last executing test programs: 13.830807114s ago: executing program 2 (id=409): socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0xa481, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="58004e0002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274000000000c000780080008400000004873013afc8f70d9b6cfe5303891da99c744e58e267151baa20c94835363841b209d55c282c962a4a336bdca36daa7f775982ff6a4e8636444cd58"], 0x58}}, 0x2) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000002d80)={0x0, 0x1, &(0x7f0000002c80)=[0x0], &(0x7f0000002cc0), 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000026c0)={'batadv0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000000, 0x9, 0x8, 0x3, 0x6, 0x1ff, 0x0, 0x79c1, 0x2, 0x4, 0x4, 0x0, 0xa82, 0x9, 0x8, 0x4, 0x7, 0x7, 0x53, 0xf41, 0x6, 0x9, 0x7, 0x4, 0x2, 0x23e23e4c, 0x4, 0xa9fc, 0x5f4e, 0x2, 0x0, 0x4, 0x0, 0x1, 0x2, 0x80000001, 0x8, 0x0, 0x2, 0x401, 0x8001, 0x93, 0x0, 0x1, 0xf8e, 0x1ff, 0xe, 0x1, 0x5, 0x4, 0xedf6, 0x8000, 0x8c, 0x0, 0x3, 0x1b, 0x4, 0x5, 0xc, 0x1, 0x8, 0x2, 0xff, 0xcf69, 0x0, 0x5, 0x7f, 0x800000, 0x43, 0x0, 0x4, 0x80000000, 0x2000000, 0x6, 0xfffffff9, 0x4, 0x3, 0x2, 0x6, 0x9, 0x4, 0x5, 0x5, 0x9, 0x6fbe, 0x7, 0xaff, 0xc3e0, 0x2, 0x8, 0xffffffff, 0x7, 0x1, 0xffffffff, 0x4, 0x3ff, 0x10000, 0xff98, 0xa58, 0x4, 0x9, 0x73b, 0x5, 0x8, 0x7, 0x1, 0xfffffffb, 0x3, 0x3ff, 0xf, 0xf3d4, 0x7, 0x4, 0x8, 0x4, 0xb412, 0x80000000, 0x100, 0x7ff, 0x8, 0x9, 0x30, 0x7fffffff, 0x401, 0x69, 0x5, 0x8, 0xa1], "c2f4369613d6417b92c11748809fc2"}}) 12.084545832s ago: executing program 2 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000180)={0x1, 0x3, 0x81, 0x8, r0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000019640), 0x82000000002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324241, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10002) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000097000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x35, 0x1, &(0x7f0000000280)=""/61, 0x3d}, &(0x7f0000000380)=0x40) 10.986905579s ago: executing program 3 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000e80)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x7}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r5 = io_uring_setup(0x5592, &(0x7f0000000180)={0x0, 0x2fc1, 0x80, 0x3, 0x2}) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0xb6ae, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.763987775s ago: executing program 2 (id=418): syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000003e800000800000086dd080088be86dd"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x40, 0x0, 0x0, 'queue1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffffffff}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004014) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40485404, &(0x7f0000000040)=0x1) 9.493745247s ago: executing program 3 (id=419): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r5, &(0x7f0000002680)=[{0x0}, {&(0x7f0000000700)='\x00', 0x1}], 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000031201003400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x10000000007e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x4, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x5, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x5, 0x5, 0x8, 0x6, 0x2b, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x7ff, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') 8.241111793s ago: executing program 3 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x3f00, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 8.150648622s ago: executing program 2 (id=424): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x120, 0x1, 0x9, 0x20b, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0xb0, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x8}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0xc000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x0, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x3, 0x2, 'syz1\x00', &(0x7f0000000740)=['-\'/+-&)\x00\xb1\xbeF\xbeP&*\xb8u\xf0\xbf\xdf\xf49jS\x90\xd2)\x0f\xfa\x94\tz\n\xcb\n\x01\xa6rX\x1c\xe1G\xb9\xb0<\xb8Ik\xf2>\xbai\x14\xb1~\x8d\xef\xa3\xe0y\xbev\xda\x00[\xb4T-\x1cX\xe7\xae\x8d\xc4VU\xea\xcfe4%?\xc2\xaa\t\x11z~ \xa5s<\xe6\xaf]]x,\xba\x18\xb1\x18\xd0\xb1P\x1c\a\x1c\xd3-\xba\xf7^\xca\xd7\xf9 (\xb0\xe3\xcb\xa8\x91\xe4hD\xc0\xc4b\xf7\xee@\xe51\x03/r\x1b\x15Q\xb7s\xffT\x99\xf7\xc3\xda\xc0\xfa\x00J\x1a\xc3\xf4^\x81U%\fW\xfdc\xebrFb\xe1\xb9\xa2B?\xdf\xdc\xca8\x04W\x1b\xa9\x0e\x13\xd6(', '.*\x00', 'vxcan1\x00'], 0xc2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1c, 0x1}, 0xe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x1, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0xffffff00, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'caif0\x00', {0xff}, {}, 0x1, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) vmsplice(r2, &(0x7f0000001300)=[{&(0x7f0000000140)}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0x2, [{}, {}, {}, {0x6}, {0x0, 0x4000}, {0x0, 0x1000000}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 7.976504719s ago: executing program 3 (id=425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000cc0)={r3, &(0x7f0000000bc0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) 6.338017575s ago: executing program 0 (id=429): r0 = socket$igmp(0x2, 0x3, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) fcntl$lock(r1, 0x7, 0x0) unshare(0x2000680) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="596f2bbd7000ffdbdf25190000000c16d419790cf0edf3e90994c92f8e930006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r5 = socket$inet_sctp(0x2, 0x4, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r7, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x30}}, 0x1) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000794200000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @sk_skb=0x26, r10, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000041c0)={0x86, 0x0}, 0x8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r12}, 0x10) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004200)={0xffffffffffffffff, 0x0, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000004240)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000004300)={0x9, 0x2, &(0x7f0000000900)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}], &(0x7f0000004080)='GPL\x00', 0x3, 0x61, &(0x7f00000040c0)=""/97, 0x41100, 0x10, '\x00', r9, @fallback=0x9, r10, 0x8, &(0x7f0000004140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004180)={0x1, 0x0, 0x0, 0x2}, 0x10, r11, r12, 0x3, &(0x7f0000004280)=[r13, r14], &(0x7f00000042c0)=[{0x4, 0x3, 0xe, 0x2}, {0x5, 0x5, 0x0, 0x5}, {0x0, 0x4, 0x5, 0x4}], 0x10, 0x7f, @void, @value}, 0x94) sendmmsg(r5, &(0x7f0000003f40)=[{{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)="7a183e223a3ec9", 0x7}, {&(0x7f0000000080)="20f14bf9680bc4afb90ec000b3d5e0f52885635bdccd1e0291ba62282d104fa0252ec5c1280af14bf5ea373573b3030c5433590150d808550a9996171184b7", 0x3f}, {&(0x7f0000000180)="63fe7ac56af16183be4e6c028022a3f5e4df572e513cc8882baf19a37c9aed5e90f22a13140fa2ccdf4d1ce8531f955c7e4c79c080fe8ab4ef71dfc89fd35d2182a0bd29f1cae7e56f01f91dbb77fdc26b0ae20fdc89f80599bf778fdd0105d71371061780a52db3c9db6f71acfe235036285071b67e88ebcbf7047efdeff61dbf9d14fee26c864a5e219429a019", 0x8e}, {&(0x7f0000000240)="48687c9300fc9ea64e131ee5d0d02edcb42afb8725b2c61dc62fb84f0ec0ccb7649a86a3a551c5a4300e3b5834ac7675ec1174cf00856d127e9364906341ff826ed9f0068cb4b73b3a718d8ef14b01ae0b7a3f404c601c265c01c2d9d520df1112d7f91b959b3ba5f8737c64e6e8682ce6f3ef465efbc76cb92bd056df3de3a602b6d88350d1d9ec9cf177b6c326cc0ba5a11d2c2753a0282b25aca201726452bbdcda0491ceacc8d60f34bbe66d9d5865ac9733a506d5aba95bc9", 0xbb}, {&(0x7f0000000300)}, {&(0x7f0000000340)="841fdb2c0f180f7118b9aee71049e8dffc26313998b63b50638ef3dc588dfe8af960bddbd9098b77669c9ae198d30d2153cbb6688f6a8e9d963fbde0e341b71e9a9d26563b8dabef78c329079f453126c31e82fbe98caf3e15244d51eab8ae423e9364bd7fd1ca0a3db27a7288cecf348f6129e05f074b48a88e36a752557415aeaf8bb33e029ee8509ab501c69ec1ec720db592c3145bfe1d8a6114f776700a0faed17627c1443c6d15b3464cc804052dfcb440de74de1d8020e6b380b6ebf8ee6e0884803605361e110f76d189dc", 0xcf}], 0x6, &(0x7f0000000b40)=[{0xf0, 0x113, 0x8, "498928e772c01fbde1b6c8563b754cc73037267bc6ce26fa7c06e13b891341101ac69fa93db5ed3e3e9cecbd2e1250668c63d39394ef113db0ce667c7498dc52dcf4293f0e4d63fac2c36555f4df28e13ae87f289e0d6f5fa7b856a85fb9bb303e161f87e1d4c9411d7edc6d6636131b0266e175488b670e3cab8fa50d333a26ca0a4f14359fa77a01834b26cef2255228fe2ab55abe38917048ad397be9b09ec3bff71fa545dfb2cb2afe4fc7a67e2dc411f28813911c24fd9d243211f1b420ff82e72969050eb2316a636e1c035b3243d42b9a0597d4843d448773f4bc23"}, {0x18, 0x107, 0x5, "82a4ec59d954"}, {0xb0, 0x12f, 0x4, "cc4b2d01c3b8e1f795a326b30c80da0812ca18144a6da74149fe74e163c13521fe54b7eef9297846ad93998413e806ab56188d84f28e4a3265896b1740e2169d6a57f32b5c031ee89aca5c3a75b69aeaee8b0196e19a468da45c03a39f3e0c6f8f65dd1ba029ce967bcc1f1579cf16c8283736373412f01b35669424b777264b1da75ebc1b4b70b2ea4c3a67d940303dd4afb5c1ce7edf278923"}, {0xc0, 0x13, 0x1, "6e1d5ac8958f8587626e7c308d2639e858b1a98c9cf63bf8536531a8aa47eb01f83ee0a978936a5445ebf116692d69545355074fc4256f2fac42e238bc01b5b1010d52cb4d7b8f80a6e89e0b52ac0a71ad90917b05334faf3bef37406ac4b5a7cb505098ead68f16ba2f5101a552f82a33411e447fdfcc5b9735ab4677fa29224135143f7e749ea27ae0633e9b01a109941f0be174299dfbc31727417304f3549f74f03ddd29610aa58c47d00d"}], 0x278}}, {{&(0x7f0000000740)=@isdn={0x22, 0x2, 0x80, 0xc0, 0x9}, 0x80, &(0x7f0000002000)=[{&(0x7f00000007c0)="6e3fb8810c53b76b03865649879dc075c4aeca56a56267458cc791403b0ef84099f1f89a9d629b039692c88fdda309675e4f2731847742caf1a41fcd9147095f9059c21fb49dcbedf9c72fcba2a089c850f179188e472404404e9ad03062c35eb545de4aef66027b8a07776ab8bc7d4415a6712865fbc59b0241cbaed60df36b3a02de02e0687d2c0ca292f3fabd44b8db271fe3c92f6e4ab4c38df6e870afbed661a970d268d835b3beb5ed31c2598e5aec073d267c6778c991393c03406e9a624bd2489d3028c4da019858c931cc708360aa597030fb27d4a57c239eee71170fde41880b30493a413b6bdeec1aeb9d", 0xf0}, {&(0x7f0000000a40)="c097fcd25f7e2d583e4bbc05531c6a7d4c8debd33c424263087248a3019d01d93d95f55963c11b13da3c16e8f3db4d1ae197887804b0e3bbbd9c3e2de1da644e320f54fd85f221945e7078e9960bba53cad0c283b25a57813a6dbb15a0da5c78d89883b3931531fe66ffb491a4feb7869ed0056e6f21e8ac56eb7cd27648028046232f963f4f39bd3839379ca4cd39bc88c27796c25c1517e2791f7ec44c85ed3ab04f85d7f4a231177a5c2bc1e9694d59cb21e117d751bac8ef3bd6e06781a99571cba6b9de2b511f4176ad4aa5c419709279d16fc78db7a86cb08351d21f4d88f99e3e7a8f277c28d86f1a6b7cd50cb5ca1dc08ca2da", 0xf7}, {&(0x7f0000000900)}, {&(0x7f00000043c0)="577aa2f62fd68199d32b11fbf4a7493d9fc83cefebcb3ef0a4fe0d249ae2f2b1999365a66ecf20e77bc1b701aaec28074039027a46291565453644b0d5ff2e0f354e520e3636fd69428d0d1cc741cb74b1e7eeca2a66c060c61c21e3bd824b559e75e57c67ec06715d73d0a06528ab84e093de852c50efb7196b7a8604c02a5553c80e2c00384afa37b328e865e4bc6b67409c1da8bf332dd218c89adb429efaf3f46a4000044287677be3a929837f0f1d0ea4a1d77b3d7f9f246dd3b804257cb26381dba1f02521667122ea2ab3998c2645cb98fb744630c055960adcbebbc2f116ec7f6b5715d3b0923c8eb55f1bbd53b0212ef077cb4a1d221b77e51d27f6929bb8d5e4396775502fd1c13d8297b40901ea755e070c3558881842bd4d35a429a605626b53430782dd3a1165087c55fc6cdc02d79793fbe814198033765cab67eb9372ab4251e90bc159e29f46163eed77d65d3e80703ea4ae6bfa36b2deee5fa9a886c7fcc63f8e1f5b6da0c2d567c01bc272673a2848b4c07b42e809294985b9d0737a86b3b1d32d46b69cecb405a36daaa5b4793dfadef270c42792c596cfb673ac72a544254e67773913c5d9a9b546be3b0384b69cdee9b651653f24596c96e63c248b0e52b09d8a6d884aa92333380151e10f60470a12c80d66fd29e18ea68ceec892b3966a7d8ed041786288fbae9faef7021a71e9c874b6ae3424674241ebd17d764ec0ec4e3a96d311de115fe0f484f7c5513ec60af8c1fd1363fe36b2965c4005c0ea61a9a85ab96a98db69421697dc3dc20b953a86a7c1e85a4f7449f5d6a115122222653df1f04ee2d98174a05d906bcef4c4e48e2cbc7def6eb8906d0533bf19436ab6a960a180f07db69b98935105ed6a3d9c44f54f92736ffb26c230418822a4096bc2252e11116a828734169d8febf8e717de1bb6cafbea54f67be1dcb1e27f88ec0f3806f207767ebe809d1332060b42704a34bc5e1a781f9ac3262709f51410ae891c7a10c304ec4a1b128d144228be2b238e2eb2a0fcec416502892b0a97fb32fb2ef1236891222ac434adfbbf86af33186a13e073567d66eea0b33a8981edcd729e392d434176e7e2c24cbbf6ede45a21f39af88d9174e1bc95751de7b7b0e8f52374969f8944014b91d087368140f8b48418752c8af155c282eff111739dd1c93c06dda6ae009678e64d6c602f453ddc220e184575743a4a8597f7e11f2395a6cbaf5432f96fa305cc0d40f571cc82f866add7251923bcfe04e6940c6f4878ada9fecce870dcd7299ac8d5830bb822ecf59c8bbd785515fadf58ee79f7ba40fa7d62cc08e9612a53ba614df0872df3e646ebe5e0661f2744479ad972942a9eddebf691c6db93e10d2b615052a9d48bf17226a45a48bebdbd969840c5155604e2c07ae2b8446a96e71a7cc626e98a6cf722c0b7ba384796d736daf2210ded266c2c2fec8a289d3ca2f12469d6686ba31ed7de5e87afd85d24074e5b0da68b6fc7aa3d441cc1ca75329da5d565f2ca79f65c209d782e2fd0f01323841ea0ffcfc8f6fd7bfd28389104b9840962fa3b128878702a45e8efeb68f55d9c2d4d7d7fd3b034ed29a55669bf414be836a72a1c57a3de125368ab05ff46d2ce2a561b75dcb2d046b28e5c3a53da42a99fa2aace1f6f92581b5dbad1adcbafdaf8a671f514dc447e643eedf5738a4b27e23edc486db7fa523bc179cf30877a7a915a3dd75387c6db629702b8bb964d8744b0316e932d7e6a01c10256124fb384f55c1597b02083370edcd0f3d45b268438ac2d3420988a76cc0c3ae577c3cb5f46aed599a4fd14c82d38f7c734ea69e0fe637e385b288b4a64aac36163c9fb1a7de616f4c098e7a16374faf370b11b9184ccd2aefdf55cdd4108032f78bcc9af6c6024c5a7e87f892e9b58f3059e0ee20acdd4183adbd670d27b8f2731b7f40e8b4fc8aeb1c2a5b46cbbd0d1aeb5b1538a11a79f726ea8c17e9d8612ff345f33a0e690203fcb397e9b9769f697d0cd084f6b4ed0faf527fdd0a4e41ebd42cc531c3d74740a264d38061cf332b7fb380f093de34d1823f489f3d978377b0b822c4706d482131c0b2d4baa647f9c3dc76fec5ddd363d015eecf4865301bda22a59f78d28de1892f966dadd992bf0da24378fad7f028c4dac40b063f2cad22d499f7cf2ed28b1836593602e378d9fd910bce674a2bbdf8fe2f52e4d603c0fcec3db7528025c2352ba5126f88bd18cc41a4dc452720867e63c41ea2131b88a09f1e1a7dbd1b46e78d81521ab9eea49f583ef98f6cd1ce7679f3ac176312f2adf912ff0f8f4414569c861986fb731185521ca76f6f3e6858f202c644419f4d9fd10befa15806f49b0b2c4824913b9b0a409c4256a5f877c5f68b2accb685a09bb55eca94f3a16c6f77025260835e8d8424c2f4d5850fcec7b519221f5085c281497655d87bdb7fe4c111e2e49433879c7f4b9d472222b26f22e5f95f6b064c56e0bf2c508d2bae80e47117b50c1a6dbff4bcafca25b484eaaeb15c394ae47f6a0b41ddd00a393ded1cb117f9d5966551e552cdd583a5ae0acd5a054d9fd67151954a117234bf643a66b458c30061bd25c56088ba6979689a1bcbb13284f9e2040480faad9e92228ea1d4a1eba150513b08d2a8dd40ff14cf9efa5225c9116ae1554c99e6e90711afc30cd72b93e661a93bf8f936f304f6ad0b42c0b5cd01afb146f9fb18debb37f6d3183a15e3889a6f58e958bccc47e65a68ef3cd86788c757a5476254a300670fce8974d05bf6df8189e60b97e6775f29d6743a0b52f669fcc51d87e160602be912fbd4ef1c7b711d968217704263025a60e8fbbb45c426cd8fa949f659261f66070caf6ffed483593775b5d13d8cdb00f0c18b55f6f7fe9a85267087016666f9be3f131b7c766422eb0be5ac14ebcb7d35abfeaf8d5d472d84a9c33b1db4e76ecd9204ab95999a4dc8940fff55988f8a2925fcce032c3bdfdb64e95b485b02882079798ac543f784578d7bd29db7670d42bcdae1185e8325d500a1c7afdc175b28c4fd359e931f0bfd23a3e402a6f01fcf25e1bd2f54d35de6e34b895cb53a22422db24972d5ddf156233f12495529abcaf1ba5d216c29297d635705c8133f73ebbb09f6b70c281f96aec6df266186e1036aa0d7f35e94c89478e58aebfacdebafe00b258e648bcc097c7ce72fc8c91debe930267e6a0b422986237f7746fe0d86b91d8cf6d0de7769c20ffffed0ec15f121d955f59f7038a8021aa982a9fc421353221ea4748c135d7a0c0586c02e1c02e04e73913ef7ada940d4518784c08c8f289092e304e9b66911f0e56dd0140a44b6e17fb1d1f08b0cf4e48d2af429740b30db08d870ec308c8b2f0f1fdd35a1397cb2c47f44be02d6355d861bdba473ce5aa6b0778db06888a2e6257d4dd6d4a52e129d1c0fe4b4460e95e89376d166c427f8f21edc7aa8be6f9db502b54f45ee0360374354e9d27250c0ddb47be3db707ced6bad82a7320c2630a804ece2ce7e3de0c31821fd7d5c2085bfd6480159edda9634be64f7c0c18dbfe89fe297d93e6095c8373e15c2c5f4955ba267cf9c3615ff23af18c9542b7232efb76da156ecc3817515be3873bedc26a30055d0aa9f7602254cc510fa1ea399f120d1c3d2b64d6e75151e615120d56b6c75a2a94117e7df6aff024c8e2fc0b126c489ef31658ad3d66709d2796fb3184a0b8d361b16e416d054352b2800c2c62219f5f52a358686d200c70b61570d02206576c6f3d05c983f3ad367990ecbd17261d748ea2fbd0a240dbeab45124bde03da64bc9466b9d9a826b65dbd48460deb7122f0fa8cc0e5fc1e4abc560d97cae600054d6fcf678e258b4ae9415ffe236e951b7936885b5df5ca20b87c32adfde0741c380b937b737f56272dea9100049856d657d07fdf97c58991b2dea41d170c9dca04e9f6e0ba08ae052f7bf5f516deb0dc038a8de073209fd84246c78287fb02e6e18d11e6ba48813dcdcf1275ab4d148746e415304e0583e19da573043e85fbfecd73b2b172ece990da7acdadcc8b353ec0953a480e5dc50a5466045330386dc28765fa8317cab735713c3b6fa3071af793273cf04a0c7fc47dc33a1b6c58dc0638187d57953b468cea68db631298f08392d9e42ed0397e228110e9d32d69073263d802b05fed28e775045703314bd3ee7ef14b58398b8a27316aa23cd328ef9a96fc3b67d9ce6cfa7b38d13c96dab345b676ec822c0d7a394dcf76bd844f3a499f37912f0bc5837a99312f28d36b3e5ae0ed29b6088f8f4aeb63f936e8a80f283d2bf878c1a6a2043a714e41c219c1dd1fe2ed6727fd6d87e7a1ccb6d2cb4aa4b773f76b5c10a3371a4e6cf82a8cd7e5b56fcaf2b9c27a7ebb29ffa825818515e134ceab650c6a7ba26f3332ecce6883c80bd45879aa1b0f63a06f62f97ef2f4caf6bb397bbd668e6e8fe84742f7a61f1974298bf82d88ffa920085202b36cfba232ad4f1586d180ce8c76c41c9d3aafd8fe55dbdcaa59b7de1b4e46df884ba9d4aab1b389cf4bbab0b0e19af9e1e2e673d952e696b6f6fb50d4c76f4d4cc909f985e562388dc0a55f322d786eed2ee4b4cc72c239da95786bd235d36d0c518a3996d374b156d0d1d24c8b582ff6168323bef4ab4309842ebfab8cfd2caddfeaff57a7035e3f35ed0833b9f72269cb0022c9ecee64eff15e5a48090927d22f1f3cef4a7b9cb33846c947aff02567e6b3db3fdf456116416bb35cfc5ae8aea91fe148db3e721ff998595c2a04308c67dcf661045660feae1d5a567c5a4f7a986d6dcefc9e6117bf4a7b59957631ba5af68f58e72e5a0b85a8c52602703245de879c3b6ae3c4796b46cecba5b3af274aa3dfb762eb44a9786f364190a55a088c08139bafc8b8c64b3422abb91ac204b70c3f0ef2b0014ed99020c50411c367a46a4c6e5c7ab15dec78379c447a7658446c3136862f7ea8423e78895d99d13af356fd3224180d80677fd13745586c6d9fe4541db5a3ae2f8951f2bc1fb8b137288a6b367f44987bf0f93316aebe48f09c4edc3aafd09ee8667747ba608d20020451fc5e31b6bcd1ea7c873b84afe3eb17d5962961767906ec86164ff5243f5fa185fb6c6edb1ae490da9cd275cfb616f989fd1afee3cdf15ae50c428312ac4fa4a508fed9d5fd02f2d88e98a84e640157a8504b26149bceafa6fc481078418c5f027a76c4434f0d429ff7222e2d0d1a2b83f7573e14b64ee82670be63db45243d2be89e62d7f7af151ade79748d63b28c5403f7f42972d3c5bed4820eb289b5098202fa386e6d67dd3810190c47196976cdee75ea44983a4d95983ffe572dd353e69ede75abb6402910caff5d6a271bdacc55430e00c25738359b2f7e14d0b807649f15d13f72f9ea4a12d447199a941d9c53be2d05fb8f6741ddfa85fc0b020a95d4c1acd85e5f9db5b97522cf7a4ee6c92e7f206b91425a464ecd1ee1bc3565416c69ae22cd59e8cec2a198252a55e2d534e017a1d49f13507619df927d95f1e8d1941e5d22f3de6318c649b57c774fd76ee5dd4eb5ee615d2097a1c01083208497aab6b2c7d41578ee9c3845d028402a3249cc25598068f5ece38d06dba62a0cdcd295a024bfe74172aac2a457bd01238cece4d3c695cc7f714ac3b407fc2ffa1300865541322e31187a08406cd4bb88eafa188269f310a26e12894e8ce7f113094959bece03810c614df3ad7e688723ae01c9ba452ebf6f525b94a772b313ee67f51bc6c70d8b5ae1443a401997b4466381c5d28e4c8", 0x1000}, {&(0x7f0000001b40)="6f60a814f0e6a0aa028de53e7f79eee2264fc545f6e3bcc5ae12b70908e063f070f040a6da5e3fb52872dfbf8c22b7d84158b4f4c19b96f220d5c5256bbdb7ae25a595c42d04e0bb424a02dc588467724d8188319d4de238174bd45897b261d895369b780d93c2590ac9a20905ae888a54785ab3868b6bdf9113fb9b45a2bb8e3c077a581ae3b969114d719fa6af5d862b3432dc5302727cbc653a18f94e39405bd7ef40c520a2266b2e1e6c97e5b18199937c55fa4703549152223f0d91a8938e249ccbbd725ffaf3d679fbc9307d48c4f8668a86be87a376e1ffda629f1cad51948c1bb946fb210d9b1696a498dd8d6e", 0xf1}, {&(0x7f0000001c40)="f0727d65c2e8e9a8ccc6fdceff6b4051329c7309be0334a5b74aa241b5e0f74081cfceff4f4c118918d9fdeec7992dfa835fd1a41f6a76ba9b159058c71261fd539fb36f9534975243e5d5afba8f63356a0b8cf306170463c90cebfc20bf4ed79ef340c38ba202f95176640fd10e32a9dafa9afd059c30cd34f249b4058cdb8ae49f7bb560c3dec7ad6a9b59796f3cb1079d5105c2bee8992732ccd5108eac", 0x9f}, {&(0x7f0000001d00)="31bbe42f9662d4ad11fb7f520d92fbe01cb4628e9578fe2adb9ddbb39e633d3c0ffffb578c04816aef2b9e9b9caf5e43c2afc0becf64969b7b6b17ec2621ce6197fcbd496e7f8b28ffb51931b3c82b538bb0fe792cfe4f79c9c8d8970f5d2ef214ca6e4a05735d9bad8ac9ae1048", 