64+0x174/0x580 [ 266.352754][ T6796] ? trace_irq_disable+0x3b/0x140 [ 266.352782][ T6796] ? clear_bhb_loop+0x40/0x90 [ 266.352802][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.352819][ T6796] RIP: 0033:0x7f13a7cdde59 [ 266.352835][ T6796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.352850][ T6796] RSP: 002b:00007f13a5f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.352869][ T6796] RAX: ffffffffffffffda RBX: 00007f13a7f65fa0 RCX: 00007f13a7cdde59 [ 266.352881][ T6796] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 266.352892][ T6796] RBP: 00007f13a5f36090 R08: 0000000000000000 R09: 0000000000000000 [ 266.352902][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.352912][ T6796] R13: 00007f13a7f66038 R14: 00007f13a7f65fa0 R15: 00007ffc1df2d8f8 [ 266.352937][ T6796] [ 266.954052][ T5768] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 267.116780][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 267.116817][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.116860][ T5768] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 267.116884][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.173095][ T5768] usb 3-1: config 0 descriptor?? [ 267.174541][ T6789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.176013][ T6811] FAULT_INJECTION: forcing a failure. [ 267.176013][ T6811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.176048][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.0.333 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 267.176078][ T6811] Tainted: [L]=SOFTLOCKUP [ 267.176085][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 267.176100][ T6811] Call Trace: [ 267.176107][ T6811] [ 267.176117][ T6811] dump_stack_lvl+0xe8/0x150 [ 267.176156][ T6811] should_fail_ex+0x467/0x600 [ 267.176200][ T6811] _copy_from_user+0x2d/0xb0 [ 267.176226][ T6811] __sys_connect+0x155/0x470 [ 267.176262][ T6811] ? __pfx___sys_connect+0x10/0x10 [ 267.176306][ T6811] ? __pfx_ksys_write+0x10/0x10 [ 267.176339][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.176363][ T6811] __x64_sys_connect+0x7a/0x90 [ 267.176398][ T6811] do_syscall_64+0x174/0x580 [ 267.176431][ T6811] ? trace_irq_disable+0x3b/0x140 [ 267.176466][ T6811] ? clear_bhb_loop+0x40/0x90 [ 267.176493][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.176516][ T6811] RIP: 0033:0x7f2684bede59 [ 267.176535][ T6811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.176562][ T6811] RSP: 002b:00007f2682e04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 267.176585][ T6811] RAX: ffffffffffffffda RBX: 00007f2684e76180 RCX: 00007f2684bede59 [ 267.176600][ T6811] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 267.176614][ T6811] RBP: 00007f2682e04090 R08: 0000000000000000 R09: 0000000000000000 [ 267.176627][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.176639][ T6811] R13: 00007f2684e76218 R14: 00007f2684e76180 R15: 00007ffd459a6848 [ 267.176672][ T6811] [ 268.400656][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x7 [ 268.400717][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421035][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421071][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421099][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421126][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421152][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421179][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421205][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 268.421232][ T5768] hid-multitouch 0003:0457:07DA.0002: unknown main item tag 0x0 [ 269.157634][ T5768] hid-multitouch 0003:0457:07DA.0002: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 270.763960][ C0] net_ratelimit: 9187 callbacks suppressed [ 270.763983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.764385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.765031][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.765999][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 270.766523][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.766881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.767257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.767642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.768107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.768473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 270.814096][ T5768] usb 3-1: USB disconnect, device number 10 [ 272.789080][ T6812] IPv6: sit1: Disabled Multicast RS [ 272.792197][ T6812] sit1: entered allmulticast mode [ 273.703494][ T6829] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 274.295944][ T6836] syz.4.345 uses obsolete (PF_INET,SOCK_PACKET) [ 274.609816][ T6837] capability: warning: `syz.4.345' uses 32-bit capabilities (legacy support in use) [ 274.886609][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 274.886628][ T37] audit: type=1804 audit(1784139891.994:128): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.344" name="/newroot/62/file0" dev="tmpfs" ino=337 res=1 errno=0 [ 275.781838][ C1] net_ratelimit: 9704 callbacks suppressed [ 275.781860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.786014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 275.786865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.788067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.789094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.790052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.791753][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.793509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 