last executing test programs: 1m59.589147342s ago: executing program 3 (id=94): timer_create(0x1, &(0x7f0000000800)={0x0, 0x41, 0x4, @thr={&(0x7f0000000480), &(0x7f0000000540)="cd939e3d7977bb9909a9d2c0cf95f2c087fb69fe5bba596889cbcaca145330f2c060461d9776cea8ca45a533741b77da2ae327bfbeae7435942c39763a3cc98e237358245199b02f3f89f61bbb2ed1134e546328e9e57c30188fb9c705699d3195d5cc04167a1e3b480d53c4234458a44152529bc2403d3b36399986513768687b5d8ee11dd7f91877b64e09983773244ed6640908abd6030511d2cc1bf026125f9b055d79c74c094b07f77474fe1e3ab543d9daecc516b81c3943c12c949d3140f9835794afd325fda65a0127ce61c7070c2206d2725845a3ee5911be78f6b18a3c8fa7bb684bfd4284efcc931c28058e8286d84c"}}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) close(0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x0, 0x6}) syz_open_dev$vim2m(&(0x7f0000000000), 0x802, 0x2) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1, 0x4, 0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x29, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0xf0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x8, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r4, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 1m56.950920578s ago: executing program 3 (id=99): r0 = socket$kcm(0xa, 0x922000000003, 0x11) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="b7", 0x1) listen(r2, 0x5) sendmmsg$inet(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4890) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724010f0c04000905030c4000014007080b71ad", @ANYBLOB="2ae7e8b3"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)='y', 0x1}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x29c780}) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x7, 0x4) 1m51.684035338s ago: executing program 3 (id=108): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 1m47.830063818s ago: executing program 3 (id=117): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x2, 0x4, 0x3, 0x7, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0xa00f, 0x75, 0x7, 0x8000000c, 0x7b, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r3 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 1m44.852445837s ago: executing program 3 (id=122): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001540)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6d9a39a3df843de616e939cfe90ca1eface960074d5cd97a426ebe62e545c8f0074fbab88ae75dac7c06edc9fa1454fb3f5c07e7d8a48cd357d74e773a76845a5b56562685971d564cad390c135bacbb7bdbd512a03e4bdb32a8172b5b85fe71e91bacdfce35fb3bb2d942fa7c4bd82019b4e317bfcb82ce9cefba3f7275", 0x7e}], 0x1, 0x0, 0x0, 0x24008004}], 0x1, 0x4040) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="a735", 0x2}, {0x0}], 0x2, &(0x7f0000001140)=ANY=[], 0x3c0}, 0x8000) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000030026bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="e1790600ea0204002000128009000100766c616e00000000100002800c000200"], 0x40}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035570930880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a99039"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000680)={0x1, 'wg1\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x28, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x3, 0x1, 0x0, 0x1, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}, @generic={0x4, 0x6, 0x2, 0x2, 0x7fffffff}, @generic={0xe, 0xf, 0x7, 0xfffc, 0x2}, @call={0x85, 0x0, 0x0, 0xa1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m39.762135514s ago: executing program 3 (id=131): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="a5", 0x1}], 0x1}, 0x4000041) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000001) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40012021) 1m24.419424696s ago: executing program 32 (id=131): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="a5", 0x1}], 0x1}, 0x4000041) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff66}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000001) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40012021) 18.340329745s ago: executing program 0 (id=331): mkdir(0x0, 0x18b) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$TUNSETIFF(r0, 0x8004b708, 0x0) r1 = io_uring_setup(0x7725, &(0x7f0000000040)={0x0, 0x81bb, 0x10000, 0x1, 0x2a}) io_uring_setup(0x29aa, &(0x7f00000000c0)={0x0, 0x318f, 0x800, 0x3, 0x39b, 0x0, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) 17.248185312s ago: executing program 0 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r1, 0x9c3fa077fa966179, 0xffffffdd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x0) r10 = accept4(r8, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000000780)=""/158, 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/4105, 0x1009}], 0x1}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000b80), 0x0, &(0x7f0000001cc0)}}], 0x3, 0x2102, 0x0) ioctl$FITHAW(r4, 0xc0045878) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x6, 0xfffff034}, {0x20, 0x8, 0x8, 0xfdfff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$l2tp(0x2, 0x2, 0x73) 13.88353085s ago: executing program 4 (id=339): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x1fc) write$binfmt_elf32(r4, &(0x7f0000001100)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006000400000019000000380000005e020000080400000400200004"], 0x16d) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r7, 0x7}}, 0x10) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) file_getattr(r8, 0x0, &(0x7f0000000040), 0x18, 0x1000) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7, 0x1}}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x4, 0x8, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x1, 0xfffffffd, 0x800}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000240)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x75, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r10, 0x25, 0x2, @val=@target_btf_id=r11}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, [@alu={0x7, 0x1, 0xd, 0x7, 0x9, 0x4, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x1, 0x9, 0x3, 0xfffffffffffffff4, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x0, 0x9, 0x5, 0x30, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x311}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xf, &(0x7f0000000200)=""/15, 0x41100, 0xf, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x4, 0xe, 0x6}, 0x10, r11, 0x0, 0x2, &(0x7f00000004c0)=[r1, r4, r1, r1], &(0x7f0000000500)=[{0x4, 0x5, 0x10, 0x4}, {0x2, 0x2, 0xd, 0x4}], 0x10, 0x9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x12, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r12], 0x4c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffa3ff5ebe565cffffffffff0180c200000388a84b008100170086dd6745208e00303aff00000000000000000000ffff00000000ff020000000000000000000000000001030190780b0000006eea785a7fff0600fe880000000000000000000000000001fc0200"/116], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 13.274237273s ago: executing program 0 (id=343): mount$bind(0x0, 0x0, 0x0, 0x8b189a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket(0x28, 0x1, 0x0) r4 = syz_io_uring_setup(0x4f3, &(0x7f0000000340)={0x0, 0x486e, 0x0, 0x2, 0x10000340, 0x0, r3}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47b2, 0x8010f6, 0x82, 0x0, 0x0) 11.91248757s ago: executing program 0 (id=344): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d5030000000000010902240001000000000904000002030000000921000000012205000905810300f9"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x71, 0x1000) r1 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$smackfs_logging(r1, &(0x7f0000000240), 0x14) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000130001002bbd700000000000fc000000000000000000000000000000fc01000000000000000000000000000100020000000000000a0040002b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "a6ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11.572234164s ago: executing program 2 (id=346): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x5bd, 0x4, 0x1d, 0x8], [0xffffffffffffffff, 0x80, 0x6, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0x6, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x3, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x1, 0x400000000000008, 0x9, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x3, 0x2, 0x6, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x401, 0x8000000000000001, 0x40000000000756, 0x10, 0x0, 0x1247, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x7fffffffffffffff, 0x1, 0x5, 0x9, 0x3, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000000001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffff9, 0x8, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0x9, 0x8, 0x8, 0x145, 0x7, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x1, 0x402, 0x2, 0x5, 0x8000, 0x8001, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]}) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000000000)) 11.222905169s ago: executing program 2 (id=347): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, 0x0, 0x0, 0xa}]) 10.816777413s ago: executing program 1 (id=350): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 10.730854733s ago: executing program 4 (id=351): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x2, 0x4, 0x3, 0x7, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0xa00f, 0x75, 0x7, 0x8000000c, 0x7b, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 9.542489426s ago: executing program 2 (id=352): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000005, 0x4) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}], 0x1}, 0x20012101) close_range(r0, 0xffffffffffffffff, 0x0) 9.305129019s ago: executing program 2 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000340)=@attr_other={0x0, 0x5, 0x1, &(0x7f0000000240)=0x598}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a010400000000000000000a0000050900010073797a31000000004c000480480001800a000100696e6e657200000038000280080004400000001714000580090001006d657461000000000400028008000340e4ffff01080002400000008408000140000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x95}, 0x94) 9.235194873s ago: executing program 4 (id=355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x77359400}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 7.651244617s ago: executing program 5 (id=356): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000000)=0xa, 0x4) 7.496381317s ago: executing program 0 (id=357): modify_ldt$read_default(0x2, &(0x7f0000000040)=""/211, 0xd3) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300"], 0x0) 7.251779457s ago: executing program 1 (id=358): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105140, 0x124) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) lseek(0xffffffffffffffff, 0x1000000, 0x0) 7.176447774s ago: executing program 5 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) syz_open_dev$cec(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xc, 0x0, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 6.111251937s ago: executing program 1 (id=360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0)=r1) 4.572073417s ago: executing program 5 (id=361): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x8000) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x4}], 0x1, 0x12161, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0907000000000400000005000000", @ANYBLOB="0800a4"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200050085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee01}}, './file0/file0\x00'}) faccessat(r0, &(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f00000001c0)='./file0/file0/file0\x00', 0xffffffffffffffff, r10) accept4$llc(r9, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x10, 0x80800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000000000000a004e2300000007fe8000000000000000000000000000bb0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002658dd2b3ad27f8c8b84000000000000000000000000000000000000000000000000000000000000010000000a004e200000226afc00000000000000000000000000000106000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4b8b2cd4a3b62aca225c8cd9fba7a7903bbec58cb4f90943f9f4492f1d899b46ed86e9cbd46535a8aead572dfe021307ad125b82e6f1ef3d1ae6da42c2241f4f9143e9b41f71ce9ad7d3ec6db959a84ed93a551e863af9f14c506d9429a3e29e1ae620ada1dc1f92147304264de4ebd26656823ef23697b5212749b440573b746f22494e9cf5692dc7fd2745af1372d1284d195ae008b58ca15d8a7b7086cd60391ab0520ebb0d2772c6c4030"], 0x110) 4.559916644s ago: executing program 1 (id=362): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010828bd7000fcdbdf2501"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) 4.498672582s ago: executing program 2 (id=363): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x53, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x4004000) close(r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r2) r6 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf0, r7, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2b1e65945bd5b02e4506ae0261b6c212f5b168194db53905"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b98207315a65b7a47dde82c643da78dda8ef6ea5b4c3af07"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}, {0x20, '\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}]}, 0xaf) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fddbdf250300000006001c0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x4090) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x448, 0x40, 0x1, 0x7fffc, 0x4, {0x7}, [@typed={0x8, 0x9b, 0x0, 0x0, @uid=r10}, @nested={0x424, 0x1, 0x0, 0x1, [@nested={0x41e, 0x10, 0x0, 0x1, [@nested={0x381, 0x134, 0x0, 0x1, [@generic="071ef31b38c5ccec14e54e5b904e5a0187d2ad627058b169477c1da55a005d75519eaffbf77cc3edddc10cbaba48de7450a9f0bdbe0eab914c7f05eb68791919fbbd31eb2b73d5154f8dda3dd85101d8bd4f362e856cb33aa75c1cb7eb6d91164160b302e03cd398a1ea0d26a6e6b669e4203e43154da9df847d63c319d02f656643e623ce6ea7fd3d9c9dd6d5adab6fa8fb5ef4929e662d32e21958dd0a2708a33c9776155fe5609c2356841a", @generic="f5cf31ab7b26d89323a0e9bb3228935e951e1303a6206574a9f0f83489a50eeb", @typed={0x14, 0x116, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="a22530e2bf820c244fad8c24a68b67201be5ae3c023baab4f8f5f85276b100d4eb57da2c", @nested={0x19e, 0xd0, 0x0, 0x1, [@generic="8b68800599a98c94acc761f7d5e3d150380ab114be8d922962fe1d4a26909eeee01bd145a1f3d059976aa8090397e973f14f4b385e3459b1a8ad0947d1d1d657fbe7cd51fce5229d5e7ad0192fe271c644d0b1bfbf9dfc768c9682c1747de6c4ff427bd1107a2c56eaeb897b7321bae8599af693c315bf0bb645838b8d2b431d8ef7d0ac9a9a28e13303590838c57c7ca46936f412", @generic="40c2d514edcb035914c094f282b93e95fec4da0a32ecad94a3fc032eb70587ea94e87f7c55b864932799a4377e9018069b5ab9dcc351ee91ffeb47b341d79deb688b5e46cd17962a6fa5f098479bc66aa65d1b555fe5c485044fd6250e98e3ed4b3bb504c087f474737d34357ebdfe5e", @typed={0x8, 0x80, 0x0, 0x0, @u32=0x8}, @generic="5d42a596e8b205d4a268fdcabc9a29372078dbb5df771e500e9bec135e05c35bd8d42700d66beaf8785f077d2d72c8073b67374c5a038abe04c369fb1340b2ec22a87221f677971ed9cbc0d6830bde908646fb0b3b1635e79429438a7d653f7d9475ab9394a4c54f94b9ca032269e763b00a8d732b6885641d2873ad901e52e21559a2957251763b00", @nested={0x4, 0x8d}]}, @typed={0xa4, 0xaf, 0x0, 0x0, @str='\xb4\xd4\t$3\x95\\\x83\xdc\xc9\xae\xacqt\xd3cY\x0eQ\xcd\xc0\x88\x82\x13\x9b\xb3\xa0\xd0\xdc!