0x6e}, {&(0x7f0000001d80)="86ca17fb0c8cdd4d9d5306398b0ac04b1592e5a265b0de2bcbd69eaf7651b164649a3b2d499adfeddd289e7fb56cbe3fee3fc3bc62b1903b49a23e3d933c391f042b02a57007f1fa1854bb28df79d043a9512efccc047afd5b5dc8d33fbe3f9d435071e1827240588b5f9653298d96c0480fbda639ae97e2b9a44533b6e92355a32740836bea6543ddb22e63fd4d9e8f72da87e35357dfe0f27aa653dadd66297405", 0xa2}, {&(0x7f0000001e40)="e73c1f5e7d0883aae0dd1933ff36e72c2a600370d4762babf7009619c99d6192b30af544a4f94e223ac92353c3bb5a1506522ab8739144410488cba8492ee8142fe8ae2ae94b0e06cb9ed047153891254d88ba259fc7d8d57ed01880f88cb79c590f1c471d46030a8fa2e634d9ed56089e3470dbc2efd2f7fe69bb3feb0be06c962d26f0c43c293634d955da459a168fe8b68c3f71b5b939fb68e04d8a565960fb8f1ea9da28dd2e06ba9fe1ec15aa713605bffa84940d5b7becda02ad85d4b416a7bcb33b5408540e8c3eed9062fbfa5b702e1f248c90d7895e3bdfb38678414e3ef0a9cc064387559c93ead8be92", 0xef}, {&(0x7f0000001f40)="15fd6c1563ce09d992958adeeaad6042dc00b1c97df2cd1d29b51708e05d664b4bf16db0b15ea57adb1ecf2f041b1e741408fdb001104b72b5f7dda7640efc4e646eb3e0aa56c08bcee612ac558247d3283a472069caaf3643afd7e090bdc241e42d7df6dd09e7e75233d6aab19050282695d93d2b15118dd013d784903906483bbae3b9f5624e5152a6f3a851eca41aa087c7e811a05895667888598b6c9495e23f217705548ac089535371996509b27f64d78112e72b10324e988fcab7fc", 0xbf}], 0xa, &(0x7f00000020c0)=ANY=[@ANYBLOB="980000000000000007010000fdffffffa31200be20171bc7016ce850eb849242739351ebcb5a0672f0d928bdab95d9494e56bea441fd95c94d7ba26fe929d2898793e70a997fc175a0bfec7e2e99b74bd869b895f4dd9e4c83e3c486abef285d9e39c884093c316b617a26f98b539dbed7aa87c0d93ef565c3eadb7569b2b3012eb94d3166ea33a016dc3760124f743f2c169d000000000010100000000000001301000005000000ad6127c5a3e19bfa4730d9aa4897e3cf77f9e2a0613601a1bde7001b516abed7dbf05398fb0c05e92316a7a799b139164343fc8cdfb431dc2f2b72a516624dbe583fcfd213180c2a1529233eafa6706ebb5543c0cb8b307ed1f25b089f8ce496e6eec3d71f2caf5690b744912bdb4f2c23c618f1362e5bf4001fa7dd1a574ff1c06bbf5f6502d3b51f81d706ec78c9bc81b1b83237d07a2100335b4d35743e4c944c6689c00b78dd3d657616d7d1fcd0e4b8f03361bbc5389f3a60578dd497f0659f77455cfdc6f06fca794e3068983ac297e411d98ed1d917c86f58f1dd21f3e7c3cbdefb371797629d3044767053b6b7f0a3abfabf90b8bb86c78bef9bc926630e893c982b01e5e7d187e5888758a360f03d28776c5f8dc8645a8ec251774035c344d30d12e75f4638c21fea816edaf650275c96ab0d153495cb9e854116471392a86a40c05e889cbbfa58b7c2b8d0052c670a1a3482d6d94c6cd3168f372d30fc39713dc2693966b9458edf4a3d75e70e1558b15d57c4671e885869b06c88336c01d3d4f024be4352724ed1c3a83c96dae74f8e460435511793f854afd6cfabc0bdafa0a60da45647cccb60411d60094d98c4af679cb3cc8ed1d88b4b2c42f9487bca5075f7cf3fe94289461a1ede0c37cbe63780541dcc040a7763c5592ce08ab84980ae88b7cd3012219da078142d2beaabe7e5597d894178369305591079312786786dca63ddafe7f3f52d20de8434546aaa0f3348cbbd8e77f0fb769bbf33c6d5b5bbdccadef49aef5acdeb2654abfbacfa60eb208df77ebea9c712f849d5aca8d5e55365bc52bebe08589f557decbaa3c5adc265312df20aebb52ec906b3f7b56afa5fae26129d9ba73e63272066d497f99d2119653ba71165b6467ada0fc52109a2c7b0cc2ff9e08706cd54e9b5f788b11f81017b65ad20603378299d31f497f6ffb5c08a94d75f84842da7c206c95c3b853df393191eebf71097ae174ddfc39ffe93bf7ae57f0807e7402d62a02696229f67b73aff48a78c19d03e60e33eb85e003dd5ce85374148dde6595f3bd7eebdbffb1d0433bad22d157db57aa342c27de4b63e357974d9f2583ef84bda88b55b105e2f0255f543f1bc1e90a8fe8385d34349f5dfb0cf6805c2d58d632f8bb7b2d7aec38da9d3962672654dc484f0711d4e17a31130a3797d3a7fce7f10619b439e0cb774468f57ea093e862605d2422b1d5022556f5569774a42f72e6141b907e13b95716be6aaad8f9daa5fe385bf18687717696a973dbd73cb7b10a6ad4a621feada42749a39a1e68f6a10e40dae4b69ef862de36fc754e20952750a050a262d2ce5bdc3051422edbe93600795a8a679fa2502a87201004ed5ffcc9fa548730c87c72b7bb954f92ba5847fd4eff759cbdbfd9247466ff6a08ddef34832ccff63358eed627e8cf11ead911a1deb7895cb645164d0ff1a134b7587031268f129199882cd0752ff251f9b3741c7a5d82b52df9d1845de3b5e0f9a2ac774e4ba06276016fae928322d5feeb5181c780c663b8e7cf49fcb70369f879278ae30d85677cca0e48967367ed74bf9ffa796d9090d02ea665b3984850ae7c2bb7b6f7c515e661be0e4e64665ede6012af537f774e3ab19890c5b407798b6f2555a9080200489040fe8284105cf6b1551bc4e8330b684a62c0133a291403b0c56ca88d35c0dcf21b420ee5a7c83ac10056cc0700586db53f85a5fad538514dffa359e8e45c7926060a9b9d7868fc9af0e92c1afea3abc53f7255c415bc7808f39765da016dacc57633f67a6a36ec92b10e7df29cbb424bf22c4c202111ec56f98e37926fed2bef76b83bcf62babfa8dd4e2d508efbdd812684d105ae6664cfdd8675dc778920a1a9c61ed6b552f4dfa0d052d42ba43fd2f9c322b701013b94ef1f00b36cc615892b0ae72f986b4550136ba71adbc0cb6011a59635a8fbccf96d4875cf1e9673d053f5c9f2a40a39a90c03e0142bf9b5445cbaf4cec083a7b4930b6ace9ce23a639c35da281b3dde67a7746cbadcf37a79a35b261a67c849deb25b25892223d6df8edbc581eabd0c76211280cb4f1ac2f2590098966a5bf7adb714725c752401b4dbedf040c3df12f73c280f5b7f7bcdffccaf8e7764a520bd956bcdd23ced414fec8915efd27ea3190734725a8090661fa3ad206bb89acc03f3516f20656f89ae18328d9e4efcfb226772d8b1f9ff9f8c09fdd53054500abc62d7a2a49147784048d21a10a868ceacbd2c75eb69253909c61e3d1e30be20d414340d22ca6f0d2ea911abe1c8ebda5d36bdc68a00130b3bd63afc98544fc3b58149eac9ac6548f83096d5988792af3105e79608743c905554a1e97fd3adbce6205a4f8076a1fb24e2ff3e1794cf7f09466a9c312255c9f9ad98fcdd9213a6f5f29a71e22259bd88b239de8df7dc77e9c92bb8b619f2427d4542640de29939282dd81a55e1357c80f09774fee548bc1a5d0a83e9aabfe5aa55a191f7ca5f3e385cd520115bb80c1efe4f33aec46b6675c95a53f0dda537b4100fc34f03e63f7875afc1a81b5d927151a292d833e36bdc6abf586f78c324b933ce2d62c6a04afad5b16bcd1e73259596a59b4d9950eb0ba59ef291583d0cb7b29e962fcd1061b24422f6775915fabf3dbc8897452d50d1e2822699ee1cab0f5ae541dd03b532d3eb7e4026673bf271e401fa5f4313e89103beaa69c579f66f7d01ac73fefc527cc78bb40d8194de3a2b73789ec2d87d6db6832e7b34b674e4f805b63f18d0545e18471df8f747def4f494b88548d763ca51a9a54db2fdb9df2e586f7779c4d5e5324efad75c9dd296630f3518181c42453c0dec464fa679d93bf55645729cfd5f15b7d920cbe51381d02fd9bd35a8b6d5bcc9900d04d631af7a1459ab671e3a18c0eee37614a484c68fd591adfc005c508b067b00b2ee5feb71fa48fd242b9122f0dd1bdd838a8800a7241ef131e9978712d51ceb38ec72e245151d0ff2ba0e706763612f8e998cf940d88e78ae702968f6b68d8717bf359e5c5e2841321121443341a28c0967bac331d88380da0ee7aa56c4304a25f6b80c7fb9325ebf4dd05b78a6633ba13dca3f41872244dccda91fa93d672d32ca9ea4485881b95cf3ac8191c3a5f8ea31d51e06a3f78f2af33d9b1bdec12e0bf273a53ff12d1cc50c9cf5144c6341b2fbe5ea7603e0f70a28f5ebccc8476f13ece337385c8f08b5d502629f8b9e62e84adb5cc87a1cfb04e19643c9b1f90b7695dec11accfd6bc0ec9eb9603eabb266c26ee3e958a25177ef08034489a4fd785721ca08f3e3744735387a38a55c6c463f6f5082f6e92e35e035ee3d84b6c68d7924dda2492bd9506011f46c42e668a344fb613178c3e16b693fd7dabb544ed4c65d9cf90417925edde8af18b86ea8d4ba209740ff266c349ded9c039ba12b5f2e20ee816f4b5a2114f9cd6bb2914ecd5b8c4eb20b06dbaf9a4975ea6b47bb68bde57cdde7b6ff653e7ffd429fb4c0432d79cc60d0ffc6d6bdd58f13c86d84059531200348710b446dc719096c05385a0e7467b72a507030bd9d90a3beb628cba96b62ec1277eff36ca5cd6780d5d903f2271eaab0fb51e12332b8e5be06d3196d3fc3628eb935cb694fae8ad7aae053558ad365d352363324a6f053157c6ea010919d3c48c01c165dd43a423f61019b4afd94d93e0bfb90897a748824ebac12b008ab45d93c6bbb334f5ba606a582aba0faf4fd7bf651721735debdfc5ffb4ed4e475859b142aff9581f0b6be2178f3598cdd729ab21392ab2e73a593c921873495a28189ec5a87c5b0de691f7934a5d73ec80290607d33c8ac1c9278adda2b404dd163df0b0995ae0ab0e95b9ac654e5b726455c50556f9ea766a3c026cc7f78bbd62a991221d807f208c0c65466ebb058730886d94b0a3c082ddd49a63b3f121ae410f9890fbe0119163716ea576685d8acfa0e6744ad9c7c4efaceae0893a2967f672c6a48458db4d48c9ba6f114ee8b36775a0dd428f8f45b7d5bf5b6e2c70abad482f02732c029bb4cb6673f6a960b07911d4fda451c39a0f299ae74fe8e7235e16846b1d092ec1a002687d3f6ee1cd11562d4315d5177090d9f122c188a7215c1ead7c73e10c0a60d69beb6bdadc8cdce27ec9c19f7a8c68a6bbba9d0252395d1560ef948db25671901f00f50e68528997ab8124acdb3fe532fd5f6adcaa4d1012e79b0dd45bd085f88d1411f26a17f4a37b07662c585e57c4daa6f8ca282a03a5ceebf23483dc02f12790b76a01ffcc550f556cfb593f5a471f1a3951caed9e243d0fa6003f963d07e887386cb60ccef27c5289a0786f3717ec243154c02b694a0fdcc831d89beeeaf9ef1261d7f074056e340f62b1cd89cea1fbc86461e8e8ee8655241f0020db782845fb5673eb1e524f330d4d050cd69f2ef22d8c608f71a090d3336ead99121c872a277159d1ce6ecba27e5035bd1d816f9913126b17f5fde989faa9cf001e0b88f6571a35dd7f914211afbd51113bb89c85ed74f3b05169e4402e9fe31eb05eb6d46e4cdb9fcc3dd51af72c34fbd8c04be02cf5991db01c5d673458a196a0508a271a798cf925d078ffbc813247b04bf84202603ac370a6e52b00be4c63c93adb6adb9198ff54aec70816a51bbe353f833f0301c429186a1bb7d1c8083fd151da6978ac3d4b16a42c104c30c109bdc8e48b3b3c49cc49bfa216ad6a4c8605f1c452738cc725812e5066d5b3a843d8f057c0e69d1e399906288cb48f833ed9ee1510b7cdec9271558336f8e4a1def476dbdb361c04b5fab6e24b141edf697d4545a45b8b172f305815daadfb329d46fdfd106550d84f43951350fb5a9e7e86d8f080e8fbc6d28d96db2c1889ef87d5de66f723c8c6e326ae93b63eb15905dda12b922f4d256dc125668892f139f2484a4605bc556f3ab551a8f22326eed4fe403d8b4f0dc3aa73dd60723c4cc8326f91724cafc19be918d34cebe1c88c921d4b37631cdeec16a5ef6fa7cb7b4bb40a84f4786c2ecaf515b59e5b95c9fb8d4f553f784e6b544ec0c3ec4063ad07ee72cfb1454623fa4d5efe403ae5a80147014bdcf57ea6533d70c5c6094205c8a34ae098bd1d9cb7cbcb4f1a439a598faa3400800f2be79dea8fa85b94880dcfdd85f8094f6181ba8ab6af652a37377adfe5ddfe1347ec29d3a777096bec8c8e17816a6976f91cb6807a4035dd0c869620883fec0f713c414c55b2c923b2ad27274c28d3b8e54ae4aec113ecff4c19aacbfffd23614d96b4e53576e2a10444bd30a50b94581f8fdc970d52f999f63f8a4c0fcf756d7715273ea881f4264359e40b566dda519dbb24b8a85d665b1c0b4ce73df887ca67e59f1a7b5be5fba932dac74bbad124d8108e3e7f892f9e46ae9afb13c05962c548cd9733eacf9688cac4d34d9b366b6ee789046b1e2a21980543a73efdf6cbbfd31d1f1dd6fdfcbc18efb193fa8ddf55b869c4e356f1c7c78f6991dd254a744fb69b0b7a925830e8b618c5eab8408311f011b655ab602d5c904da02f606282fc9fcdd12ee3c0b15bf84038a7c9683a4f90b973924a8db6d53813940846bcdd03c04137afcaa60a91b4ca6f10e000d3ad9076da537d3e7db235eb011662398a85d1dc5604444ae4e3eef89f41dad9597e514bae9c17c2f6bfe3ad3b75eaafefe337bf0cef222ca79428ddd14a0ce0dabe4f656ad3bbd1ef81e1d76be346eec24d648eb24f83897fe50b9321c5a3f0ab922ec8c5c90f1123ac0338b769764d0072fd7d5064"], 0x10a8}}, {{&(0x7f0000003180)=@sco={0x1f, @none}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)="16b8348283e9dbdcf3bc769fc2138b2685793192fde1cb90676d6137b338b04aa68c5abc35f36ac1dec548aa0dfcca5daabd42cf0fb353fdbc4212437316d19eb7a21aabb0c018eeeef9e444671a29308eef653ed27941ebc3da637fbf6fe0a6a8a5f6ec2bcf6e1da6595c40428384bfe7e0a3ce29395953d0bc9edb5d74a003d979ba8c0d87c90e4164215fff6f91ef2bbb4b7a0583ae12c68b811371f920b29a0c405c9305696f811c5ecede7c3fee2146a725f326a583ae834efa2fa6df61a80b9ab7394c", 0xc6}, {&(0x7f0000000940)="2e2b496510361c5217ff9cbb1d9cde839ca8092493b6fed40d32124fc53b82d5998fd6921fe8053d414613fe3cabb015676a33ddc2fdcf6d", 0x38}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="c8000000000000000201000001000000bcc73d2cdf722b05dd02204ca181f530eeddc3419eea3a5a4826ad73ba4875acc07bb18c2c743890d8656b11a010f6c7cdee36bb4b804f98e3f1446adc0e5734703463ff70b2df9b90ae76b8beb7920250959e767969a9f0a46283c91e0bbdbc66ab657cc2160a02cc6bd9be490dd33c116315a04a67b27f2a211a5f252fb983bf14538f15c6069fdffaf6f87ce749b7af15011bcc01d0b0e3db6e57d82242d25ca2ae39d9128b76c61bca7a5d9676a8e579000000000000f8000000000000000b01000007000000027562bd64694dd16704f32f92ecf89b5945100ac9e28ddaef385b1a91b888a92087cc4184a6e98817940f2066c4912e186df942838f8df5af16fea170f915a6a9c872edb2a44f5b84aece051431deeb16bd9396868d914a46e6d6cc8301230c653b1fb12b28cf5039bee3c70bb806db0d189c6b0edf55f23e47a2fb126e4957796c15ce6034399ce535aaa481c40cbf55b1fa86ed9881f39bbb78836bed5781cb1e28d60fd009764b75810bd0e501d1436e060d38c039f80975c4ab312169560a9e9abb21576f591b067de6642da399468b2276b66d3bc6871f8dcdf4db3ce40173000000000000e80000000000000004010000ff010000d7979222780547a42605e1f9936dbe1ea3020d80a478257c6f7526bba01afa67cc5ae180285311908318f7c2f357a3793c361ef55a5931123493b34cf80aeb353cc5145d935d9d4a22a513ccfaa34039674ec5027c8e8103913dc5926faa585b1a882bb4801c559aac25bff3444c89291bf94d5b89a8a9ae07343f7a44fb4ddae5ae85294c67e3c559692c0b48a01c3af3be5d3a1f157541b9609b8f98fbf61dd9ad55f3532ee9f7b8637da1271a773b825eafc9c43e43b4b3a59c90bd72117938b2cc0bacf878bd98cf0c6f4db1b9fcec17adba44d0939c2e7f8a2d7600000000000040000000000000001601000065000000bcd1325f1ed78cd0776dd8bff2fef7c151413cfacdb6c08675261f1a6117ce0486b292cfe6520987b57ed0048f20740040000000000000000c01000059fb00005e7d6ca44933a87e33abe33e277b7716b7cccc4be5fcf9382b092c109a95afba00365892162d444079b97a0000000000"], 0x328}}, {{&(0x7f0000003680)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003700)="5b08178fd299cc88456cbdcfb1f393bba1f6baaf468d84471fc38d9bd941f42cdad4890c57a3c73b601985c3fd5612f2d52bcf6c5ebf99a7e552b32596a87df1c9a805f439a1693a4aa26a2c8b68b178234bef8d65ee26ae0b4e720d48c8e48487a77b05a8ffc544165193cf45419af319d488d06b2714e7fdf403b45aa8e785663b8e1a70f798ef5673b82bdeed9d0629accc33a6ed04b009bd", 0x9a}, {&(0x7f00000037c0)="79855d0091acc83cad1ef71abad5d99a39f1dd335eed0f291857bff41b79102b450471a521025b06059eba02c5a6cb5a978e95153e2d77e77fd4dcfe6539256497d986d76e07998c6e3a08116c1b87061fe469f49c0997f9059db231913fe0e72f8b5116c83045052a8cc72db98786c112f3c73b75037f5c2c7a4db1997e4e53c9eb55aff9d933eb7dac7aa178f4a0d06df54024e5bfbf481db824cebdb6d0e5a369de", 0xa3}, {&(0x7f0000003880)="08d4ac849b2474d3b7b7d36d10617400610fc1cc1eba66f804d9b027a5bd70d519a85f3b8238b4f721147d085ec883f455ea5685ee907d345928af6ea63bb9f1c3c429844f06136a446dbb43771e6232acf41d4c8b43845cb0e3416b3f2d442307b6059dce754701a9504915", 0x6c}, {&(0x7f0000003900)="a22500ef7929a4133393726946612ae518e9fc40c51203c4af163eabcf32e72325ec13a06ad42c8ba781fa1669c0f53316b9485eedad9bf06331e6b5d81580a524c72001955a237383e98b8cd27738dbef121eae836eb6c1b1b4ff580368e66ac1fe23873447f93568edf3edd1285618a161", 0x72}, {&(0x7f0000003980)="c4805917b2fa360813d1270f5100b8c992769bb11faafc7d90d6d4a0bff5a0afce5213fe308960219fecb9794ef075d45c2917c97084c36ec9187804d2fadc4a128a7836a9f86c6cc99b771f1ba62ca65a45c650d16209a9e33252904bf8b291e508164132b03ba144d20a264f825dd16aa2ba3900ecebad0d1f23576b4d5d58972eaeb1e81895ba8e8a1dd189f6dcb3a81ce7554a7234cd9dbd95774b25c633907b37e278d50c5c6035b3b583111128c306067909bf2630366e763d95e3ab90c047e4b7856f981c926dc167bca74d0ef6", 0xd1}], 0x5, &(0x7f0000003b00)=[{0x28, 0x114, 0xff000000, "f94d1d237d6a06d626eb182a756d788930d1ddf904"}, {0x48, 0x109, 0x8, "0c9f00c2848283e766839088e1d1a5d029ba7e7c49d4bddf82d8c09cc03ac0dbfe9223b73f8e66722cdf6b99c59353e16091f3e65f15"}], 0x70}}, {{&(0x7f0000003b80)=@isdn={0x22, 0x0, 0x8, 0xed, 0x80}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)="8a73e4c21bc235ab0a9953a748d33966203e5849cec8f111d869b0d760a3bee627d5191a8dbd3e12fafb06f9f5df7571f0d45afb0e821f84662d1a7b13fe26b28a98403a78fe5f3679e8325feb5c14096ac77a939621b1ea62a1aab4c40eaf910b2843b3981927767aad96612ed6714be6c5029d4e98a02332b33037d445a4959bc6dad74ad690c91dc1441c833e6c39dd50c0822e4c49536e51ed689cc3488cbf876ade95ebef10e759f088713d39471088c937b1cdafd5d9686e966ec2b421fbd9ed43781a7c", 0xc7}, {&(0x7f0000003d00)="ce7e40c08deb653222ea3d85a69fe09d5594e34e827caf4411069f4d1cf28a4848010aa21145f33e637e98a2281b2205adc336367e9d917855a0e0c1e07df42ad139ab54c4bbc1c17bf79342d187abc263e51de38459101dbbe820a369b10779187f2974a1ef7087f7b90746378d0270cf62220ca8e6f5b34223148786f27f43772c068b35cfaaf60509d6ef1d7bdda58e8ca4b1ace56c73705dc5e8b1fde3143390bcdb4fe24147c98785a24076f8d77e0003e80f7238d27210bc72ef0b718f0bc76582f68cad3081696267a71abffa75ec396b93b6ab121d5e3fc4c3947834847ee3d4a5c1", 0xe6}, {&(0x7f0000003e00)="ca1449a17221f981b38e78b6430636b8ffa5280b45b985f92ede5279399194f67fb03a8139e426f5c5ead04e9496d146fc916bf208131f9605a9dc9ba09f2daf17dcc538341d00b6c08b3a74ef3ff7080c088168f01fe547e4d0d637412213fc3c076351685fc5cfa16365d34005967e5b796b036e47e5833ee3b0073c989f832d15ff0e02769accfadfbb67884e86392e202445b6067fadd178d3aa336a6e3eeb62307fe8f1f46d72d81052bf438eb920cb0b9a2815304cd660de18cd24c4bc3f26b7fa8a6694eb94347bc276b75b615745c3b53b71ffd173df7959004692ce8093dcf7", 0xe4}], 0x3}}], 0x5, 0x2400c005) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000300)) 5.977826865s ago: executing program 0 (id=431): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @enum64={0x2, 0x8, 0x0, 0x13, 0x0, 0x5, [{0x5, 0x6, 0x4}, {0x6, 0x4, 0x5}, {0xd, 0x7, 0x3}, {0x3, 0x6, 0x7}, {0x7, 0x827, 0x1}, {0xa, 0xffffffff, 0x11fc}, {0xd, 0x4, 0x7}, {0x9, 0xab, 0x10}]}, @fwd={0x2}, @struct={0x2, 0x2, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x2, 0xb}, {0x9, 0x3, 0xfffffe00}]}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb}, {0xf, 0x1}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f, 0x0, 0x61, 0x0, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000180)=""/14, 0x102, 0xe, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = io_uring_setup(0x6af6, &(0x7f0000000200)={0x0, 0xa1e5, 0x80, 0x2, 0x247}) syz_io_uring_setup(0x19a3, &(0x7f0000000280)={0x0, 0xee8d, 0x200, 0x0, 0x5, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 5.774840697s ago: executing program 0 (id=432): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x0, 0x2, 0x0, 0x3}, 'syz1\x00', 0x2}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r4, 0x5501) r6 = socket(0x18, 0x1, 0x0) accept4$netrom(r6, 0x0, 0x0, 0x80000) sendmsg$inet(r1, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 5.324793833s ago: executing program 0 (id=434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.628993057s ago: executing program 4 (id=435): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) process_madvise(r0, &(0x7f0000000840)=[{&(0x7f0000000200)="8368afe98484ea79a920f60c15b5bcf02f9013ca805d7a891979be6d428d7f1aaed389cc1f80b9e7af101c732971e5819a2f2aa000b4baed8425193312d0f73580ee2491675eb11f0ab9008b72d784563c512b99174496d468", 0x59}, {&(0x7f00000002c0)="8ed0dc43874af1ed9c6eb9b0f1440f1baf13bf76af797a343183258e278755b5e361d801091a8d14534c0baa07dcf31501efe1b3084ee2dcf46fc17627414fbb9f30f64f45d264c3b64d6eaacb2c96f18b3ce6ba8b5f5636af8d3b9a83bb6a4df6fdd36eb1ca2928843268e51d03cb99b22ca04800d11ee61d6cfc9ddc4ba0c891d32806", 0x84}, {&(0x7f0000000140)="2be905c8b7f89520c1727b54", 0xc}, {&(0x7f0000000380)="521ef25ac501a91c4ce37cca4b657d2962201ccce7b8b4e3bbbbed9b1cba305caa9da9e3677439e367068bd19b13dd731544166c2e10a6eb2f97711240b6f69774582d0ab83172c1c3898e08a957831a1b7f47163ac6e89b1222155dff1c86e8c45e850981e8fe62040d5a29a03a582037f0c406223b8d336a42af11e2bf082bb585ed8187b099b4202f12e94adbb2210490bf26e0e1287587bb21b61b307a5a8c0a9d09982a9b49b213b941227825e87a4f407a9b27048d46c3d7d920013de7b5cb91a9c8d72f58dac927e75d4d63b158a968c2a6aa28e519a86054b54c", 0xde}, {&(0x7f0000000480)="9bff113a931dc32a0c0080262c107ae39b5dd8129459a66512", 0x19}, {&(0x7f00000004c0)="9b2e1567ee0401c0ff34967a16982ec34928456c11e3741f393668b3f61cf7ebbfab1e57253e8fd6928023a130200431269982cf9205997402a3648d2d36baa1542f373e37c254b018335e5e1c28689d225ced01752a7eee607ba943a705032c298a89a1a4aa15edcab75714662113b7838435d148e370832a08f46f1ac21719cfca6cebb84d3e903bb44ba0add02f2c919292f7d506a66836c1b6274aa0f86ae40addc204447a14640641a89a8b19ec9c1e9febf4694f29a2e49bd425ea3e985ec951819194d74e03ce68", 0xcb}, {&(0x7f00000005c0)="b31ca84c2fd5523a4a5aba1c3f7389dce65d0dc6dee68a2d8d51cd327d9bfc093956bf67a13e6de80bbb416f10d92cfce1342e7af257d70b1e4e39d5a96205422547116e93d91d3c72ac8c2cca8705527fe94fa97e7c1c9f1e0ea3f5a0b6aaf4ef659d89d546dc57a674f4964cbc545dc04c32f7b868ecff0237514d442c1e015ec1c58f3c62283d8a0ba9ad531fd0987daa0801", 0x94}, {&(0x7f0000000680)="cff080987dc88dbf715069aa53eda9bd7092cea2ae721201013dcee7e02fd37b2c4be4bc0e70fbfbec5e2bf643e0b002257c4f3726e4e312c010e5222906ea25dfbed8daf8843fb652494feeff265c0a1b7f41fcff1964bef88b357284e2fd71feea372705e8a92f4e8b78f07f01414598b613dc3639abc1e5777225d302b5c2d3c1fbf46e3d6e867226c1102fcb6ea6b10d6e7a42b939bdb32569d019f4acdc778036578b2223926e1e5a5a16f4429752a64652c61b6d39de622785f9245f6ac6044adce40694aeecb0cc4d010227e4df45c836890e4817ffa93c79c8a37045ed923991b8c058bdd583ed5cacda53c5c4119690", 0xf4}, {&(0x7f0000000780)="5c16ccfaefdaf62b672afe8a3f3f276ab8ff5bc7d24e6dbfee68ef29b60131bfa9b65d0f14c8aa12e74c47244ec54fa332063363676aafc2d915a14d88209c9d32b58db35b2e82177356d694829684000b7a5d33420f", 0x56}, {&(0x7f0000000800)="a3ce1f54843b2b45b97e73da77a0ca07200849f8", 0x14}], 0xa, 0x16, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x201, 0x4800003e, r9, 