last executing test programs: 4m53.491201967s ago: executing program 1 (id=16): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4m50.096555474s ago: executing program 1 (id=18): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@in6={0xa, 0x3, 0x100000, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x41) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x0, 0x0, 0x0, 0x0, 0xfffffe5a, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x10, 0x1, 0x59}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000680)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000700)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1, 0x1, 0x61, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r5, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x68c81, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x800) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000280)={0xf000, 0x118000}) move_pages(r6, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 4m43.385915469s ago: executing program 1 (id=25): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000380)=0x39cb, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x5c1801, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000440)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001580)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 4m41.267215701s ago: executing program 1 (id=31): io_uring_setup(0x590f, &(0x7f0000000180)={0x0, 0xc5e4, 0x40, 0x3e, 0x1f}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000015a000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000025f000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000033e000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002fa000/0x1000)=nil, 0x0, 0x32}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x89d, &(0x7f0000000300)={0x0, 0x472, 0x200, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000150c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000015100)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000015140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000015180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000151c0), 0x0, 0x0) read$msr(r4, &(0x7f0000015200)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000002e200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f000002e240)='./dev\x00', &(0x7f000002e280)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f000002e2c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@nullb, &(0x7f000002e340)='./mnt\x00', &(0x7f000002e380)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f000002e3c0)='./mnt\x00', &(0x7f000002e400)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') 4m35.381030158s ago: executing program 1 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003300)=ANY=[@ANYRES32], 0x14}}, 0x9e2ba6396ac6ecb) pipe(&(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000030c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) readv(r1, &(0x7f0000003100)=[{&(0x7f0000003140)=""/223, 0xdf}], 0x1) write(r3, &(0x7f0000003240)="86", 0x1) splice(r3, &(0x7f0000003280), r2, 0x0, 0x6, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(r3, &(0x7f0000000180)='none\x00', 0x1ff) mount(&(0x7f0000003340)=@filename='none\x00', &(0x7f0000003380)='./debug\x00', &(0x7f00000033c0)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000003400)='./debug/hsr/hsr0/node_table\x00', 0x0, 0x0) read(r6, &(0x7f0000003440)=""/4096, 0x1000) close(r6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x6, 0xff, 0x0, 0xfffffeff}}) r7 = accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000008c0)=0x1c) sendmsg(r7, &(0x7f0000003040)={&(0x7f0000000900)=@generic={0x1, "43d9900469fa6cc8777424fad1253b426985b4aa6b63152fbb863ace7c7596f812660e2917202e61b7ca1eda653f6d56adb178b59a3fb8fcd63dcf317fd2c46ae6ca0f903c8b0d0db69f54f87913878c424544ee3a02298c32651f0037404b30dd37ed70147bcf2007701e72d273a3ad1fbd18d2789dbb46e5219f37097e"}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000980)="c83de127b1cd881e5a0efce84c5b4c89a541a9a2d69db1f9da01a299c28634195574b2b53b9ebf43b5af6ec43519fdb23c4922f98a9a1becba1a1bf28397f909f56b7bfe9462badb036e187852b7af82f4fbb7fa7c8229961dd2a87d597160755306e43662344931c98da11718208e14436331524048a8f16f64329b946f3cfe7954c77c91db51bbdd0ff7b8cec1c09f64d95b1ab42cc5ac040b8af9ff78405e30be1a93d2805f10a3c881096dc2665dc5543c88c10d77651b9ed6a9e8af9d248b0efbf7f378cad8c246", 0xca}, {&(0x7f0000000a80)="74e57ca8115cfac5a2e82729ec4a05da19", 0x11}, {&(0x7f0000000ac0)="9a9a79717597a42bcae51c187edb9e81c95680e16596a9372389cd62b649987ceec3a7353800486a3a8390e4e5206833d8d0701b62396910df37f6538b791891760d96e41941ccbbf7933b3743845e0e87eff78a5632d74ec6da42b127a258595395d7968efa4a5e41b4002ead5bf70fce22e021c3c2c075c7d602d0daa78f", 0x7f}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="8754462d65037e419604f4008e170db2533117cc5945121d037e06806c4d4ffe37d1c2a406b75541fb7d7124bc056bbd5868db2814f144bec3c484b917992b0fb877f84719e4c677141a9671ba09fc0a2ba2178e7df8054308911ab5929b3b660609b911aed8bc1882de2b5934aef5c05f98ab2d757d22f33550a01ff9be341e789b03c78a987873b814b05389c02fd8efb6f877f8bcb7aee6b995715d4f66315d32d063b0ccccb3578e79b8b94dec92863047faaa3047c119e104c00dbe8bd66218bdabdfddc407ce0faccab9ea6040531c53f09b00b9f5313967720d9edbeeaceec01bc36d54e0b22296d4f4bf2074", 0xf0}, {&(0x7f0000001c40)="078dd7f37dfcfe861e8e9b2b2f0e0a5d98aedd83bda646808207a23b1b2b6e7a6b06fba69a36c707d90be336cbccd8a020cec8554e3c34ed45b73989230682844587595cfe67a47ed337c92f4f5b9aa085095c4767edf559650e4dcefe4702b739", 0x61}, {&(0x7f0000001cc0)="6ea11dded428198d9db278155b68ff27528f37f22ffd6c763702e699cbf6b797e5f73c4550e451a288ff024437faf9294e8e33238ee167cdf5", 0x39}, {&(0x7f0000001d00)="cd6c3f8c31dfdb9efc30fc174756b1f2ac4c3cb615e451eaeac3fa72231f8954101d3b5e1b69fc929c05c85e4697b9170eb06c7d24b2ecae0cfe7683fa8d9beecd52976843a39e9a60e45b5ce22d1cf0d010", 0x52}, {&(0x7f0000001d80)="1ddf7f04b9e5353f1b65f0fe1dc9f4216bd005990e3ebe63c25970f78b3cadf0ed0bb476a3122f832cf0cf61df722fd3c92dba89bb0f114550993d4fe11729be79c4096a74cc6f051d599f5fdbd6601446636d6b5fe27887f83f3e518f50f66b3052d91a5e21f20309a46ba33c0b3ef85a9bc7feb6a23e56538e301d3d9797d072951e6deb35cce0cfc9446ea07a1d2bd195b85f7c4c6aad09c58b9f834bf89363686002564f0efbf0db2a58283eb7ec1213ec3a280d76866dbf59", 0xbb}], 0x9, &(0x7f0000001f40)=[{0x1010, 0x113, 0x81, "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"}, {0x98, 0xff, 0x80000000, "ecf0e3ea3bd74a1f7033108acdeb9d46a8e550c1b0c0deca3a488f613470d3343a2d3f782b6e1aa3471b8ec84c7f55db87e7221f951cf7fd87052c3b2eafed8b614a34a6fa1868516b6e7a11f9a2fcbb22e4d62d6d68d7bdd31377519df063030f83a866b9607ff0e580952d2bbf5fa2b2bcae61aae25f727677ba56a47c78d4919b62"}, {0x40, 0x6, 0x3, "794de310c21369a8a955d47b11966a72bc70e598fe6a7793f1833e87e51827047ba8779e3c6dd01e81f5"}], 0x10e8}, 0xc0040) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000003c0)={{r5, &(0x7f00000001c0)='#]$.\\\x00', 0x220183, &(0x7f0000000200)={@_ha_fsid={[0xf9b, 0x80000000]}, {0x7, 0x7, 0x9, 0x2}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xf}, 0x1, &(0x7f0000000380)=[{0x1, 0xfffffbff, &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000300)="29c3fe06d8b664222e600699c467e95887f0dfdfa7c2763b69780a4b36bf255f7135721a60cd54be77ebae12993c2c53024f494c330d3cbb5f76afa4", 0x3c, 0x2}]}) syz_open_dev$sndmidi(&(0x7f00000032c0), 0x7131, 0x20000) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000840)={0x1, 0x0, 0x5, 0x11, 0x15e, &(0x7f0000000440)}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000044c0)={0x11, 0x14, &(0x7f0000004580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000004640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000004680)={r9}, 0xc) fsetxattr$smack_xattr_label(r4, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000880)=ANY=[@ANYBLOB="697036677265300000a9"], 0x9, 0x3) 4m33.961878278s ago: executing program 1 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x89a02, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="208a020000009c"], 0x0, 0x0}) (async) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x6, 0xc, @dev={0xfe, 0x80, '\x00', 0x17}, @remote, 0x80, 0x8000, 0x7fff, 0x65ad}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x0, 0x3, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x66, 0x0, 0x4, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x4e, 0x3, [{0x7, 0x5, "34a47b"}, {0x2, 0xe, "cffae0ba3e7e6997d40c51df"}, {0x7, 0x9, "7d375aafbe8360"}, {0x6, 0x9, "e0151aba54fbec"}, {0x2, 0x5, "9d4f19"}, {0x1, 0x4, "f835"}, {0x5, 0x4, "7dae"}, {0x0, 0xb, "55097468e4c993c08a"}, {0x7, 0xb, "8b74a0b071868c5088"}]}, @generic={0x94, 0xfffffffffffffde8, "b5bbbd"}, @timestamp_prespec={0x44, 0x3c, 0x14, 0x3, 0x5, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}, {@multicast2, 0x5}, {@multicast2, 0x80000001}, {@empty, 0x4}, {@loopback, 0x8}, {@loopback, 0x6}]}, @end, @timestamp={0x44, 0x24, 0xa7, 0x0, 0xd, [0x101, 0x9, 0x5, 0x80, 0xfffffff8, 0x6, 0x200, 0x7]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) (async) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8) (async, rerun: 32) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) (rerun: 32) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000a40)={'full'}, 0xfffffdef) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000818) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000ac0), 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r10 = syz_io_uring_setup(0x1fa, &(0x7f0000000580)={0x0, 0x41ae, 0x2, 0x5, 0x1000240}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r10, 0x1f, 0x0, 0x1) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRESDEC=r10, @ANYBLOB="0315000000000000140012800c0001006d61637674617000b6fe028008000500", @ANYRES32=r9, @ANYBLOB="00200000b0350adfcd0f54afc87abc6a12b45c53a4", @ANYRES32=r9, @ANYBLOB="792dc07b56be536818a72cb21ea89e3f6a93bd1a33eceeb610dc75102575bffdb109b42bee798363ac"], 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) r11 = socket(0x10, 0x3, 0x400) (async, rerun: 32) r12 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000600)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24005004}, 0x26000894) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)={0xb0, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async, rerun: 32) close(r0) (rerun: 32) 4m18.835670563s ago: executing program 32 (id=38): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x89a02, 0x0) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff0007058102"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="208a020000009c"], 0x0, 0x0}) (async) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x8, 0x6, 0xc, @dev={0xfe, 0x80, '\x00', 0x17}, @remote, 0x80, 0x8000, 0x7fff, 0x65ad}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x0, 0x3, {{0x32, 0x4, 0x0, 0x7, 0xc8, 0x66, 0x0, 0x4, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x4e, 0x3, [{0x7, 0x5, "34a47b"}, {0x2, 0xe, "cffae0ba3e7e6997d40c51df"}, {0x7, 0x9, "7d375aafbe8360"}, {0x6, 0x9, "e0151aba54fbec"}, {0x2, 0x5, "9d4f19"}, {0x1, 0x4, "f835"}, {0x5, 0x4, "7dae"}, {0x0, 0xb, "55097468e4c993c08a"}, {0x7, 0xb, "8b74a0b071868c5088"}]}, @generic={0x94, 0xfffffffffffffde8, "b5bbbd"}, @timestamp_prespec={0x44, 0x3c, 0x14, 0x3, 0x5, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x2}, {@multicast2, 0x5}, {@multicast2, 0x80000001}, {@empty, 0x4}, {@loopback, 0x8}, {@loopback, 0x6}]}, @end, @timestamp={0x44, 0x24, 0xa7, 0x0, 0xd, [0x101, 0x9, 0x5, 0x80, 0xfffffff8, 0x6, 0x200, 0x7]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14) (async) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8) (async, rerun: 32) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) (rerun: 32) r7 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000a40)={'full'}, 0xfffffdef) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000818) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000ac0), 0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r10 = syz_io_uring_setup(0x1fa, &(0x7f0000000580)={0x0, 0x41ae, 0x2, 0x5, 0x1000240}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000880)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r10, 0x1f, 0x0, 0x1) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRESDEC=r10, @ANYBLOB="0315000000000000140012800c0001006d61637674617000b6fe028008000500", @ANYRES32=r9, @ANYBLOB="00200000b0350adfcd0f54afc87abc6a12b45c53a4", @ANYRES32=r9, @ANYBLOB="792dc07b56be536818a72cb21ea89e3f6a93bd1a33eceeb610dc75102575bffdb109b42bee798363ac"], 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) r11 = socket(0x10, 0x3, 0x400) (async, rerun: 32) r12 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000600)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24005004}, 0x26000894) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000bc0)={0xb0, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4011}, 0x0) (async, rerun: 32) close(r0) (rerun: 32) 4m17.314029048s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x41, 0x20) write(r3, &(0x7f0000000140)='1', 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r4, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) 4m15.997746312s ago: executing program 0 (id=65): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="81824956a746887a1595bc6483a74189a62e9cc7ed450a958603d5275a38deafb251f7adace23786fed5ff8a0ed83f7c0de01cd71767073eeed9d7e308a8e504aae93c7d7fcbc5fc332ff93eb3c2d9c09f46cd66aa27c2831cb06098f11848d562f97c61247bfa726d7259d4150898afe2f544662b48732df8dc0626b0da17202a3ad49b0ea152d189b5dfd30a6d6865a69a0eeac3", 0x95}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}], 0x2, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a480), 0x42, 0x0) write$dsp(r5, &(0x7f000001a4c0)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a540)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r6, 0x0, 0x0, 0x80000) 4m12.041746001s ago: executing program 0 (id=72): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x53fb3e225c3c090a, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000002c0)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x804e}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) shutdown(r3, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000300)={0x0, 0x18, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4m5.731832034s ago: executing program 0 (id=77): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 4m4.082014922s ago: executing program 0 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001500), 0x0, 0x0) read$msr(r3, &(0x7f0000001540)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f000001ab40)='ramfs\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f000001abc0)='mode\x00', &(0x7f000001ac00)='7', 0x0) socket$alg(0x26, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x220801, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r6, 0x40026f34, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2c) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x4, 0x0) (fail_nth: 5) readv(r7, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000280)=""/15, 0xf}, {0x0}], 0x4) 4m2.346949679s ago: executing program 0 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="81824956a746887a1595bc6483a74189a62e9cc7ed450a958603d5275a38deafb251f7adace23786fed5ff8a0ed83f7c0de01cd71767073eeed9d7e308a8e504aae93c7d7fcbc5fc332ff93eb3c2d9c09f46cd66aa27c2831cb06098f11848d562f97c61247bfa726d7259d4150898afe2f544662b48732df8dc0626b0da17202a3ad49b0ea152d189b5dfd30a6d6865a69a0eeac3", 0x95}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}], 0x2, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a480), 0x42, 0x0) write$dsp(r5, &(0x7f000001a4c0)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a540)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r6, 0x0, 0x0, 0x80000) 3m46.857431489s ago: executing program 33 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000140)="81824956a746887a1595bc6483a74189a62e9cc7ed450a958603d5275a38deafb251f7adace23786fed5ff8a0ed83f7c0de01cd71767073eeed9d7e308a8e504aae93c7d7fcbc5fc332ff93eb3c2d9c09f46cd66aa27c2831cb06098f11848d562f97c61247bfa726d7259d4150898afe2f544662b48732df8dc0626b0da17202a3ad49b0ea152d189b5dfd30a6d6865a69a0eeac3", 0x95}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)='/', 0x1}], 0x1}}], 0x2, 0x4000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x81284400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f00000013c0)=""/102392, 0x18ff8) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f000001a480), 0x42, 