\x9f0\xf7C\x8c\xb99\x84\x15\x8e\xdbd\x89\xfeE\xd5V1tW\xdd\xf2\xd0\x9d\xb0?\xf5Na\xe7\xecq\x17\xbca\xe5\xab\xf1]\xe3B\xa7\x9f\xf4\x1c\x19F\x88\x0e%\x91%\xe8\xcb]t\xb9d\xcd\x18\xcc\xa4\xbf\xe1\x0e\xb3\x18\x9e\xab\xaf\xcc\xd9\x9f,\xd8\xc5n_O!\x00\v\xd5\x02\xd5\x9f\xdbL\xbd\xe4\xaa(\xbf\xb4\x9eU\x802\xf7K\x06\xd1E\x01\xa73\xadb\xbcuJ\xce\x87Ft2\xcdO\xfc?\xb71E\x85\r\xfb\xb1\xb6TL'}, @typed={0x8, 0xcc, 0x0, 0x0, @pid=r8}, @generic="ad7fdf5aecce85ee390d441af4a5c3eabcf1", @generic="4237f697bde76a4bf9166b9f7fcee2c327cfff56a1fcf6cc0183"]}, @generic="2ff2afa929d1b167f22efcf7e565e6595143479acea9f1f765e679fa910479c84734566ade068f33ca212d9f829c95e003704cdf026107e447d93c9741d006d0503b5f83d5ebd56f05a3d83e0cfa057233b963b7fc997a6de5ce3c00502b1e7f3b5a7041d635696b7ab3dccb153518372ab6c5d5beb155f9621d7d30debb27025a6ea7bd702488de9153a93e161939545e0a8c27637a"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r9}]}, 0x448}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008094) accept4(r0, 0x0, 0x0, 0x0) 3.964548102s ago: executing program 1 (id=364): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="240000000000000000000000070000004402"], 0x28}}], 0x2, 0x800) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x480) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000002c0)={&(0x7f0000000140), &(0x7f0000000180)=""/226, 0xe2}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x20, 0xa, 0xc, {0xc, 0x21, "018b2b4bca02e4317ca1"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0xb34, &(0x7f0000000080)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r4, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.904512019s ago: executing program 0 (id=365): r0 = memfd_secret(0x0) ftruncate(r0, 0x81) ftruncate(r0, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x14000, 0x0) r2 = accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000f7000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003a12591405e043f0490fc010203010902380001010090050904000004441b5c0009050000000000000009050402000000000009058802"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000340)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_gettime(0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306010400000505000100070000000900020073797a3000"/40], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x95) ioctl$SG_GET_VERSION_NUM(r10, 0x2284, &(0x7f0000000080)) r11 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r11, 0xc040564a, &(0x7f0000000040)={0x2bcb, 0x0, 0x2012, 0x0, 0x2, 0x3, 0x5, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) 3.632120766s ago: executing program 5 (id=366): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x18, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000404000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) close(0x3) sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast2, 0x9}, 0x1c, 0x0}, 0x24004800) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) accept4(r0, 0x0, 0x0, 0x800) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 3.072102412s ago: executing program 5 (id=367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x6}, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.492803502s ago: executing program 4 (id=368): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x20) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x43, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) close_range(r3, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 1.792286251s ago: executing program 4 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x122) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) close(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.77022846s ago: executing program 5 (id=370): syz_open_dev$vim2m(0x0, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mremap(&(0x7f0000b2e000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000842000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff0c, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 57.554787ms ago: executing program 1 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getsa={0x11c, 0x12, 0x400, 0x70bd2b, 0x25dfdbfb, {@in=@empty, 0x7, 0x2, 0x6c}, [@policy={0xac, 0x7, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4e24, 0x100, 0x4e24, 0x3, 0x2, 0x80, 0x20, 0xff, 0x0, r6}, {0x4, 0x9, 0x7f, 0x7, 0x20000a7d, 0x7, 0x10000, 0x5}, {0x0, 0x9, 0x8, 0xfb}, 0x5, 0x46e6bba, 0x2, 0x0, 0x7}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in6=@mcast2, 0x2, 0x2, 0x14}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xb}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0xcc}}, 0x81) 3.248811ms ago: executing program 2 (id=372): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000000c0)=r1) 0s ago: executing program 4 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000140)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000004a00030007000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc010000000000000000000000001c00080002000600000008000200020000000500f85d00000000"], 0x48}}, 0x400040c0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x101940) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 334.186755][ T5823] cgroup: Unknown subsys name 'net' [ 334.427737][ T5823] cgroup: Unknown subsys name 'cpuset' [ 334.473468][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 336.077135][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 338.354938][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.364083][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.364969][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.365940][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.366824][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.370911][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.372031][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.372822][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.375267][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.376341][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.376892][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.377304][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.378306][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.378789][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.380379][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.383073][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.393385][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.394860][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.417446][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.417845][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.418268][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.422254][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.423234][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.442162][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.459333][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.195307][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 339.378703][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 339.424652][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 339.442664][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 339.451129][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 339.603193][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.604232][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.604358][ T5839] bridge_slave_0: entered allmulticast mode [ 339.605922][ T5839] bridge_slave_0: entered promiscuous mode [ 339.664875][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.664958][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.665232][ T5839] bridge_slave_1: entered allmulticast mode [ 339.666579][ T5839] bridge_slave_1: entered promiscuous mode [ 339.797863][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.797970][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.798072][ T5837] bridge_slave_0: entered allmulticast mode [ 339.799399][ T5837] bridge_slave_0: entered promiscuous mode [ 339.824565][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.855846][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.855944][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.856083][ T5837] bridge_slave_1: entered allmulticast mode [ 339.858522][ T5837] bridge_slave_1: entered promiscuous mode [ 339.859360][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.859470][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.859732][ T5841] bridge_slave_0: entered allmulticast mode [ 339.861041][ T5841] bridge_slave_0: entered promiscuous mode [ 339.866695][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.871116][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.871225][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.871386][ T5842] bridge_slave_0: entered allmulticast mode [ 339.874663][ T5842] bridge_slave_0: entered promiscuous mode [ 339.950252][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.950320][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.950461][ T5846] bridge_slave_0: entered allmulticast mode [ 339.951865][ T5846] bridge_slave_0: entered promiscuous mode [ 339.999955][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.000062][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.000161][ T5842] bridge_slave_1: entered allmulticast mode [ 340.001536][ T5842] bridge_slave_1: entered promiscuous mode [ 340.006437][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.018001][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.018156][ T5846] bridge_slave_1: entered allmulticast mode [ 340.019587][ T5846] bridge_slave_1: entered promiscuous mode [ 340.059521][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.059615][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.059723][ T5841] bridge_slave_1: entered allmulticast mode [ 340.061028][ T5841] bridge_slave_1: entered promiscuous mode [ 340.226298][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.228704][ T5839] team0: Port device team_slave_0 added [ 340.281917][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.283977][ T5839] team0: Port device team_slave_1 added [ 340.287771][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.291638][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.296223][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.335027][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.336909][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.338884][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.406888][ T5837] team0: Port device team_slave_0 added [ 340.408041][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.408051][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.408064][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.468201][ T5837] team0: Port device team_slave_1 added [ 340.468871][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.468881][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.468894][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.470701][ T5842] team0: Port device team_slave_0 added [ 340.475487][ T5854] Bluetooth: hci0: command tx timeout [ 340.475492][ T5850] Bluetooth: hci2: command tx timeout [ 340.475636][ T5850] Bluetooth: hci1: command tx timeout [ 340.485333][ T5846] team0: Port device team_slave_0 added [ 340.489194][ T5841] team0: Port device team_slave_0 added [ 340.540890][ T5842] team0: Port device team_slave_1 added [ 340.544525][ T5846] team0: Port device team_slave_1 added [ 340.546700][ T5841] team0: Port device team_slave_1 added [ 340.553132][ T5857] Bluetooth: hci4: command tx timeout [ 340.607104][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.607120][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.607143][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.632961][ T5857] Bluetooth: hci3: command tx timeout [ 