0x0) mount$cgroup(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x40006, &(0x7f0000000980)={[{@cpuset_v2_mode}], [{@context={'context', 0x3d, 'staff_u'}}, {@appraise_type}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x76, 0x9c, 0xa6, 0x8, 0x16d8, 0x7006, 0x3e60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x5, 0x6, 0x2, 0xa, 0x25, 0xb8, 0x0, [], [{{0x9, 0x5, 0x8c, 0x0, 0x400, 0x80, 0x9, 0x3}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x1, 0x5, 0x9}}]}}]}}]}}, 0x0) 4.506932035s ago: executing program 0 (id=436): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x30) prctl$PR_SET_SECUREBITS(0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095000000000000003218f5b7317d5f91829201"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x8001, 0x2, 0x1) pipe2$9p(&(0x7f0000000140), 0x80080) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x200102) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x80) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) mkdir(&(0x7f0000000300)='./bus\x00', 0x5b) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x1011643, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r0, 0x0, 0x4014) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="81000082802e04"], 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) 4.474829003s ago: executing program 1 (id=437): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x7, 0x2, 0x1, "1d4147c9de93be2d32a5a5bfd07daa440e5f6bb2050f4f335649399a3b4c7c2c", 0x4a3d5840}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x6000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='raw'], &(0x7f0000000000)=0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x39, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x3000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004680), 0x40000, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000010000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b37c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac6433"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) syz_open_dev$sndctrl(&(0x7f0000000040), 0xa, 0x240) 4.380652959s ago: executing program 1 (id=438): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x80010, 0xffffffffffffffff, 0x32ec4000) sched_setaffinity(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000240)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000002c0)=""/162, 0xa2}, 0x5}, {{&(0x7f0000000740)=@llc, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/155, 0x9b}], 0x1, &(0x7f00000008c0)=""/196, 0xc4}, 0x8}], 0x2, 0x10002, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff41) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) 3.830767872s ago: executing program 4 (id=439): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008a}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x4, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffbfffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x7b, 0x1, 0x80000001, 0x5, 0x7, 0x6, 0x3ff}, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000080)={0x1, 0xece}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r7], 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xa60b, 0x14b180) ioctl$SNDRV_PCM_IOCTL_STATUS64(r8, 0x80984120, &(0x7f0000000500)) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$alg(0x26, 0x5, 0x0) 3.276438842s ago: executing program 1 (id=440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000"], 0x7c}}, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x80}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffd, {0x0, 0x0, 0x1}, 0x1}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="8c8dd26e9fa5ba5546e82bd11b41de96693b023e6c7cadcd7e9386a31387", 0x1e}, {0x0}, {&(0x7f0000000640)="e4626e4e9052ee", 0x7}, {0x0}], 0x4}, 0x48014) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x34bd2b, 0x0, {0x0, 0x0, 0x74, r8, {0x6, 0x4}, {0x6, 0xfff2}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x300010) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000ae000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x0, 0x8f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r10, 0x40045431, &(0x7f00000001c0)) 3.2158364s ago: executing program 2 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) msgsnd(0x0, 0xfffffffffffffffe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x10000, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r5, 0x0, 0x3, 0x1}}, 0x20) (fail_nth: 4) 2.526039555s ago: executing program 4 (id=442): socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0xa481, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="58004e0002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274000000000c000780080008400000004873013afc8f70d9b6cfe5303891da99c744e58e267151baa20c94835363841b209d55c282c962a4a336bdca36daa7f775982ff6a4e8636444cd58"], 0x58}}, 0x2) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000002d80)={0x0, 0x1, &(0x7f0000002c80)=[0x0], &(0x7f0000002cc0), 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000026c0)={'batadv0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000000, 0x9, 0x8, 0x3, 0x6, 0x1ff, 0x0, 0x79c1, 0x2, 0x4, 0x4, 0x0, 0xa82, 0x9, 0x8, 0x4, 0x7, 0x7, 0x53, 0xf41, 0x6, 0x9, 0x7, 0x4, 0x2, 0x23e23e4c, 0x4, 0xa9fc, 0x5f4e, 0x2, 0x0, 0x4, 0x0, 0x1, 0x2, 0x80000001, 0x8, 0x0, 0x2, 0x401, 0x8001, 0x93, 0x0, 0x1, 0xf8e, 0x1ff, 0xe, 0x1, 0x5, 0x4, 0xedf6, 0x8000, 0x8c, 0x0, 0x3, 0x1b, 0x4, 0x5, 0xc, 0x1, 0x8, 0x2, 0xff, 0xcf69, 0x0, 0x5, 0x7f, 0x800000, 0x43, 0x0, 0x4, 0x80000000, 0x2000000, 0x6, 0xfffffff9, 0x4, 0x3, 0x2, 0x6, 0x9, 0x4, 0x5, 0x5, 0x9, 0x6fbe, 0x7, 0xaff, 0xc3e0, 0x2, 0x8, 0xffffffff, 0x7, 0x1, 0xffffffff, 0x4, 0x3ff, 0x10000, 0xff98, 0xa58, 0x4, 0x9, 0x73b, 0x5, 0x8, 0x7, 0x1, 0xfffffffb, 0x3, 0x3ff, 0xf, 0xf3d4, 0x7, 0x4, 0x8, 0x4, 0xb412, 0x80000000, 0x100, 0x7ff, 0x8, 0x9, 0x30, 0x7fffffff, 0x401, 0x69, 0x5, 0x8, 0xa1], "c2f4369613d6417b92c11748809fc2"}}) 2.068081439s ago: executing program 2 (id=443): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x45}, 0xfffffffd, 0x2}, 0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(r3, 0x9) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) prlimit64(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) memfd_create(0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c800c, &(0x7f0000000280)={0xa, 0xe25, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r7, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaabb00000000000088a84500810000000519a5e980f0954d66f8742116d84369dccec72c80c30e575e3e775222ab4e317103e0ab350ca91fdda82ca7c0cf475fdb627f0e5c78a616a0f4e310"], 0x0) 1.850537242s ago: executing program 4 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x3d, 0x107, 0x10, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x2}]}]}, 0x30}}, 0xc000) 1.746960727s ago: executing program 1 (id=445): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) r5 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r5, &(0x7f0000002680)=[{0x0}, {&(0x7f0000000700)='\x00', 0x1}], 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000031201003400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x10000000007e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x4, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x5, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x5, 0x5, 0x8, 0x6, 0x2b, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x7ff, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') 1.746539757s ago: executing program 4 (id=446): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="39000000140081ae00002c000500015601618575e285af018025408a63a1dfee6fa171b0d8402fdea2000000171300883795c04a75ba377a1b", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmmsg(r0, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2002, 0x0) 1.67936479s ago: executing program 3 (id=447): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 784.640458ms ago: executing program 1 (id=448): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0x7, 0x2, 0x1, "1d4147c9de93be2d32a5a5bfd07daa440e5f6bb2050f4f335649399a3b4c7c2c", 0x4a3d5840}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x6000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB='raw'], &(0x7f0000000000)=0x28) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x39, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r7, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x3000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004680), 0x40000, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000010000000000040100800c0000000000000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b37c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac6433"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) syz_open_dev$sndctrl(&(0x7f0000000040), 0xa, 0x240) 723.129447ms ago: executing program 0 (id=449): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18e400000000000000dd00"/24], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x298) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r7, 0x2, 0x9, 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r8 = timerfd_create(0x0, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000200)) r10 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x80000000, 0x402) ioctl$MON_IOCH_MFLUSH(r10, 0x9208, 0x400000000000000) timerfd_settime(r8, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r11, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {0x1}, {0xf}, @queue={0xf, {0x5, 0xffff2a30}}}], 0x1c) iopl(0x3) 614.904218ms ago: executing program 4 (id=450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000180)=@urb_type_iso={0x0, {0x1, 0x1}, 0x100003, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x0, 0xc877, 0xfffffffe, 0x0}) 591.883932ms ago: executing program 3 (id=451): syz_open_dev$sndctrl(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x6c09, 0x0, 0x0, &(0x7f0000000a40)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000280), 0xea47, 0x40881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llTR'}, {0x20, 'ax\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) accept$nfc_llcp(r0, &(0x7f0000000200), &(0x7f0000000300)=0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 0s ago: executing program 1 (id=452): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000dd00000007ea677b6a6286332f197f905e4c0f0a00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) sync() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000019000100000000000000000002000000000000e1"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) kernel console output (not intermixed with test programs): DUID 00:04:48:2f:83:80:5e:82:2f:af:2e:03:8c:bf:d4:14:8e:03 no interfaces have a carrier [ 40.913185][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.926103][ T5490] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. syzkaller login: [ 64.946565][ T5808] cgroup: Unknown subsys name 'net' [ 65.065549][ T5808] cgroup: Unknown subsys name 'cpuset' [ 65.073748][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.496570][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.822757][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.831995][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.840440][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.846388][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.848465][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.855997][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.863639][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.869523][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.876217][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.884007][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.891483][ T5824] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.904788][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.904945][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.912157][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.930769][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.934689][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.940574][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.946492][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.965360][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.969511][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.973421][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.982585][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.003731][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.015169][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.029478][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.037572][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.045110][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.045196][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.061264][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.069149][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.525115][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.536084][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.547155][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.598133][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.630856][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 69.775882][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.785326][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.793418][ T5820] bridge_slave_0: entered allmulticast mode [ 69.800168][ T5820] bridge_slave_0: entered promiscuous mode [ 69.841073][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.848536][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.855963][ T5820] bridge_slave_1: entered allmulticast mode [ 69.863880][ T5820] bridge_slave_1: entered promiscuous mode [ 69.877387][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.884759][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.892369][ T5818] bridge_slave_0: entered allmulticast mode [ 69.898905][ T5818] bridge_slave_0: entered promiscuous mode [ 69.929038][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.936230][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.943674][ T5826] bridge_slave_0: entered allmulticast mode [ 69.950256][ T5826] bridge_slave_0: entered promiscuous mode [ 69.965909][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.973833][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.981028][ T5829] bridge_slave_0: entered allmulticast mode [ 69.988168][ T5829] bridge_slave_0: entered promiscuous mode [ 69.995862][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.003201][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.010370][ T5818] bridge_slave_1: entered allmulticast mode [ 70.017069][ T5818] bridge_slave_1: entered promiscuous mode [ 70.033574][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.041097][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.050489][ T5835] bridge_slave_0: entered allmulticast mode [ 70.057731][ T5835] bridge_slave_0: entered promiscuous mode [ 70.065662][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.073136][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.080623][ T5826] bridge_slave_1: entered allmulticast mode [ 70.087765][ T5826] bridge_slave_1: entered promiscuous mode [ 70.100865][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.108107][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.115408][ T5829] bridge_slave_1: entered allmulticast mode [ 70.122214][ T5829] bridge_slave_1: entered promiscuous mode [ 70.148964][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.158964][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.168704][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.176382][ T5835] bridge_slave_1: entered allmulticast mode [ 70.184395][ T5835] bridge_slave_1: entered promiscuous mode [ 70.199895][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.211572][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.231683][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.264053][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.284436][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.296288][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.323217][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.335649][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.346686][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.383319][ T5818] team0: Port device team_slave_0 added [ 70.413769][ T5820] team0: Port device team_slave_0 added [ 70.429429][ T5818] team0: Port device team_slave_1 added [ 70.449110][ T5835] team0: Port device team_slave_0 added [ 70.457546][ T5835] team0: Port device team_slave_1 added [ 70.466566][ T5826] team0: Port device team_slave_0 added [ 70.474986][ T5820] team0: Port device team_slave_1 added [ 70.484187][ T5829] team0: Port device team_slave_0 added [ 70.491875][ T5829] team0: Port device team_slave_1 added [ 70.525736][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.532977][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.559915][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.572995][ T5826] team0: Port device team_slave_1 added [ 70.579333][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.586448][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.613475][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.675909][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.683810][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.711336][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.723945][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.731004][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.757622][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.779425][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.787840][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.814067][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.825645][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.836034][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.862390][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.895452][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.905594][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.931713][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.944505][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.951481][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.977580][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.989488][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.996542][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.022919][ T5831] Bluetooth: hci0: command tx timeout [ 71.027903][ T5827] Bluetooth: hci1: command tx timeout [ 71.028869][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.051161][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.058361][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.085229][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.095980][ T5827] Bluetooth: hci4: command tx timeout [ 71.096017][ T5831] Bluetooth: hci2: command tx timeout [ 71.117783][ T5818] hsr_slave_0: entered promiscuous mode [ 71.124419][ T5818] hsr_slave_1: entered promiscuous mode [ 71.172154][ T5831] Bluetooth: hci3: command tx timeout [ 71.215297][ T5826] hsr_slave_0: entered promiscuous mode [ 71.221700][ T5826] hsr_slave_1: entered promiscuous mode [ 71.228220][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.236710][ T5826] Cannot create hsr debugfs directory [ 71.261525][ T5820] hsr_slave_0: entered promiscuous mode [ 71.271167][ T5820] hsr_slave_1: entered promiscuous mode [ 71.277399][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.285392][ T5820] Cannot create hsr debugfs directory [ 71.303924][ T5829] hsr_slave_0: entered promiscuous mode [ 71.310035][ T5829] hsr_slave_1: entered promiscuous mode [ 71.316839][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.324866][ T5829] Cannot create hsr debugfs directory [ 71.334501][ T5835] hsr_slave_0: entered promiscuous mode [ 71.340716][ T5835] hsr_slave_1: entered promiscuous mode [ 71.346937][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.354585][ T5835] Cannot create hsr debugfs directory [ 71.693806][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.707724][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.717910][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.730066][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.796260][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.816329][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.818248][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.825460][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.855939][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.887787][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.910944][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.935130][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.947691][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.965259][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.014320][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.038838][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.061868][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.073198][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.091543][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.098850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.110666][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.120444][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.144649][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.151738][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.230702][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.253718][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.264404][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.279862][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.319534][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.372545][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.431365][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.444162][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.468663][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.475836][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.538381][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.545603][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.569081][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.589258][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.617406][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.624601][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.640853][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.648181][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.699763][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.737874][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.766795][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.773965][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.790206][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.839843][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.847079][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.901219][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.924226][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.973481][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.980612][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.029912][ T5818] veth0_vlan: entered promiscuous mode [ 73.059139][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.066361][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.099788][ T5831] Bluetooth: hci0: command tx timeout [ 73.099798][ T5827] Bluetooth: hci1: command tx timeout [ 73.117160][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.129377][ T5818] veth1_vlan: entered promiscuous mode [ 73.161966][ T5826] veth0_vlan: entered promiscuous mode [ 73.175158][ T5831] Bluetooth: hci2: command tx timeout [ 73.175164][ T5827] Bluetooth: hci4: command tx timeout [ 73.227516][ T5826] veth1_vlan: entered promiscuous mode [ 73.251420][ T5818] veth0_macvtap: entered promiscuous mode [ 73.258171][ T5827] Bluetooth: hci3: command tx timeout [ 73.304595][ T5820] veth0_vlan: entered promiscuous mode [ 73.313110][ T5818] veth1_macvtap: entered promiscuous mode [ 73.321542][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.349666][ T5820] veth1_vlan: entered promiscuous mode [ 73.368721][ T5826] veth0_macvtap: entered promiscuous mode [ 73.409407][ T5826] veth1_macvtap: entered promiscuous mode [ 73.427794][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.477545][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.500004][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.511661][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.524031][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.537378][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547076][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.556372][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.565730][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.585107][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.595860][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.607171][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.633912][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.642709][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.651405][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.660733][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678778][ T5820] veth0_macvtap: entered promiscuous mode [ 73.688721][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.718636][ T5820] veth1_macvtap: entered promiscuous mode [ 73.770769][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.788761][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.799529][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.810402][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.830111][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.861611][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.879011][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.890459][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.908848][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.920158][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.931122][ T5829] veth0_vlan: entered promiscuous mode [ 73.952250][ T5829] veth1_vlan: entered promiscuous mode [ 73.993104][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.001872][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.012794][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021611][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.068589][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.081538][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.129867][ T5829] veth0_macvtap: entered promiscuous mode [ 74.177172][ T5829] veth1_macvtap: entered promiscuous mode [ 74.185907][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.195258][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.230196][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.238086][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.238136][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.255093][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.289237][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.300171][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.316957][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.328119][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.338327][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.348801][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.362544][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.384347][ T5835] veth0_vlan: entered promiscuous mode [ 74.420571][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.434857][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.446449][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.457476][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.468488][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.476715][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.481599][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.506459][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.515995][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.519163][ T5835] veth1_vlan: entered promiscuous mode [ 74.531255][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.557588][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.574467][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.604354][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.622186][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.630958][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.670428][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.732281][ T5835] veth0_macvtap: entered promiscuous mode [ 74.791699][ T5906] x_tables: duplicate entry at hook 2 [ 74.794341][ T5835] veth1_macvtap: entered promiscuous mode [ 75.173132][ T5827] Bluetooth: hci0: command tx timeout [ 75.182104][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.195697][ T5827] Bluetooth: hci1: command tx timeout [ 75.198518][ T5911] FAULT_INJECTION: forcing a failure. [ 75.198518][ T5911] name failslab, interval 1, probability 0, space 0, times 1 [ 75.252871][ T5827] Bluetooth: hci4: command tx timeout [ 75.257661][ T5911] CPU: 1 UID: 0 PID: 5911 Comm: syz.3.4 Not tainted 6.14.0-rc4-syzkaller #0 [ 75.257687][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.257701][ T5911] Call Trace: [ 75.257710][ T5911] [ 75.257719][ T5911] dump_stack_lvl+0x241/0x360 [ 75.257750][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.257772][ T5911] ? __pfx__printk+0x10/0x10 [ 75.257796][ T5911] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 75.257813][ T5911] ? __pfx___might_resched+0x10/0x10 [ 75.257837][ T5911] should_fail_ex+0x40a/0x550 [ 75.257862][ T5911] should_failslab+0xac/0x100 [ 75.257885][ T5911] ? __get_vm_area_node+0x132/0x2d0 [ 75.257901][ T5911] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 75.257922][ T5911] __get_vm_area_node+0x132/0x2d0 [ 75.257943][ T5911] __vmalloc_node_range_noprof+0x344/0x1380 [ 75.257961][ T5911] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.257983][ T5911] ? mark_lock+0x9a/0x360 [ 75.258024][ T5911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.258050][ T5911] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.258068][ T5911] __vmalloc_noprof+0x79/0x90 [ 75.258085][ T5911] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.258106][ T5911] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.258124][ T5911] ? bpf_prog_alloc+0x28/0x1b0 [ 75.258146][ T5911] bpf_prog_alloc+0x3a/0x1b0 [ 75.258166][ T5911] bpf_prog_load+0x7f4/0x20e0 [ 75.258199][ T5911] ? __pfx_bpf_prog_load+0x10/0x10 [ 75.258218][ T5911] ? __pfx___might_resched+0x10/0x10 [ 75.258247][ T5911] ? __might_fault+0xaa/0x120 [ 75.258270][ T5911] __sys_bpf+0x4ea/0x820 [ 75.258288][ T5911] ? __pfx___sys_bpf+0x10/0x10 [ 75.258314][ T5911] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.258335][ T5911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.258355][ T5911] ? do_syscall_64+0x100/0x230 [ 75.258380][ T5911] __x64_sys_bpf+0x7c/0x90 [ 75.258397][ T5911] do_syscall_64+0xf3/0x230 [ 75.258416][ T5911] ? clear_bhb_loop+0x35/0x90 [ 75.258441][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.258460][ T5911] RIP: 0033:0x7f54d6d8d169 [ 75.258475][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.258487][ T5911] RSP: 002b:00007f54d7bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.258504][ T5911] RAX: ffffffffffffffda RBX: 00007f54d6fa5fa0 RCX: 00007f54d6d8d169 [ 75.258515][ T5911] RDX: 0000000000000070 RSI: 00004000000000c0 RDI: 0000000000000005 [ 75.258525][ T5911] RBP: 00007f54d7bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 75.258534][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.258544][ T5911] R13: 0000000000000000 R14: 00007f54d6fa5fa0 R15: 00007ffcb81683c8 [ 75.258568][ T5911] [ 75.258874][ T5911] syz.3.4: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 75.267823][ T5831] Bluetooth: hci2: command tx timeout [ 75.290999][ T5911] ,cpuset= [ 75.296815][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.331650][ T5911] / [ 75.337309][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.372096][ T5831] Bluetooth: hci3: command tx timeout [ 75.374908][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.423278][ T5915] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 75.428362][ T5911] ,mems_allowed=0-1 [ 75.442636][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.460783][ T5911] [ 75.470270][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.606703][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.3.4 Not tainted 6.14.0-rc4-syzkaller #0 [ 75.606729][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.606738][ T5911] Call Trace: [ 75.606745][ T5911] [ 75.606752][ T5911] dump_stack_lvl+0x241/0x360 [ 75.606777][ T5911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.606793][ T5911] ? __pfx__printk+0x10/0x10 [ 75.606822][ T5911] ? __rcu_read_unlock+0xa1/0x110 [ 75.606845][ T5911] warn_alloc+0x278/0x410 [ 75.606869][ T5911] ? __pfx_warn_alloc+0x10/0x10 [ 75.606886][ T5911] ? __kasan_kmalloc+0x23/0xb0 [ 75.606913][ T5911] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 75.606934][ T5911] ? __get_vm_area_node+0x280/0x2d0 [ 75.606963][ T5911] __vmalloc_node_range_noprof+0x369/0x1380 [ 75.606983][ T5911] ? mark_lock+0x9a/0x360 [ 75.607023][ T5911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.607049][ T5911] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.607069][ T5911] __vmalloc_noprof+0x79/0x90 [ 75.607087][ T5911] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.607107][ T5911] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 75.607125][ T5911] ? bpf_prog_alloc+0x28/0x1b0 [ 75.607147][ T5911] bpf_prog_alloc+0x3a/0x1b0 [ 75.607167][ T5911] bpf_prog_load+0x7f4/0x20e0 [ 75.607199][ T5911] ? __pfx_bpf_prog_load+0x10/0x10 [ 75.607218][ T5911] ? __pfx___might_resched+0x10/0x10 [ 75.607249][ T5911] ? __might_fault+0xaa/0x120 [ 75.607273][ T5911] __sys_bpf+0x4ea/0x820 [ 75.607294][ T5911] ? __pfx___sys_bpf+0x10/0x10 [ 75.607323][ T5911] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 75.607345][ T5911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.607367][ T5911] ? do_syscall_64+0x100/0x230 [ 75.607390][ T5911] __x64_sys_bpf+0x7c/0x90 [ 75.607408][ T5911] do_syscall_64+0xf3/0x230 [ 75.607427][ T5911] ? clear_bhb_loop+0x35/0x90 [ 75.607449][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.607468][ T5911] RIP: 0033:0x7f54d6d8d169 [ 75.607482][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.607494][ T5911] RSP: 002b:00007f54d7bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.607512][ T5911] RAX: ffffffffffffffda RBX: 00007f54d6fa5fa0 RCX: 00007f54d6d8d169 [ 75.607523][ T5911] RDX: 0000000000000070 RSI: 00004000000000c0 RDI: 0000000000000005 [ 75.607533][ T5911] RBP: 00007f54d7bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 75.607543][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.607552][ T5911] R13: 0000000000000000 R14: 00007f54d6fa5fa0 R15: 00007ffcb81683c8 [ 75.607575][ T5911] [ 75.607605][ T5911] Mem-Info: [ 75.679235][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.718854][ T5911] active_anon:333 inactive_anon:4637 isolated_anon:0 [ 75.718854][ T5911] active_file:3304 inactive_file:35959 isolated_file:0 [ 75.718854][ T5911] unevictable:768 dirty:1597 writeback:0 [ 75.718854][ T5911] slab_reclaimable:9579 slab_unreclaimable:95606 [ 75.718854][ T5911] mapped:28486 shmem:1424 pagetables:813 [ 75.718854][ T5911] sec_pagetables:0 bounce:0 [ 75.718854][ T5911] kernel_misc_reclaimable:0 [ 75.718854][ T5911] free:1347017 free_pcp:646 free_cma:0 [ 75.722278][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.739401][ T5911] Node 0 active_anon:1332kB inactive_anon:18548kB active_file:13144kB inactive_file:143836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113944kB dirty:6380kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 75.746286][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.756657][ T5911] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 75.766267][ T5911] Node 0 [ 75.792744][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.792769][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.792779][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.792840][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.792879][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.792918][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.792955][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.792995][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.795092][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.845585][ T5911] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.940841][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.019583][ T5911] lowmem_reserve[]: [ 76.024833][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067524][ T5911] 0 [ 76.076999][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094803][ T5911] 2490 [ 76.097052][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.111806][ T5911] 2490 [ 76.128394][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.152120][ T5911] 0 [ 76.178547][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.235844][ T5911] 0 [ 76.245276][ T5911] Node 0 DMA32 free:1464516kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:1328kB inactive_anon:18512kB active_file:12872kB inactive_file:143784kB unevictable:1536kB writepending:6376kB present:3129332kB managed:2550360kB mlocked:0kB bounce:0kB free_pcp:836kB local_pcp:384kB free_cma:0kB [ 76.276645][ T5911] lowmem_reserve[]: 0 0 0 0 0 [ 76.281466][ T5911] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:272kB inactive_file:52kB unevictable:0kB writepending:4kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 76.311496][ T5911] lowmem_reserve[]: 0 0 0 0 0 [ 76.317492][ T5911] Node 1 Normal free:3909356kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 76.347327][ T5911] lowmem_reserve[]: 0 0 0 0 0 [ 76.353083][ T5911] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.366589][ T5911] Node 0 DMA32: 255*4kB (UM) 73*8kB (UM) 11*16kB (UME) 21*32kB (UME) 5*64kB (UE) 2*128kB (UE) 2*256kB (ME) 5*512kB (ME) 6*1024kB (UME) 5*2048kB (M) 352*4096kB (M) = 1464276kB [ 76.387723][ T5911] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 76.400817][ T5911] Node 1 Normal: 226*4kB (UME) 65*8kB (UME) 38*16kB (UME) 215*32kB (UME) 98*64kB (UME) 32*128kB (UME) 18*256kB (UM) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3909456kB [ 76.471666][ T5911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.542065][ T5911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.573952][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.592004][ T5911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.601628][ T5911] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.615167][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.626458][ T5911] 40755 total pagecache pages [ 76.656803][ T5911] 0 pages in swap cache [ 76.661020][ T5911] Free swap = 124996kB [ 76.661032][ T5911] Total swap = 124996kB [ 76.661042][ T5911] 2097051 pages RAM [ 76.661049][ T5911] 0 pages HighMem/MovableOnly [ 76.661056][ T5911] 427737 pages reserved [ 76.661063][ T5911] 0 pages cma reserved [ 76.820669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.848317][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.921046][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.947810][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.212121][ T5936] process 'syz.3.8' launched './file0' with NULL argv: empty string added [ 77.253457][ T5831] Bluetooth: hci1: command tx timeout [ 77.259332][ T5831] Bluetooth: hci0: command tx timeout [ 77.343139][ T5827] Bluetooth: hci2: command tx timeout [ 77.348837][ T5827] Bluetooth: hci4: command tx timeout [ 77.412269][ T5831] Bluetooth: hci3: command tx timeout [ 78.212648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.251987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.332536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.416500][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.558890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.568058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.661274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.670846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.811475][ T5876] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.964237][ T5876] usb 1-1: device descriptor read/64, error -71 [ 79.017390][ T5951] Bluetooth: MGMT ver 1.23 [ 79.030940][ T5951] ======================================================= [ 79.030940][ T5951] WARNING: The mand mount option has been deprecated and [ 79.030940][ T5951] and is ignored by this kernel. Remove the mand [ 79.030940][ T5951] option from the mount to silence this warning. [ 79.030940][ T5951] ======================================================= [ 79.294524][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.456721][ T5876] usb 1-1: device descriptor read/64, error -71 [ 80.312916][ T5876] usb usb1-port1: attempt power cycle [ 82.482107][ T5876] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.537528][ T58] cfg80211: failed to load regulatory.db [ 82.562997][ T5876] usb 1-1: device descriptor read/8, error -71 [ 82.585657][ T5976] sctp: failed to load transform for md5: -2 [ 83.390255][ T5999] fuse: Unknown parameter 'usdr_id' [ 84.252426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.261218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.270105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.725182][ T6022] netlink: 'syz.4.28': attribute type 2 has an invalid length. [ 85.770831][ T6022] : entered promiscuous mode [ 85.906028][ T29] audit: type=1326 audit(1740405165.