0x0) write$dsp(r5, &(0x7f000001a4c0)='S', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f000001a540)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r6, 0x0, 0x0, 0x80000) 14.492194582s ago: executing program 4 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0x99}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x83, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x40000, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62a6, 0x0, 0x2, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff5, 0x72f, 0x0, 0x0}}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000003702000200000000722b7e80a58c1f95ac9f76a087efc00210c50b52c58bb803b72bc2650fa5dfa8c300"/57, @ANYRES32=r1, @ANYBLOB="01002c"], 0x1f) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) r13 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x2, r0}) r14 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_int(r13, 0x1, 0x2c, 0x0, &(0x7f0000000240)) keyctl$get_persistent(0x16, 0x0, r14) r15 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(0x0, 0x3, 0x8080) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r15) 11.640004184s ago: executing program 4 (id=393): syz_emit_ethernet(0x66, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r0 = syz_io_uring_setup(0x5639, &(0x7f0000000440)={0x0, 0x13b0, 0x20, 0x1, 0x20a}, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="316cbfb9064780fc84c64f9e681985f836170e4a697a764a625273960516785e4fbd81ae4d323036b4f34a9a44ebcaef0ed1c18e0a8acda14aea4010173637ffc9c05a23dc996930a321b977ac4ad3f38b0288f78b92657ff52915ed75191c5b7523dd7efd712dc0e6338f31cdab86ade8df037b22a9d76fe4cbefef63e1886adb049ae10c6dd4fff1c367e2f4e530dbd7be7e75", 0x94, 0x8) write(r1, &(0x7f00000003c0)='3', 0x4e) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) unshare(0x22020600) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x100000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r3}, 0x38) shmget$private(0x0, 0x4000, 0x1810, &(0x7f00008de000/0x4000)=nil) 11.474709279s ago: executing program 2 (id=394): mkdirat(0xffffffffffffff9c, 0x0, 0x1e3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100020000004057a213200000010203010902240001010080fa0904000002ff00000009050202400000000009058102"], 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = dup2(r1, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f0000000200)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f0000000240)=[{}], 0x1f4) semop(r3, &(0x7f0000000280)=[{0x0, 0xffff, 0x1000}], 0x1f4) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2060) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002dbbe830802030109021200019707ddeeb45b850000ff0316bc"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 11.370069265s ago: executing program 3 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) acct(&(0x7f0000000240)='./proc/thread-self/fail-nth\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000100)='7', 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x8, 0x4d, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1000, 'syz0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) 10.844680752s ago: executing program 3 (id=396): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ff000040da0b528111300102030109022700010100a0fa0904000003ffff0000070581020002000705020200020007058303"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 9.927428687s ago: executing program 4 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) sendto$unix(r2, &(0x7f00000000c0)="ccc8cd3965337d4145b1915cff400fa45465170f87b9710b1d5ce9458f28fb584f02f0d23c453f992ca54cfa948822f32bf7eae537", 0x35, 0x20008040, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x2, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc0000000}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x8000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000014c0), 0x2000, &(0x7f00000034c0)={&(0x7f0000003580)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000003600)='./file0\x00', 0x2) 9.781018972s ago: executing program 2 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r4 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x41, 0x20) write(r5, &(0x7f0000000140)='1', 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r6, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r6, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f0000000180)={0xea, 0xfffffff8}) sendto(r6, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 8.650528649s ago: executing program 2 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000019a80)={0xed4, 0x3, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xe, &(0x7f000002fe80)=ANY=[@ANYBLOB="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"], &(0x7f0000030b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000000540)=""/102392, 0x18ff8) capset(&(0x7f0000019540)={0x19980330}, &(0x7f0000019580)={0x0, 0x1, 0x6}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6, 0x4}}, 0x30) r7 = msgget$private(0x0, 0x480) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/fscaps', 0x428002, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000030d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@int={0x20000c, 0x0, 0x0, 0x1, 0xc, 0x46, 0x0, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}, @enum={0x1}]}, {0x0, [0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000030c80)=""/246, 0x46, 0xf6, 0x1, 0x0, 0x10000, @value=r8}, 0x28) msgsnd(r7, &(0x7f0000030e00)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f0000019a00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8}, 0x0, 0x0, 0x7f, 0x16, 0xfffffffffffffffa, 0x1000, 0x100000000, 0x8000, 0x3, 0x98}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="8000000000000000240012800b000100627269646765000014000280080014"], 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 8.392312002s ago: executing program 4 (id=400): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x20000008b}, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080003008100030006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180), 0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b000000ff000000324902007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r7, 0xffffffffffffffff}, &(0x7f00000007c0)=0x7d8, &(0x7f0000000800)='%pK \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r8, 0x0}, 0x20) 7.100894354s ago: executing program 2 (id=401): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000000008010800000000000000000a0000030900010073797a3100000000060002400e3a00004c0004800800024000000003080001400000"], 0x74}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x48103, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000420001000000000000000000030100000f0000001a0001000011223344c0e8c9134d5566778899aabb894f2c00001c0000000000000400028004000380"], 0x3c}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141102) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x20004040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x5, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001000)={r5}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000480), 0x129202, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000001140)={{0x3, 0x0, 0x1000000}, 0x0, [0x8000, 0x2, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x1, 0x800000000000000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x2000000000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x40800000000000, 0x0, 0x1, 0x207785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x10, 0xbffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x5, 0x0, 0x59ed, 0x1000000000000000, 0x1bf3f8c2, 0x4001ff, 0x3, 0x0, 0x0, 0x3, 0xb, 0x100000000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x4, 0x2, 0x0, 0x80080000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x5, 0x0, 0x80000000, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0xc, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8]}) 6.773140545s ago: executing program 3 (id=402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="20c81e0000004d61501d010000000000000010000034242d2e5e8bd75e0000003804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtaction={0xec, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x4}}]}, {0x4, 0x6, "353c5b8feed2ff2c68676ecbecb79bba29"}, {0xc}, {0xc}}}]}, {0xfffffffffffffdb8, 0x1, [@m_xt={0x80, 0x9, 0x0, 0x0, {{0x7}, {0x4}, {0x55, 0x6, "7ab900ddfa355ab6ea9eecb2602cbe5dd501dcf76c7807aff25cd58c016103891fa1b97760c43fd02cff3b8acd10371bf9f9ddc4796adfe02f57eb75c0be91cdfdaf89cc3f15d33ccfd5a184ebe1cf971a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xec}}, 0x20048844) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.984291703s ago: executing program 4 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0x99}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x83, 0x1000d8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffc, 0x40000, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x62a6, 0x0, 0x2, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff5, 0x72f, 0x0, 0x0}}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000003702000200000000722b7e80a58c1f95ac9f76a087efc00210c50b52c58bb803b72bc2650fa5dfa8c300"/57, @ANYRES32=r1, @ANYBLOB="01002c"], 0x1f) r10 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r11, 0x4b3a, 0x1) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) r13 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000540)={0x2, r0}) r14 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_int(r13, 0x1, 0x2c, 0x0, &(0x7f0000000240)) keyctl$get_persistent(0x16, 0x0, r14) r15 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(0x0, 0x3, 0x8080) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r15) 3.228366234s ago: executing program 3 (id=404): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @void}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x201) dup3(r1, r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x28000, @dev={0xfe, 0x80, '\x00', 0x39}, 0x5}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffff2, 0x0, 0xa}, {0x0, [0x0, 0x2e, 0x2e, 0x0, 0x0, 0x61, 0x5f, 0x61]}}, &(0x7f0000000540)=""/28, 0x22, 0x1c}, 0x28) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) link(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffff}}, './cifs\x00'}) ioctl$FIONREAD(r7, 0x541b, &(0x7f00000000c0)) listen(r6, 0x10) 1.451350662s ago: executing program 2 (id=405): syz_emit_ethernet(0x66, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r0 = syz_io_uring_setup(0x5639, &(0x7f0000000440)={0x0, 0x13b0, 0x20, 0x1, 0x20a}, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) write(r1, &(0x7f00000003c0)='3', 0x4e) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) unshare(0x22020600) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x100000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r3}, 0x38) shmget$private(0x0, 0x4000, 0x1810, &(0x7f00008de000/0x4000)=nil) 1.232787056s ago: executing program 4 (id=406): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) r3 = openat(r2, &(0x7f0000000100)='driver_override\x00', 0x1, 0xe6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d617371000000000c000280080001400000004214000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r6, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, 0x0, 0x0) write(r3, &(0x7f0000000140)='a', 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 1.140892315s ago: executing program 3 (id=407): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000006700)={0x0, 0x0, &(0x7f0000006740)={&(0x7f0000006780)=ANY=[@ANYBLOB="0401000016000100000000000000000064000100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000fd0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be00"/172], 0x104}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.00912849s ago: executing program 2 (id=408): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0x1c7, 0x7}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:*\vrr'], 0xa) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 3 (id=409): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfa}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.134250][ T5631] veth0_macvtap: entered promiscuous mode [ 139.193841][ T5631] veth1_macvtap: entered promiscuous mode [ 139.211914][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.251932][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.251954][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.427536][ T5630] veth0_macvtap: entered promiscuous mode [ 139.435591][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.476663][ T5634] veth0_macvtap: entered promiscuous mode [ 139.585392][ T5630] veth1_macvtap: entered promiscuous mode [ 139.617608][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.620812][ T5634] veth1_macvtap: entered promiscuous mode [ 140.248721][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.413085][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.447629][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 140.524528][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.718628][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.745584][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.745649][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.066618][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.066713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.524044][ T5822] FAULT_INJECTION: forcing a failure. [ 141.524044][ T5822] name failslab, interval 1, probability 0, space 0, times 1 [ 141.524105][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.524133][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.524152][ T5822] Call Trace: [ 141.524160][ T5822] [ 141.524169][ T5822] dump_stack_lvl+0xe8/0x150 [ 141.524210][ T5822] should_fail_ex+0x46b/0x600 [ 141.524263][ T5822] should_failslab+0xa8/0x100 [ 141.524287][ T5822] __kmalloc_cache_noprof+0xa1/0x680 [ 141.524317][ T5822] ? percpu_ref_init+0xc5/0x350 [ 141.524342][ T5822] ? percpu_ref_init+0xc5/0x350 [ 141.524373][ T5822] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 141.524392][ T5822] percpu_ref_init+0xc5/0x350 [ 141.524428][ T5822] io_ring_ctx_alloc+0x328/0xba0 [ 141.524456][ T5822] io_uring_create+0x50/0x990 [ 141.524481][ T5822] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 141.524507][ T5822] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 141.524564][ T5822] do_syscall_64+0x166/0x520 [ 141.524591][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.524608][ T5822] ? clear_bhb_loop+0x70/0xc0 [ 141.524625][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.524640][ T5822] RIP: 0033:0x7f4c35dfe1d9 [ 141.524660][ T5822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.524672][ T5822] RSP: 002b:00007f4c34013ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 141.524689][ T5822] RAX: ffffffffffffffda RBX: 0000200000000b48 RCX: 00007f4c35dfe1d9 [ 141.524699][ T5822] RDX: 0000200000000bc8 RSI: 0000200000000b48 RDI: 00000000000003c9 [ 141.524708][ T5822] RBP: 0000200000000b40 R08: 0000000000000000 R09: 0000000000000000 [ 141.524717][ T5822] R10: 0000200000000bd0 R11: 0000000000000206 R12: 0000200000000bc8 [ 141.524727][ T5822] R13: 0000200000000bd0 R14: 00007f4c34013fd8 R15: 0000000000000000 [ 141.524750][ T5822] [ 142.363117][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.363140][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.799930][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.799955][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.816626][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.816651][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.072424][ T1299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.072450][ T1299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.381841][ T1302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.382577][ T1302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.383219][ T1302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.482607][ T1302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.585433][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.585454][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.603641][ T1292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.604876][ T1292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.605742][ T1302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.605932][ T1302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.606496][ T1302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.853107][ T1302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.096803][ T1292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.096826][ T1292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.288274][ T5643] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 145.522959][ T5643] usb 4-1: device descriptor read/64, error -71 [ 145.865146][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.865167][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.905055][ T5643] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.936618][ T1302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.940359][ T1302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.940468][ T1302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.940791][ T1302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.050970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.070967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.080936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.090978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.100937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.110974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.120969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.130958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.140933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 146.150961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 148.583963][ T5643] usb 4-1: device descriptor read/64, error -71 [ 148.692678][ T5643] usb usb4-port1: attempt power cycle [ 149.164488][ T1305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.165705][ T1305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.166170][ T1305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.254140][ T1305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.254386][ T1305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.449283][ T1305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.991681][ T1246] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.466576][ T1246] usb 3-1: device descriptor read/64, error -71 [ 156.576488][ T37] audit: type=1800 audit(1791865467.197:2): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.18" name="file1" dev="tmpfs" ino=29 res=0 errno=0 [ 156.663625][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 161.730548][ T5913] netlink: 72 bytes leftover after parsing attributes in process `syz.2.23'. [ 163.331997][ T5936] netlink: 112 bytes leftover after parsing attributes in process `syz.2.29'. [ 168.773461][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.982452][ T5746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 168.988344][ T5949] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 169.090162][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.090225][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.090248][ T5949] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.090269][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.090312][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.204149][ T5746] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 169.257296][ T5746] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.257359][ T5746] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.257382][ T5746] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.257406][ T5746] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.257450][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.334524][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 171.578393][ T5961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 171.578646][ T5957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33'. [ 172.231766][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 172.476336][ T36] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 172.477276][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.477316][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.477329][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 172.477342][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.480573][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.480592][ T36] usb 2-1: Product: syz [ 172.480602][ T36] usb 2-1: Manufacturer: syz [ 172.480610][ T36] usb 2-1: SerialNumber: syz [ 172.978902][ T5746] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 2 [ 172.992127][ T5949] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 173.477337][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38'. [ 173.750287][ T36] usb 2-1: Not enough endpoints found in device, aborting! [ 173.785132][ T5949] gud 5-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 173.793731][ T5746] gud 1-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 174.129638][ T5746] usb 1-1: USB disconnect, device number 2 [ 174.405925][ T5949] usb 5-1: USB disconnect, device number 2 [ 178.178260][ T6031] netlink: 27 bytes leftover after parsing attributes in process `syz.0.49'. [ 181.761157][ T5760] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.962520][ T5760] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 181.963965][ T5760] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.964061][ T5760] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.964087][ T5760] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.964111][ T5760] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.964153][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.960749][ T6055] fuse: Bad value for 'fd' [ 183.402613][ T5760] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 183.444560][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.52'. [ 183.897572][ T5760] gud 1-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 184.008189][ T5760] usb 1-1: USB disconnect, device number 3 [ 186.807830][ T6080] fuse: Bad value for 'fd' [ 187.265836][ T6072] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop3": -EINTR [ 189.209273][ T5646] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.216909][ T5646] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.244436][ T5646] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.251524][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.256771][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.673600][ T5642] Bluetooth: hci5: command tx timeout [ 194.295234][ T5642] Bluetooth: hci5: command tx timeout [ 194.304679][ T5949] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 194.631468][ T5949] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.635951][ T5949] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 194.635980][ T5949] usb 1-1: config 0 has no interface number 0 [ 194.636018][ T5949] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 194.636045][ T5949] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 194.638557][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.638575][ T5949] usb 1-1: Product: syz [ 194.638583][ T5949] usb 1-1: Manufacturer: syz [ 194.638590][ T5949] usb 1-1: SerialNumber: syz [ 194.823398][ T5949] usb 1-1: config 0 descriptor?? [ 194.826259][ T6129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.026648][ T6129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.381408][ T6129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.381524][ T6129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.589527][ T5949] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 195.589563][ T5949] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.315974][ T5642] Bluetooth: hci5: command tx timeout [ 196.362952][ T5760] usb 2-1: USB disconnect, device number 2 [ 197.073113][ T6145] capability: warning: `syz.3.75' uses 32-bit capabilities (legacy support in use) [ 197.280210][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 198.391761][ T5642] Bluetooth: hci5: command tx timeout [ 198.922104][ T5949] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 198.953226][ T5949] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 199.113270][ T5949] usb 1-1: USB disconnect, device number 4 [ 201.525336][ T6158] FAULT_INJECTION: forcing a failure. [ 201.525336][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 201.525393][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.525432][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.525445][ T6158] Call Trace: [ 201.525453][ T6158] [ 201.525469][ T6158] dump_stack_lvl+0xe8/0x150 [ 201.525495][ T6158] should_fail_ex+0x46b/0x600 [ 201.525516][ T6158] should_failslab+0xa8/0x100 [ 201.525529][ T6158] __kmalloc_noprof+0xfb/0x790 [ 201.525546][ T6158] ? tomoyo_realpath_from_path+0xef/0x640 [ 201.525559][ T6158] ? tomoyo_realpath_from_path+0xef/0x640 [ 201.525574][ T6158] tomoyo_realpath_from_path+0xef/0x640 [ 201.525592][ T6158] tomoyo_check_open_permission+0x229/0x470 [ 201.525609][ T6158] ? tomoyo_check_open_permission+0x1d3/0x470 [ 201.525625][ T6158] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 201.525642][ T6158] ? hook_file_open+0x2cc/0x930 [ 201.525672][ T6158] ? tomoyo_file_open+0x167/0x220 [ 201.525687][ T6158] security_file_open+0xa9/0x240 [ 201.525698][ T6158] do_dentry_open+0x4be/0x1420 [ 201.525715][ T6158] vfs_open+0x3b/0x350 [ 201.525725][ T6158] ? path_openat+0x142d/0x1d60 [ 201.525741][ T6158] path_openat+0x1448/0x1d60 [ 201.525766][ T6158] do_file_open+0x23e/0x4a0 [ 201.525784][ T6158] ? __pfx_do_file_open+0x10/0x10 [ 201.525811][ T6158] ? alloc_fd+0x654/0x6d0 [ 201.525831][ T6158] do_sys_openat2+0x115/0x200 [ 201.525842][ T6158] ? lockdep_hardirqs_on+0x7b/0x110 [ 201.525858][ T6158] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.525876][ T6158] __x64_sys_openat+0x138/0x170 [ 201.525890][ T6158] do_syscall_64+0x166/0x520 [ 201.525905][ T6158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.525916][ T6158] ? clear_bhb_loop+0x70/0xc0 [ 201.525929][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.525940][ T6158] RIP: 0033:0x7f2d328be1d9 [ 201.525951][ T6158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.525959][ T6158] RSP: 002b:00007f2d30af5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.525974][ T6158] RAX: ffffffffffffffda RBX: 00007f2d32b46090 RCX: 00007f2d328be1d9 [ 201.525982][ T6158] RDX: 0000000000000004 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 201.525989][ T6158] RBP: 00007f2d30af5090 R08: 0000000000000000 R09: 0000000000000000 [ 201.525995][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.526001][ T6158] R13: 00007f2d32b46128 R14: 00007f2d32b46090 R15: 00007fff46fced28 [ 201.526018][ T6158] [ 201.526048][ T6158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.426620][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.426687][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.979184][ T1383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.046783][ T6173] IPVS: ip_vs_add_dest(): server weight less than zero [ 206.425579][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 206.680704][ T2991] IPVS: starting estimator thread 0... [ 206.931275][ T6176] IPVS: using max 10 ests per chain, 24000 per kthread [ 210.001123][ T6148] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 210.151365][ T6148] usb 4-1: Using ep0 maxpacket: 32 [ 210.152333][ T6148] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 210.215494][ T6193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.86'. [ 210.215521][ T6193] netlink: 72 bytes leftover after parsing attributes in process `syz.4.86'. [ 210.523806][ T6148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.523850][ T6148] usb 4-1: Product: syz [ 210.523864][ T6148] usb 4-1: Manufacturer: syz [ 210.523879][ T6148] usb 4-1: SerialNumber: syz [ 212.556951][ T6148] usb 4-1: config 0 descriptor?? [ 212.644107][ T6148] usb 4-1: can't set config #0, error -71 [ 213.055194][ T6148] usb 4-1: USB disconnect, device number 5 [ 213.382700][ T1383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.671126][ T5949] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.828007][ T5949] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 217.865359][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 217.865380][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 217.893094][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.893123][ T5949] usb 4-1: Product: syz [ 217.893138][ T5949] usb 4-1: Manufacturer: syz [ 217.893153][ T5949] usb 4-1: SerialNumber: syz [ 217.987701][ T5949] whiteheat 4-1:1.0: Connect Tech - WhiteHEAT converter detected [ 218.453183][ T1383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.494127][ T5949] usb 4-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 218.494157][ T5949] usb 4-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 218.494174][ T5949] usb 4-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 218.494191][ T5949] usb 4-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 218.922539][ T5949] usb 4-1: USB disconnect, device number 6 [ 219.333683][ T6227] Zero length message leads to an empty skb [ 219.810273][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.873903][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.879916][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.912002][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.915377][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.043832][ T1383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.212404][ T5646] Bluetooth: hci1: command tx timeout [ 223.322949][ T6264] FAULT_INJECTION: forcing a failure. [ 223.322949][ T6264] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.323031][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.323053][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 223.323071][ T6264] Call Trace: [ 223.323080][ T6264] [ 223.323089][ T6264] dump_stack_lvl+0xe8/0x150 [ 223.323123][ T6264] should_fail_ex+0x46b/0x600 [ 223.323163][ T6264] _copy_from_user+0x2d/0xb0 [ 223.323186][ T6264] ____sys_sendmsg+0x31b/0x870 [ 223.323221][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.323255][ T6264] ? import_iovec+0x73/0xa0 [ 223.323279][ T6264] ___sys_sendmsg+0x2a5/0x360 [ 223.323303][ T6264] ? __lock_acquire+0x747/0x2de0 [ 223.323334][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.323362][ T6264] ? __schedule+0x16ef/0x5700 [ 223.323413][ T6264] ? __fget_files+0x2a/0x420 [ 223.323430][ T6264] ? __fget_files+0x3a8/0x420 [ 223.323454][ T6264] __x64_sys_sendmsg+0x1b7/0x290 [ 223.323475][ T6264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.323508][ T6264] do_syscall_64+0x166/0x520 [ 223.323528][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.323543][ T6264] ? clear_bhb_loop+0x70/0xc0 [ 223.323560][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.323575][ T6264] RIP: 0033:0x7f4c35dfe1d9 [ 223.323589][ T6264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.323601][ T6264] RSP: 002b:00007f4c34014028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.323618][ T6264] RAX: ffffffffffffffda RBX: 00007f4c36086180 RCX: 00007f4c35dfe1d9 [ 223.323628][ T6264] RDX: 0000000060008800 RSI: 0000200000000040 RDI: 0000000000000007 [ 223.323637][ T6264] RBP: 00007f4c34014090 R08: 0000000000000000 R09: 0000000000000000 [ 223.323646][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.323655][ T6264] R13: 00007f4c36086218 R14: 00007f4c36086180 R15: 00007ffe1ef5c2a8 [ 223.323678][ T6264] [ 224.232599][ T5646] Bluetooth: hci1: command tx timeout [ 225.113863][ T6272] loop8: detected capacity change from 0 to 1 [ 225.380621][ T6282] netlink: 'syz.4.99': attribute type 21 has an invalid length. [ 225.380647][ T6282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.99'. [ 225.435950][ T6272] Dev loop8: unable to read RDB block 1 [ 225.436007][ T6272] loop8: unable to read partition table [ 225.436203][ T6272] loop8: partition table beyond EOD, truncated [ 225.436236][ T6272] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 225.469320][ T6282] netlink: 'syz.4.99': attribute type 5 has an invalid length. [ 225.469341][ T6282] netlink: 3 bytes leftover after parsing attributes in process `syz.4.99'. [ 225.769338][ T6290] xt_nfacct: accounting object `syz0' does not exist [ 225.782510][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.782731][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.782910][ T6086] bridge_slave_0: entered allmulticast mode [ 225.785408][ T6086] bridge_slave_0: entered promiscuous mode [ 225.861846][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.861981][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.862184][ T6086] bridge_slave_1: entered allmulticast