275.794927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.796499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.983680][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 279.938662][ T6868] FAULT_INJECTION: forcing a failure. [ 279.938662][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 279.938701][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.0.356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 279.938732][ T6868] Tainted: [L]=SOFTLOCKUP [ 279.938740][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 279.938753][ T6868] Call Trace: [ 279.938765][ T6868] [ 279.938774][ T6868] dump_stack_lvl+0xe8/0x150 [ 279.938815][ T6868] should_fail_ex+0x467/0x600 [ 279.938852][ T6868] should_failslab+0xa8/0x100 [ 279.938880][ T6868] __kmalloc_noprof+0xfe/0x780 [ 279.938901][ T6868] ? rcu_is_watching+0x15/0xb0 [ 279.938928][ T6868] ? tomoyo_realpath_from_path+0xef/0x640 [ 279.938956][ T6868] ? tomoyo_realpath_from_path+0xef/0x640 [ 279.938991][ T6868] tomoyo_realpath_from_path+0xef/0x640 [ 279.939029][ T6868] ? tomoyo_path_number_perm+0x219/0x5f0 [ 279.939066][ T6868] tomoyo_path_number_perm+0x246/0x5f0 [ 279.939107][ T6868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.939141][ T6868] ? __lock_acquire+0x683/0x2ce0 [ 279.939188][ T6868] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 279.939221][ T6868] ? hook_file_ioctl+0x1f3/0x600 [ 279.939252][ T6868] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.939306][ T6868] ? __fget_files+0x2a/0x420 [ 279.939333][ T6868] ? __fget_files+0x2a/0x420 [ 279.939353][ T6868] ? __fget_files+0x3a8/0x420 [ 279.939374][ T6868] ? __fget_files+0x2a/0x420 [ 279.939401][ T6868] security_file_ioctl+0xc3/0x2a0 [ 279.939427][ T6868] __se_sys_ioctl+0x47/0x170 [ 279.939454][ T6868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.939479][ T6868] do_syscall_64+0x174/0x580 [ 279.939511][ T6868] ? trace_irq_disable+0x3b/0x140 [ 279.939548][ T6868] ? clear_bhb_loop+0x40/0x90 [ 279.939576][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.939597][ T6868] RIP: 0033:0x7f2684bede59 [ 279.939618][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.939637][ T6868] RSP: 002b:00007f2682e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.939662][ T6868] RAX: ffffffffffffffda RBX: 00007f2684e75fa0 RCX: 00007f2684bede59 [ 279.939678][ T6868] RDX: 0000200000000040 RSI: 000000000000540f RDI: 0000000000000003 [ 279.939692][ T6868] RBP: 00007f2682e46090 R08: 0000000000000000 R09: 0000000000000000 [ 279.939705][ T6868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.939718][ T6868] R13: 00007f2684e76038 R14: 00007f2684e75fa0 R15: 00007ffd459a6848 [ 279.939751][ T6868] [ 280.208484][ T6868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.783785][ C0] net_ratelimit: 8932 callbacks suppressed [ 280.783807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.784157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.784495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 280.784726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.785215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.785284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 280.785620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.786237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.786265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.786665][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.549887][ T6873] warning: `syz.0.358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 282.687930][ T6879] ip6erspan0: entered allmulticast mode [ 285.445547][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.480816][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.491153][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.521023][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.532915][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.794040][ C0] net_ratelimit: 12169 callbacks suppressed [ 285.794066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.794822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 285.795116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 285.795561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.796047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.796521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.797029][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:6a:29:47:1b:e9:f5, vlan:0) [ 285.797228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.797704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.798276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 286.823810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 287.683975][ T5601] Bluetooth: hci5: command tx timeout [ 287.963795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 288.703863][ T5785] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 288.858720][ T5785] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 288.858751][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.928819][ T5785] usb 2-1: config 0 descriptor?? [ 288.948962][ T5785] cp210x 2-1:0.0: cp210x converter detected [ 290.076586][ T5601] Bluetooth: hci5: command tx timeout [ 290.143897][ T5785] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 290.143928][ T5785] cp210x 2-1:0.0: querying part number failed [ 290.654632][ T5785] usb 2-1: cp210x converter now attached to ttyUSB0 [ 290.859301][ C1] net_ratelimit: 5651 callbacks suppressed [ 290.859352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 