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6003 comm="syz.3.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7fc00000 [ 87.905822][ T6023] overlayfs: overlapping lowerdir path [ 89.031524][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.722969][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.822138][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.976341][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.004874][ T8] usb 4-1: config 3 has no interfaces? [ 90.010432][ T8] usb 4-1: New USB device found, idVendor=12d1, idProduct=1401, bcdDevice= 0.00 [ 90.024207][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.213018][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 90.978447][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 90.992948][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 91.003094][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 91.025245][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 91.044100][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.140675][ T9] usb 1-1: config 0 descriptor?? [ 91.526338][ T9] hdpvr 1-1:0.0: firmware version 0x6d dated ð¦Â´í÷ªŒ’e\@^ë1«yØÀpŸHoîAÝqÎyÜάۛXñH¢ [ 91.899724][ T9] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 93.028659][ T9] hdpvr 1-1:0.0: Could not setup controls [ 93.055992][ T9] hdpvr 1-1:0.0: registering videodev failed [ 93.163925][ T9] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 93.196719][ T9] usb 1-1: USB disconnect, device number 6 [ 93.399456][ T8] usb 4-1: USB disconnect, device number 2 [ 93.426035][ T6061] mmap: syz.2.40 (6061) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.967620][ T6083] usb usb6: usbfs: process 6083 (syz.1.45) did not claim interface 0 before use [ 95.540965][ T6092] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 95.926155][ T6109] overlayfs: overlapping lowerdir path [ 95.982698][ T8] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 96.022649][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'. [ 96.150018][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 96.182734][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.206112][ T8] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 96.229864][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.276537][ T8] usb 4-1: config 0 descriptor?? [ 97.170090][ T8] aquacomputer_d5next 0003:0C70:F0BD.0001: unknown main item tag 0x3 [ 97.200333][ T8] aquacomputer_d5next 0003:0C70:F0BD.0001: item fetching failed at offset 2/5 [ 97.350274][ T6129] netlink: 'syz.4.56': attribute type 3 has an invalid length. [ 97.358033][ T6129] netlink: 'syz.4.56': attribute type 2 has an invalid length. [ 97.932327][ T8] aquacomputer_d5next 0003:0C70:F0BD.0001: probe with driver aquacomputer_d5next failed with error -22 [ 98.066412][ T5876] usb 4-1: USB disconnect, device number 3 [ 98.177033][ T6132] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 99.497844][ T5900] IPVS: starting estimator thread 0... [ 99.812247][ T6154] IPVS: using max 30 ests per chain, 72000 per kthread [ 100.468158][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 101.233478][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'. [ 101.294357][ T6165] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 101.720236][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 101.940954][ T6170] netlink: 'syz.3.69': attribute type 1 has an invalid length. [ 102.227540][ T6176] Zero length message leads to an empty skb [ 103.158806][ T6179] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 103.166337][ T6179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.199912][ T6179] vhci_hcd vhci_hcd.0: Device attached [ 103.282016][ T6184] vhci_hcd: connection closed [ 103.307237][ T1148] vhci_hcd: stop threads [ 103.328923][ T1148] vhci_hcd: release socket [ 103.370408][ T1148] vhci_hcd: disconnect device [ 103.552537][ T6194] overlayfs: overlapping lowerdir path [ 105.551787][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.077173][ T6227] IPVS: length: 121 != 24 [ 106.506179][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.723461][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.152194][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.318748][ T6240] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 107.328621][ T6240] veth1_vlan: entered allmulticast mode [ 107.368278][ T6240] team0: Device veth1_vlan failed to register rx_handler [ 107.673136][ T9] usb 4-1: config 0 descriptor?? [ 107.968080][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.029896][ T6240] syz.2.87 (6240) used greatest stack depth: 18520 bytes left [ 108.047107][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.495694][ T6248] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 108.697627][ T9] ath6kl: Failed to submit usb control message: -71 [ 108.725234][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 108.742832][ T9] ath6kl: Unable to send get target info: -71 [ 108.762416][ T6250] ./cgroup: Can't lookup blockdev [ 108.794162][ T9] ath6kl: Failed to init ath6kl core: -71 [ 108.830760][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 108.892629][ T9] usb 4-1: USB disconnect, device number 4 [ 109.093358][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.282387][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 109.291875][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.302013][ T5876] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 109.322459][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.354285][ T5876] usb 3-1: Product: syz [ 109.370207][ T5876] usb 3-1: Manufacturer: syz [ 109.382257][ T5876] usb 3-1: SerialNumber: syz [ 109.402714][ T5876] usb 3-1: config 0 descriptor?? [ 109.835697][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.120803][ T5876] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 110.150075][ T9] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 110.161114][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.181251][ T9] usb 5-1: config 0 has no interface number 0 [ 110.192045][ T9] usb 5-1: config 0 interface 87 has no altsetting 0 [ 110.213610][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0002, bcdDevice=ad.ce [ 110.229036][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.947980][ T9] usb 5-1: Product: syz [ 110.958062][ T9] usb 5-1: Manufacturer: syz [ 110.964495][ T9] usb 5-1: SerialNumber: syz [ 110.974441][ T9] usb 5-1: config 0 descriptor?? [ 111.026485][ T9] usb 5-1: selecting invalid altsetting 1 [ 111.072360][ T9] usb 5-1: Can not set alternate setting to 1, error: -22 [ 111.102173][ T9] synaptics_usb 5-1:0.87: probe with driver synaptics_usb failed with error -22 [ 111.312576][ T9] usb 5-1: USB disconnect, device number 2 [ 112.512173][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.652085][ T5908] usb 4-1: device descriptor read/64, error -71 [ 112.892172][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.052990][ T5908] usb 4-1: device descriptor read/64, error -71 [ 113.163917][ T5908] usb usb4-port1: attempt power cycle [ 113.179470][ T6290] overlayfs: overlapping lowerdir path [ 113.533077][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.580448][ T5908] usb 4-1: device descriptor read/8, error -71 [ 113.832936][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.874852][ T5908] usb 4-1: device descriptor read/8, error -71 [ 113.985609][ T5908] usb usb4-port1: unable to enumerate USB device [ 115.622127][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.782892][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 115.791472][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.800534][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.811588][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.819555][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.828806][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.840450][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.849691][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.858726][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.869863][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.878541][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.887647][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.898855][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.907373][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.916378][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.927332][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.936524][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.945706][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.956747][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 115.964582][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.044740][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.052462][ T6306] bridge0: entered promiscuous mode [ 116.112894][ T5907] usb 3-1: USB disconnect, device number 2 [ 116.123785][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.184580][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.236155][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.268935][ T6306] bridge0: left promiscuous mode [ 116.304902][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.358677][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.499910][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 116.822153][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.871723][ T9] usb 4-1: Product: syz [ 116.888532][ T9] usb 4-1: Manufacturer: syz [ 116.962452][ T9] usb 4-1: SerialNumber: syz [ 117.114165][ T9] usb 4-1: config 0 descriptor?? [ 117.222109][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 117.258007][ T6332] overlayfs: overlapping lowerdir path [ 117.352225][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.497018][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.508036][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.523467][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 117.532023][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 117.539450][ T5876] usb 4-1: USB disconnect, device number 9 [ 117.554885][ T5876] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 117.570287][ T5908] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.703762][ T5908] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 117.739237][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.773990][ T6309] netlink: 'syz.3.108': attribute type 287 has an invalid length. [ 117.823361][ T5908] usb 3-1: Product: syz [ 117.843191][ T5908] usb 3-1: Manufacturer: syz [ 117.858730][ T5908] usb 3-1: SerialNumber: syz [ 117.899967][ T5908] usb 3-1: config 0 descriptor?? [ 118.159001][ T6351] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure [ 118.585829][ T6367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.395713][ T6377] netlink: 80 bytes leftover after parsing attributes in process `syz.3.122'. [ 121.398958][ T6394] overlayfs: failed to resolve './file1': -2 [ 121.425220][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.523557][ T5876] usb 3-1: USB disconnect, device number 3 [ 121.712197][ T5907] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.722135][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.735631][ T6398] syz.4.129: attempt to access beyond end of device [ 121.735631][ T6398] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 121.772358][ T5907] usb 1-1: config 0 descriptor?? [ 121.779770][ T5907] cp210x 1-1:0.0: cp210x converter detected [ 122.080314][ T6407] capability: warning: `syz.2.130' uses 32-bit capabilities (legacy support in use) [ 122.226374][ T6413] FAULT_INJECTION: forcing a failure. [ 122.226374][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 122.242033][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.3.132 Not tainted 6.14.0-rc4-syzkaller #0 [ 122.242061][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.242071][ T6413] Call Trace: [ 122.242077][ T6413] [ 122.242084][ T6413] dump_stack_lvl+0x241/0x360 [ 122.242109][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.242124][ T6413] ? __pfx__printk+0x10/0x10 [ 122.242147][ T6413] ? fs_reclaim_acquire+0x93/0x130 [ 122.242166][ T6413] ? __pfx___might_resched+0x10/0x10 [ 122.242182][ T6413] ? dynamic_dname+0x144/0x1b0 [ 122.242210][ T6413] should_fail_ex+0x40a/0x550 [ 122.242237][ T6413] should_failslab+0xac/0x100 [ 122.242261][ T6413] __kmalloc_noprof+0xdd/0x4c0 [ 122.242276][ T6413] ? tomoyo_encode+0x26f/0x540 [ 122.242297][ T6413] tomoyo_encode+0x26f/0x540 [ 122.242315][ T6413] ? __pfx_sockfs_dname+0x10/0x10 [ 122.242336][ T6413] tomoyo_realpath_from_path+0x59e/0x5e0 [ 122.242364][ T6413] tomoyo_path_number_perm+0x239/0x770 [ 122.242385][ T6413] ? __lock_acquire+0x1397/0x2100 [ 122.242408][ T6413] ? tomoyo_path_number_perm+0x209/0x770 [ 122.242431][ T6413] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 122.242489][ T6413] ? __fget_files+0x2a/0x410 [ 122.242508][ T6413] ? __fget_files+0x2a/0x410 [ 122.242529][ T6413] security_file_ioctl+0xc6/0x2a0 [ 122.242554][ T6413] __se_sys_ioctl+0x46/0x170 [ 122.242576][ T6413] do_syscall_64+0xf3/0x230 [ 122.242596][ T6413] ? clear_bhb_loop+0x35/0x90 [ 122.242619][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.242639][ T6413] RIP: 0033:0x7f54d6d8d169 [ 122.242654][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.242667][ T6413] RSP: 002b:00007f54d7bbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.242684][ T6413] RAX: ffffffffffffffda RBX: 00007f54d6fa5fa0 RCX: 00007f54d6d8d169 [ 122.242696][ T6413] RDX: 0000400000000040 RSI: 0000000000008b22 RDI: 0000000000000003 [ 122.242706][ T6413] RBP: 00007f54d7bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 122.242716][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.242725][ T6413] R13: 0000000000000000 R14: 00007f54d6fa5fa0 R15: 00007ffcb81683c8 [ 122.242751][ T6413] [ 122.475217][ T6413] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.482186][ T6413] warning: `syz.3.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.032213][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.192101][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 123.250085][ T5907] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 123.261613][ T5907] cp210x 1-1:0.0: querying part number failed [ 123.337814][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.353505][ T9] usb 4-1: config 0 has no interface number 0 [ 123.367446][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.385932][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.393800][ T5907] usb 1-1: cp210x converter now attached to ttyUSB0 [ 123.407788][ T9] usb 4-1: Product: syz [ 123.426499][ T5907] usb 1-1: USB disconnect, device number 7 [ 123.430529][ T9] usb 4-1: Manufacturer: syz [ 123.430554][ T9] usb 4-1: SerialNumber: syz [ 123.438194][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.474520][ T5907] cp210x 1-1:0.0: device disconnected [ 123.475313][ T9] usb 4-1: config 0 descriptor?? [ 123.564132][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.788235][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.807649][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.982655][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.110586][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.294037][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 124.510328][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.528310][ T5876] usb 4-1: USB disconnect, device number 10 [ 124.731686][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.783031][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 125.107324][ T5876] quatech2 4-1:0.51: device disconnected [ 125.561330][ T6451] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.570469][ T6451] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.579374][ T6451] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.588371][ T6451] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.597306][ T6451] geneve2: entered allmulticast mode [ 126.391557][ T6458] netlink: 'syz.0.145': attribute type 3 has an invalid length. [ 126.399388][ T6458] netlink: 'syz.0.145': attribute type 2 has an invalid length. [ 127.347691][ T6468] team0: No ports can be present during mode change [ 127.373783][ T6468] vlan0: entered promiscuous mode [ 127.437801][ T6468] team0: Port device vlan0 added [ 127.479894][ T6460] mmap: syz.0.146 (6460): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 127.672186][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.923014][ T5908] usb 3-1: device descriptor read/64, error -71 [ 128.085663][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.952041][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 128.963613][ T9] usb 2-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 128.980427][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.993342][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.003581][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.011743][ T9] usb 2-1: Product: syz [ 129.016693][ T9] usb 2-1: Manufacturer: syz [ 129.021325][ T9] usb 2-1: SerialNumber: syz [ 129.027700][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.182054][ T5908] usb 3-1: device descriptor read/64, error -71 [ 129.292248][ T5908] usb usb3-port1: attempt power cycle [ 129.432314][ T9] usb 2-1: 0:2 : does not exist [ 129.531206][ T9] usb 2-1: USB disconnect, device number 2 [ 129.743287][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.835182][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.884614][ T5908] usb 3-1: device descriptor read/8, error -71 [ 133.210949][ T6572] overlayfs: failed to set uuid (29/file1, err=-1); falling back to uuid=null. [ 