mode [ 225.865981][ T6086] bridge_slave_1: entered promiscuous mode [ 225.932594][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 226.116684][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 226.122410][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.122465][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.122487][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.122510][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.122549][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.174752][ T1383] bridge_slave_1: left allmulticast mode [ 226.174888][ T1383] bridge_slave_1: left promiscuous mode [ 226.234948][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.311850][ T5646] Bluetooth: hci1: command tx timeout [ 226.592676][ T1383] bridge_slave_0: left allmulticast mode [ 226.592717][ T1383] bridge_slave_0: left promiscuous mode [ 226.593153][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.399277][ T5646] Bluetooth: hci1: command tx timeout [ 228.415209][ T10] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 228.559125][ T10] gud 3-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 228.578498][ T10] usb 3-1: USB disconnect, device number 4 [ 228.721756][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.782549][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.816405][ T1383] bond0 (unregistering): Released all slaves [ 228.873299][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.026979][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.159366][ T6086] team0: Port device team_slave_0 added [ 229.187739][ T6086] team0: Port device team_slave_1 added [ 229.275077][ T6317] ======================================================= [ 229.275077][ T6317] WARNING: The mand mount option has been deprecated and [ 229.275077][ T6317] and is ignored by this kernel. Remove the mand [ 229.275077][ T6317] option from the mount to silence this warning. [ 229.275077][ T6317] ======================================================= [ 229.382143][ T6317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 229.761051][ T6317] netlink: 'syz.4.113': attribute type 21 has an invalid length. [ 233.577714][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.577731][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.577749][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.590499][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.590516][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.590540][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.074329][ T6086] hsr_slave_0: entered promiscuous mode [ 237.080826][ T6086] hsr_slave_1: entered promiscuous mode [ 237.081885][ T6086] debugfs: 'hsr0' already exists in 'hsr' [ 237.081910][ T6086] Cannot create hsr debugfs directory [ 237.359592][ T5643] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.352767][ T5643] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.354220][ T5643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.354269][ T5643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.500754][ T5643] usb 4-1: config 0 descriptor?? [ 238.827382][ T5643] usbhid 4-1:0.0: can't add hid device: -71 [ 238.827515][ T5643] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 239.001484][ T5643] usb 4-1: USB disconnect, device number 7 [ 240.652995][ T5643] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.691568][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 241.236691][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 243.821130][ T1383] hsr_slave_0: left promiscuous mode [ 244.701068][ T1383] hsr_slave_1: left promiscuous mode [ 244.716866][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.717074][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.747244][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.747266][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.914498][ T1383] veth1_macvtap: left promiscuous mode [ 244.914788][ T1383] veth0_macvtap: left promiscuous mode [ 244.915084][ T1383] veth1_vlan: left promiscuous mode [ 244.915445][ T1383] veth0_vlan: left promiscuous mode [ 245.011807][ T6437] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.023396][ T6437] Bluetooth: ISO socket layer initialized [ 245.531637][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 245.571758][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 245.765899][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.766025][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.766203][ T6234] bridge_slave_0: entered allmulticast mode [ 245.772718][ T6234] bridge_slave_0: entered promiscuous mode [ 245.882300][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.882499][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.882687][ T6234] bridge_slave_1: entered allmulticast mode [ 245.924826][ T6234] bridge_slave_1: entered promiscuous mode [ 246.348159][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.358790][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.652422][ T6458] loop8: detected capacity change from 0 to 1 [ 247.705943][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.748021][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.775226][ T6234] team0: Port device team_slave_0 added [ 247.776131][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.778378][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.801508][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.827684][ T6234] team0: Port device team_slave_1 added [ 248.180249][ T6458] Dev loop8: unable to read RDB block 1 [ 248.180309][ T6458] loop8: unable to read partition table [ 248.180533][ T6458] loop8: partition table beyond EOD, truncated [ 248.180576][ T6458] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 248.393333][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.393351][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.393378][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.516064][ T5646] Bluetooth: hci2: command tx timeout [ 250.569031][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 250.569898][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 250.576562][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 251.649122][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.649140][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.649154][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.760219][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 252.562492][ T5642] Bluetooth: hci2: command tx timeout [ 252.649433][ T6234] hsr_slave_0: entered promiscuous mode [ 252.654338][ T6234] hsr_slave_1: entered promiscuous mode [ 252.655278][ T6234] debugfs: 'hsr0' already exists in 'hsr' [ 252.658611][ T6234] Cannot create hsr debugfs directory [ 255.407109][ T5642] Bluetooth: hci2: command tx timeout [ 255.586064][ T6515] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.150'. [ 255.669324][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 255.694885][ T6521] xt_nfacct: accounting object `syz0' does not exist [ 257.313810][ T6547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.156'. [ 257.536599][ T5642] Bluetooth: hci2: command tx timeout [ 258.119777][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 261.177515][ T6563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.158'. [ 262.422335][ T6561] program syz.3.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.848428][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.848497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.271046][ T5747] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 265.711918][ T5747] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 266.065590][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 266.065621][ T5747] usb 5-1: Product: syz [ 266.065636][ T5747] usb 5-1: SerialNumber: syz [ 266.131787][ T5747] usb 5-1: config 0 descriptor?? [ 266.488359][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.600344][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.907135][ T1246] usb 5-1: USB disconnect, device number 3 [ 267.869829][ T6622] tipc: Started in network mode [ 267.869864][ T6622] tipc: Node identity 1273d041875a, cluster identity 4711 [ 268.022336][ T6622] tipc: Enabled bearer , priority 0 [ 268.023152][ T6616] syzkaller0: entered promiscuous mode [ 268.023177][ T6616] syzkaller0: entered allmulticast mode [ 268.198293][ T6636] Unsupported ieee802154 address type: 0 [ 268.244509][ T6604] tipc: Resetting bearer [ 270.232211][ T5643] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 270.859702][ T5643] usb 5-1: device descriptor read/64, error -71 [ 271.163159][ T6604] tipc: Disabling bearer [ 271.271725][ T5643] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 271.755911][ T6659] vcan0: tx address claim with broadcast sa [ 273.502460][ T6667] FAULT_INJECTION: forcing a failure. [ 273.502460][ T6667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.502512][ T6667] CPU: 0 UID: 0 PID: 6667 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.502535][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 273.502551][ T6667] Call Trace: [ 273.502559][ T6667] [ 273.502569][ T6667] dump_stack_lvl+0xe8/0x150 [ 273.502605][ T6667] should_fail_ex+0x46b/0x600 [ 273.502640][ T6667] _copy_to_user+0x31/0xb0 [ 273.502664][ T6667] simple_read_from_buffer+0xe1/0x170 [ 273.502695][ T6667] proc_fail_nth_read+0x1be/0x230 [ 273.502735][ T6667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.502765][ T6667] ? rw_verify_area+0x250/0x4d0 [ 273.502793][ T6667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.502819][ T6667] vfs_read+0x219/0xa90 [ 273.502853][ T6667] ? __pfx_vfs_read+0x10/0x10 [ 273.502881][ T6667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.502910][ T6667] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.502936][ T6667] ? mutex_lock_nested+0x152/0x1d0 [ 273.502955][ T6667] ? fdget_pos+0x252/0x320 [ 273.502987][ T6667] ksys_read+0x156/0x270 [ 273.503014][ T6667] ? __pfx_ksys_read+0x10/0x10 [ 273.503051][ T6667] do_syscall_64+0x166/0x520 [ 273.503076][ T6667] ? trace_irq_disable+0x3b/0x140 [ 273.503102][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.503121][ T6667] ? clear_bhb_loop+0x70/0xc0 [ 273.503146][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.503165][ T6667] RIP: 0033:0x7fe3d965ea0e [ 273.503184][ T6667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.503200][ T6667] RSP: 002b:00007fe3d78f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.503219][ T6667] RAX: ffffffffffffffda RBX: 00007fe3d78f66c0 RCX: 00007fe3d965ea0e [ 273.503234][ T6667] RDX: 000000000000000f RSI: 00007fe3d78f60a0 RDI: 0000000000000007 [ 273.503245][ T6667] RBP: 00007fe3d78f6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.503256][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.503267][ T6667] R13: 00007fe3d9926038 R14: 00007fe3d9925fa0 R15: 00007ffefe5fb2c8 [ 273.503299][ T6667] [ 273.664909][ T1246] tipc: Node number set to 2502545473 [ 273.723866][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 273.826677][ T6234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.004258][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.038534][ T6234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.096803][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.148745][ T6234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.205708][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.356690][ T6234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.432658][ T5642] Bluetooth: hci4: hcon ffff888035740000 sent 1 < count 255 [ 274.434165][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 274.627262][ T6234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.629768][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.629902][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.630112][ T6464] bridge_slave_0: entered allmulticast mode [ 274.651714][ T6464] bridge_slave_0: entered promiscuous mode [ 275.938937][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.939010][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.939147][ T6464] bridge_slave_1: entered allmulticast mode [ 275.944848][ T6464] bridge_slave_1: entered promiscuous mode [ 277.861903][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.903145][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.051133][ T5643] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 278.505536][ T6705] FAULT_INJECTION: forcing a failure. [ 278.505536][ T6705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.505615][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 278.505638][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 278.505649][ T6705] Call Trace: [ 278.505657][ T6705] [ 278.505666][ T6705] dump_stack_lvl+0xe8/0x150 [ 278.505701][ T6705] should_fail_ex+0x46b/0x600 [ 278.505736][ T6705] _copy_from_user+0x2d/0xb0 [ 278.505759][ T6705] memdup_user+0x5e/0xd0 [ 278.505782][ T6705] strndup_user+0x68/0xd0 [ 278.505804][ T6705] __se_sys_mount+0x9d/0x420 [ 278.505833][ T6705] ? __pfx___se_sys_mount+0x10/0x10 [ 278.505863][ T6705] ? __x64_sys_mount+0x20/0xc0 [ 278.505887][ T6705] do_syscall_64+0x166/0x520 [ 278.505914][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.505934][ T6705] ? clear_bhb_loop+0x70/0xc0 [ 278.505958][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.505977][ T6705] RIP: 0033:0x7fe3d969e1d9 [ 278.505995][ T6705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.506010][ T6705] RSP: 002b:00007fe3d78b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.506031][ T6705] RAX: ffffffffffffffda RBX: 00007fe3d9926180 RCX: 00007fe3d969e1d9 [ 278.506045][ T6705] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000000000000000 [ 278.506059][ T6705] RBP: 00007fe3d78b4090 R08: 0000200000000640 R09: 0000000000000000 [ 278.506071][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.506083][ T6705] R13: 00007fe3d9926218 R14: 00007fe3d9926180 R15: 00007ffefe5fb2c8 [ 278.506115][ T6705] [ 278.815077][ T5643] usb 5-1: Using ep0 maxpacket: 8 [ 278.883006][ T5643] usb 5-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=6c.f8 [ 278.884541][ T5643] usb 5-1: config 9 has an invalid interface number: 212 but max is 1 [ 278.884569][ T5643] usb 5-1: config 9 has an invalid interface number: 131 but max is 1 [ 278.884593][ T5643] usb 5-1: config 9 has no interface number 0 [ 278.884609][ T5643] usb 5-1: config 9 has no interface number 1 [ 278.884664][ T5643] usb 5-1: config 9 interface 212 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 278.884700][ T5643] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0x6 has invalid maxpacket 46524, setting to 64 [ 278.884728][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 278.884750][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 278.884772][ T5643] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 278.884799][ T5643] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 278.884825][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 278.884848][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 278.884871][ T5643] usb 5-1: config 9 interface 131 altsetting 1 endpoint 0xB has invalid maxpacket 1624, setting to 64 [ 278.884897][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 278.884918][ T5643] usb 5-1: config 9 interface 131 altsetting 1 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 278.884945][ T5643] usb 5-1: config 9 interface 212 has no altsetting 0 [ 278.884963][ T5643] usb 5-1: config 9 interface 131 has no altsetting 0 [ 278.888000][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.888027][ T5643] usb 5-1: Product: syz [ 278.888041][ T5643] usb 5-1: Manufacturer: ã° [ 278.888056][ T5643] usb 5-1: SerialNumber: syz [ 281.906935][ T6464] team0: Port device team_slave_0 added [ 282.282431][ T5643] safe_serial 5-1:9.212: safe_serial converter detected [ 282.282624][ T5643] safe_serial 5-1:9.212: probe with driver safe_serial failed with error -22 [ 283.443743][ T6464] team0: Port device team_slave_1 added [ 283.571167][ T1246] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 284.503313][ T1246] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 284.509041][ T1246] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 284.509070][ T1246] usb 3-1: config 0 has no interface number 0 [ 284.509119][ T1246] usb 3-1: config 0 interface 41 has no altsetting 0 [ 284.528004][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.528033][ T1246] usb 