290.924224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.985496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.125746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.265049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.265530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.343598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.398291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 291.424247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.429052][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.153961][ T5601] Bluetooth: hci5: command tx timeout [ 292.561673][ T5785] usb 2-1: USB disconnect, device number 10 [ 292.651281][ T5785] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 292.671777][ T5785] cp210x 2-1:0.0: device disconnected [ 294.281617][ T5601] Bluetooth: hci5: command tx timeout [ 294.952417][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 295.103477][ T6890] lo speed is unknown, defaulting to 1000 [ 295.650151][ T6954] FAULT_INJECTION: forcing a failure. [ 295.650151][ T6954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.650184][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.4.382 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.650208][ T6954] Tainted: [L]=SOFTLOCKUP [ 295.650214][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 295.650225][ T6954] Call Trace: [ 295.650231][ T6954] [ 295.650239][ T6954] dump_stack_lvl+0xe8/0x150 [ 295.650271][ T6954] should_fail_ex+0x467/0x600 [ 295.650301][ T6954] _copy_from_user+0x2d/0xb0 [ 295.650322][ T6954] do_semtimedop+0x235/0x3a0 [ 295.650343][ T6954] ? __pfx_do_semtimedop+0x10/0x10 [ 295.650399][ T6954] ? __pfx_ksys_write+0x10/0x10 [ 295.650427][ T6954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.650445][ T6954] do_syscall_64+0x174/0x580 [ 295.650472][ T6954] ? trace_irq_disable+0x3b/0x140 [ 295.650500][ T6954] ? clear_bhb_loop+0x40/0x90 [ 295.650521][ T6954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.650538][ T6954] RIP: 0033:0x7fb7d8ecde59 [ 295.650554][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.650568][ T6954] RSP: 002b:00007fb7d7126028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 295.650587][ T6954] RAX: ffffffffffffffda RBX: 00007fb7d9155fa0 RCX: 00007fb7d8ecde59 [ 295.650599][ T6954] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000000 [ 295.650610][ T6954] RBP: 00007fb7d7126090 R08: 0000000000000000 R09: 0000000000000000 [ 295.650620][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.650630][ T6954] R13: 00007fb7d9156038 R14: 00007fb7d9155fa0 R15: 00007ffc76cc27b8 [ 295.650656][ T6954] [ 295.864065][ C0] net_ratelimit: 4961 callbacks suppressed [ 295.864085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.864420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 295.864670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.865989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 295.866255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.867270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.867632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.868160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.868481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.868821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 296.836888][ T6961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.383'. [ 297.862858][ T6963] mmap: syz.4.385 (6963) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 300.223808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 300.607071][ T6982] FAULT_INJECTION: forcing a failure. [ 300.607071][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.607111][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.1.392 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.607142][ T6982] Tainted: [L]=SOFTLOCKUP [ 300.607150][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 300.607164][ T6982] Call Trace: [ 300.607173][ T6982] [ 300.607182][ T6982] dump_stack_lvl+0xe8/0x150 [ 300.607225][ T6982] should_fail_ex+0x467/0x600 [ 300.607263][ T6982] _copy_from_user+0x2d/0xb0 [ 300.607289][ T6982] ___sys_recvmsg+0x173/0x5a0 [ 300.607325][ T6982] ? __pfx____sys_recvmsg+0x10/0x10 [ 300.607356][ T6982] ? __fget_files+0x2a/0x420 [ 300.607407][ T6982] ? __fget_files+0x3a8/0x420 [ 300.607437][ T6982] do_recvmmsg+0x320/0x7f0 [ 300.607469][ T6982] ? __pfx_do_recvmmsg+0x10/0x10 [ 300.607494][ T6982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.607538][ T6982] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 300.607586][ T6982] __x64_sys_recvmmsg+0x198/0x250 [ 300.607615][ T6982] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 300.607647][ T6982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.607671][ T6982] do_syscall_64+0x174/0x580 [ 300.607705][ T6982] ? clear_bhb_loop+0x40/0x90 [ 300.607732][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.607754][ T6982] RIP: 0033:0x7f13a7cdde59 [ 300.607775][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.607793][ T6982] RSP: 002b:00007f13a5f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 300.607816][ T6982] RAX: ffffffffffffffda RBX: 00007f13a7f65fa0 RCX: 00007f13a7cdde59 [ 300.607833][ T6982] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000003 [ 300.607847][ T6982] RBP: 00007f13a5f36090 R08: 0000000000000000 R09: 0000000000000000 [ 300.607860][ T6982] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 300.607891][ T6982] R13: 00007f13a7f66038 R14: 00007f13a7f65fa0 R15: 00007ffc1df2d8f8 [ 300.607925][ T6982] [ 300.875359][ C1] net_ratelimit: 8774 callbacks suppressed [ 