133.257157][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.265858][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.274500][ T6573] veth0_to_team: entered promiscuous mode [ 133.291667][ T6572] overlayfs: failed to verify upper root origin [ 133.312080][ T6573] veth0_to_team: entered allmulticast mode [ 133.346470][ T6577] Cannot find add_set index 0 as target [ 133.600344][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.862044][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 133.915209][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 134.166496][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.178161][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.190238][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.212058][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.220194][ T9] usb 2-1: Product: syz [ 134.229658][ T9] usb 2-1: Manufacturer: syz [ 134.234852][ T9] usb 2-1: SerialNumber: syz [ 134.479026][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.104380][ T5876] usb 4-1: device descriptor read/64, error -71 [ 135.500336][ T9] usb 2-1: 0:2 : does not exist [ 135.919301][ T5876] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.192950][ T5876] usb 4-1: device descriptor read/64, error -71 [ 136.322289][ T5876] usb usb4-port1: attempt power cycle [ 136.562411][ T5872] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.773065][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.783563][ T5872] usb 1-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 136.795975][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.806262][ T5876] usb 4-1: device descriptor read/8, error -71 [ 136.813776][ T5872] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.824867][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.833751][ T5872] usb 1-1: SerialNumber: syz [ 137.052238][ T5876] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 137.095859][ T5876] usb 4-1: device descriptor read/8, error -71 [ 137.196722][ T9] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 137.215907][ T5876] usb usb4-port1: unable to enumerate USB device [ 137.240646][ T5872] usb 1-1: 0:2 : does not exist [ 137.255726][ T9] usb 2-1: USB disconnect, device number 3 [ 137.263301][ T5872] usb 1-1: unit 9 not found! [ 137.341084][ T5872] usb 1-1: USB disconnect, device number 8 [ 137.905584][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.065138][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 142.248557][ T6652] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 142.312099][ T6652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.186'. [ 143.777795][ T6669] FAULT_INJECTION: forcing a failure. [ 143.777795][ T6669] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.885747][ T6669] CPU: 1 UID: 0 PID: 6669 Comm: syz.1.191 Not tainted 6.14.0-rc4-syzkaller #0 [ 143.885773][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.885783][ T6669] Call Trace: [ 143.885790][ T6669] [ 143.885797][ T6669] dump_stack_lvl+0x241/0x360 [ 143.885822][ T6669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.885839][ T6669] ? __pfx__printk+0x10/0x10 [ 143.885863][ T6669] ? __pfx_lock_release+0x10/0x10 [ 143.885893][ T6669] should_fail_ex+0x40a/0x550 [ 143.885919][ T6669] _copy_from_user+0x2d/0xb0 [ 143.885940][ T6669] __sys_bpf+0x1be/0x820 [ 143.885962][ T6669] ? __pfx___sys_bpf+0x10/0x10 [ 143.885994][ T6669] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.886017][ T6669] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.886040][ T6669] ? do_syscall_64+0x100/0x230 [ 143.886074][ T6669] __x64_sys_bpf+0x7c/0x90 [ 143.886093][ T6669] do_syscall_64+0xf3/0x230 [ 143.886113][ T6669] ? clear_bhb_loop+0x35/0x90 [ 143.886137][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.886158][ T6669] RIP: 0033:0x7f184d18d169 [ 143.886173][ T6669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.886186][ T6669] RSP: 002b:00007f184e02b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.886204][ T6669] RAX: ffffffffffffffda RBX: 00007f184d3a5fa0 RCX: 00007f184d18d169 [ 143.886216][ T6669] RDX: 0000000000000048 RSI: 0000400000000100 RDI: 0000000000000000 [ 143.886226][ T6669] RBP: 00007f184e02b090 R08: 0000000000000000 R09: 0000000000000000 [ 143.886236][ T6669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.886245][ T6669] R13: 0000000000000001 R14: 00007f184d3a5fa0 R15: 00007ffc882400d8 [ 143.886271][ T6669] [ 144.312636][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.483500][ T9] usb 5-1: config 0 has no interfaces? [ 144.489197][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.506130][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.563589][ T9] usb 5-1: config 0 descriptor?? [ 144.813325][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.835132][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.049225][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.062219][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.286695][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.314368][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.333113][ T5872] usb 5-1: USB disconnect, device number 3 [ 145.644853][ T6697] netlink: 'syz.2.199': attribute type 3 has an invalid length. [ 145.652677][ T6697] netlink: 'syz.2.199': attribute type 2 has an invalid length. [ 146.251208][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 146.628850][ T6709] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 146.644029][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.652100][ T6709] netlink: 224 bytes leftover after parsing attributes in process `syz.2.203'. [ 146.672330][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.686291][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.697006][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.706293][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.728313][ T6695] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.747281][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.849161][ T5872] usb 5-1: device descriptor read/64, error -71 [ 147.084720][ T9] usb 4-1: USB disconnect, device number 15 [ 147.250105][ T29] audit: type=1326 audit(1740405226.977:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.273495][ T29] audit: type=1326 audit(1740405226.977:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f869178bc1f code=0x7ffc0000 [ 147.298431][ T29] audit: type=1326 audit(1740405226.977:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.324772][ T29] audit: type=1326 audit(1740405226.977:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.346807][ T29] audit: type=1326 audit(1740405226.977:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.368851][ T29] audit: type=1326 audit(1740405226.977:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.393277][ T29] audit: type=1326 audit(1740405226.977:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.416234][ T29] audit: type=1326 audit(1740405226.977:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.439489][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.463808][ T29] audit: type=1326 audit(1740405226.977:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.490754][ T29] audit: type=1326 audit(1740405226.977:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6729 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f869178d169 code=0x7ffc0000 [ 147.642840][ T5907] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.676674][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.747213][ T5907] usb 3-1: config 0 descriptor?? [ 148.358670][ T6744] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 148.372119][ T6744] netlink: 224 bytes leftover after parsing attributes in process `syz.1.215'. [ 148.433797][ T5907] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 148.451077][ T5907] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 148.452379][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 148.466281][ T5907] [drm:udl_init] *ERROR* Selecting channel failed [ 148.788586][ T5907] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 148.823074][ T5907] [drm] Initialized udl on minor 2 [ 148.886559][ T5907] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 149.034091][ T5907] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 149.058845][ T5900] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 149.079623][ T5907] usb 3-1: USB disconnect, device number 8 [ 149.132630][ T5900] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 149.587300][ T6768] FAULT_INJECTION: forcing a failure. [ 149.587300][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 149.600704][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.4.223 Not tainted 6.14.0-rc4-syzkaller #0 [ 149.600725][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.600734][ T6768] Call Trace: [ 149.600740][ T6768] [ 149.600747][ T6768] dump_stack_lvl+0x241/0x360 [ 149.600771][ T6768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.600788][ T6768] ? __pfx__printk+0x10/0x10 [ 149.600813][ T6768] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 149.600830][ T6768] ? __pfx___might_resched+0x10/0x10 [ 149.600848][ T6768] ? rcu_is_watching+0x15/0xb0 [ 149.600867][ T6768] should_fail_ex+0x40a/0x550 [ 149.600892][ T6768] should_failslab+0xac/0x100 [ 149.600917][ T6768] __kmalloc_node_noprof+0xe1/0x4d0 [ 149.600932][ T6768] ? __kvmalloc_node_noprof+0x72/0x190 [ 149.600949][ T6768] ? seq_read_iter+0xb4/0xd70 [ 149.600972][ T6768] __kvmalloc_node_noprof+0x72/0x190 [ 149.600991][ T6768] traverse+0xd6/0x550 [ 149.601021][ T6768] seq_read_iter+0xc8c/0xd70 [ 149.601058][ T6768] seq_read+0x3a9/0x4f0 [ 149.601075][ T6768] ? mark_lock+0x9a/0x360 [ 149.601101][ T6768] ? __pfx_seq_read+0x10/0x10 [ 149.601148][ T6768] ? __pfx_seq_read+0x10/0x10 [ 149.601164][ T6768] proc_reg_read+0x201/0x2f0 [ 149.601183][ T6768] ? __pfx_proc_reg_read+0x10/0x10 [ 149.601202][ T6768] vfs_read+0x1f8/0xb40 [ 149.601229][ T6768] ? __pfx_vfs_read+0x10/0x10 [ 149.601244][ T6768] ? do_sys_openat2+0x17a/0x1d0 [ 149.601263][ T6768] ? __fget_files+0x2a/0x410 [ 149.601280][ T6768] ? __fget_files+0x395/0x410 [ 149.601294][ T6768] ? __fget_files+0x2a/0x410 [ 149.601318][ T6768] __x64_sys_pread64+0x1ac/0x240 [ 149.601340][ T6768] ? __pfx___x64_sys_pread64+0x10/0x10 [ 149.601361][ T6768] ? do_syscall_64+0x100/0x230 [ 149.601384][ T6768] ? do_syscall_64+0xb6/0x230 [ 149.601406][ T6768] do_syscall_64+0xf3/0x230 [ 149.601424][ T6768] ? clear_bhb_loop+0x35/0x90 [ 149.601448][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.601468][ T6768] RIP: 0033:0x7f869178d169 [ 149.601484][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.601497][ T6768] RSP: 002b:00007f869256a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 149.601521][ T6768] RAX: ffffffffffffffda RBX: 00007f86919a6080 RCX: 00007f869178d169 [ 149.601533][ T6768] RDX: 0000000000001007 RSI: 0000400000001600 RDI: 0000000000000007 [ 149.601543][ T6768] RBP: 00007f869256a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.601552][ T6768] R10: 0000000000000097 R11: 0000000000000246 R12: 0000000000000001 [ 149.601562][ T6768] R13: 0000000000000000 R14: 00007f86919a6080 R15: 00007fff0dd8d528 [ 149.601588][ T6768] [ 150.482887][ T6780] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 151.388262][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.552344][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.781427][ T6785] FAULT_INJECTION: forcing a failure. [ 151.781427][ T6785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.792106][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 151.796323][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.4.228 Not tainted 6.14.0-rc4-syzkaller #0 [ 151.796346][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.796355][ T6785] Call Trace: [ 151.796361][ T6785] [ 151.796367][ T6785] dump_stack_lvl+0x241/0x360 [ 151.796392][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.796407][ T6785] ? __pfx__printk+0x10/0x10 [ 151.796435][ T6785] ? snprintf+0xda/0x120 [ 151.796453][ T6785] should_fail_ex+0x40a/0x550 [ 151.796478][ T6785] _copy_to_user+0x31/0xb0 [ 151.796499][ T6785] simple_read_from_buffer+0xca/0x150 [ 151.796532][ T6785] proc_fail_nth_read+0x1e9/0x250 [ 151.796556][ T6785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.796581][ T6785] ? rw_verify_area+0x243/0x630 [ 151.796599][ T6785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.796622][ T6785] vfs_read+0x1f8/0xb40 [ 151.796641][ T6785] ? fdget_pos+0x254/0x320 [ 151.796658][ T6785] ? __pfx___mutex_lock+0x10/0x10 [ 151.796677][ T6785] ? __pfx_vfs_read+0x10/0x10 [ 151.796699][ T6785] ? __fget_files+0x2a/0x410 [ 151.796715][ T6785] ? __fget_files+0x395/0x410 [ 151.796728][ T6785] ? __fget_files+0x2a/0x410 [ 151.796752][ T6785] ksys_read+0x18f/0x2b0 [ 151.796772][ T6785] ? __pfx_ksys_read+0x10/0x10 [ 151.796791][ T6785] ? do_syscall_64+0x100/0x230 [ 151.796813][ T6785] ? do_syscall_64+0xb6/0x230 [ 151.796833][ T6785] do_syscall_64+0xf3/0x230 [ 151.796852][ T6785] ? clear_bhb_loop+0x35/0x90 [ 151.796875][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.796893][ T6785] RIP: 0033:0x7f869178bb7c [ 151.796908][ T6785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.796921][ T6785] RSP: 002b:00007f869258b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.796938][ T6785] RAX: ffffffffffffffda RBX: 00007f86919a5fa0 RCX: 00007f869178bb7c [ 151.796949][ T6785] RDX: 000000000000000f RSI: 00007f869258b0a0 RDI: 0000000000000003 [ 151.796958][ T6785] RBP: 00007f869258b090 R08: 0000000000000000 R09: 0000000000000000 [ 151.796968][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.796977][ T6785] R13: 0000000000000001 R14: 00007f86919a5fa0 R15: 00007fff0dd8d528 [ 151.797001][ T6785] [ 152.207903][ T6794] tipc: Can't bind to reserved service type 0 [ 152.253070][ T9] usb 3-1: device descriptor read/64, error -71 [ 152.270095][ T6795] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 152.287620][ T6795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.232'. [ 152.362057][ T5907] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.373356][ T9] usb usb3-port1: attempt power cycle [ 152.552240][ T5900] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 152.662135][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 152.900673][ T5907] usb 5-1: no configurations [ 152.907054][ T5907] usb 5-1: can't read configurations, error -22 [ 152.934855][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.972795][ T9] usb 3-1: device descriptor read/8, error -71 [ 153.042184][ T5907] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.050208][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 153.186724][ T5900] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 153.197423][ T5900] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 153.210893][ T5900] usb 4-1: config 135 has no interface number 0 [ 153.219474][ T5900] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 153.232108][ T5872] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 153.477915][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.610595][ T9] usb 3-1: device descriptor read/8, error -71 [ 153.705980][ T5872] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.717564][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.755910][ T9] usb usb3-port1: unable to enumerate USB device [ 153.777044][ T5872] usb 1-1: config 0 has no interface number 0 [ 153.838873][ T5900] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 153.845042][ T5872] usb 1-1: config 0 interface 2 altsetting 5 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.878815][ T5900] usb 4-1: config 135 interface 230 has no altsetting 0 [ 153.887952][ T5900] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 153.899441][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.908007][ T5900] usb 4-1: Product: syz [ 153.912767][ T5900] usb 4-1: Manufacturer: syz [ 153.917493][ T5900] usb 4-1: SerialNumber: syz [ 153.929314][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 153.956959][ T5872] usb 1-1: config 0 interface 2 altsetting 5 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.966864][ T5872] usb 1-1: config 0 interface 2 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.966901][ T5907] usb 5-1: no configurations [ 154.013487][ T5872] usb 1-1: config 0 interface 2 has no altsetting 0 [ 154.020178][ T5872] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 154.026812][ T5907] usb 5-1: can't read configurations, error -22 [ 154.045799][ T5907] usb usb5-port1: attempt power cycle [ 154.053534][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.070515][ T5872] usb 1-1: config 0 descriptor?? [ 154.077665][ T5872] hso 1-1:0.2: Failed to find INT IN ep [ 154.144429][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.159859][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.275111][ T6816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.339125][ T5900] usb 4-1: USB disconnect, device number 16 [ 154.412263][ T5907] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 154.516581][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 154.571485][ T5907] usb 5-1: no configurations [ 154.615271][ T5907] usb 5-1: can't read configurations, error -22 [ 154.792093][ T5907] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.974044][ T5907] usb 5-1: device descriptor read/8, error -71 [ 155.083017][ T5907] usb usb5-port1: unable to enumerate USB device [ 155.267891][ T6828] fuse: Unknown parameter '' [ 155.653026][ T5907] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 155.704610][ T5908] usb 1-1: USB disconnect, device number 9 [ 155.832016][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 155.960250][ T6840] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 156.040373][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.054312][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.066631][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 156.088849][ T6840] netlink: 224 bytes leftover after parsing attributes in process `syz.1.244'. [ 156.116230][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.336324][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.350331][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.361781][ T5907] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.369988][ T5907] usb 3-1: Manufacturer: syz [ 156.383667][ T5907] usb 3-1: config 0 descriptor?? [ 156.450542][ T6848] ipt_REJECT: ECHOREPLY no longer supported. [ 156.600781][ T6830] IPVS: set_ctl: invalid protocol: 2 172.20.20.31:20004 [ 157.856301][ T6866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.898879][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.062189][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 158.080621][ T9] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.106506][ T9] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 158.139751][ T9] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 158.170353][ T9] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 158.206712][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 158.235987][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.259039][ T9] usb 2-1: Product: syz [ 158.273139][ T9] usb 2-1: Manufacturer: syz [ 158.289120][ T9] usb 2-1: SerialNumber: syz [ 158.293525][ T5900] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.321544][ T9] hso 2-1:6.0: Can't find BULK IN endpoint [ 159.082052][ T5907] rc_core: IR keymap rc-hauppauge not found [ 159.089402][ T5900] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 159.097887][ T5907] Registered IR keymap rc-empty [ 159.108038][ T5900] usb 1-1: config 0 has no interface number 0 [ 159.116064][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.123503][ T5900] usb 1-1: config 0 interface 82 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 159.134979][ T5900] usb 1-1: config 0 interface 82 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 