3-1: Product: syz [ 284.528049][ T1246] usb 3-1: Manufacturer: syz [ 284.528062][ T1246] usb 3-1: SerialNumber: syz [ 284.681199][ T1246] usb 3-1: config 0 descriptor?? [ 284.828244][ T5643] usb 5-1: USB disconnect, device number 6 [ 285.157480][ T6727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.191'. [ 285.691727][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.692381][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.692399][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.716767][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.761399][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.776158][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.899135][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.914883][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 285.915784][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.915798][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.915823][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.362813][ T1246] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 286.363087][ T1246] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 286.409448][ T1246] usb 3-1: USB disconnect, device number 5 [ 287.202448][ T5642] Bluetooth: hci4: hcon ffff888035740000 sent 0 < count 255 [ 287.219306][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 288.391056][ T5642] Bluetooth: hci5: command tx timeout [ 290.680241][ T5642] Bluetooth: hci5: command tx timeout [ 290.929164][ T1383] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.259747][ T6772] FAULT_INJECTION: forcing a failure. [ 292.259747][ T6772] name fail_futex, interval 1, probability 0, space 0, times 1 [ 292.259790][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 292.259816][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.259830][ T6772] Call Trace: [ 292.259838][ T6772] [ 292.259848][ T6772] dump_stack_lvl+0xe8/0x150 [ 292.259886][ T6772] should_fail_ex+0x46b/0x600 [ 292.259924][ T6772] get_futex_key+0x1b4/0x1580 [ 292.259959][ T6772] ? __pfx_futex_wake_mark+0x10/0x10 [ 292.259992][ T6772] ? __pfx_get_futex_key+0x10/0x10 [ 292.260035][ T6772] futex_wake+0x119/0x600 [ 292.260064][ T6772] ? __pfx_futex_wait+0x10/0x10 [ 292.260089][ T6772] ? __pfx_futex_wake+0x10/0x10 [ 292.260131][ T6772] do_futex+0x458/0x4e0 [ 292.260159][ T6772] ? __pfx_do_futex+0x10/0x10 [ 292.260191][ T6772] __se_sys_futex+0x3a8/0x450 [ 292.260221][ T6772] ? __pfx___se_sys_futex+0x10/0x10 [ 292.260244][ T6772] ? rcu_is_watching+0x16/0xb0 [ 292.260271][ T6772] ? __x64_sys_futex+0x21/0xf0 [ 292.260297][ T6772] do_syscall_64+0x166/0x520 [ 292.260325][ T6772] ? trace_irq_disable+0x3b/0x140 [ 292.260353][ T6772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.260374][ T6772] ? clear_bhb_loop+0x70/0xc0 [ 292.260401][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.260422][ T6772] RIP: 0033:0x7f313510e1d9 [ 292.260442][ T6772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.260460][ T6772] RSP: 002b:00007f31333660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 292.260484][ T6772] RAX: ffffffffffffffda RBX: 00007f3135395fa8 RCX: 00007f313510e1d9 [ 292.260500][ T6772] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3135395fac [ 292.260515][ T6772] RBP: 00007f3135395fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 292.260530][ T6772] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 292.260544][ T6772] R13: 00007f3135396038 R14: 00007fff98e14e30 R15: 00007fff98e14f18 [ 292.260585][ T6772] [ 292.737300][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.200'. [ 293.262793][ T5642] Bluetooth: hci5: command tx timeout [ 294.569021][ T1383] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.937302][ T6464] hsr_slave_0: entered promiscuous mode [ 295.497099][ T5642] Bluetooth: hci5: command tx timeout [ 295.681254][ T6464] hsr_slave_1: entered promiscuous mode [ 295.682810][ T6464] debugfs: 'hsr0' already exists in 'hsr' [ 295.682843][ T6464] Cannot create hsr debugfs directory [ 295.958925][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5 [ 297.357360][ T6826] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 297.564072][ T6826] netlink: 'syz.3.208': attribute type 21 has an invalid length. [ 297.628697][ T5642] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 299.962060][ T1383] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.110218][ T5642] Bluetooth: hci3: hcon ffff88803a394000 sent 1 < count 255 [ 301.594449][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.215'. [ 302.551643][ T1383] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.770993][ T5643] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 303.931852][ T5643] usb 5-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 304.124369][ T5643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.124399][ T5643] usb 5-1: SerialNumber: syz [ 304.605649][ T6854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.682650][ T6867] can0: slcan on ttyS3. [ 304.814577][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.815549][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.997260][ T6867] can0 (unregistered): slcan off ttyS3. [ 305.088592][ T5643] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 305.113554][ T5643] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 305.386181][ T5643] usb 5-1: USB disconnect, device number 7 [ 305.397602][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 305.554385][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 305.562707][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 305.562740][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 305.562767][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 305.562802][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 305.613588][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.613615][ T9] usb 3-1: Product: syz [ 305.613628][ T9] usb 3-1: Manufacturer: syz [ 305.613641][ T9] usb 3-1: SerialNumber: syz [ 305.737628][ T9] usb 3-1: config 0 descriptor?? [ 305.743393][ T6880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 305.780999][ T5760] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 305.820265][ T9] usb 3-1: ucan: probing device on interface #0 [ 305.820292][ T9] usb 3-1: ucan: invalid in_ep MaxPacketSize [ 305.838171][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 305.935160][ T5760] usb 4-1: Using ep0 maxpacket: 32 [ 305.949522][ T5760] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 305.999444][ T5760] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 305.999475][ T5760] usb 4-1: config 2 has no interface number 0 [ 305.999520][ T5760] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 305.999545][ T5760] usb 4-1: config 2 interface 88 has no altsetting 0 [ 306.027335][ T6880] 9p: Bad value for 'rfdno' [ 306.051483][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 306.051513][ T5760] usb 4-1: Product: syz [ 306.051528][ T5760] usb 4-1: Manufacturer: syz [ 306.051542][ T5760] usb 4-1: SerialNumber: syz [ 306.187594][ T6891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 306.224197][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 306.227619][ T6880] XFS (nbd2): SB validate failed with error -5. [ 306.359079][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.448502][ T5760] asix 4-1:2.88: probe with driver asix failed with error -71 [ 306.572492][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'. [ 307.433479][ T5760] usb 4-1: USB disconnect, device number 9 [ 308.646225][ T5652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.676187][ T5652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.677996][ T5652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.679143][ T5652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.679797][ T5652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.899617][ T6891] warning: `syz.3.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.927272][ T5746] usb 3-1: USB disconnect, device number 6 [ 309.256893][ T5642] Bluetooth: hci0: hcon ffff888038bdc000 sent 1 < count 255 [ 309.258847][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 310.886877][ T5642] Bluetooth: hci1: command tx timeout [ 311.650662][ T6942] FAULT_INJECTION: forcing a failure. [ 311.650662][ T6942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.650697][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.650710][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.650719][ T6942] Call Trace: [ 311.650723][ T6942] [ 311.650729][ T6942] dump_stack_lvl+0xe8/0x150 [ 311.650750][ T6942] should_fail_ex+0x46b/0x600 [ 311.650770][ T6942] prepare_alloc_pages+0x223/0x650 [ 311.650790][ T6942] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 311.650803][ T6942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 311.650816][ T6942] ? __pfx_policy_nodemask+0x10/0x10 [ 311.650831][ T6942] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 311.650847][ T6942] alloc_pages_mpol+0xd4/0x280 [ 311.650868][ T6942] alloc_pages_noprof+0xd2/0x2f0 [ 311.650890][ T6942] get_free_pages_noprof+0xf/0x80 [ 311.650906][ T6942] __kasan_populate_vmalloc+0x38/0x1c0 [ 311.650932][ T6942] ? rt_spin_unlock+0x165/0x200 [ 311.650954][ T6942] alloc_vmap_area+0xd1a/0x1420 [ 311.650991][ T6942] ? __pfx_alloc_vmap_area+0x10/0x10 [ 311.651018][ T6942] ? __get_vm_area_node+0x155/0x2f0 [ 311.651046][ T6942] __get_vm_area_node+0x200/0x2f0 [ 311.651074][ T6942] __vmalloc_node_range_noprof+0x343/0x1540 [ 311.651101][ T6942] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 311.651153][ T6942] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.651177][ T6942] ? kernel_text_address+0xa5/0xe0 [ 311.651193][ T6942] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 311.651202][ T6942] __vmalloc_noprof+0xd2/0x120 [ 311.651217][ T6942] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 311.651229][ T6942] bpf_prog_alloc_no_stats+0x47/0x560 [ 311.651238][ T6942] ? bpf_prog_alloc+0x2a/0x1a0 [ 311.651249][ T6942] bpf_prog_alloc+0x3c/0x1a0 [ 311.651260][ T6942] bpf_prog_load+0x7f8/0x1c20 [ 311.651277][ T6942] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.651300][ T6942] __sys_bpf+0xd0d/0xd90 [ 311.651320][ T6942] ? __pfx___sys_bpf+0x10/0x10 [ 311.651338][ T6942] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.651355][ T6942] ? rt_mutex_slowunlock+0x219/0x460 [ 311.651376][ T6942] ? ksys_write+0x248/0x270 [ 311.651392][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 311.651409][ T6942] __x64_sys_bpf+0xba/0xd0 [ 311.651425][ T6942] do_syscall_64+0x166/0x520 [ 311.651440][ T6942] ? trace_irq_disable+0x3b/0x140 [ 311.651455][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.651465][ T6942] ? clear_bhb_loop+0x70/0xc0 [ 311.651478][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.651494][ T6942] RIP: 0033:0x7f4c35dfe1d9 [ 311.651505][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.651514][ T6942] RSP: 002b:00007f4c34056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.651526][ T6942] RAX: ffffffffffffffda RBX: 00007f4c36085fa0 RCX: 00007f4c35dfe1d9 [ 311.651534][ T6942] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 311.651541][ T6942] RBP: 00007f4c34056090 R08: 0000000000000000 R09: 0000000000000000 [ 311.651547][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.651553][ T6942] R13: 00007f4c36086038 R14: 00007f4c36085fa0 R15: 00007ffe1ef5c2a8 [ 311.651577][ T6942] [ 311.652127][ T6942] syz.3.231: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.652439][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 311.652461][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.652471][ T6942] Call Trace: [ 311.652477][ T6942] [ 311.652485][ T6942] dump_stack_lvl+0xe8/0x150 [ 311.652516][ T6942] warn_alloc+0x24d/0x270 [ 311.652543][ T6942] ? lockdep_hardirqs_on+0x7b/0x110 [ 311.652571][ T6942] ? __pfx_warn_alloc+0x10/0x10 [ 311.652597][ T6942] ? kfree+0x1c5/0x6d0 [ 311.652626][ T6942] ? __get_vm_area_node+0x219/0x2f0 [ 311.652658][ T6942] __vmalloc_node_range_noprof+0x36b/0x1540 [ 311.652711][ T6942] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.652735][ T6942] ? kernel_text_address+0xa5/0xe0 [ 311.652760][ T6942] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 311.652776][ T6942] __vmalloc_noprof+0xd2/0x120 [ 311.652798][ T6942] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 311.652817][ T6942] bpf_prog_alloc_no_stats+0x47/0x560 [ 311.652832][ T6942] ? bpf_prog_alloc+0x2a/0x1a0 [ 311.652851][ T6942] bpf_prog_alloc+0x3c/0x1a0 [ 311.652871][ T6942] bpf_prog_load+0x7f8/0x1c20 [ 311.652901][ T6942] ? __pfx_bpf_prog_load+0x10/0x10 [ 311.652942][ T6942] __sys_bpf+0xd0d/0xd90 [ 311.652976][ T6942] ? __pfx___sys_bpf+0x10/0x10 [ 311.653004][ T6942] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 311.653034][ T6942] ? rt_mutex_slowunlock+0x219/0x460 [ 311.653076][ T6942] ? ksys_write+0x248/0x270 [ 311.653103][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 311.653141][ T6942] __x64_sys_bpf+0xba/0xd0 [ 311.653168][ T6942] do_syscall_64+0x166/0x520 [ 311.653192][ T6942] ? trace_irq_disable+0x3b/0x140 [ 311.653216][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.653234][ T6942] ? clear_bhb_loop+0x70/0xc0 [ 311.653257][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.653275][ T6942] RIP: 0033:0x7f4c35dfe1d9 [ 311.653293][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.653308][ T6942] RSP: 002b:00007f4c34056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.653326][ T6942] RAX: ffffffffffffffda RBX: 00007f4c36085fa0 RCX: 00007f4c35dfe1d9 [ 311.653339][ T6942] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 311.653351][ T6942] RBP: 00007f4c34056090 R08: 0000000000000000 R09: 0000000000000000 [ 311.653363][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.653374][ T6942] R13: 00007f4c36086038 R14: 00007f4c36085fa0 R15: 00007ffe1ef5c2a8 [ 311.653404][ T6942] [ 311.653438][ T6942] Mem-Info: [ 311.653450][ T6942] active_anon:192 inactive_anon:26407 isolated_anon:0 [ 311.653450][ T6942] active_file:23095 inactive_file:39729 isolated_file:0 [ 311.653450][ T6942] unevictable:0 dirty:179 writeback:0 [ 311.653450][ T6942] slab_reclaimable:12072 slab_unreclaimable:104621 [ 311.653450][ T6942] mapped:39274 shmem:20345 pagetables:1335 [ 311.653450][ T6942] sec_pagetables:0 bounce:0 [ 311.653450][ T6942] kernel_misc_reclaimable:0 [ 311.653450][ T6942] free:1262880 free_pcp:8035 free_cma:0 [ 311.653501][ T6942] Node 0 active_anon:768kB inactive_anon:105628kB active_file:92172kB inactive_file:158916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157096kB dirty:716kB writeback:0kB shmem:81380kB kernel_stack:14868kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.653548][ T6942] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 311.653591][ T6942] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.653644][ T6942] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 311.653678][ T6942] Node 0 DMA32 free:1106344kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:768kB inactive_anon:105628kB active_file:92172kB inactive_file:158916kB unevictable:0kB writepending:716kB zspages:0kB present:3129332kB managed:2540300kB mlocked:0kB bounce:0kB free_pcp:32132kB local_pcp:23356kB free_cma:0kB [ 311.653735][ T6942] lowmem_reserve[]: 0 0 1 1 1 [ 311.653766][ T6942] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 311.653820][ T6942] lowmem_reserve[]: 0 0 0 0 0 [ 311.653851][ T6942] Node 1 Normal free:3929816kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.653905][ T6942] lowmem_reserve[]: 0 0 0 0 0 [ 311.653941][ T6942] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.654053][ T6942] Node 0 DMA32: 1136*4kB (UM) 251*8kB (UM) 1231*16kB (UME) 920*32kB (UM) 474*64kB (UME) 240*128kB (UM) 106*256kB (UM) 52*512kB (UME) 24*1024kB (UME) 13*2048kB (UME) 216*4096kB (UM) = 1106440kB [ 311.654216][ T6942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 311.654310][ T6942] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 7*16kB (UM) 6*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3929816kB [ 311.654465][ T6942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.654480][ T6942] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.654495][ T6942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 311.654516][ T6942] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 311.654531][ T6942] 83165 total pagecache pages [ 311.654541][ T6942] 0 pages in swap cache [ 311.654548][ T6942] Free swap = 124996kB [ 311.654555][ T6942] Total swap = 124996kB [ 311.654562][ T6942] 2097051 pages RAM [ 311.654569][ T6942] 0 pages HighMem/MovableOnly [ 311.654575][ T6942] 429909 pages reserved [ 311.654581][ T6942] 0 pages cma reserved [ 311.957659][ T1383] bridge_slave_1: left allmulticast mode [ 311.957694][ T1383] bridge_slave_1: left promiscuous mode [ 311.957942][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.971043][ T5760] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 312.066672][ T1383] bridge_slave_0: left allmulticast mode [ 312.066706][ T1383] bridge_slave_0: left promiscuous mode [ 312.066994][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.121004][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 312.127518][ T5760] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 312.128450][ T5760] usb 4-1: config 0 has no interfaces? [ 312.135600][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.146220][ T5760] usb 4-1: config 0 descriptor?? [ 312.306842][ T1383] bridge_slave_1: left allmulticast mode [ 312.306878][ T1383] bridge_slave_1: left promiscuous mode [ 312.307114][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.393616][ T6944] 9p: Bad value for 'rfdno' [ 312.428739][ T5760] usb 4-1: USB disconnect, device number 10 [ 312.655141][ T1383] bridge_slave_0: left allmulticast mode [ 312.655176][ T1383] bridge_slave_0: left promiscuous mode [ 312.655406][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.885656][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 313.031360][ T5642] Bluetooth: hci1: command tx timeout [ 313.952561][ T6956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.235'. [ 315.111267][ T5642] Bluetooth: hci1: command tx timeout [ 317.191060][ T5642] Bluetooth: hci1: command tx timeout [ 317.501568][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.511827][ T5760] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 317.596295][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.652790][ T1383] bond0 (unregistering): Released all slaves [ 318.315824][ T6977] fuse: Bad value for 'fd' [ 319.141475][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.201477][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.224665][ T1383] bond0 (unregistering): Released all slaves [ 319.534570][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 321.773042][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.773171][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.773365][ T6729] bridge_slave_0: entered allmulticast mode [ 321.775913][ T6729] bridge_slave_0: entered promiscuous mode [ 321.810649][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.810770][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.811032][ T6729] bridge_slave_1: entered allmulticast mode [ 321.824890][ T6729] bridge_slave_1: entered promiscuous mode [ 322.097642][ T7008] fuse: Bad value for 'fd' [ 323.096002][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.123444][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.397778][ T7022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.583911][ T7022] netlink: 'syz.3.247': attribute type 21 has an invalid length. [ 323.811843][ T5642] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 324.901758][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 327.101818][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.101882][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.811228][ T6729] team0: Port device team_slave_0 added [ 327.981101][ T6148] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 328.232941][ T6148] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 328.468708][ T6148] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 329.110196][ T6148] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 329.110252][ T6148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.138472][ T6148] usb 3-1: config 0 descriptor?? [ 329.290458][ T6729] team0: Port device team_slave_1 added [ 329.607389][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.608344][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.642369][ T6148] usbhid 3-1:0.0: can't add hid device: -71 [ 329.642491][ T6148] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 329.667413][ T6148] usb 3-1: USB disconnect, device number 7 [ 330.013804][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7 [ 330.081146][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 331.189937][ T7065] FAULT_INJECTION: forcing a failure. [ 331.189937][ T7065] name fail_futex, interval 1, probability 0, space 0, times 0 [ 331.189962][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.189979][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.189985][ T7065] Call Trace: [ 331.189991][ T7065] [ 331.189997][ T7065] dump_stack_lvl+0xe8/0x150 [ 331.190019][ T7065] should_fail_ex+0x46b/0x600 [ 331.190040][ T7065] get_futex_key+0x1b4/0x1580 [ 331.190060][ T7065] ? __pfx_futex_wake_mark+0x10/0x10 [ 331.190078][ T7065] ? __pfx_get_futex_key+0x10/0x10 [ 331.190101][ T7065] futex_wake+0x119/0x600 [ 331.190116][ T7065] ? __pfx_futex_wait+0x10/0x10 [ 331.190130][ T7065] ? __pfx_futex_wake+0x10/0x10 [ 331.190152][ T7065] do_futex+0x458/0x4e0 [ 331.190167][ T7065] ? __pfx_do_futex+0x10/0x10 [ 331.190184][ T7065] __se_sys_futex+0x3a8/0x450 [ 331.190198][ T7065] ? ksys_write+0x248/0x270 [ 331.190213][ T7065] ? __pfx___se_sys_futex+0x10/0x10 [ 331.190225][ T7065] ? __pfx_ksys_write+0x10/0x10 [ 331.190242][ T7065] ? __x64_sys_futex+0x21/0xf0 [ 331.190255][ T7065] do_syscall_64+0x166/0x520 [ 331.190271][ T7065] ? trace_irq_disable+0x3b/0x140 [ 331.190286][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.190298][ T7065] ? clear_bhb_loop+0x70/0xc0 [ 331.190311][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.190322][ T7065] RIP: 0033:0x7f313510e1d9 [ 331.190334][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.190343][ T7065] RSP: 002b:00007f31333660e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.190356][ T7065] RAX: ffffffffffffffda RBX: 00007f3135395fa8 RCX: 00007f313510e1d9 [ 331.190364][ T7065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3135395fac [ 331.190371][ T7065] RBP: 00007f3135395fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 331.190385][ T7065] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 331.190392][ T7065] R13: 00007f3135396038 R14: 00007fff98e14e30 R15: 00007fff98e14f18 [ 331.190409][ T7065] [ 331.433629][ T7065] FAULT_INJECTION: forcing a failure. [ 331.433629][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 331.433669][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.433694][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.433706][ T7065] Call Trace: [ 331.433715][ T7065] [ 331.433726][ T7065] dump_stack_lvl+0xe8/0x150 [ 331.433763][ T7065] should_fail_ex+0x46b/0x600 [ 331.433799][ T7065] ? __d_alloc+0x37/0x6f0 [ 331.433827][ T7065] should_failslab+0xa8/0x100 [ 331.433860][ T7065] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 331.433895][ T7065] ? __d_alloc+0x37/0x6f0 [ 331.433928][ T7065] __d_alloc+0x37/0x6f0 [ 331.433962][ T7065] d_alloc_pseudo+0x21/0xc0 [ 331.433992][ T7065] alloc_path_pseudo+0x107/0x220 [ 331.434020][ T7065] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 331.434054][ T7065] alloc_file_pseudo+0xa8/0x1e0 [ 331.434080][ T7065] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 331.434114][ T7065] anon_inode_getfd+0xc8/0x200 [ 331.434142][ T7065] map_create+0x7f8/0x1e20 [ 331.434183][ T7065] ? __pfx_map_create+0x10/0x10 [ 331.434226][ T7065] ? bpf_lsm_bpf+0x9/0x20 [ 331.434253][ T7065] ? security_bpf+0x7e/0x2d0 [ 331.434278][ T7065] __sys_bpf+0xaea/0xd90 [ 331.434318][ T7065] ? __pfx___sys_bpf+0x10/0x10 [ 331.434352][ T7065] ? do_futex+0x3e7/0x4e0 [ 331.434405][ T7065] ? rcu_is_watching+0x16/0xb0 [ 331.434433][ T7065] __x64_sys_bpf+0xba/0xd0 [ 331.434465][ T7065] do_syscall_64+0x166/0x520 [ 331.434493][ T7065] ? trace_irq_disable+0x3b/0x140 [ 331.434521][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.434542][ T7065] ? clear_bhb_loop+0x70/0xc0 [ 331.434568][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.434589][ T7065] RIP: 0033:0x7f313510e1d9 [ 331.434609][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.434627][ T7065] RSP: 002b:00007f3133366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.434650][ T7065] RAX: ffffffffffffffda RBX: 00007f3135395fa0 RCX: 00007f313510e1d9 [ 331.434666][ T7065] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 331.434680][ T7065] RBP: 00007f31351a5888 R08: 0000000000000000 R09: 0000000000000000 [ 331.434693][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.434706][ T7065] R13: 00007f3135396038 R14: 00007f3135395fa0 R15: 00007fff98e14f18 [ 331.434740][ T7065] [ 331.823369][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.823389][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.823406][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.883227][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.883244][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.883265][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.691918][ T1383] hsr_slave_0: left promiscuous mode [ 334.734044][ T1383] hsr_slave_1: left promiscuous mode [ 334.735317][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.781992][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.571463][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.275643][ T1383] hsr_slave_0: left promiscuous mode [ 336.301006][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 336.301853][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 336.305735][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.305788][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.305813][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.305837][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 336.308381][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.308406][ T9] usb 3-1: Product: syz [ 336.308420][ T9] usb 3-1: Manufacturer: syz [ 336.308435][ T9] usb 3-1: SerialNumber: syz [ 336.321118][ T1383] hsr_slave_1: left promiscuous mode [ 336.326503][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.326528][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.757338][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.757366][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.856515][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 337.860642][ T9] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 337.860724][ T9] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 337.887892][ T5638] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 338.015484][ T9] usb 3-1: USB disconnect, device number 8 [ 338.031045][ T5638] usb 4-1: Using ep0 maxpacket: 8 [ 338.031853][ T5638] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=91.94 [ 338.033836][ T5638] usb 4-1: config 146 has an invalid interface number: 6 but max is 0 [ 338.033861][ T5638] usb 4-1: config 146 has no interface number 0 [ 338.033893][ T5638] usb 4-1: config 146 interface 6 has no altsetting 0 [ 338.040670][ T5638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.040698][ T5638] usb 4-1: Product: syz [ 338.040713][ T5638] usb 4-1: Manufacturer: syz [ 338.040728][ T5638] usb 4-1: SerialNumber: syz [ 338.192608][ T1383] veth1_macvtap: left promiscuous mode [ 338.192691][ T1383] veth0_macvtap: left promiscuous mode [ 338.239718][ T1383] veth1_vlan: left promiscuous mode [ 338.239923][ T1383] veth0_vlan: left promiscuous mode [ 338.927952][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 340.359341][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.390487][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.399671][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.424603][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.426774][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.821700][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 340.875132][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 342.461982][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 342.477615][ T5652] Bluetooth: hci2: command tx timeout [ 342.522746][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 342.756544][ T6729] hsr_slave_0: entered promiscuous mode [ 342.758795][ T6729] hsr_slave_1: entered promiscuous mode [ 342.772510][ T6729] debugfs: 'hsr0' already exists in 'hsr' [ 342.772529][ T6729] Cannot create hsr debugfs directory [ 344.688242][ T5652] Bluetooth: hci2: command tx timeout [ 344.734726][ T5638] ftdi_sio 4-1:146.6: FTDI USB Serial Device converter detected [ 344.978047][ T5638] ftdi_sio ttyUSB0: unknown device type: 0x9194 [ 345.079894][ T5638] usb 4-1: USB disconnect, device number 11 [ 345.403564][ T5638] ftdi_sio 4-1:146.6: device disconnected [ 346.711788][ T5652] Bluetooth: hci2: command tx timeout [ 352.961201][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 352.998621][ T5652] Bluetooth: hci2: command tx timeout [ 353.418009][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 354.288156][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8 [ 354.299265][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.299339][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.299466][ T6917] bridge_slave_0: entered allmulticast mode [ 354.301155][ T6917] bridge_slave_0: entered promiscuous mode [ 354.359067][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.359187][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.359447][ T6917] bridge_slave_1: entered allmulticast mode [ 354.444358][ T6917] bridge_slave_1: entered promiscuous mode [ 354.501099][ T36] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 354.651475][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 354.652815][ T36] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 354.658637][ T36] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 354.658695][ T36] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.658716][ T36] usb 4-1: config 4 has no interface number 0 [ 354.658823][ T36] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 354.658848][ T36] usb 4-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.658875][ T36] usb 4-1: config 4 interface 9 has no altsetting 0 [ 355.310793][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.310824][ T36] usb 4-1: Product: syz [ 355.310839][ T36] usb 4-1: Manufacturer: syz [ 355.310853][ T36] usb 4-1: SerialNumber: syz [ 355.408982][ T7170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 355.667871][ T6917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.775332][ T6917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.799020][ T36] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 355.924610][ T1296] usb 4-1: Failed to submit usb control message: -71 [ 355.924649][ T1296] usb 4-1: unable to send the bmi data to the device: -71 [ 355.924666][ T1296] usb 4-1: unable to get target info from device [ 355.924692][ T1296] usb 4-1: could not get target info (-71) [ 355.925147][ T1296] usb 4-1: could not probe fw (-71) [ 355.963779][ T36] usb 4-1: USB disconnect, device number 12 [ 356.087955][ T6917] team0: Port device team_slave_0 added [ 356.133065][ T6917] team0: Port device team_slave_1 added [ 357.177066][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.177084][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.177110][ T6917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.188714][ T7205] tmpfs: Bad value for 'mpol' [ 357.388491][ T6917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.388509][ T6917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.388534][ T6917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.563809][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.282'. [ 360.651544][ T6917] hsr_slave_0: entered promiscuous mode [ 360.697188][ T6917] hsr_slave_1: entered promiscuous mode [ 360.707089][ T6917] debugfs: 'hsr0' already exists in 'hsr' [ 360.707108][ T6917] Cannot create hsr debugfs directory [ 362.168144][ T5949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 363.221955][ T5949] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 363.223511][ T5949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.223563][ T5949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.223586][ T5949] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.223609][ T5949] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.223650][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.261490][ T5642] Bluetooth: hci0: unexpected event for opcode 0x0047 [ 365.151758][ T5949] usb 4-1: USB disconnect, device number 13 [ 365.268327][ T7256] FAULT_INJECTION: forcing a failure. [ 365.268327][ T7256] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.268366][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.3.292 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 365.268392][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 365.268405][ T7256] Call Trace: [ 365.268490][ T7256] [ 365.268509][ T7256] dump_stack_lvl+0xe8/0x150 [ 365.268664][ T7256] should_fail_ex+0x46b/0x600 [ 365.268742][ T7256] get_futex_key+0x1b4/0x1580 [ 365.268810][ T7256] ? __pfx_get_futex_key+0x10/0x10 [ 365.268870][ T7256] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 365.268907][ T7256] ? ktime_get+0x1f5/0x220 [ 365.268944][ T7256] futex_wake+0x119/0x600 [ 365.268977][ T7256] ? __pfx_futex_wake+0x10/0x10 [ 365.269006][ T7256] ? irqentry_exit+0x218/0x920 [ 365.269125][ T7256] ? irqentry_exit+0x218/0x920 [ 365.269159][ T7256] do_futex+0x458/0x4e0 [ 365.269186][ T7256] ? __pfx_do_futex+0x10/0x10 [ 365.269206][ T7256] ? __se_sys_futex+0xf2/0x450 [ 365.269225][ T7256] ? __sanitizer_cov_trace_switch+0x75/0x120 [ 365.269269][ T7256] __se_sys_futex+0x3a8/0x450 [ 365.269296][ T7256] ? ksys_write+0xfe/0x270 [ 365.269344][ T7256] ? __pfx___se_sys_futex+0x10/0x10 [ 365.269367][ T7256] ? __pfx_ksys_write+0x10/0x10 [ 365.269398][ T7256] ? __x64_sys_futex+0x21/0xf0 [ 365.269422][ T7256] do_syscall_64+0x166/0x520 [ 365.269477][ T7256] ? trace_irq_disable+0x3b/0x140 [ 365.269504][ T7256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.269570][ T7256] ? clear_bhb_loop+0x70/0xc0 [ 365.269596][ T7256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.269618][ T7256] RIP: 0033:0x7f4c35dfe1d9 [ 365.269670][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.269689][ T7256] RSP: 002b:00007f4c340560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.269750][ T7256] RAX: ffffffffffffffda RBX: 00007f4c36085fa8 RCX: 00007f4c35dfe1d9 [ 365.269767][ T7256] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c36085fac [ 365.269782][ T7256] RBP: 00007f4c36085fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 365.269797][ T7256] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 365.269810][ T7256] R13: 00007f4c36086038 R14: 00007ffe1ef5c1c0 R15: 00007ffe1ef5c2a8 [ 365.269843][ T7256] [ 365.502620][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 368.435772][ T7281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.480728][ T5642] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 368.482001][ T7281] netlink: 'syz.4.295': attribute type 21 has an invalid length. [ 369.757121][ T7286] FAULT_INJECTION: forcing a failure. [ 369.757121][ T7286] name fail_futex, interval 1, probability 0, space 0, times 0 [ 369.757165][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.757221][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 369.757272][ T7286] Call Trace: [ 369.757280][ T7286] [ 369.757290][ T7286] dump_stack_lvl+0xe8/0x150 [ 369.757330][ T7286] should_fail_ex+0x46b/0x600 [ 369.757370][ T7286] get_futex_key+0x1b4/0x1580 [ 369.757408][ T7286] ? __pfx_futex_wake_mark+0x10/0x10 [ 369.757442][ T7286] ? __pfx_get_futex_key+0x10/0x10 [ 369.757486][ T7286] futex_wake+0x119/0x600 [ 369.757515][ T7286] ? __pfx_futex_wait+0x10/0x10 [ 369.757543][ T7286] ? __pfx_futex_wake+0x10/0x10 [ 369.757584][ T7286] do_futex+0x458/0x4e0 [ 369.757613][ T7286] ? __pfx_do_futex+0x10/0x10 [ 369.757646][ T7286] __se_sys_futex+0x3a8/0x450 [ 369.757674][ T7286] ? ksys_write+0xfe/0x270 [ 369.757702][ T7286] ? __pfx___se_sys_futex+0x10/0x10 [ 369.757725][ T7286] ? __pfx_ksys_write+0x10/0x10 [ 369.757757][ T7286] ? __x64_sys_futex+0x21/0xf0 [ 369.757782][ T7286] do_syscall_64+0x166/0x520 [ 369.757811][ T7286] ? trace_irq_disable+0x3b/0x140 [ 369.757847][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.757869][ T7286] ? clear_bhb_loop+0x70/0xc0 [ 369.757893][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.757914][ T7286] RIP: 0033:0x7f4c35dfe1d9 [ 369.757934][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.757951][ T7286] RSP: 002b:00007f4c340560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.757975][ T7286] RAX: ffffffffffffffda RBX: 00007f4c36085fa8 RCX: 00007f4c35dfe1d9 [ 369.757990][ T7286] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c36085fac [ 369.758004][ T7286] RBP: 00007f4c36085fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 369.758019][ T7286] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 369.758032][ T7286] R13: 00007f4c36086038 R14: 00007ffe1ef5c1c0 R15: 00007ffe1ef5c2a8 [ 369.758065][ T7286] [ 369.935304][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 370.255421][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.331954][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.337467][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.386195][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.387002][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.923413][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.923541][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.923736][ T7108] bridge_slave_0: entered allmulticast mode [ 370.937580][ T7108] bridge_slave_0: entered promiscuous mode [ 372.474096][ T5652] Bluetooth: hci5: command tx timeout [ 373.495089][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 374.551147][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 374.551335][ T5652] Bluetooth: hci5: command tx timeout [ 375.000440][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 375.193554][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.193601][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.193621][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.193640][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.193676][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.851463][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 375.932926][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.934033][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.934796][ T7108] bridge_slave_1: entered allmulticast mode [ 375.946167][ T7108] bridge_slave_1: entered promiscuous mode [ 376.672333][ T5652] Bluetooth: hci5: command tx timeout [ 378.513251][ T9] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 378.757812][ T7353] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.919954][ T7353] netlink: 'syz.2.303': attribute type 21 has an invalid length. [ 379.112977][ T5652] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 379.624478][ T5652] Bluetooth: hci5: command tx timeout [ 379.743696][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 380.473921][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.300'. [ 380.603629][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.629050][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.741486][ T9] gud 5-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 380.948799][ T9] usb 5-1: USB disconnect, device number 8 [ 381.851206][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 384.431354][ T7108] team0: Port device team_slave_0 added [ 384.662485][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 384.947786][ T7390] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 385.108184][ T7390] netlink: 'syz.4.310': attribute type 21 has an invalid length. [ 385.793930][ T5652] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 386.753934][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.771957][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.636164][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 387.747487][ T7108] team0: Port device team_slave_1 added [ 387.882023][ T5746] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.916960][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.916991][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.973202][ T5746] usb 4-1: config 0 descriptor?? [ 389.023832][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.023849][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.023873][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.061839][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.061856][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.061881][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.182603][ T5746] usbhid 4-1:0.0: can't add hid device: -71 [ 389.182722][ T5746] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 389.235375][ T5746] usb 4-1: USB disconnect, device number 14 [ 389.261778][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 389.431081][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 389.433883][ T9] usb 3-1: config 0 has no interfaces? [ 389.433920][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.466727][ T9] usb 3-1: config 0 descriptor?? [ 389.635275][ T5746] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 390.762055][ T5746] usb 4-1: device descriptor read/all, error -71 [ 390.981203][ T1383] bridge_slave_1: left allmulticast mode [ 390.981241][ T1383] bridge_slave_1: left promiscuous mode [ 390.981499][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.127746][ T1383] bridge_slave_0: left allmulticast mode [ 391.127784][ T1383] bridge_slave_0: left promiscuous mode [ 391.128040][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.211053][ T5746] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 391.361851][ T5746] usb 4-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=ca.32 [ 391.362904][ T5746] usb 4-1: config 127 has an invalid interface number: 89 but max is 19 [ 391.362928][ T5746] usb 4-1: config 127 has 2 interfaces, different from the descriptor's value: 20 [ 391.362948][ T5746] usb 4-1: config 127 has no interface number 0 [ 391.362963][ T5746] usb 4-1: config 127 has no interface number 1 [ 391.363069][ T5746] usb 4-1: too many endpoints for config 127 interface 89 altsetting 231: 126, using maximum allowed: 30 [ 391.363112][ T5746] usb 4-1: config 127 interface 89 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 126 [ 391.363137][ T5746] usb 4-1: config 127 interface 2 has no altsetting 0 [ 391.363153][ T5746] usb 4-1: config 127 interface 89 has no altsetting 0 [ 391.367042][ T5746] usb 4-1: New USB device strings: Mfr=253, Product=1, SerialNumber=3 [ 391.367068][ T5746] usb 4-1: Product: syz [ 391.367079][ T5746] usb 4-1: Manufacturer: syz [ 391.367087][ T5746] usb 4-1: SerialNumber: syz [ 391.531213][ T1383] bridge_slave_1: left allmulticast mode [ 391.531249][ T1383] bridge_slave_1: left promiscuous mode [ 391.531593][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.584960][ T5746] usb 4-1: selecting invalid altsetting 0 [ 391.584986][ T5746] usb 4-1: Could not set interface, error -22 [ 391.614601][ T5746] usb 4-1: USB disconnect, device number 16 [ 391.711983][ T1383] bridge_slave_0: left allmulticast mode [ 391.712008][ T1383] bridge_slave_0: left promiscuous mode [ 391.712174][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.745056][ T9] usb 3-1: USB disconnect, device number 9 [ 391.868226][ T7438] FAULT_INJECTION: forcing a failure. [ 391.868226][ T7438] name fail_futex, interval 1, probability 0, space 0, times 0 [ 391.868250][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.2.318 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.868266][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 391.868273][ T7438] Call Trace: [ 391.868278][ T7438] [ 391.868284][ T7438] dump_stack_lvl+0xe8/0x150 [ 391.868308][ T7438] should_fail_ex+0x46b/0x600 [ 391.868329][ T7438] get_futex_key+0x1b4/0x1580 [ 391.868350][ T7438] ? __pfx_futex_wake_mark+0x10/0x10 [ 391.868368][ T7438] ? __pfx_get_futex_key+0x10/0x10 [ 391.868391][ T7438] futex_wake+0x119/0x600 [ 391.868405][ T7438] ? __pfx_futex_wait+0x10/0x10 [ 391.868420][ T7438] ? __pfx_futex_wake+0x10/0x10 [ 391.868448][ T7438] do_futex+0x458/0x4e0 [ 391.868475][ T7438] ? __pfx_do_futex+0x10/0x10 [ 391.868506][ T7438] __se_sys_futex+0x3a8/0x450 [ 391.868530][ T7438] ? ksys_write+0xfe/0x270 [ 391.868556][ T7438] ? __pfx___se_sys_futex+0x10/0x10 [ 391.868570][ T7438] ? __pfx_ksys_write+0x10/0x10 [ 391.868588][ T7438] ? __x64_sys_futex+0x21/0xf0 [ 391.868602][ T7438] do_syscall_64+0x166/0x520 [ 391.868619][ T7438] ? trace_irq_disable+0x3b/0x140 [ 391.868634][ T7438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.868645][ T7438] ? clear_bhb_loop+0x70/0xc0 [ 391.868662][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.868673][ T7438] RIP: 0033:0x7fe3d969e1d9 [ 391.868685][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.868694][ T7438] RSP: 002b:00007fe3d78f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 391.868708][ T7438] RAX: ffffffffffffffda RBX: 00007fe3d9925fa8 RCX: 00007fe3d969e1d9 [ 391.868716][ T7438] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3d9925fac [ 391.868723][ T7438] RBP: 00007fe3d9925fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 391.868730][ T7438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 391.868737][ T7438] R13: 00007fe3d9926038 R14: 00007ffefe5fb1e0 R15: 00007ffefe5fb2c8 [ 391.868769][ T7438] [ 392.123258][ T1383] bridge_slave_1: left allmulticast mode [ 392.123283][ T1383] bridge_slave_1: left promiscuous mode [ 392.123435][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.170463][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 393.187127][ T1383] bridge_slave_0: left allmulticast mode [ 393.193072][ T1383] bridge_slave_0: left promiscuous mode [ 393.209235][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.111554][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.171506][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.232605][ T1383] bond0 (unregistering): Released all slaves [ 395.481590][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.564756][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.603202][ T1383] bond0 (unregistering): Released all slaves [ 395.851477][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.911645][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.973400][ T1383] bond0 (unregistering): Released all slaves [ 396.014468][ T7108] hsr_slave_0: entered promiscuous mode [ 396.015708][ T7108] hsr_slave_1: entered promiscuous mode [ 396.016603][ T7108] debugfs: 'hsr0' already exists in 'hsr' [ 396.016625][ T7108] Cannot create hsr debugfs directory [ 401.245669][ T1383] hsr_slave_0: left promiscuous mode [ 401.334404][ T1383] hsr_slave_1: left promiscuous mode [ 401.337868][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.381851][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.400734][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.437616][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.442627][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.450442][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.452812][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.583358][ T6148] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 401.767948][ T6148] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 401.769442][ T6148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.769495][ T6148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.769518][ T6148] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.769541][ T6148] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.769584][ T6148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.005716][ T1383] hsr_slave_0: left promiscuous mode [ 402.041036][ T1383] hsr_slave_1: left promiscuous mode [ 402.043613][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.102695][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.304725][ T1383] hsr_slave_0: left promiscuous mode [ 403.321098][ T1383] hsr_slave_1: left promiscuous mode [ 403.322350][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.344223][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.376911][ T6148] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 403.510994][ T5642] Bluetooth: hci1: command tx timeout [ 403.531625][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 403.581665][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 404.053200][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 404.105079][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 404.542502][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 404.576883][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 