340.672457][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.672473][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.672486][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.675254][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.675268][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.675292][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.676425][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.676437][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.676459][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.679913][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.679925][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.679948][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.704379][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.704396][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.704420][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.705847][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.705858][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.705882][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.707217][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.707229][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.707252][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.729914][ T5839] hsr_slave_0: entered promiscuous mode [ 340.731308][ T5839] hsr_slave_1: entered promiscuous mode [ 340.958243][ T5837] hsr_slave_0: entered promiscuous mode [ 340.959554][ T5837] hsr_slave_1: entered promiscuous mode [ 340.960514][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 340.960616][ T5837] Cannot create hsr debugfs directory [ 340.991928][ T5841] hsr_slave_0: entered promiscuous mode [ 340.995026][ T5841] hsr_slave_1: entered promiscuous mode [ 340.995921][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 340.995942][ T5841] Cannot create hsr debugfs directory [ 341.006276][ T5842] hsr_slave_0: entered promiscuous mode [ 341.007819][ T5842] hsr_slave_1: entered promiscuous mode [ 341.008696][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 341.008718][ T5842] Cannot create hsr debugfs directory [ 341.043651][ T5846] hsr_slave_0: entered promiscuous mode [ 341.044957][ T5846] hsr_slave_1: entered promiscuous mode [ 341.045930][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 341.045952][ T5846] Cannot create hsr debugfs directory [ 342.125463][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.182140][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.210910][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.262068][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.350194][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.391525][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.430511][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.467497][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.553228][ T5857] Bluetooth: hci1: command tx timeout [ 342.553259][ T5857] Bluetooth: hci2: command tx timeout [ 342.553864][ T5854] Bluetooth: hci0: command tx timeout [ 342.610956][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.633164][ T5854] Bluetooth: hci4: command tx timeout [ 342.655717][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 342.702152][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 342.713274][ T5854] Bluetooth: hci3: command tx timeout [ 342.742761][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 342.842565][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.876024][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.918460][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.963901][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.102105][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.132809][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.140204][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.181337][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.210128][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.304292][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.338472][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.346172][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.346771][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.387307][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.388084][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.457887][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.470959][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.497440][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.497652][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.541485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.541588][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.569998][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.599834][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.614825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.614945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.657738][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.657887][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.745380][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.772098][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.798989][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.800068][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.851547][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.851789][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.911999][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.963792][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.964683][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.016536][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.016763][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.095666][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.329477][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.427850][ T5839] veth0_vlan: entered promiscuous mode [ 344.518756][ T5839] veth1_vlan: entered promiscuous mode [ 344.526047][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.644358][ T5854] Bluetooth: hci0: command tx timeout [ 344.644391][ T5854] Bluetooth: hci2: command tx timeout [ 344.644410][ T5854] Bluetooth: hci1: command tx timeout [ 344.694521][ T5837] veth0_vlan: entered promiscuous mode [ 344.714988][ T5857] Bluetooth: hci4: command tx timeout [ 344.731597][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.778264][ T5837] veth1_vlan: entered promiscuous mode [ 344.780975][ T5839] veth0_macvtap: entered promiscuous mode [ 344.793175][ T5857] Bluetooth: hci3: command tx timeout [ 344.829122][ T5839] veth1_macvtap: entered promiscuous mode [ 344.841322][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.920468][ T5841] veth0_vlan: entered promiscuous mode [ 344.938212][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.988134][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.004238][ T5841] veth1_vlan: entered promiscuous mode [ 345.007555][ T5837] veth0_macvtap: entered promiscuous mode [ 345.040373][ T5912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.051667][ T5912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.056573][ T5837] veth1_macvtap: entered promiscuous mode [ 345.067748][ T5912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.086180][ T5912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.170048][ T5846] veth0_vlan: entered promiscuous mode [ 345.228999][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.310704][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.325831][ T5846] veth1_vlan: entered promiscuous mode [ 345.331075][ T5841] veth0_macvtap: entered promiscuous mode [ 345.375371][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.398561][ T5841] veth1_macvtap: entered promiscuous mode [ 345.401049][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.414649][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.431006][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.452324][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.452344][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.617798][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.633301][ T5842] veth0_vlan: entered promiscuous mode [ 345.636018][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.636031][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.714152][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.731838][ T5846] veth0_macvtap: entered promiscuous mode [ 345.787414][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.788784][ T5842] veth1_vlan: entered promiscuous mode [ 345.790390][ T5846] veth1_macvtap: entered promiscuous mode [ 345.792239][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.812654][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.812674][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.823655][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.847391][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.019453][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.090918][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.090937][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.147543][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.182698][ T37] audit: type=1326 audit(1772402820.006:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.201687][ T37] audit: type=1326 audit(1772402820.026:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.201734][ T37] audit: type=1326 audit(1772402820.026:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.205479][ T37] audit: type=1326 audit(1772402820.036:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.208097][ T37] audit: type=1326 audit(1772402820.036:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.208330][ T37] audit: type=1326 audit(1772402820.036:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.208577][ T37] audit: type=1326 audit(1772402820.036:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.209176][ T37] audit: type=1326 audit(1772402820.036:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.209507][ T37] audit: type=1326 audit(1772402820.036:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.209775][ T37] audit: type=1326 audit(1772402820.036:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77ee25c799 code=0x7ffc0000 [ 346.267205][ T5842] veth0_macvtap: entered promiscuous mode [ 346.268999][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.276262][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.278095][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.278431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.278445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.284131][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.345893][ T5842] veth1_macvtap: entered promiscuous mode [ 346.542718][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.542737][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.657269][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.692554][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.713359][ T5857] Bluetooth: hci1: command tx timeout [ 346.713389][ T5857] Bluetooth: hci2: command tx timeout [ 346.713407][ T5857] Bluetooth: hci0: command tx timeout [ 346.760653][ T167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.762737][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.762756][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.763698][ T167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.528058][ T5857] Bluetooth: hci3: command tx timeout [ 347.528104][ T5854] Bluetooth: hci4: command tx timeout [ 347.574099][ T167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.626304][ T167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.794264][ T5970] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7'. [ 347.882172][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.882193][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.194649][ T5826] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 348.222300][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.222317][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.391973][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.391994][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.399549][ T5826] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.399575][ T5826] usb 1-1: config 0 has no interface number 0 [ 348.399618][ T5826] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 348.399642][ T5826] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 348.399682][ T5826] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.399703][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.603141][ T5826] usb 1-1: config 0 descriptor?? [ 348.646874][ T5971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 348.860266][ T5826] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 348.916422][ T5986] fuse: Bad value for 'fd' [ 349.002028][ T5983] netlink: 'syz.1.10': attribute type 27 has an invalid length. [ 349.005503][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 349.620024][ T31] usb 1-1: USB disconnect, device number 2 [ 355.782589][ T6019] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 355.787675][ T6019] mmap: syz.4.17 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 357.042908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.806927][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 360.667085][ T5826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 361.009224][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 361.012877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 361.032344][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 361.032364][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 361.063103][ T5826] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 361.063121][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.063130][ T5826] usb 2-1: Product: syz [ 361.063137][ T5826] usb 2-1: Manufacturer: syz [ 361.063145][ T5826] usb 2-1: SerialNumber: syz [ 361.156768][ T5826] usb 2-1: config 0 descriptor?? [ 361.210533][ T5826] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 362.213323][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 362.216144][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.252124][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.393611][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 362.395528][ T5920] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 362.395561][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.426400][ T6091] ======================================================= [ 362.426400][ T6091] WARNING: The mand mount option has been deprecated and [ 362.426400][ T6091] and is ignored by this kernel. Remove the mand [ 362.426400][ T6091] option from the mount to silence this warning. [ 362.426400][ T6091] ======================================================= [ 363.359592][ T1061] usb 2-1: Failed to submit usb control message: -110 [ 363.359629][ T1061] usb 2-1: unable to send the bmi data to the device: -110 [ 363.359644][ T1061] usb 2-1: unable to get target info from device [ 363.359671][ T1061] usb 2-1: could not get target info (-110) [ 363.359934][ T1061] usb 2-1: could not probe fw (-110) [ 363.368253][ T5920] usb 3-1: config 0 descriptor?? [ 363.605656][ T5920] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 363.697718][ T5920] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 363.697778][ T5920] dib0700: firmware download failed at 7 with -22 [ 363.718981][ T5920] usb 3-1: USB disconnect, device number 2 [ 363.988543][ T809] usb 2-1: USB disconnect, device number 2 [ 364.081316][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.013445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.013515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.014069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.015072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.015289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.016637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.016782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.016821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 365.542797][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 365.683551][ T6107] usb usb8: usbfs: process 6107 (syz.2.42) did not claim interface 0 before use [ 365.717818][ T6110] overlayfs: workdir and upperdir must be separate subtrees [ 365.932923][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 365.939543][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.939567][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 365.939590][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.939615][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.530419][ T5920] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 368.530448][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.593085][ T5920] usb 4-1: config 0 descriptor?? [ 368.594279][ T5920] usb 4-1: can't set config #0, error -71 [ 368.634233][ T5920] usb 4-1: USB disconnect, device number 2 [ 371.924408][ T6156] FAULT_INJECTION: forcing a failure. [ 371.924408][ T6156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 371.924459][ T6156] CPU: 1 UID: 0 PID: 6156 Comm: syz.3.55 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 371.924485][ T6156] Tainted: [L]=SOFTLOCKUP [ 371.924492][ T6156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.924510][ T6156] Call Trace: [ 371.924520][ T6156] [ 371.924529][ T6156] dump_stack_lvl+0xe8/0x150 [ 371.924571][ T6156] should_fail_ex+0x46b/0x600 [ 371.924608][ T6156] _copy_from_iter+0x1d3/0x1670 [ 371.924635][ T6156] ? trace_kmem_cache_alloc+0x29/0xf0 [ 371.924658][ T6156] ? __alloc_skb+0x27d/0x7d0 [ 371.924678][ T6156] ? __pfx__copy_from_iter+0x10/0x10 [ 371.924697][ T6156] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 371.924725][ T6156] ? __alloc_skb+0x27d/0x7d0 [ 371.924752][ T6156] ? netlink_sendmsg+0x650/0xb40 [ 371.924773][ T6156] ? skb_put+0x11b/0x210 [ 371.924800][ T6156] netlink_sendmsg+0x6c0/0xb40 [ 371.924830][ T6156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.924859][ T6156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.924896][ T6156] ____sys_sendmsg+0xa4e/0xac0 [ 371.924931][ T6156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.924967][ T6156] ? import_iovec+0x73/0xa0 [ 371.924994][ T6156] ___sys_sendmsg+0x2a5/0x360 [ 371.925026][ T6156] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.925085][ T6156] ? __fget_files+0x2a/0x420 [ 371.925108][ T6156] ? __fget_files+0x3a6/0x420 [ 371.925140][ T6156] __x64_sys_sendmsg+0x1c3/0x2a0 [ 371.925169][ T6156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.925201][ T6156] ? rcu_is_watching+0x15/0xb0 [ 371.925235][ T6156] do_syscall_64+0x14d/0xf80 [ 371.925261][ T6156] ? trace_irq_disable+0x3b/0x150 [ 371.925281][ T6156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.925301][ T6156] ? clear_bhb_loop+0x40/0x90 [ 371.925325][ T6156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.925344][ T6156] RIP: 0033:0x7f77ee25c799 [ 371.925367][ T6156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.925383][ T6156] RSP: 002b:00007f77ec4ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.925407][ T6156] RAX: ffffffffffffffda RBX: 00007f77ee4d5fa0 RCX: 00007f77ee25c799 [ 371.925421][ T6156] RDX: 0000000000008810 RSI: 0000200000000400 RDI: 0000000000000004 [ 371.925434][ T6156] RBP: 00007f77ec4ae090 R08: 0000000000000000 R09: 0000000000000000 [ 371.925445][ T6156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.925455][ T6156] R13: 00007f77ee4d6038 R14: 00007f77ee4d5fa0 R15: 00007ffd83778858 [ 371.925482][ T6156] [ 375.048495][ T6188] Zero length message leads to an empty skb [ 375.202428][ T6184] usb usb8: usbfs: process 6184 (syz.3.61) did not claim interface 0 before use [ 377.259058][ T5927] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 378.820248][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.820930][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.862958][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 380.038943][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.038972][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.038994][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 380.039014][ T5920] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 380.100632][ T5920] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 380.100658][ T5920] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 380.100675][ T5920] usb 5-1: Product: syz [ 380.100688][ T5920] usb 5-1: Manufacturer: syz [ 380.100700][ T5920] usb 5-1: SerialNumber: syz [ 380.142591][ T5920] usb 5-1: config 0 descriptor?? [ 380.217579][ T5920] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 380.217603][ T5920] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 380.218119][ T5920] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 381.259481][ T6026] usb 5-1: USB disconnect, device number 2 [ 382.543035][ T5927] usb 1-1: device descriptor read/64, error -110 [ 382.776050][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 382.893396][ T6245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.76'. [ 383.385060][ T6248] usb usb8: usbfs: process 6248 (syz.1.77) did not claim interface 0 before use [ 383.471010][ T6250] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 385.075803][ T5854] Bluetooth: hci4: ISO packet too small [ 386.361426][ T6261] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 391.517635][ T6296] bond1: entered promiscuous mode [ 391.517700][ T6296] bond1: entered allmulticast mode [ 391.518434][ T6296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.832703][ T6302] usb usb8: usbfs: process 6302 (syz.3.92) did not claim interface 0 before use [ 393.172957][ T6287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.173650][ T6287] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 393.200995][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.393640][ T6287] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 393.497618][ T6287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.497701][ T6287] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 393.614291][ T6287] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 393.704880][ T6287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.704982][ T6287] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 393.824107][ T6287] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 393.959161][ T6287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.959423][ T6287] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 394.205267][ T6287] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 394.295600][ T6287] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 394.295720][ T6287] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 394.395477][ T6287] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 394.932958][ T5819] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 395.274538][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.515087][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.753596][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.755574][ T6315] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 395.993027][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.112961][ T6026] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 396.212996][ T5819] usb 2-1: device descriptor read/64, error -71 [ 396.263050][ T6026] usb 3-1: Using ep0 maxpacket: 16 [ 396.279731][ T6026] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 396.279749][ T6026] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 396.279760][ T6026] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 396.279769][ T6026] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 396.283242][ T6026] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.283267][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.283285][ T6026] usb 3-1: Product: syz [ 396.283307][ T6026] usb 3-1: Manufacturer: syz [ 396.283320][ T6026] usb 3-1: SerialNumber: syz [ 396.323145][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.406737][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 396.455517][ T5819] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 396.548705][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 396.553067][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 396.587792][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 396.613289][ T5819] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 396.613319][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.626454][ T6026] usb 3-1: 0:2 : does not exist [ 396.630425][ T5920] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 396.630450][ T5920] usb 4-1: config 1 has no interface number 0 [ 396.682658][ T5920] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 396.682687][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.682705][ T5920] usb 4-1: Product: syz [ 396.682719][ T5920] usb 4-1: Manufacturer: syz [ 396.682732][ T5920] usb 4-1: SerialNumber: syz [ 396.746886][ T5819] usb 2-1: config 0 descriptor?? [ 396.754151][ T6026] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 396.977377][ T5819] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 397.232872][ T5819] [drm:udl_init] *ERROR* Selecting channel failed [ 397.350367][ T5920] uvcvideo 4-1:1.206: probe with driver uvcvideo failed with error -22 [ 397.353290][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 397.532700][ T5819] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 397.532726][ T5819] [drm] Initialized udl on minor 2 [ 397.538060][ T6026] usb 3-1: USB disconnect, device number 3 [ 397.567767][ T5920] usb 4-1: USB disconnect, device number 3 [ 397.592978][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 397.606207][ T5819] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 397.607990][ T5819] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 397.775267][ T5847] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.637867][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.637907][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 398.637929][ T5854] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.748582][ T5847] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.749792][ T5847] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 398.778929][ T5819] usb 2-1: USB disconnect, device number 4 [ 399.287636][ T6338] usb usb8: usbfs: process 6338 (syz.2.104) did not claim interface 0 before use [ 400.577030][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.991153][ T5857] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.991190][ T5857] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.991213][ T5857] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.106527][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.546845][ T6026] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 402.162943][ T6026] usb 4-1: device descriptor read/64, error -71 [ 402.402931][ T6026] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 402.543643][ T6026] usb 4-1: device descriptor read/64, error -71 [ 402.654923][ T6026] usb usb4-port1: attempt power cycle [ 403.142939][ T6026] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 403.738375][ T6026] usb 4-1: device descriptor read/8, error -71 [ 403.983122][ T6026] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 404.013655][ T6026] usb 4-1: device descriptor read/8, error -71 [ 404.133473][ T6026] usb usb4-port1: unable to enumerate USB device [ 405.434520][ T6381] usb usb8: usbfs: process 6381 (syz.3.117) did not claim interface 0 before use [ 406.480159][ T6367] syz.4.113 (6367) used greatest stack