159.350441][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.380479][ T5900] usb 1-1: New USB device found, idVendor=1b3d, idProduct=9305, bcdDevice=98.5d [ 159.401387][ T5907] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 159.413584][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.421607][ T5900] usb 1-1: Product: syz [ 159.434022][ T5900] usb 1-1: Manufacturer: syz [ 159.439140][ T5907] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 159.452114][ T5900] usb 1-1: SerialNumber: syz [ 159.460840][ T5900] usb 1-1: config 0 descriptor?? [ 159.476498][ T6865] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 159.484436][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.492109][ T6865] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 159.502676][ T5900] ftdi_sio 1-1:0.82: FTDI USB Serial Device converter detected [ 159.511752][ T5900] ftdi_sio ttyUSB0: unknown device type: 0x985d [ 159.518335][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.542477][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.596408][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.610574][ T5821] usb 2-1: USB disconnect, device number 4 [ 159.652158][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.706631][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.720537][ T5900] usb 1-1: USB disconnect, device number 10 [ 159.753524][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.767871][ T5900] ftdi_sio 1-1:0.82: device disconnected [ 159.802027][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.842946][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.874047][ T5907] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 159.896208][ T6889] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 159.912113][ T6889] netlink: 224 bytes leftover after parsing attributes in process `syz.1.260'. [ 159.928668][ T5907] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 159.947531][ T5907] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.993665][ T5907] usb 3-1: USB disconnect, device number 13 [ 160.206388][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 160.432472][ T5907] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 160.638490][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 160.650302][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 160.673766][ T5907] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.690392][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.715281][ T5907] usb 3-1: Product: syz [ 160.728566][ T5907] usb 3-1: Manufacturer: syz [ 160.747545][ T5907] usb 3-1: SerialNumber: syz [ 160.757863][ T5907] usb 3-1: config 0 descriptor?? [ 160.777352][ T5907] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.800210][ T5907] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 161.586714][ T5821] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 161.595089][ T5907] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 161.710724][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'. [ 161.726389][ T6911] Invalid ELF header magic: != ELF [ 161.772122][ T5821] usb 5-1: Using ep0 maxpacket: 16 [ 161.983498][ T5821] usb 5-1: config 33 has an invalid descriptor of length 255, skipping remainder of the config [ 162.099081][ T5821] usb 5-1: config 33 interface 0 has no altsetting 0 [ 162.195881][ T5821] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.341987][ T5872] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.475377][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.483987][ T5821] usb 5-1: SerialNumber: syz [ 162.496036][ T5821] cdc_acm 5-1:33.0: Control and data interfaces are not separated! [ 162.503528][ T5872] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 162.504084][ T5821] cdc_acm 5-1:33.0: This needs exactly 3 endpoints [ 162.518361][ T5821] cdc_acm 5-1:33.0: probe with driver cdc_acm failed with error -22 [ 162.520893][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.665266][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.798622][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.894436][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.023562][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.070550][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.105289][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.136325][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.169592][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.192254][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.212310][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.312013][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.342643][ T5871] usb 5-1: USB disconnect, device number 10 [ 163.370349][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.406098][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.436239][ T5907] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 163.448861][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.459827][ T5821] IPVS: starting estimator thread 0... [ 163.468891][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 163.477777][ T6921] openvswitch: netlink: Actions may not be safe on all matching packets [ 163.479168][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.492332][ T5907] em28xx 3-1:0.0: board has no eeprom [ 163.520220][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.547258][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.568531][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.582141][ T5907] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 163.589875][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.590011][ T5907] em28xx 3-1:0.0: dvb set to bulk mode. [ 163.602316][ T6922] IPVS: using max 21 ests per chain, 50400 per kthread [ 163.635624][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.638825][ T5821] em28xx 3-1:0.0: Binding DVB extension [ 163.658781][ T5872] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.663742][ T5907] usb 3-1: USB disconnect, device number 14 [ 163.673094][ T5872] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 163.715700][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.738848][ T5872] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 163.753503][ T5872] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 163.783110][ T5872] usb 1-1: Product: syz [ 163.801595][ T5872] usb 1-1: Manufacturer: syz [ 163.817984][ T5872] usb 1-1: SerialNumber: syz [ 163.833837][ T5872] usb 1-1: config 0 descriptor?? [ 163.860400][ T5872] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 163.899810][ T5907] em28xx 3-1:0.0: Disconnecting em28xx [ 163.905848][ T5821] em28xx 3-1:0.0: Registering input extension [ 163.912978][ T5907] em28xx 3-1:0.0: Closing input extension [ 163.964512][ T5907] em28xx 3-1:0.0: Freeing device [ 164.175343][ T5907] usb 1-1: USB disconnect, device number 11 [ 164.275767][ T5907] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 165.442022][ T5872] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.615478][ T5872] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 165.681545][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.710147][ T5872] usb 3-1: Product: syz [ 165.727378][ T5872] usb 3-1: Manufacturer: syz [ 165.739676][ T5872] usb 3-1: SerialNumber: syz [ 165.756956][ T5872] usb 3-1: config 0 descriptor?? [ 166.277110][ T5872] usb-storage 3-1:0.0: USB Mass Storage device detected [ 166.479955][ T5872] usb 3-1: USB disconnect, device number 15 [ 167.165960][ T5831] block nbd2: Receive control failed (result -32) [ 167.185105][ T5831] block nbd2: Receive control failed (result -32) [ 167.218745][ T6947] block nbd2: shutting down sockets [ 168.661004][ T6983] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 168.742856][ T6983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.285'. [ 169.052362][ T5821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 169.312228][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 169.609043][ T5821] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 169.651279][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.892377][ T5821] usb 3-1: Product: syz [ 169.898123][ T5821] usb 3-1: Manufacturer: syz [ 169.904468][ T5821] usb 3-1: SerialNumber: syz [ 170.406226][ T7004] openvswitch: netlink: IPv4 tun info is not correct [ 170.683718][ T5821] usb 3-1: config 0 descriptor?? [ 173.460599][ T5821] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 173.562676][ T5821] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 173.635261][ T5821] usb 3-1: USB disconnect, device number 16 [ 174.649228][ T7025] Cannot find del_set index 0 as target [ 175.821513][ T7036] netlink: 48 bytes leftover after parsing attributes in process `syz.3.299'. [ 175.858083][ T7048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.865415][ T7048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.894166][ T7043] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 175.899135][ T7048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.908413][ T7048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.908647][ T7043] netlink: 224 bytes leftover after parsing attributes in process `syz.1.301'. [ 175.939062][ T7048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.945913][ T7048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.013922][ T7048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.020453][ T7048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.062206][ T7048] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 176.068710][ T7048] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 176.763148][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 177.830525][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 177.925564][ T7054] ceph: No mds server is up or the cluster is laggy [ 178.164765][ T7065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.209567][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 178.857281][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 178.922759][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 182.145249][ T7090] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 182.205464][ T7090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.313'. [ 182.354321][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 182.414514][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 182.421255][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 182.427906][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 182.434599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.442726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.450595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.458635][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.466689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.474623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.482496][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.490409][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.498283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.506201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.514148][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.522115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.529961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.537905][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.545782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.553721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.561568][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.569544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.577423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.585432][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.593311][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.601201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.609080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.617011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.624902][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.632831][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.640656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.648596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.656491][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.664441][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.672332][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.680236][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.688153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.696111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.703981][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.711962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.719797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.727731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.735616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.743565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.751440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.759386][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.767296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.775276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.783223][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.791113][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.799016][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.807011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.814986][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.823012][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.830883][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.838852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.846726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.854675][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.862561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.870532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.878407][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.886392][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.894317][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.902410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.910254][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.918245][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.926136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.934115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.941990][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.949910][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.957818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.965766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.973670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 182.981572][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 182.989654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 186.363463][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 186.363483][ T29] audit: type=1326 audit(1740405266.077:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.434323][ T29] audit: type=1326 audit(1740405266.087:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.511056][ T29] audit: type=1326 audit(1740405266.097:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.572651][ T29] audit: type=1326 audit(1740405266.097:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.634297][ T29] audit: type=1326 audit(1740405266.097:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.678373][ T29] audit: type=1326 audit(1740405266.097:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.768490][ T29] audit: type=1326 audit(1740405266.097:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.876275][ T29] audit: type=1326 audit(1740405266.097:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.952601][ T29] audit: type=1326 audit(1740405266.097:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 186.964013][ T7148] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 187.031782][ T7148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.326'. [ 187.044319][ T29] audit: type=1326 audit(1740405266.097:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7136 comm="syz.3.323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d6d8d169 code=0x7ffc0000 [ 187.234921][ T7140] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 188.614079][ T5827] Bluetooth: hci0: command 0x0401 tx timeout [ 191.490569][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.499383][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.732218][ T5831] Bluetooth: hci0: command 0x0401 tx timeout [ 191.739928][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 191.746095][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 191.752216][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 191.758269][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 192.460390][ T7236] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 192.470125][ T7236] netlink: 224 bytes leftover after parsing attributes in process `syz.1.339'. [ 193.098502][ T7243] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.340'. [ 194.306406][ T7256] netlink: 'syz.0.344': attribute type 5 has an invalid length. [ 194.704026][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.248086][ T7268] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 196.361227][ T7280] netlink: 100 bytes leftover after parsing attributes in process `syz.3.347'. [ 196.670118][ T7286] usb usb6: usbfs: process 7286 (syz.2.349) did not claim interface 0 before use [ 197.416578][ T7292] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 197.554015][ T7289] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 197.560091][ T7292] netlink: 224 bytes leftover after parsing attributes in process `syz.3.351'. [ 199.428240][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 201.762167][ T5872] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 201.952142][ T5872] usb 3-1: device descriptor read/64, error -71 [ 202.222829][ T5872] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 202.982068][ T5872] usb 3-1: device descriptor read/64, error -71 [ 203.103214][ T5872] usb usb3-port1: attempt power cycle [ 203.129559][ T7379] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 203.172245][ T7379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.365'. [ 203.467625][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.0.366'. [ 203.492568][ T5872] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.530903][ T5872] usb 3-1: device descriptor read/8, error -71 [ 203.780938][ T5872] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.852720][ T5872] usb 3-1: device descriptor read/8, error -71 [ 203.983773][ T5872] usb usb3-port1: unable to enumerate USB device [ 204.187493][ T7396] net_ratelimit: 1052 callbacks suppressed [ 204.187513][ T7396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.605181][ T7404] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 206.042164][ T7435] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 206.059769][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.4.378'. [ 206.276297][ T5869] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.452651][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 206.486345][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.509754][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 206.514655][ T5869] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 206.531285][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.554496][ T5869] usb 4-1: config 0 descriptor?? [ 206.617752][ T5869] xbox_remote_probe: Unexpected endpoint_in [ 206.715184][ T7447] xt_bpf: check failed: parse error [ 206.794639][ T5869] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 206.859376][ T5869] usb 4-1: USB disconnect, device number 17 [ 206.862061][ T5828] Bluetooth: hci0: command 0x0401 tx timeout [ 208.478410][ T7455] bond0: entered allmulticast mode [ 210.141832][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 210.240309][ T29] audit: type=1326 audit(1740405288.869:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7487 comm="syz.2.