300.875380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.875850][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.876172][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.876623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.877031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.877333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.877589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.877779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 300.877965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.878087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 301.788707][ T1428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.039781][ C0] net_ratelimit: 7915 callbacks suppressed [ 306.039806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.040301][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.040763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 306.041421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.043140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 306.043455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.043903][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 306.049036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.051125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.051455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.415125][ T1428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.675135][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.403'. [ 311.068970][ C1] net_ratelimit: 7277 callbacks suppressed [ 311.069021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:b9:0e:17:e0:34, vlan:0) [ 311.827150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.827648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:c9:69:ea:9c:32, vlan:0) [ 311.827932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.828668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.829011][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.829927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.835521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 311.835835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.847137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 313.227524][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 313.506174][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 313.524031][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 313.559092][ T31] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 313.559116][ T31] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 313.559131][ T31] usb 2-1: Product: syz [ 313.559141][ T31] usb 2-1: Manufacturer: syz [ 313.559152][ T31] usb 2-1: SerialNumber: syz [ 313.633905][ T9] usb 5-1: device descriptor read/64, error -71 [ 313.636879][ T31] usb 2-1: config 0 descriptor?? [ 313.651140][ T31] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 314.511727][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 314.526869][ T37] audit: type=1326 audit(1784139931.654:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.531338][ T37] audit: type=1326 audit(1784139931.654:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.531393][ T37] audit: type=1326 audit(1784139931.654:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.608688][ T37] audit: type=1326 audit(1784139931.654:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.609004][ T37] audit: type=1326 audit(1784139931.734:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.609477][ T37] audit: type=1326 audit(1784139931.734:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.609528][ T37] audit: type=1326 audit(1784139931.734:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.706648][ T37] audit: type=1326 audit(1784139931.734:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.706705][ T37] audit: type=1326 audit(1784139931.834:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.706754][ T37] audit: type=1326 audit(1784139931.834:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7056 comm="syz.1.412" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f13a7cdde59 code=0x7ffc0000 [ 314.804204][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.412'. [ 314.930262][ T9] usb 5-1: device descriptor read/64, error -71 [ 314.993972][ T31] usb 2-1: USB disconnect, device number 11 [ 315.042339][ T9] usb usb5-port1: attempt power cycle [ 315.435208][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 315.616856][ T9] usb 5-1: device descriptor read/8, error -71 [ 316.074669][ C1] net_ratelimit: 5984 callbacks suppressed [ 316.074690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.075068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.075305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.075635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.075904][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.076134][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.076479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 316.076711][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.077416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.077814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.352067][ T1428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.424014][ T5768] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 319.563878][ T5768] usb 2-1: device descriptor read/64, error -71 [ 319.864298][ T7092] FAULT_INJECTION: forcing a failure. [ 319.864298][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.864339][ T7092] CPU: 1 UID: 0 PID: 7092 Comm: syz.0.419 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.864374][ T7092] Tainted: [L]=SOFTLOCKUP [ 319.864383][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 319.864397][ T7092] Call Trace: [ 319.864406][ T7092] [ 319.864415][ T7092] dump_stack_lvl+0xe8/0x150 [ 319.864456][ T7092] should_fail_ex+0x467/0x600 [ 319.864493][ T7092] _copy_from_user+0x2d/0xb0 [ 319.864520][ T7092] do_sock_getsockopt+0x200/0x7e0 [ 319.864551][ T7092] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 319.864590][ T7092] ? __fget_files+0x3a8/0x420 [ 319.864613][ T7092] ? __fget_files+0x2a/0x420 [ 319.864641][ T7092] __x64_sys_getsockopt+0x1aa/0x250 [ 319.864672][ T7092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.864696][ T7092] do_syscall_64+0x174/0x580 [ 319.864731][ T7092] ? trace_irq_disable+0x3b/0x140 [ 319.864768][ T7092] ? clear_bhb_loop+0x40/0x90 [ 319.864796][ T7092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.864820][ T7092] RIP: 0033:0x7f2684bede59 [ 319.864841][ T7092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.864860][ T7092] RSP: 002b:00007f2682e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 319.864884][ T7092] RAX: ffffffffffffffda RBX: 00007f2684e75fa0 RCX: 00007f2684bede59 [ 319.864901][ T7092] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 319.864914][ T7092] RBP: 00007f2682e46090 R08: 0000200000000200 R09: 0000000000000000 [ 319.864930][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.864943][ T7092] R13: 00007f2684e76038 R14: 00007f2684e75fa0 R15: 00007ffd459a6848 [ 319.864979][ T7092] [ 319.963877][ T5768] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 320.131299][ T5768] usb 2-1: device descriptor read/64, error -71 [ 320.254652][ T5768] usb usb2-port1: attempt power cycle [ 320.643869][ T5768] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 320.964013][ T5768] usb 2-1: device descriptor read/8, error -71 [ 321.084029][ C0] net_ratelimit: 8553 callbacks suppressed [ 321.084052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.084384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:a1:aa:74:38:01, vlan:0) [ 321.084491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.084861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.085229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.085510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.085587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.085915][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.085934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.086306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 322.615738][ T1428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.037782][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.037859][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.464128][ T5768] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 325.697647][ T5768] usb 2-1: Using ep0 maxpacket: 16 [ 325.912023][ T5768] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 325.912055][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.912076][ T5768] usb 2-1: Product: syz [ 325.912091][ T5768] usb 2-1: Manufacturer: syz [ 325.912105][ T5768] usb 2-1: SerialNumber: syz [ 326.063985][ T5768] usb 2-1: config 0 descriptor?? [ 326.082887][ T5768] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 326.097029][ C0] net_ratelimit: 2472 callbacks suppressed [ 326.097046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.098505][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.100352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.100434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.101525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.102573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.106350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.107295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.138792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.155697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.431560][ T5768] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 326.431719][ T5768] visor 2-1:0.0: probe with driver visor failed with error -71 [ 326.608383][ T5768] usb 2-1: USB disconnect, device number 16 [ 331.364750][ C0] net_ratelimit: 7265 callbacks suppressed [ 331.364784][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.365511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.365842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.371026][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.372728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.375743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.376124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.376504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.376822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.377933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.989547][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.989695][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.989930][ T6890] bridge_slave_0: entered allmulticast mode [ 335.031495][ T6890] bridge_slave_0: entered promiscuous mode [ 335.141818][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.141949][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.142202][ T6890] bridge_slave_1: entered allmulticast mode [ 335.235688][ T6890] bridge_slave_1: entered promiscuous mode [ 336.374055][ C0] net_ratelimit: 6555 callbacks suppressed [ 