depth: 17568 bytes left [ 407.705522][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 410.560817][ T6390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.605514][ T6423] FAULT_INJECTION: forcing a failure. [ 410.605514][ T6423] name failslab, interval 1, probability 0, space 0, times 1 [ 410.605549][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.2.118 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.605575][ T6423] Tainted: [L]=SOFTLOCKUP [ 410.605582][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.605593][ T6423] Call Trace: [ 410.605600][ T6423] [ 410.605608][ T6423] dump_stack_lvl+0xe8/0x150 [ 410.605640][ T6423] should_fail_ex+0x46b/0x600 [ 410.605674][ T6423] should_failslab+0xa8/0x100 [ 410.605704][ T6423] __kmalloc_noprof+0xdf/0x7b0 [ 410.605732][ T6423] ? tomoyo_encode+0x28b/0x550 [ 410.605766][ T6423] tomoyo_encode+0x28b/0x550 [ 410.605801][ T6423] tomoyo_realpath_from_path+0x58d/0x5d0 [ 410.605842][ T6423] ? tomoyo_path_number_perm+0x219/0x630 [ 410.605868][ T6423] tomoyo_path_number_perm+0x246/0x630 [ 410.605896][ T6423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 410.605924][ T6423] ? __lock_acquire+0x6b5/0x2cf0 [ 410.605973][ T6423] ? __fget_files+0x2a/0x420 [ 410.605998][ T6423] ? __fget_files+0x2a/0x420 [ 410.606018][ T6423] ? __fget_files+0x3a6/0x420 [ 410.606038][ T6423] ? __fget_files+0x2a/0x420 [ 410.606063][ T6423] security_file_ioctl+0xc3/0x2a0 [ 410.606093][ T6423] __se_sys_ioctl+0x47/0x170 [ 410.606125][ T6423] do_syscall_64+0x14d/0xf80 [ 410.606153][ T6423] ? trace_irq_disable+0x3b/0x150 [ 410.606174][ T6423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.606194][ T6423] ? clear_bhb_loop+0x40/0x90 [ 410.606218][ T6423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.606236][ T6423] RIP: 0033:0x7f0baa59c799 [ 410.606255][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.606271][ T6423] RSP: 002b:00007f0ba87d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.606299][ T6423] RAX: ffffffffffffffda RBX: 00007f0baa816090 RCX: 00007f0baa59c799 [ 410.606313][ T6423] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 410.606325][ T6423] RBP: 00007f0ba87d5090 R08: 0000000000000000 R09: 0000000000000000 [ 410.606336][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.606347][ T6423] R13: 00007f0baa816128 R14: 00007f0baa816090 R15: 00007fffe0660b28 [ 410.606377][ T6423] [ 410.606397][ T6423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.392720][ T6427] fuse: Bad value for 'fd' [ 413.507490][ T6445] netlink: 324 bytes leftover after parsing attributes in process `syz.0.130'. [ 413.543098][ T5920] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 413.618002][ T5854] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 413.704802][ T5920] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.704833][ T5920] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.704854][ T5920] usb 1-1: config 2 interface 0 has no altsetting 0 [ 413.704883][ T5920] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 413.704902][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.640943][ T5920] elo 0003:04E7:0009.0001: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 414.807091][ T5920] usb 1-1: USB disconnect, device number 5 [ 415.020964][ T6471] fido_id[6471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 416.232325][ T37] kauditd_printk_skb: 141 callbacks suppressed [ 416.232341][ T37] audit: type=1326 audit(1772402890.056:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.0.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa235b4c799 code=0x0 [ 416.284882][ T37] audit: type=1326 audit(1772402890.116:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.0.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7fa235b0cfce code=0x0 [ 416.548725][ T37] audit: type=1326 audit(1772402890.366:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6493 comm="syz.0.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa235b4c799 code=0x0 [ 418.493393][ T6523] Can't find ip_set type haip,mac [ 418.994159][ T6533] loop6: detected capacity change from 0 to 7 [ 419.710157][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.710335][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.727327][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.727439][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.817998][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.818086][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.882766][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 419.882898][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.102964][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.103030][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.113097][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.113163][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.123023][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.123064][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.123211][ T6533] ldm_validate_partition_table(): Disk read failed. [ 420.127794][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.127884][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.131215][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.131277][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.211962][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.212064][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 420.286286][ T6533] Dev loop6: unable to read RDB block 0 [ 420.353368][ T6533] loop6: unable to read partition table [ 420.356593][ T6533] loop6: partition table beyond EOD, truncated [ 420.356752][ T6533] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 423.141879][ T6026] IPVS: starting estimator thread 0... [ 423.234984][ T6559] IPVS: using max 11 ests per chain, 26400 per kthread [ 425.385873][ T6562] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 425.385896][ T6562] UDF-fs: Scanning with blocksize 512 failed [ 425.387043][ T6562] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 425.387061][ T6562] UDF-fs: Scanning with blocksize 1024 failed [ 425.387391][ T6562] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 425.387405][ T6562] UDF-fs: Scanning with blocksize 2048 failed [ 425.387660][ T6562] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 425.387673][ T6562] UDF-fs: Scanning with blocksize 4096 failed [ 425.764970][ T6570] FAULT_INJECTION: forcing a failure. [ 425.764970][ T6570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.765005][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.4.155 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 425.765031][ T6570] Tainted: [L]=SOFTLOCKUP [ 425.765037][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.765049][ T6570] Call Trace: [ 425.765056][ T6570] [ 425.765064][ T6570] dump_stack_lvl+0xe8/0x150 [ 425.765098][ T6570] should_fail_ex+0x46b/0x600 [ 425.765134][ T6570] _copy_from_iter+0x1d3/0x1670 [ 425.765160][ T6570] ? trace_kmem_cache_alloc+0x29/0xf0 [ 425.765186][ T6570] ? __alloc_skb+0x27d/0x7d0 [ 425.765210][ T6570] ? __pfx__copy_from_iter+0x10/0x10 [ 425.765228][ T6570] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 425.765262][ T6570] ? __alloc_skb+0x27d/0x7d0 [ 425.765289][ T6570] ? netlink_sendmsg+0x650/0xb40 [ 425.765310][ T6570] ? skb_put+0x11b/0x210 [ 425.765336][ T6570] netlink_sendmsg+0x6c0/0xb40 [ 425.765365][ T6570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.765393][ T6570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.765423][ T6570] ____sys_sendmsg+0xa4e/0xac0 [ 425.765456][ T6570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.765489][ T6570] ? import_iovec+0x73/0xa0 [ 425.765516][ T6570] ___sys_sendmsg+0x2a5/0x360 [ 425.765546][ T6570] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.765603][ T6570] ? __fget_files+0x2a/0x420 [ 425.765625][ T6570] ? __fget_files+0x3a6/0x420 [ 425.765657][ T6570] __x64_sys_sendmsg+0x1c3/0x2a0 [ 425.765686][ T6570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.765720][ T6570] ? __pfx_ksys_write+0x10/0x10 [ 425.765758][ T6570] do_syscall_64+0x14d/0xf80 [ 425.765785][ T6570] ? trace_irq_disable+0x3b/0x150 [ 425.765807][ T6570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.765826][ T6570] ? clear_bhb_loop+0x40/0x90 [ 425.765849][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.765868][ T6570] RIP: 0033:0x7fd65789c799 [ 425.765886][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.765902][ T6570] RSP: 002b:00007fd655aee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.765922][ T6570] RAX: ffffffffffffffda RBX: 00007fd657b15fa0 RCX: 00007fd65789c799 [ 425.765936][ T6570] RDX: 0000000000020000 RSI: 0000200000000480 RDI: 0000000000000004 [ 425.765948][ T6570] RBP: 00007fd655aee090 R08: 0000000000000000 R09: 0000000000000000 [ 425.765959][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.765970][ T6570] R13: 00007fd657b16038 R14: 00007fd657b15fa0 R15: 00007fff82f75f88 [ 425.765999][ T6570] [ 426.342086][ T6584] netlink: 92 bytes leftover after parsing attributes in process `syz.2.158'. [ 426.362658][ T6584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.392070][ T37] audit: type=1326 audit(1772402900.216:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.392118][ T37] audit: type=1326 audit(1772402900.216:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.392156][ T37] audit: type=1326 audit(1772402900.216:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.392194][ T37] audit: type=1326 audit(1772402900.216:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.392238][ T37] audit: type=1326 audit(1772402900.216:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.585422][ T37] audit: type=1326 audit(1772402900.356:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.585461][ T37] audit: type=1326 audit(1772402900.356:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.585483][ T37] audit: type=1326 audit(1772402900.406:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.585503][ T37] audit: type=1326 audit(1772402900.406:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 426.585523][ T37] audit: type=1326 audit(1772402900.406:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6583 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0baa59c799 code=0x7ffc0000 [ 427.012926][ T6026] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 427.582523][ T6026] usb 1-1: Using ep0 maxpacket: 8 [ 427.598771][ T6026] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.598796][ T6026] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 427.598837][ T6026] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.612711][ T6026] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 427.612739][ T6026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.612758][ T6026] usb 1-1: Product: syz [ 427.612770][ T6026] usb 1-1: Manufacturer: syz [ 427.612782][ T6026] usb 1-1: SerialNumber: syz [ 427.684150][ T6026] usb 1-1: config 0 descriptor?? [ 427.714179][ T6026] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 428.980403][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.999366][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.000810][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.023173][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.024161][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.139089][ T9] usb 1-1: USB disconnect, device number 6 [ 430.366090][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 430.873756][ T6633] FAULT_INJECTION: forcing a failure. [ 430.873756][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 430.873792][ T6633] CPU: 1 UID: 0 PID: 6633 Comm: syz.1.167 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.873818][ T6633] Tainted: [L]=SOFTLOCKUP [ 430.873824][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.873835][ T6633] Call Trace: [ 430.873842][ T6633] [ 430.873850][ T6633] dump_stack_lvl+0xe8/0x150 [ 430.873884][ T6633] should_fail_ex+0x46b/0x600 [ 430.873920][ T6633] should_failslab+0xa8/0x100 [ 430.873952][ T6633] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 430.873980][ T6633] ? __alloc_skb+0x1d0/0x7d0 [ 430.874002][ T6633] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.874033][ T6633] __alloc_skb+0x1d0/0x7d0 [ 430.874060][ T6633] netlink_sendmsg+0x5d4/0xb40 [ 430.874091][ T6633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.874120][ T6633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.874151][ T6633] ____sys_sendmsg+0xa4e/0xac0 [ 430.874183][ T6633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.874216][ T6633] ? import_iovec+0x73/0xa0 [ 430.874242][ T6633] ___sys_sendmsg+0x2a5/0x360 [ 430.874273][ T6633] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.874329][ T6633] ? __fget_files+0x2a/0x420 [ 430.874350][ T6633] ? __fget_files+0x3a6/0x420 [ 430.874381][ T6633] __x64_sys_sendmsg+0x1c3/0x2a0 [ 430.874410][ T6633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.874445][ T6633] ? __pfx_ksys_write+0x10/0x10 [ 430.874483][ T6633] do_syscall_64+0x14d/0xf80 [ 430.874509][ T6633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.874529][ T6633] ? clear_bhb_loop+0x40/0x90 [ 430.874553][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.874571][ T6633] RIP: 0033:0x7f825e97c799 [ 430.874589][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.874605][ T6633] RSP: 002b:00007f825cbd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.874624][ T6633] RAX: ffffffffffffffda RBX: 00007f825ebf5fa0 RCX: 00007f825e97c799 [ 430.874638][ T6633] RDX: 0000000000000800 RSI: 0000200000000980 RDI: 0000000000000003 [ 430.874650][ T6633] RBP: 00007f825cbd6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.874662][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.874673][ T6633] R13: 00007f825ebf6038 R14: 00007f825ebf5fa0 R15: 00007ffe165f8f88 [ 430.874702][ T6633] [ 431.113130][ T5854] Bluetooth: hci5: command tx timeout [ 433.554173][ T5854] Bluetooth: hci5: command tx timeout [ 435.592996][ T5854] Bluetooth: hci5: command tx timeout [ 435.676194][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.676305][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.676524][ T6612] bridge_slave_0: entered allmulticast mode [ 435.679127][ T6612] bridge_slave_0: entered promiscuous mode [ 435.738421][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.739650][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.739825][ T6612] bridge_slave_1: entered allmulticast mode [ 435.741284][ T6612] bridge_slave_1: entered promiscuous mode [ 435.749824][ T6685] FAULT_INJECTION: forcing a failure. [ 435.749824][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.749857][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.2.173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 435.749882][ T6685] Tainted: [L]=SOFTLOCKUP [ 435.749889][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.749900][ T6685] Call Trace: [ 435.749907][ T6685] [ 435.749914][ T6685] dump_stack_lvl+0xe8/0x150 [ 435.749946][ T6685] should_fail_ex+0x46b/0x600 [ 435.749983][ T6685] strncpy_from_user+0x36/0x2b0 [ 435.750015][ T6685] do_getname+0x77/0x250 [ 435.750036][ T6685] do_sys_openat2+0xca/0x200 [ 435.750058][ T6685] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.750078][ T6685] ? ksys_write+0x248/0x270 [ 435.750105][ T6685] ? __pfx_ksys_write+0x10/0x10 [ 435.750135][ T6685] __x64_sys_creat+0x8f/0xc0 [ 435.750160][ T6685] do_syscall_64+0x14d/0xf80 [ 435.750186][ T6685] ? trace_irq_disable+0x3b/0x150 [ 435.750206][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.750225][ T6685] ? clear_bhb_loop+0x40/0x90 [ 435.750247][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.750266][ T6685] RIP: 0033:0x7f0baa59c799 [ 435.750283][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.750298][ T6685] RSP: 002b:00007f0ba87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 435.750325][ T6685] RAX: ffffffffffffffda RBX: 00007f0baa815fa0 RCX: 00007f0baa59c799 [ 435.750339][ T6685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000056c0 [ 435.750350][ T6685] RBP: 00007f0ba87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.750361][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.750372][ T6685] R13: 00007f0baa816038 R14: 00007f0baa815fa0 R15: 00007fffe0660b28 [ 435.750400][ T6685] [ 436.751133][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 436.783520][ T6692] usb usb8: usbfs: process 6692 (syz.2.183) did not claim interface 0 before use [ 438.124282][ T5854] Bluetooth: hci5: command tx timeout [ 438.224615][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.224667][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 438.224708][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.224729][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.579187][ T5920] usb 1-1: config 0 descriptor?? [ 438.600316][ T5920] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 438.627894][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.781089][ T5920] usb 1-1: USB disconnect, device number 7 [ 438.824734][ T6702] capability: warning: `syz.1.185' uses 32-bit capabilities (legacy support in use) [ 439.135683][ T5819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 439.250367][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.292901][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 439.309593][ T5819] usb 2-1: unable to get BOS descriptor or descriptor too short [ 439.310832][ T5819] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 439.310929][ T5819] usb 2-1: config 1 has an invalid interface number: 101 but max is 2 [ 439.310949][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.310965][ T5819] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 439.310983][ T5819] usb 2-1: config 1 has no interface number 1 [ 439.311021][ T5819] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 439.311045][ T5819] usb 2-1: too many endpoints for config 1 interface 101 altsetting 118: 47, using maximum allowed: 30 [ 439.311093][ T5819] usb 2-1: config 1 interface 101 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 439.311119][ T5819] usb 2-1: config 1 interface 101 has no altsetting 0 [ 439.373624][ T5819] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.373653][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.373671][ T5819] usb 2-1: Product: syz [ 439.373684][ T5819] usb 2-1: Manufacturer: syz [ 439.373696][ T5819] usb 2-1: SerialNumber: syz [ 439.414955][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.460825][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.541574][ T6612] team0: Port device team_slave_0 added [ 439.564934][ T6612] team0: Port device team_slave_1 added [ 439.667341][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.667357][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.667377][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.677001][ T6711] usb usb8: usbfs: process 6711 (syz.2.187) did not claim interface 0 before use [ 440.158688][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158737][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.326969][ T6724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 440.514713][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.634521][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.634534][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.634548][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.262069][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.034044][ T5819] usb 2-1: 0:2 : does not exist [ 442.189111][ T6742] sctp: [Deprecated]: syz.1.195 (pid 6742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.189111][ T6742] Use struct sctp_sack_info instead [ 443.236763][ T5819] usb 2-1: USB disconnect, device number 5 [ 443.326029][ T6747] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.196' sets config #0 [ 443.377154][ T6612] hsr_slave_0: entered promiscuous mode [ 443.377888][ T6612] hsr_slave_1: entered promiscuous mode [ 443.378384][ T6612] debugfs: 'hsr0' already exists in 'hsr' [ 443.378398][ T6612] Cannot create hsr debugfs directory [ 444.363559][ T12] bridge_slave_1: left allmulticast mode [ 444.363706][ T12] bridge_slave_1: left promiscuous mode [ 444.366543][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.638086][ T12] bridge_slave_0: left allmulticast mode [ 444.638115][ T12] bridge_slave_0: left promiscuous mode [ 444.925005][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.384852][ T6772] netlink: 'syz.0.204': attribute type 10 has an invalid length. [ 445.384873][ T6772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.204'. [ 445.706078][ T6779] usb usb8: usbfs: process 6779 (syz.1.207) did not claim interface 0 before use [ 447.842308][ T6788] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 448.814710][ T5920] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 449.014602][ T6792] Bluetooth: MGMT ver 1.23 [ 449.763827][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.803599][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.846154][ T12] bond0 (unregistering): Released all slaves [ 449.950669][ T6772] batman_adv: batadv0: Adding interface: vlan1 [ 449.950686][ T6772] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.950717][ T6772] batman_adv: batadv0: Interface activated: vlan1 [ 449.990653][ T5963] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.052867][ T6042] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.056109][ T6042] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.096931][ T6042] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.859806][ T6824] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 454.021979][ T6612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 454.091360][ T6835] FAULT_INJECTION: forcing a failure. [ 454.091360][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 454.091394][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.4.220 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.091420][ T6835] Tainted: [L]=SOFTLOCKUP [ 454.091426][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.091437][ T6835] Call Trace: [ 454.091445][ T6835] [ 454.091453][ T6835] dump_stack_lvl+0xe8/0x150 [ 454.091486][ T6835] should_fail_ex+0x46b/0x600 [ 454.091524][ T6835] should_failslab+0xa8/0x100 [ 454.091557][ T6835] __kmalloc_noprof+0xdf/0x7b0 [ 454.091585][ T6835] ? sock_kmalloc+0xd6/0x160 [ 454.091611][ T6835] ? __local_bh_enable+0x1e1/0x2f0 [ 454.091642][ T6835] sock_kmalloc+0xd6/0x160 [ 454.091672][ T6835] alg_setkey+0x55/0x190 [ 454.091695][ T6835] ? alg_setsockopt+0x3c5/0x4a0 [ 454.091722][ T6835] alg_setsockopt+0x3da/0x4a0 [ 454.091746][ T6835] ? __pfx_alg_setsockopt+0x10/0x10 [ 454.091772][ T6835] do_sock_setsockopt+0x17c/0x1b0 [ 454.091803][ T6835] __x64_sys_setsockopt+0x143/0x1b0 [ 454.091834][ T6835] do_syscall_64+0x14d/0xf80 [ 454.091859][ T6835] ? trace_irq_disable+0x3b/0x150 [ 454.091879][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.091898][ T6835] ? clear_bhb_loop+0x40/0x90 [ 454.091922][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.091941][ T6835] RIP: 0033:0x7fd65789c799 [ 454.091958][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.091974][ T6835] RSP: 002b:00007fd655aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.091993][ T6835] RAX: ffffffffffffffda RBX: 00007fd657b15fa0 RCX: 00007fd65789c799 [ 454.092007][ T6835] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 454.092019][ T6835] RBP: 00007fd655aee090 R08: 000000000000000c R09: 0000000000000000 [ 454.092031][ T6835] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 454.092047][ T6835] R13: 00007fd657b16038 R14: 00007fd657b15fa0 R15: 00007fff82f75f88 [ 454.092076][ T6835] [ 454.455300][ T6612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 455.682966][ T6612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 455.853816][ T5927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 456.153009][ T6612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.283018][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 456.286903][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.286934][ T5927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.286964][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 456.286991][ T5927] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 456.287011][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.296816][ T5927] usb 2-1: config 0 descriptor?? [ 456.643269][ T12] hsr_slave_0: left promiscuous mode [ 456.699845][ T12] hsr_slave_1: left promiscuous mode [ 456.718606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.738078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.841325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.841492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.876786][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 456.892545][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 456.918050][ T5927] usb 2-1: USB disconnect, device number 6 [ 457.102055][ T12] veth1_macvtap: left promiscuous mode [ 457.102230][ T12] veth0_macvtap: left promiscuous mode [ 457.102431][ T12] veth1_vlan: left promiscuous mode [ 457.102613][ T12] veth0_vlan: left promiscuous mode [ 457.915967][ T6873] fuse: Bad value for 'fd' [ 460.683512][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.726822][ T12] team0 (unregistering): Port device team_slave_0 removed [ 462.418504][ T6912] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 462.418525][ T6912] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 462.418536][ T6912] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 462.657198][ T6917] FAULT_INJECTION: forcing a failure. [ 462.657198][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.657240][ T6917] CPU: 1 UID: 0 PID: 6917 Comm: syz.2.240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.657294][ T6917] Tainted: [L]=SOFTLOCKUP [ 462.657306][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.657327][ T6917] Call Trace: [ 462.657334][ T6917] [ 462.657341][ T6917] dump_stack_lvl+0xe8/0x150 [ 462.657376][ T6917] should_fail_ex+0x46b/0x600 [ 462.657410][ T6917] _copy_to_user+0x31/0xb0 [ 462.657435][ T6917] copy_siginfo_to_user+0x22/0xc0 [ 462.657463][ T6917] x64_setup_rt_frame+0x77c/0xcb0 [ 462.657487][ T6917] ? rt_spin_unlock+0x14f/0x200 [ 462.657525][ T6917] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 462.657555][ T6917] arch_do_signal_or_restart+0x429/0x830 [ 462.657581][ T6917] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.657610][ T6917] ? ksys_read+0x202/0x270 [ 462.657644][ T6917] exit_to_user_mode_loop+0x86/0x480 [ 462.657669][ T6917] ? rcu_is_watching+0x15/0xb0 [ 462.657692][ T6917] do_syscall_64+0x32d/0xf80 [ 462.657716][ T6917] ? trace_irq_disable+0x3b/0x150 [ 462.657736][ T6917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.657755][ T6917] ? clear_bhb_loop+0x40/0x90 [ 462.657775][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.657792][ T6917] RIP: 0033:0x7f0baa59c799 [ 462.657810][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.657825][ T6917] RSP: 002b:00007f0ba87f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.657853][ T6917] RAX: fffffffffffffffc RBX: 00007f0baa815fa0 RCX: 00007f0baa59c799 [ 462.657866][ T6917] RDX: 0000000000000026 RSI: 0000200000000440 RDI: 0000000000000003 [ 462.657878][ T6917] RBP: 00007f0ba87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.657889][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.657901][ T6917] R13: 00007f0baa816038 R14: 00007f0baa815fa0 R15: 00007fffe0660b28 [ 462.657929][ T6917] [ 462.936056][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.998312][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.082045][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.082192][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.133395][ T6930] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 463.226414][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.226559][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.716284][ T6948] syz.2.247 uses obsolete (PF_INET,SOCK_PACKET) [ 463.774567][ T6948] bond_slave_0: entered promiscuous mode [ 463.774610][ T6948] bond_slave_1: entered promiscuous mode [ 463.774888][ T6948] vlan3: entered promiscuous mode [ 463.774895][ T6948] bond0: entered promiscuous mode [ 465.249007][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.333206][ T5847] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 465.473051][ T6026] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 465.493077][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 465.498630][ T5847] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 465.498657][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.550142][ T5847] usb 2-1: config 0 descriptor?? [ 465.579106][ T5847] gspca_main: sq930x-2.14.0 probing 041e:403c [ 466.602319][ T5847] gspca_sq930x: reg_r 001f failed -110 [ 466.602438][ T5847] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 466.685538][ T6026] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 466.685590][ T6026] usb 3-1: config 48 interface 0 altsetting 98 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 466.685612][ T6026] usb 3-1: config 48 interface 0 altsetting 98 bulk endpoint 0x87 has invalid maxpacket 1024 [ 466.685634][ T6026] usb 3-1: config 48 interface 0 altsetting 98 endpoint 0x8 has invalid wMaxPacketSize 0 [ 466.685653][ T6026] usb 3-1: config 48 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.685676][ T6026] usb 3-1: config 48 interface 0 has no altsetting 0 [ 466.688846][ T6026] usb 3-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 466.688872][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.688981][ T6026] usb 3-1: Product: syz [ 466.688999][ T6026] usb 3-1: Manufacturer: syz [ 466.689010][ T6026] usb 3-1: SerialNumber: syz [ 466.933597][ T6965] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 467.105194][ T6612] veth0_vlan: entered promiscuous mode [ 467.126183][ T6612] veth1_vlan: entered promiscuous mode [ 467.193488][ T6965] ip6tnl1: entered allmulticast mode [ 467.252304][ T6026] usb 3-1: USB disconnect, device number 5 [ 467.588647][ T6612] veth0_macvtap: entered promiscuous mode [ 467.602366][ T6612] veth1_macvtap: entered promiscuous mode [ 467.628082][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.639554][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.661015][ T5963] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.672138][ T5963] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.672625][ T5963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.673135][ T5963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.170219][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.170240][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.193113][ T5927] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 468.282911][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.282930][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.347089][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.347120][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.378246][ T5927] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 468.378275][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.378295][ T5927] usb 3-1: Product: syz [ 468.378308][ T5927] usb 3-1: Manufacturer: syz [ 468.378322][ T5927] usb 3-1: SerialNumber: syz [ 468.424960][ T5927] usb 3-1: config 0 descriptor?? [ 468.444825][ T5927] hub 3-1:0.0: bad descriptor, ignoring hub [ 468.444863][ T5927] hub 3-1:0.0: probe with driver hub failed with error -5 [ 468.452422][ T5927] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 470.531862][ T6026] usb 2-1: USB disconnect, device number 7 [ 470.695148][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.261'. [ 473.167718][ T5996] usb 3-1: USB disconnect, device number 6 [ 473.433951][ T7054] usb usb8: usbfs: process 7054 (syz.2.266) did not claim interface 0 before use [ 473.438420][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.2.266'. [ 473.726865][ T7062] process 'syz.5.269' launched '/dev/fd/4' with NULL argv: empty string added [ 473.918250][ T7055] macvlan0: entered promiscuous mode [ 473.943077][ T7055] veth0_to_hsr: entered promiscuous mode [ 473.944540][ T7055] hsr1: entered promiscuous mode [ 473.944577][ T7055] hsr1: entered allmulticast mode [ 473.944589][ T7055] macvlan0: entered allmulticast mode [ 473.944600][ T7055] veth1_vlan: entered allmulticast mode [ 473.957555][ T7055] veth0_to_hsr: entered allmulticast mode [ 474.772947][ T5927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 474.903059][ T5927] usb 2-1: device descriptor read/64, error -71 [ 475.193818][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 475.322953][ T5927] usb 2-1: device descriptor read/64, error -71 [ 475.433270][ T5927] usb usb2-port1: attempt power cycle [ 475.682987][ T5996] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 475.772930][ T5927] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 475.793480][ T5927] usb 2-1: device descriptor read/8, error -71 [ 475.842848][ T5996] usb 5-1: Using ep0 maxpacket: 16 [ 475.851779][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.851811][ T5996] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.851825][ T5996] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.851845][ T5996] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 475.851860][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.856575][ T5996] usb 5-1: config 0 descriptor?? [ 476.053216][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.083671][ T5927] usb 2-1: device descriptor read/8, error -71 [ 476.196326][ T5927] usb usb2-port1: unable to enumerate USB device [ 476.345939][ T5927] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 476.543954][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 476.559352][ T5927] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 476.559380][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.559398][ T5927] usb 3-1: Product: syz [ 476.559411][ T5927] usb 3-1: Manufacturer: syz [ 476.559424][ T5927] usb 3-1: SerialNumber: syz [ 476.586459][ T5927] usb 3-1: config 0 descriptor?? [ 476.670743][ T5996] usbhid 5-1:0.0: can't add hid device: -71 [ 476.670821][ T5996] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 476.673919][ T5996] usb 5-1: USB disconnect, device number 3 [ 476.713544][ T5927] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 477.024740][ T5927] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 477.700786][ T6026] usb 3-1: USB disconnect, device number 7 [ 480.696737][ T7146] Can't find ip_set type haip,mac [ 480.743102][ T5920] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 480.893121][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 480.895643][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.897002][ T5920] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.899798][ T5920] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 480.899825][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.899843][ T5920] usb 3-1: Product: syz [ 480.899856][ T5920] usb 3-1: Manufacturer: syz [ 480.899869][ T5920] usb 3-1: SerialNumber: syz [ 481.011665][ T7150] overlayfs: failed to resolve './file0': -2 [ 481.315807][ T5920] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 481.361768][ T5920] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 481.484668][ T5920] usb 3-1: USB disconnect, device number 8 [ 481.906380][ T6025] udevd[6025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.024738][ T7172] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 482.024760][ T7172] UDF-fs: Scanning with blocksize 512 failed [ 482.025255][ T7172] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 482.025270][ T7172] UDF-fs: Scanning with blocksize 1024 failed [ 482.025621][ T7172] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 482.025635][ T7172] UDF-fs: Scanning with blocksize 2048 failed [ 482.025907][ T7172] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 482.025921][ T7172] UDF-fs: Scanning with blocksize 4096 failed [ 484.071614][ T7194] netlink: 400 bytes leftover after parsing attributes in process `syz.0.300'. [ 485.313154][ T7201] Can't find ip_set type haip,mac [ 485.502967][ T5927] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 485.526548][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 485.570857][ T7206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.306'. [ 485.570885][ T7206] netlink: 'syz.4.306': attribute type 6 has an invalid length. [ 485.570898][ T7206] netlink: 'syz.4.306': attribute type 5 has an invalid length. [ 485.570910][ T7206] netlink: 'syz.4.306': attribute type 4 has an invalid length. [ 485.688509][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 485.740484][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.740535][ T5927] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.365534][ T5927] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 486.365563][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 486.365577][ T5927] usb 1-1: Product: syz [ 486.365584][ T5927] usb 1-1: Manufacturer: syz [ 486.365591][ T5927] usb 1-1: SerialNumber: syz [ 486.371986][ T5927] usb 1-1: config 0 descriptor?? [ 486.494725][ T5978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 486.643245][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 486.644657][ T5978] usb 5-1: config 1 interface 0 has no altsetting 0 [ 486.646763][ T5978] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 486.646779][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.646789][ T5978] usb 5-1: Product: syz [ 486.646796][ T5978] usb 5-1: Manufacturer: syz [ 486.646803][ T5978] usb 5-1: SerialNumber: syz [ 486.814471][ T6026] usb 1-1: USB disconnect, device number 8 [ 486.939529][ T5978] usbhid 5-1:1.0: can't add hid device: -71 [ 486.939647][ T5978] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 486.945368][ T5978] usb 5-1: USB disconnect, device number 4 [ 487.902014][ T7232] Can't find ip_set type haip,mac [ 487.955301][ T7231] netlink: 212088 bytes leftover after parsing attributes in process `syz.2.311'. [ 487.975234][ T7231] usb usb8: usbfs: process 7231 (syz.2.311) did not claim interface 0 before use [ 488.259629][ T7239] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 488.812186][ T5819] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 489.028650][ T5819] usb 3-1: Using ep0 maxpacket: 16 [ 489.148763][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 489.148842][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.228354][ T5819] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 489.228383][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.228401][ T5819] usb 3-1: Product: syz [ 489.228415][ T5819] usb 3-1: Manufacturer: syz [ 489.228428][ T5819] usb 3-1: SerialNumber: syz [ 489.353224][ T5819] usb 3-1: config 0 descriptor?? [ 489.363243][ T5819] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 489.363280][ T5819] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 490.601563][ T7268] FAULT_INJECTION: forcing a failure. [ 490.601563][ T7268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.601622][ T7268] CPU: 0 UID: 0 PID: 7268 Comm: syz.4.320 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.601650][ T7268] Tainted: [L]=SOFTLOCKUP [ 490.601656][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.601667][ T7268] Call Trace: [ 490.601674][ T7268] [ 490.601682][ T7268] dump_stack_lvl+0xe8/0x150 [ 490.601713][ T7268] should_fail_ex+0x46b/0x600 [ 490.601743][ T7268] _copy_to_user+0x31/0xb0 [ 490.601770][ T7268] simple_read_from_buffer+0xe1/0x170 [ 490.601798][ T7268] proc_fail_nth_read+0x1be/0x230 [ 490.601824][ T7268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.601845][ T7268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.601867][ T7268] ? vfs_read+0x1f7/0xa80 [ 490.601895][ T7268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.601918][ T7268] vfs_read+0x212/0xa80 [ 490.601962][ T7268] ? __pfx_vfs_read+0x10/0x10 [ 490.601991][ T7268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 490.602020][ T7268] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.602047][ T7268] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 490.602074][ T7268] ? mutex_lock_nested+0x152/0x1d0 [ 490.602093][ T7268] ? fdget_pos+0x252/0x320 [ 490.602126][ T7268] ksys_read+0x156/0x270 [ 490.602156][ T7268] ? __pfx_ksys_read+0x10/0x10 [ 490.602194][ T7268] do_syscall_64+0x14d/0xf80 [ 490.602221][ T7268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.602241][ T7268] ? clear_bhb_loop+0x40/0x90 [ 490.602265][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.602285][ T7268] RIP: 0033:0x7fd65785cfce [ 490.602303][ T7268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.602319][ T7268] RSP: 002b:00007fd655aabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.602340][ T7268] RAX: ffffffffffffffda RBX: 00007fd655aac6c0 RCX: 00007fd65785cfce [ 490.602354][ T7268] RDX: 000000000000000f RSI: 00007fd655aac0a0 RDI: 0000000000000008 [ 490.602366][ T7268] RBP: 00007fd655aac090 R08: 0000000000000000 R09: 0000000000000000 [ 