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a9d8d169 code=0x0 [ 210.305900][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 210.800211][ T7503] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 212.638377][ T7532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 212.684273][ T7520] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 212.770134][ T7531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 214.122130][ T5824] Bluetooth: hci0: command 0x0401 tx timeout [ 215.401971][ T5871] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 215.623907][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 215.647372][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 215.727573][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 215.778573][ T5871] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 215.798166][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.835664][ T5871] usb 4-1: Product: syz [ 215.840032][ T5871] usb 4-1: Manufacturer: syz [ 215.845311][ T5871] usb 4-1: SerialNumber: syz [ 215.859338][ T5871] usb 4-1: config 0 descriptor?? [ 215.874717][ T7562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.882623][ T7562] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.891269][ T5871] usb 4-1: ucan: probing device on interface #0 [ 217.413634][ T5871] ucan 4-1:0.0: probe with driver ucan failed with error -32 [ 218.458704][ T9] usb 4-1: USB disconnect, device number 18 [ 219.974117][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 220.261787][ T7613] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 221.462557][ T7636] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 221.480588][ T7636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.422'. [ 223.221402][ T7648] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 223.279118][ T7659] pimreg: entered allmulticast mode [ 223.291749][ T7659] pimreg: left allmulticast mode [ 223.355313][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 223.828550][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 223.887562][ T7673] input: syz1 as /devices/virtual/input/input8 [ 224.062008][ T5824] Bluetooth: hci0: command 0x0401 tx timeout [ 225.078393][ T29] audit: type=1326 audit(1740405303.809:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7687 comm="syz.4.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f869178d169 code=0x0 [ 225.832333][ T5907] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 226.325905][ T5907] usb 1-1: device descriptor read/64, error -71 [ 226.336459][ T7702] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 226.352167][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 226.619914][ T7707] FAULT_INJECTION: forcing a failure. [ 226.619914][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.633868][ T7707] CPU: 1 UID: 0 PID: 7707 Comm: syz.2.441 Not tainted 6.14.0-rc4-syzkaller #0 [ 226.633890][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.633900][ T7707] Call Trace: [ 226.633906][ T7707] [ 226.633914][ T7707] dump_stack_lvl+0x241/0x360 [ 226.633949][ T7707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.633973][ T7707] ? __pfx__printk+0x10/0x10 [ 226.633998][ T7707] ? __pfx_lock_release+0x10/0x10 [ 226.634029][ T7707] should_fail_ex+0x40a/0x550 [ 226.634054][ T7707] _copy_from_user+0x2d/0xb0 [ 226.634075][ T7707] memdup_user+0x64/0xc0 [ 226.634094][ T7707] ucma_set_option+0x1c2/0xee0 [ 226.634121][ T7707] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.634143][ T7707] ? __pfx_ucma_set_option+0x10/0x10 [ 226.634178][ T7707] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.634201][ T7707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.634226][ T7707] ? irqentry_exit+0x63/0x90 [ 226.634245][ T7707] ? lockdep_hardirqs_on+0x99/0x150 [ 226.634266][ T7707] ? __pfx_ucma_set_option+0x10/0x10 [ 226.634293][ T7707] ? __pfx_ucma_set_option+0x10/0x10 [ 226.634315][ T7707] ? ucma_write+0x253/0x420 [ 226.634341][ T7707] ? __pfx_ucma_set_option+0x10/0x10 [ 226.634363][ T7707] ucma_write+0x2d9/0x420 [ 226.634389][ T7707] ? __pfx_ucma_write+0x10/0x10 [ 226.634409][ T7707] ? bpf_lsm_file_permission+0x9/0x10 [ 226.634431][ T7707] ? rw_verify_area+0x243/0x630 [ 226.634450][ T7707] ? __pfx_ucma_write+0x10/0x10 [ 226.634472][ T7707] vfs_write+0x29f/0xd10 [ 226.634494][ T7707] ? __mutex_unlock_slowpath+0x227/0x800 [ 226.634516][ T7707] ? __pfx_vfs_write+0x10/0x10 [ 226.634539][ T7707] ? __fget_files+0x2a/0x410 [ 226.634556][ T7707] ? __fget_files+0x395/0x410 [ 226.634571][ T7707] ? __fget_files+0x2a/0x410 [ 226.634595][ T7707] ksys_write+0x18f/0x2b0 [ 226.634616][ T7707] ? __pfx_ksys_write+0x10/0x10 [ 226.634636][ T7707] ? do_syscall_64+0x100/0x230 [ 226.634659][ T7707] ? do_syscall_64+0xb6/0x230 [ 226.634681][ T7707] do_syscall_64+0xf3/0x230 [ 226.634701][ T7707] ? clear_bhb_loop+0x35/0x90 [ 226.634725][ T7707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.634745][ T7707] RIP: 0033:0x7fa1a9d8d169 [ 226.634765][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.634778][ T7707] RSP: 002b:00007fa1aab9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.634802][ T7707] RAX: ffffffffffffffda RBX: 00007fa1a9fa6160 RCX: 00007fa1a9d8d169 [ 226.634813][ T7707] RDX: 0000000000000020 RSI: 00004000000000c0 RDI: 0000000000000005 [ 226.634823][ T7707] RBP: 00007fa1aab9b090 R08: 0000000000000000 R09: 0000000000000000 [ 226.634833][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.634842][ T7707] R13: 0000000000000000 R14: 00007fa1a9fa6160 R15: 00007fff28b9b488 [ 226.634867][ T7707] [ 226.981963][ T5907] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 227.132215][ T5907] usb 1-1: device descriptor read/64, error -71 [ 227.279009][ T5907] usb usb1-port1: attempt power cycle [ 227.664159][ T7714] openvswitch: netlink: Actions may not be safe on all matching packets [ 228.042378][ T5907] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 228.735438][ T5907] usb 1-1: device descriptor read/8, error -71 [ 228.760377][ T7724] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 228.808418][ T7724] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 334.551852][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 334.558868][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7734/2:b..l [ 334.567335][ C0] rcu: (detected by 0, t=10502 jiffies, g=19597, q=598 ncpus=2) [ 334.575076][ C0] task:syz.4.450 state:R running task stack:23744 pid:7734 tgid:7729 ppid:5835 task_flags:0x400040 flags:0x00004002 [ 334.591329][ C0] Call Trace: [ 334.594707][ C0] [ 334.597651][ C0] __schedule+0x18bc/0x4c40 [ 334.602195][ C0] ? __pfx___schedule+0x10/0x10 [ 334.607062][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.613082][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 334.618471][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 334.623598][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 334.629352][ C0] irqentry_exit+0x5e/0x90 [ 334.633782][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.639779][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 334.645536][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 334.665156][ C0] RSP: 0018:ffffc9000ce8f0e0 EFLAGS: 00000206 [ 334.671246][ C0] RAX: 7b72f0f5fad72500 RBX: 0000000000000000 RCX: ffff88802ff48000 [ 334.679227][ C0] RDX: ffff88802ff48000 RSI: ffffffff8c2ab680 RDI: ffffffff8c801a80 [ 334.687228][ C0] RBP: 0000000000000003 R08: ffffffff8bfe2a27 R09: ffffffff8bfeaa7b [ 334.695209][ C0] R10: 0000000000000002 R11: ffff88802ff48000 R12: 0000000000000246 [ 334.703194][ C0] R13: ffff88802ff48000 R14: 00000000ffffffff R15: ffff888058b28a48 [ 334.711225][ C0] ? xas_find+0xfb/0x960 [ 334.715485][ C0] ? xas_load+0x187/0x5c0 [ 334.719841][ C0] xas_load+0x19c/0x5c0 [ 334.724017][ C0] xas_find+0x13f/0x960 [ 334.728186][ C0] ? xas_next_entry+0x38a/0x3d0 [ 334.733319][ C0] next_uptodate_folio+0x33/0x5f0 [ 334.738389][ C0] filemap_map_pages+0x2ea/0x1900 [ 334.743441][ C0] ? filemap_map_pages+0x231/0x1900 [ 334.748679][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 334.754157][ C0] ? __handle_mm_fault+0x1b9d/0x70f0 [ 334.759459][ C0] ? __pfx_lock_release+0x10/0x10 [ 334.764511][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 334.769995][ C0] ? __handle_mm_fault+0x3b08/0x70f0 [ 334.775293][ C0] __handle_mm_fault+0x4acb/0x70f0 [ 334.780426][ C0] ? mark_lock+0x9a/0x360 [ 334.784806][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 334.790367][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 334.795414][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 334.800492][ C0] ? follow_page_pte+0x25a/0x1460 [ 334.805563][ C0] ? follow_page_pte+0x86a/0x1460 [ 334.810620][ C0] ? __pfx_lock_release+0x10/0x10 [ 334.815689][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.820917][ C0] ? __pfx___might_resched+0x10/0x10 [ 334.826225][ C0] handle_mm_fault+0x2c1/0x7e0 [ 334.831017][ C0] __get_user_pages+0x1a92/0x4140 [ 334.836703][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 334.842090][ C0] ? __pfx_mt_find+0x10/0x10 [ 334.846715][ C0] populate_vma_page_range+0x264/0x330 [ 334.852226][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 334.858233][ C0] ? userfaultfd_unmap_complete+0x30c/0x360 [ 334.864351][ C0] __mm_populate+0x27a/0x460 [ 334.869143][ C0] ? __pfx___mm_populate+0x10/0x10 [ 334.874368][ C0] vm_mmap_pgoff+0x303/0x430 [ 334.878980][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 334.884195][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.890541][ C0] ? do_syscall_64+0x100/0x230 [ 334.895325][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 334.900197][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 334.904978][ C0] do_syscall_64+0xf3/0x230 [ 334.909934][ C0] ? clear_bhb_loop+0x35/0x90 [ 334.914633][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.920628][ C0] RIP: 0033:0x7f869178d169 [ 334.925051][ C0] RSP: 002b:00007f869256a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 334.933482][ C0] RAX: ffffffffffffffda RBX: 00007f86919a6080 RCX: 00007f869178d169 [ 334.941552][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000400000000000 [ 334.949539][ C0] RBP: 00007f869180e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 334.957530][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 334.965512][ C0] R13: 0000000000000000 R14: 00007f86919a6080 R15: 00007fff0dd8d528 [ 334.973689][ C0] [ 334.976733][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g19597 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 334.989064][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=12273 [ 334.996961][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g19597 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 335.008511][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 335.018502][ C0] rcu: RCU grace-period kthread stack dump: [ 335.024397][ C0] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 335.036337][ C0] Call Trace: [ 335.039624][ C0] [ 335.042656][ C0] __schedule+0x18bc/0x4c40 [ 335.047197][ C0] ? __pfx___schedule+0x10/0x10 [ 335.052063][ C0] ? __pfx_lock_release+0x10/0x10 [ 335.057112][ C0] ? __pfx___mod_timer+0x10/0x10 [ 335.062064][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.068425][ C0] ? schedule+0x90/0x320 [ 335.072680][ C0] schedule+0x14b/0x320 [ 335.076852][ C0] schedule_timeout+0x15a/0x290 [ 335.081726][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 335.087114][ C0] ? __pfx_process_timeout+0x10/0x10 [ 335.092424][ C0] ? prepare_to_swait_event+0x330/0x350 [ 335.097993][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 335.102875][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 335.108089][ C0] ? rcu_gp_init+0x1256/0x1630 [ 335.112880][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 335.117924][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 335.123840][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 335.129160][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 335.135069][ C0] ? finish_swait+0xd4/0x1e0 [ 335.139674][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.144893][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 335.149507][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.154817][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 335.160729][ C0] ? __kthread_parkme+0x169/0x1d0 [ 335.165775][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.171166][ C0] kthread+0x7a9/0x920 [ 335.175250][ C0] ? __pfx_kthread+0x10/0x10 [ 335.179854][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 335.185071][ C0] ? __pfx_kthread+0x10/0x10 [ 335.189678][ C0] ? __pfx_kthread+0x10/0x10 [ 335.194286][ C0] ? __pfx_kthread+0x10/0x10 [ 335.198890][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.204096][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 335.209306][ C0] ? __pfx_kthread+0x10/0x10 [ 335.213921][ C0] ret_from_fork+0x4b/0x80 [ 335.218350][ C0] ? __pfx_kthread+0x10/0x10 [ 335.222954][ C0] ret_from_fork_asm+0x1a/0x30 [ 335.227742][ C0] [ 335.230767][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 335.237108][ C0] Sending NMI from CPU 0 to CPUs 1: [ 335.242335][ C1] NMI backtrace for cpu 1 [ 335.242348][ C1] CPU: 1 UID: 0 PID: 5938 Comm: kworker/u8:8 Not tainted 6.14.0-rc4-syzkaller #0 [ 335.242363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.242375][ C1] Workqueue: iou_exit io_ring_exit_work [ 335.242397][ C1] RIP: 0010:__lock_acquire+0xbde/0x2100 [ 335.242419][ C1] Code: 31 f6 4c 89 ef 48 89 ee 31 d2 e8 4d 66 00 00 48 ba 00 00 00 00 00 fc ff df 85 c0 0f 84 4e 08 00 00 48 8b 44 24 50 0f b6 04 10 <84> c0 0f 85 88 11 00 00 41 83 3c 24 00 48 8b 5c 24 18 74 22 4c 89 [ 335.242431][ C1] RSP: 0018:ffffc90000a18a10 EFLAGS: 00000002 [ 335.242442][ C1] RAX: 0000000000000000 RBX: 1ffff1100fffd531 RCX: ffffffff819d296a [ 335.242453][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff94511990 [ 335.242463][ C1] RBP: ffff88807ffea968 R08: ffffffff94511997 R09: 1ffffffff28a2332 [ 335.242473][ C1] R10: dffffc0000000000 R11: fffffbfff28a2333 R12: ffff88807ffea8d4 [ 335.242484][ C1] R13: ffff88807ffe9e00 R14: 0000000000000000 R15: ffff88807ffea988 [ 335.242494][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 335.242506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.242516][ C1] CR2: 000040000001e000 CR3: 000000005a282000 CR4: 00000000003526f0 [ 335.242528][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 335.242537][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 335.242545][ C1] Call Trace: [ 335.242552][ C1] [ 335.242559][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 335.242588][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 335.242626][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 335.242652][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 335.242669][ C1] ? nmi_handle+0x14f/0x5a0 [ 335.242688][ C1] ? nmi_handle+0x2a/0x5a0 [ 335.242708][ C1] ? __lock_acquire+0xbde/0x2100 [ 335.242727][ C1] ? default_do_nmi+0x63/0x160 [ 335.242742][ C1] ? exc_nmi+0x123/0x1f0 [ 335.242754][ C1] ? end_repeat_nmi+0xf/0x53 [ 335.242777][ C1] ? mark_lock+0x9a/0x360 [ 335.242797][ C1] ? __lock_acquire+0xbde/0x2100 [ 335.242817][ C1] ? __lock_acquire+0xbde/0x2100 [ 335.242836][ C1] ? __lock_acquire+0xbde/0x2100 [ 335.242855][ C1] [ 335.242860][ C1] [ 335.242871][ C1] lock_acquire+0x1ed/0x550 [ 335.242890][ C1] ? advance_sched+0xab/0xca0 [ 335.242909][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 335.242929][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.242946][ C1] ? __hrtimer_run_queues+0x477/0xd30 [ 335.242960][ C1] ? __pfx_lock_release+0x10/0x10 [ 335.242982][ C1] ? __pfx_advance_sched+0x10/0x10 [ 335.242997][ C1] _raw_spin_lock+0x2e/0x40 [ 335.243011][ C1] ? advance_sched+0xab/0xca0 [ 335.243026][ C1] advance_sched+0xab/0xca0 [ 335.243042][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 335.243058][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.243076][ C1] ? __pfx_advance_sched+0x10/0x10 [ 335.243092][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 335.243112][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 335.243125][ C1] ? sched_clock+0x4a/0x70 [ 335.243141][ C1] ? read_tsc+0x9/0x20 [ 335.243156][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 335.243178][ C1] hrtimer_interrupt+0x403/0xa40 [ 335.243200][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 335.243223][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 335.243241][ C1] [ 335.243245][ C1] [ 335.243250][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.243271][ C1] RIP: 0010:memset_orig+0x6a/0xb0 [ 335.243290][ C1] Code: 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 <66> 0f 1f 44 00 00 ff c9 48 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a [ 335.243309][ C1] RSP: 0018:ffffc900044df328 EFLAGS: 00000202 [ 335.243321][ C1] RAX: 0000000000000000 RBX: ffffc900044df438 RCX: 0000000000000002 [ 335.243331][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900044df450 [ 335.243341][ C1] RBP: dffffc0000000000 R08: ffffc900044df45f R09: 0000000000000000 [ 335.243351][ C1] R10: ffffc900044df450 R11: fffff5200089be8c R12: ffffc900044e0000 [ 335.243362][ C1] R13: ffffc900044df400 R14: ffffffff8129dbaa R15: ffffc900044df450 [ 335.243373][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 335.243395][ C1] unwind_next_frame+0xcfb/0x22d0 [ 335.243419][ C1] ? ret_from_fork+0x4b/0x80 [ 335.243438][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.243455][ C1] arch_stack_walk+0x11c/0x150 [ 335.243478][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 335.243496][ C1] stack_trace_save+0x118/0x1d0 [ 335.243513][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 335.243532][ C1] ? __lock_acquire+0x1397/0x2100 [ 335.243553][ C1] kasan_save_stack+0x3f/0x60 [ 335.243572][ C1] ? kasan_save_stack+0x3f/0x60 [ 335.243589][ C1] ? kasan_record_aux_stack+0xaa/0xc0 [ 335.243604][ C1] ? call_rcu+0x168/0xac0 [ 335.243618][ C1] ? kmem_cache_free+0x30e/0x410 [ 335.243631][ C1] ? io_req_caches_free+0xa7/0x120 [ 335.243649][ C1] ? io_ring_exit_work+0x382/0x8a0 [ 335.243666][ C1] ? process_scheduled_works+0xabe/0x18e0 [ 335.243683][ C1] ? worker_thread+0x870/0xd30 [ 335.243699][ C1] ? kthread+0x7a9/0x920 [ 335.243717][ C1] ? ret_from_fork+0x4b/0x80 [ 335.243749][ C1] ? __phys_addr+0xba/0x170 [ 335.243770][ C1] kasan_record_aux_stack+0xaa/0xc0 [ 335.243786][ C1] call_rcu+0x168/0xac0 [ 335.243803][ C1] ? __pfx_call_rcu+0x10/0x10 [ 335.243820][ C1] ? __phys_addr+0xba/0x170 [ 335.243840][ C1] kmem_cache_free+0x30e/0x410 [ 335.243854][ C1] ? io_req_caches_free+0xa7/0x120 [ 335.243874][ C1] io_req_caches_free+0xa7/0x120 [ 335.243894][ C1] io_ring_exit_work+0x382/0x8a0 [ 335.243915][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 335.243940][ C1] ? process_scheduled_works+0x9c6/0x18e0 [ 335.243956][ C1] process_scheduled_works+0xabe/0x18e0 [ 335.243983][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.244003][ C1] ? assign_work+0x364/0x3d0 [ 335.244021][ C1] worker_thread+0x870/0xd30 [ 335.244043][ C1] ? __kthread_parkme+0x169/0x1d0 [ 335.244063][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.244080][ C1] kthread+0x7a9/0x920 [ 335.244099][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244119][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.244136][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244154][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244175][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244193][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.244208][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 335.244224][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244244][ C1] ret_from_fork+0x4b/0x80 [ 335.244261][ C1] ? __pfx_kthread+0x10/0x10 [ 335.244280][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.244306][ C1]