336.374077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.374310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.374645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.375100][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.375150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.375526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.375566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.375917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.375972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.376415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c5:2b:55:fe:6a, vlan:0) [ 337.293259][ T9] ================================================================== [ 337.293276][ T9] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 337.293331][ T9] Read of size 8 at addr ffffc900071ba008 by task kworker/0:0/9 [ 337.293350][ T9] [ 337.293365][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.293394][ T9] Tainted: [L]=SOFTLOCKUP [ 337.293402][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 337.293416][ T9] Workqueue: usb_hub_wq hub_event [ 337.293451][ T9] Call Trace: [ 337.293460][ T9] [ 337.293470][ T9] dump_stack_lvl+0xe8/0x150 [ 337.293504][ T9] print_address_description+0x55/0x1e0 [ 337.293537][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.293569][ T9] print_report+0x58/0x70 [ 337.293599][ T9] kasan_report+0x117/0x150 [ 337.293625][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.293662][ T9] __list_del_entry_valid_or_report+0xb5/0x190 [ 337.293698][ T9] kcov_remote_start+0x295/0x6f0 [ 337.293737][ T9] hub_event+0x15d/0x4cf0 [ 337.293770][ T9] ? rt_spin_unlock+0x163/0x200 [ 337.293800][ T9] ? __lock_acquire+0x683/0x2ce0 [ 337.293824][ T9] ? register_lock_class+0x31/0x2e0 [ 337.293847][ T9] ? __lock_acquire+0x683/0x2ce0 [ 337.293876][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.293908][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.293941][ T9] ? __pfx_hub_event+0x10/0x10 [ 337.293973][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 337.294002][ T9] ? rcu_is_watching+0x15/0xb0 [ 337.294029][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 337.294054][ T9] process_scheduled_works+0xa8e/0x14e0 [ 337.294094][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.294122][ T9] ? assign_work+0x3cf/0x5d0 [ 337.294148][ T9] worker_thread+0xa47/0xfb0 [ 337.294189][ T9] kthread+0x388/0x470 [ 337.294221][ T9] ? __pfx_worker_thread+0x10/0x10 [ 337.294246][ T9] ? __pfx_kthread+0x10/0x10 [ 337.294278][ T9] ret_from_fork+0x514/0xb70 [ 337.294312][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 337.294352][ T9] ? __switch_to+0xc89/0x1420 [ 337.294380][ T9] ? __pfx_kthread+0x10/0x10 [ 337.294412][ T9] ret_from_fork_asm+0x1a/0x30 [ 337.294440][ T9] [ 337.294448][ T9] [ 337.294454][ T9] The buggy address belongs to a vmalloc virtual mapping [ 337.294472][ T9] Memory state around the buggy address: [ 337.294485][ T9] ffffc900071b9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.294500][ T9] ffffc900071b9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.294515][ T9] >ffffc900071ba000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.294527][ T9] ^ [ 337.294538][ T9] ffffc900071ba080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.294554][ T9] ffffc900071ba100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 337.294565][ T9] ================================================================== [ 337.332833][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.332859][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.332891][ T9] Tainted: [L]=SOFTLOCKUP [ 337.332899][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 337.332915][ T9] Workqueue: usb_hub_wq hub_event [ 337.332955][ T9] Call Trace: [ 337.332964][ T9] [ 337.332974][ T9] vpanic+0x56c/0xa60 [ 337.333000][ T9] ? __pfx_vpanic+0x10/0x10 [ 337.333027][ T9] panic+0xc5/0xd0 [ 337.333047][ T9] ? __pfx_panic+0x10/0x10 [ 337.333068][ T9] ? preempt_schedule_thunk+0x16/0x40 [ 337.333097][ T9] ? preempt_schedule_thunk+0x16/0x40 [ 337.333125][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.333161][ T9] check_panic_on_warn+0x89/0xb0 [ 337.333195][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.333226][ T9] end_report+0x73/0x170 [ 337.333249][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.333283][ T9] kasan_report+0x128/0x150 [ 337.333308][ T9] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 337.333356][ T9] __list_del_entry_valid_or_report+0xb5/0x190 [ 337.333392][ T9] kcov_remote_start+0x295/0x6f0 [ 337.333427][ T9] hub_event+0x15d/0x4cf0 [ 337.333462][ T9] ? rt_spin_unlock+0x163/0x200 [ 337.333490][ T9] ? __lock_acquire+0x683/0x2ce0 [ 337.333514][ T9] ? register_lock_class+0x31/0x2e0 [ 337.333538][ T9] ? __lock_acquire+0x683/0x2ce0 [ 337.333566][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 337.333599][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 337.333633][ T9] ? __pfx_hub_event+0x10/0x10 [ 337.333666][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 337.333695][ T9] ? rcu_is_watching+0x15/0xb0 [ 337.333724][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 337.333747][ T9] process_scheduled_works+0xa8e/0x14e0 [ 337.333787][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 337.333815][ T9] ? assign_work+0x3cf/0x5d0 [ 337.333841][ T9] worker_thread+0xa47/0xfb0 [ 337.333881][ T9] kthread+0x388/0x470 [ 337.333911][ T9] ? __pfx_worker_thread+0x10/0x10 [ 337.333936][ T9] ? __pfx_kthread+0x10/0x10 [ 337.333968][ T9] ret_from_fork+0x514/0xb70 [ 337.334003][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 337.334035][ T9] ? __switch_to+0xc89/0x1420 [ 337.334065][ T9] ? __pfx_kthread+0x10/0x10 [ 337.334097][ T9] ret_from_fork_asm+0x1a/0x30 [ 337.334126][ T9] [ 337.334770][ T9] Kernel Offset: disabled