490.602378][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.602389][ T7268] R13: 00007fd657b16218 R14: 00007fd657b16180 R15: 00007fff82f75f88 [ 490.602419][ T7268] [ 490.922223][ T5819] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 490.955081][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.957262][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.122305][ T5819] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 492.147803][ T5819] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 492.147817][ T5819] em28xx 3-1:0.0: No AC97 audio processor [ 492.484788][ T5978] usb 3-1: USB disconnect, device number 9 [ 492.490195][ T5978] em28xx 3-1:0.0: Disconnecting em28xx [ 492.632873][ T7284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.322'. [ 492.724797][ T7287] faux_driver vkms: [drm] Unknown color mode 1055804; guessing buffer size. [ 492.783506][ T7279] smc: net device bond0 applied user defined pnetid SYZ2 [ 492.794024][ T5978] em28xx 3-1:0.0: Freeing device [ 492.943582][ T7284] smc: removing net device bond0 with user defined pnetid SYZ2 [ 493.240061][ T7284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.383876][ T7284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.428650][ T7284] bond0 (unregistering): Released all slaves [ 493.611198][ T7299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.328'. [ 495.598131][ T7324] warning: `syz.2.334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 496.072969][ T6026] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 496.448850][ T6026] usb 3-1: Using ep0 maxpacket: 16 [ 496.482757][ T6026] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 496.482886][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.482905][ T6026] usb 3-1: Product: syz [ 496.482917][ T6026] usb 3-1: Manufacturer: syz [ 496.482930][ T6026] usb 3-1: SerialNumber: syz [ 496.620455][ T6026] usb 3-1: config 0 descriptor?? [ 496.661885][ T6026] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 496.695555][ T6026] usb 3-1: Detected FT2232H [ 498.911815][ T6026] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 499.003404][ T6026] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 499.013160][ T6026] usb 3-1: USB disconnect, device number 10 [ 499.090217][ T6026] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 499.091086][ T6026] ftdi_sio 3-1:0.0: device disconnected [ 499.452989][ T5826] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 499.603008][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 499.605288][ T5826] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 499.605305][ T5826] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.605317][ T5826] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 499.605329][ T5826] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 499.605342][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0 [ 499.609443][ T5826] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 499.609468][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.609483][ T5826] usb 5-1: Product: syz [ 499.609494][ T5826] usb 5-1: Manufacturer: syz [ 499.609504][ T5826] usb 5-1: SerialNumber: syz [ 499.829412][ T5826] usb 5-1: config 0 descriptor?? [ 499.830142][ T7370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.124828][ T7370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.962131][ T5826] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 501.488864][ T5847] usb 5-1: USB disconnect, device number 5 [ 501.505787][ T5826] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 501.520208][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520273][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.664625][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 501.668522][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.668555][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 501.668580][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.668618][ T5826] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 501.668639][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.805417][ T5826] usb 1-1: config 0 descriptor?? [ 503.378932][ T5996] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 503.582387][ T5996] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 503.582417][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.582436][ T5996] usb 2-1: Product: syz [ 503.582449][ T5996] usb 2-1: Manufacturer: syz [ 503.582463][ T5996] usb 2-1: SerialNumber: syz [ 503.768974][ T5826] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0002/input/input7 [ 504.028528][ T5826] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 505.183975][ T5826] usb 1-1: USB disconnect, device number 9 [ 505.185357][ T5996] rtl8150 2-1:1.0: couldn't reset the device [ 505.185742][ T5996] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 505.401449][ T5996] usb 2-1: USB disconnect, device number 12 [ 505.528273][ T7434] fido_id[7434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 508.232584][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 508.389369][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 508.393319][ T5826] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 508.393342][ T5826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.393359][ T5826] usb 1-1: config 0 has no interface number 0 [ 508.393399][ T5826] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.400687][ T5826] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 508.400715][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 508.400733][ T5826] usb 1-1: Product: syz [ 508.400746][ T5826] usb 1-1: SerialNumber: syz [ 508.428009][ T5826] usb 1-1: config 0 descriptor?? [ 508.470342][ T5826] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 508.672894][ T6026] usb 1-1: USB disconnect, device number 10 [ 509.392942][ T6026] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 509.494419][ T5826] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 509.527464][ T7478] ip6tnl1: entered allmulticast mode [ 509.592941][ T6026] usb 2-1: Using ep0 maxpacket: 32 [ 509.600898][ T6026] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.600929][ T6026] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.628697][ T6026] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 509.628725][ T6026] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 509.628743][ T6026] usb 2-1: Product: syz [ 509.628750][ T6026] usb 2-1: Manufacturer: syz [ 509.670367][ T6026] hub 2-1:4.0: USB hub found [ 509.694749][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.696157][ T5826] usb 1-1: not running at top speed; connect to a high speed hub [ 509.697924][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.697973][ T5826] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.697985][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 509.697996][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 509.698006][ T5826] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 509.700868][ T5826] usb 1-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 509.700894][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.700912][ T5826] usb 1-1: Product: syz [ 509.700925][ T5826] usb 1-1: Manufacturer: syz [ 509.700960][ T5826] usb 1-1: SerialNumber: syz [ 509.718892][ T5826] ipaq 1-1:1.0: PocketPC PDA converter detected [ 509.889418][ T6026] hub 2-1:4.0: 1 port detected [ 509.971742][ T5826] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 510.434436][ T6026] hub 2-1:4.0: set hub depth failed [ 510.456256][ T6026] usb 2-1: USB disconnect, device number 13 [ 510.702977][ T7487] fuse: Bad value for 'fd' [ 513.053903][ T7492] ODEBUG: Out of memory. ODEBUG disabled [ 513.105136][ C1] ------------[ cut here ]------------ [ 513.105147][ C1] 1 [ 513.105156][ C1] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#1: ktimers/1/29 [ 513.105180][ C1] Modules linked in: [ 513.105194][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.105215][ C1] Tainted: [L]=SOFTLOCKUP [ 513.105219][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.105226][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 513.105236][ C1] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 513.105246][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 513.105255][ C1] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801cefbc80 [ 513.105263][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 513.105270][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 513.105276][ C1] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000001 [ 513.105284][ C1] R13: 0000000100005284 R14: 1ffff92000147f4c R15: ffff888032333010 [ 513.105292][ C1] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 513.105300][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.105307][ C1] CR2: 000000110c3550a1 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 513.105317][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 513.105324][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 513.105331][ C1] Call Trace: [ 513.105335][ C1] [ 513.105340][ C1] call_timer_fn+0x192/0x640 [ 513.105352][ C1] ? __pfx_stub_timer+0x10/0x10 [ 513.105361][ C1] ? call_timer_fn+0xd4/0x640 [ 513.105370][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 513.105379][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.105401][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.105416][ C1] ? __pfx_stub_timer+0x10/0x10 [ 513.105427][ C1] __run_timer_base+0x6a3/0x9f0 [ 513.105451][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 513.105465][ C1] ? rt_spin_lock+0x1e0/0x400 [ 513.105486][ C1] run_timer_softirq+0xb7/0x170 [ 513.105502][ C1] handle_softirqs+0x1de/0x6f0 [ 513.105523][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 513.105540][ C1] run_ktimerd+0x69/0x100 [ 513.105556][ C1] smpboot_thread_fn+0x541/0xa50 [ 513.105573][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 513.105594][ C1] kthread+0x388/0x470 [ 513.105605][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 513.105620][ C1] ? __pfx_kthread+0x10/0x10 [ 513.105632][ C1] ret_from_fork+0x51e/0xb90 [ 513.105649][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 513.105663][ C1] ? __switch_to+0xc7d/0x1450 [ 513.105678][ C1] ? __pfx_kthread+0x10/0x10 [ 513.105690][ C1] ret_from_fork_asm+0x1a/0x30 [ 513.105709][ C1] [ 513.105720][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 513.105729][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 513.105743][ C1] Tainted: [L]=SOFTLOCKUP [ 513.105746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.105752][ C1] Call Trace: [ 513.105756][ C1] [ 513.105760][ C1] vpanic+0x56c/0xa60 [ 513.105776][ C1] ? __pfx__printk+0x10/0x10 [ 513.105788][ C1] ? __pfx_vpanic+0x10/0x10 [ 513.105802][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 513.105817][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 513.105836][ C1] panic+0xc5/0xd0 [ 513.105851][ C1] ? __pfx_panic+0x10/0x10 [ 513.105871][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 513.105884][ C1] __warn+0x315/0x4f0 [ 513.105898][ C1] ? stub_timer+0xa/0x20 [ 513.105908][ C1] ? stub_timer+0xa/0x20 [ 513.105918][ C1] __report_bug+0x29a/0x540 [ 513.105936][ C1] ? stub_timer+0xa/0x20 [ 513.105946][ C1] ? __pfx___report_bug+0x10/0x10 [ 513.105959][ C1] ? add_lock_to_list+0xc7/0x100 [ 513.105972][ C1] ? lockdep_unlock+0x5d/0xd0 [ 513.105987][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 513.106002][ C1] ? stub_timer+0xa/0x20 [ 513.106011][ C1] report_bug+0x16a/0x220 [ 513.106025][ C1] ? stub_timer+0xa/0x20 [ 513.106033][ C1] ? stub_timer+0xc/0x20 [ 513.106042][ C1] handle_bug+0x98/0x200 [ 513.106060][ C1] exc_invalid_op+0x1a/0x50 [ 513.106076][ C1] asm_exc_invalid_op+0x1a/0x20 [ 513.106087][ C1] RIP: 0010:stub_timer+0xa/0x20 [ 513.106096][ C1] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 513.106104][ C1] RSP: 0018:ffffc90000a3fa38 EFLAGS: 00010246 [ 513.106113][ C1] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801cefbc80 [ 513.106120][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 513.106127][ C1] RBP: ffffc90000a3fb30 R08: 0000000000000000 R09: 0000000000000100 [ 513.106133][ C1] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000001 [ 513.106140][ C1] R13: 0000000100005284 R14: 1ffff92000147f4c R15: ffff888032333010 [ 513.106150][ C1] ? __pfx_stub_timer+0x10/0x10 [ 513.106160][ C1] ? stub_timer+0x9/0x20 [ 513.106173][ C1] ? stub_timer+0x9/0x20 [ 513.106181][ C1] call_timer_fn+0x192/0x640 [ 513.106191][ C1] ? __pfx_stub_timer+0x10/0x10 [ 513.106199][ C1] ? call_timer_fn+0xd4/0x640 [ 513.106213][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 513.106222][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.106242][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.106255][ C1] ? __pfx_stub_timer+0x10/0x10 [ 513.106266][ C1] __run_timer_base+0x6a3/0x9f0 [ 513.106289][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 513.106303][ C1] ? rt_spin_lock+0x1e0/0x400 [ 513.106323][ C1] run_timer_softirq+0xb7/0x170 [ 513.106339][ C1] handle_softirqs+0x1de/0x6f0 [ 513.106359][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 513.106374][ C1] run_ktimerd+0x69/0x100 [ 513.106390][ C1] smpboot_thread_fn+0x541/0xa50 [ 513.106407][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 513.106427][ C1] kthread+0x388/0x470 [ 513.106438][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 513.106453][ C1] ? __pfx_kthread+0x10/0x10 [ 513.106465][ C1] ret_from_fork+0x51e/0xb90 [ 513.106481][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 513.106495][ C1] ? __switch_to+0xc7d/0x1450 [ 513.106510][ C1] ? __pfx_kthread+0x10/0x10 [ 513.106522][ C1] ret_from_fork_asm+0x1a/0x30 [ 513.106541][ C1] [ 513.106721][ C1] Kernel Offset: disabled