404.782635][ T7513] netlink: 'syz.4.334': attribute type 29 has an invalid length. [ 405.153153][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.336'. [ 405.331786][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.330'. [ 405.485369][ T6148] gud 3-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 405.591056][ T5642] Bluetooth: hci1: command tx timeout [ 405.591309][ T6148] usb 3-1: USB disconnect, device number 10 [ 406.145144][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.145274][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.145453][ T7294] bridge_slave_0: entered allmulticast mode [ 406.178061][ T7294] bridge_slave_0: entered promiscuous mode [ 406.247243][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.247327][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.247458][ T7294] bridge_slave_1: entered allmulticast mode [ 406.253166][ T7294] bridge_slave_1: entered promiscuous mode [ 406.489532][ T7550] FAULT_INJECTION: forcing a failure. [ 406.489532][ T7550] name fail_futex, interval 1, probability 0, space 0, times 0 [ 406.489571][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.2.342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.489596][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 406.489609][ T7550] Call Trace: [ 406.489617][ T7550] [ 406.489626][ T7550] dump_stack_lvl+0xe8/0x150 [ 406.489664][ T7550] should_fail_ex+0x46b/0x600 [ 406.489700][ T7550] get_futex_key+0x1b4/0x1580 [ 406.489736][ T7550] ? __pfx_futex_wake_mark+0x10/0x10 [ 406.489762][ T7550] ? __pfx_get_futex_key+0x10/0x10 [ 406.489801][ T7550] futex_wake+0x119/0x600 [ 406.489831][ T7550] ? __pfx_futex_wait+0x10/0x10 [ 406.489858][ T7550] ? __pfx_futex_wake+0x10/0x10 [ 406.489894][ T7550] do_futex+0x458/0x4e0 [ 406.489921][ T7550] ? __pfx_do_futex+0x10/0x10 [ 406.489950][ T7550] __se_sys_futex+0x3a8/0x450 [ 406.489978][ T7550] ? ksys_write+0xfe/0x270 [ 406.490005][ T7550] ? __pfx___se_sys_futex+0x10/0x10 [ 406.490028][ T7550] ? __pfx_ksys_write+0x10/0x10 [ 406.490071][ T7550] ? __x64_sys_futex+0x21/0xf0 [ 406.490097][ T7550] do_syscall_64+0x166/0x520 [ 406.490127][ T7550] ? trace_irq_disable+0x3b/0x140 [ 406.490149][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.490167][ T7550] ? clear_bhb_loop+0x70/0xc0 [ 406.490190][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.490211][ T7550] RIP: 0033:0x7fe3d969e1d9 [ 406.490230][ T7550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.490251][ T7550] RSP: 002b:00007fe3d78f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 406.490273][ T7550] RAX: ffffffffffffffda RBX: 00007fe3d9925fa8 RCX: 00007fe3d969e1d9 [ 406.490288][ T7550] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3d9925fac [ 406.490302][ T7550] RBP: 00007fe3d9925fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 406.490318][ T7550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 406.490332][ T7550] R13: 00007fe3d9926038 R14: 00007ffefe5fb1e0 R15: 00007ffefe5fb2c8 [ 406.490365][ T7550] [ 406.545434][ T7294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.586443][ T7294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.931887][ T7294] team0: Port device team_slave_0 added [ 406.962744][ T7294] team0: Port device team_slave_1 added [ 407.919215][ T5642] Bluetooth: hci1: command tx timeout [ 408.350259][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.346'. [ 408.418367][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.418380][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.418395][ T7294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.454519][ T7294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.454538][ T7294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.454564][ T7294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.688167][ T7567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.347'. [ 408.773359][ T7294] hsr_slave_0: entered promiscuous mode [ 408.776284][ T7294] hsr_slave_1: entered promiscuous mode [ 408.777238][ T7294] debugfs: 'hsr0' already exists in 'hsr' [ 408.777261][ T7294] Cannot create hsr debugfs directory [ 410.052410][ T5642] Bluetooth: hci1: command tx timeout [ 410.665384][ T7608] netlink: 60 bytes leftover after parsing attributes in process `syz.3.357'. [ 411.851508][ T7632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.362'. [ 413.284947][ T7294] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 413.458555][ T7294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 413.553802][ T7294] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 413.568927][ T7654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.366'. [ 413.695446][ T7294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.748922][ T7659] FAULT_INJECTION: forcing a failure. [ 413.748922][ T7659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.748944][ T7659] CPU: 0 UID: 0 PID: 7659 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 413.748957][ T7659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 413.748965][ T7659] Call Trace: [ 413.748969][ T7659] [ 413.748975][ T7659] dump_stack_lvl+0xe8/0x150 [ 413.748996][ T7659] should_fail_ex+0x46b/0x600 [ 413.749016][ T7659] _copy_from_user+0x2d/0xb0 [ 413.749055][ T7659] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 413.749078][ T7659] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 413.749137][ T7659] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 413.749159][ T7659] ? __pfx_ksys_write+0x10/0x10 [ 413.749181][ T7659] do_syscall_64+0x166/0x520 [ 413.749196][ T7659] ? trace_irq_disable+0x3b/0x140 [ 413.749211][ T7659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.749222][ T7659] ? clear_bhb_loop+0x70/0xc0 [ 413.749235][ T7659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.749245][ T7659] RIP: 0033:0x7f4c35dfe1d9 [ 413.749256][ T7659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.749265][ T7659] RSP: 002b:00007f4c34055fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 413.749279][ T7659] RAX: ffffffffffffffda RBX: 0000200000000140 RCX: 00007f4c35dfe1d9 [ 413.749292][ T7659] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000f00 [ 413.749303][ T7659] RBP: 00007f4c34056090 R08: 0000000000000000 R09: 0000000000000101 [ 413.749315][ T7659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 413.749326][ T7659] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe1ef5c2a8 [ 413.749350][ T7659] [ 413.772227][ T7294] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 413.883524][ T7294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.886230][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.886348][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.886533][ T7495] bridge_slave_0: entered allmulticast mode [ 413.902888][ T7495] bridge_slave_0: entered promiscuous mode [ 413.942693][ T7294] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 414.433405][ T7294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.946898][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.946971][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.947110][ T7495] bridge_slave_1: entered allmulticast mode [ 414.953718][ T7495] bridge_slave_1: entered promiscuous mode [ 415.549836][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 416.488469][ T5949] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 416.632288][ T1383] bridge_slave_1: left allmulticast mode [ 416.632327][ T1383] bridge_slave_1: left promiscuous mode [ 416.633114][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.660065][ T5949] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 416.670723][ T5949] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.670776][ T5949] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 416.670821][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.828438][ T1383] bridge_slave_0: left allmulticast mode [ 416.828477][ T1383] bridge_slave_0: left promiscuous mode [ 416.828759][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.252731][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.375'. [ 417.331198][ T1383] bridge_slave_1: left allmulticast mode [ 417.331224][ T1383] bridge_slave_1: left promiscuous mode [ 417.331381][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.682368][ T1383] bridge_slave_0: left allmulticast mode [ 417.682395][ T1383] bridge_slave_0: left promiscuous mode [ 417.682575][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.652682][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.703166][ T7689] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 418.721729][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.772309][ T1383] bond0 (unregistering): Released all slaves [ 419.011953][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.072071][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.112666][ T1383] bond0 (unregistering): Released all slaves [ 419.234452][ T7692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.377'. [ 419.263273][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.268251][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.400368][ T7495] team0: Port device team_slave_0 added [ 419.417077][ T7495] team0: Port device team_slave_1 added [ 419.533473][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 420.474174][ T9] usb 5-1: USB disconnect, device number 10 [ 420.503003][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.503021][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.503044][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.527033][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.527049][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.527073][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.728097][ T7708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.379'. [ 422.530045][ T1383] hsr_slave_0: left promiscuous mode [ 422.554064][ T1383] hsr_slave_1: left promiscuous mode [ 422.555723][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.643768][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.787464][ T1383] hsr_slave_0: left promiscuous mode [ 422.854926][ T1383] hsr_slave_1: left promiscuous mode [ 422.856189][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.903422][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.798038][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 426.831800][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 427.082216][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 427.932689][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 428.010109][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 429.219431][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 429.341028][ T5746] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 429.492115][ T5746] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 429.493189][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.493240][ T5746] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.493267][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.651771][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6 [ 429.713653][ T198] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 429.788330][ T7495] hsr_slave_0: entered promiscuous mode [ 429.798173][ T7495] hsr_slave_1: entered promiscuous mode [ 429.804277][ T7495] debugfs: 'hsr0' already exists in 'hsr' [ 429.825519][ T7495] Cannot create hsr debugfs directory [ 429.881039][ T198] usb 3-1: device descriptor read/64, error -71 [ 430.141011][ T198] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 430.271056][ T198] usb 3-1: device descriptor read/64, error -71 [ 430.382106][ T198] usb usb3-port1: attempt power cycle [ 430.734169][ T5652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 430.772998][ T198] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 430.821846][ T198] usb 3-1: device descriptor read/8, error -71 [ 430.836006][ T5652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 430.855006][ T5652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 430.858203][ T5652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 430.861363][ T5652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 431.071053][ T198] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 431.097116][ T198] usb 3-1: device descriptor read/8, error -71 [ 431.100845][ T5746] usb 4-1: USB disconnect, device number 17 [ 431.221167][ T198] usb usb3-port1: unable to enumerate USB device [ 433.015195][ T5642] Bluetooth: hci2: command tx timeout [ 433.115951][ T7786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.392'. [ 433.582474][ T7802] FAULT_INJECTION: forcing a failure. [ 433.582474][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 433.582514][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.582540][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.582553][ T7802] Call Trace: [ 433.582562][ T7802] [ 433.582572][ T7802] dump_stack_lvl+0xe8/0x150 [ 433.582611][ T7802] should_fail_ex+0x46b/0x600 [ 433.582650][ T7802] should_failslab+0xa8/0x100 [ 433.582707][ T7802] __kmalloc_cache_noprof+0xa1/0x680 [ 433.582744][ T7802] ? proc_self_get_link+0xe5/0x180 [ 433.582788][ T7802] ? proc_self_get_link+0xe5/0x180 [ 433.582827][ T7802] ? __task_pid_nr_ns+0x399/0x470 [ 433.582871][ T7802] proc_self_get_link+0xe5/0x180 [ 433.582901][ T7802] ? __pfx_proc_self_get_link+0x10/0x10 [ 433.582933][ T7802] pick_link+0x72f/0xfe0 [ 433.582971][ T7802] step_into_slowpath+0x646/0xa20 [ 433.583004][ T7802] ? __pfx_step_into_slowpath+0x10/0x10 [ 433.583040][ T7802] link_path_walk+0xd5e/0x1910 [ 433.583086][ T7802] path_openat+0x1ce/0x1d60 [ 433.583137][ T7802] do_file_open+0x23e/0x4a0 [ 433.583172][ T7802] ? __pfx_do_file_open+0x10/0x10 [ 433.583226][ T7802] ? alloc_fd+0x654/0x6d0 [ 433.583272][ T7802] do_sys_openat2+0x115/0x200 [ 433.583297][ T7802] ? __se_sys_futex+0x3a8/0x450 [ 433.583321][ T7802] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.583351][ T7802] ? rcu_is_watching+0x16/0xb0 [ 433.583387][ T7802] __x64_sys_openat+0x138/0x170 [ 433.583417][ T7802] do_syscall_64+0x166/0x520 [ 433.583446][ T7802] ? trace_irq_disable+0x3b/0x140 [ 433.583478][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.583501][ T7802] ? clear_bhb_loop+0x70/0xc0 [ 433.583527][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.583548][ T7802] RIP: 0033:0x7f4c35dbea0e [ 433.583569][ T7802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 433.583588][ T7802] RSP: 002b:00007f4c34034f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 433.583612][ T7802] RAX: ffffffffffffffda RBX: 00007f4c340356c0 RCX: 00007f4c35dbea0e [ 433.583628][ T7802] RDX: 0000000000000000 RSI: 00007f4c35e94fb6 RDI: ffffffffffffff9c [ 433.583644][ T7802] RBP: 00007f4c35e95888 R08: 0000000000000000 R09: 0000000000000000 [ 433.583659][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.583672][ T7802] R13: 00007f4c36086128 R14: 00007f4c36086090 R15: 00007ffe1ef5c2a8 [ 433.583706][ T7802] [ 433.621092][ T1246] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 433.771883][ T1246] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.00 [ 433.774059][ T1246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 433.774089][ T1246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.774112][ T1246] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 433.783930][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.783958][ T1246] usb 3-1: Product: syz [ 433.783974][ T1246] usb 3-1: Manufacturer: syz [ 433.783988][ T1246] usb 3-1: SerialNumber: syz [ 433.936678][ T7797] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 433.948426][ T1246] dln2 3-1:1.0: failed to submit RX URB: -90 [ 433.948896][ T1246] dln2 3-1:1.0: probe with driver dln2 failed with error -90 [ 433.998413][ T5284] 8021q: adding VLAN 0 to HW filter on device eth9 [ 434.293107][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.293723][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.298695][ T9] usb 3-1: USB disconnect, device number 15 [ 434.391025][ T1246] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 434.541819][ T1246] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 434.550492][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.550538][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.593566][ T1246] usb 4-1: config 0 descriptor?? [ 434.867474][ T1246] usbhid 4-1:0.0: can't add hid device: -71 [ 434.867601][ T1246] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 434.905353][ T1246] usb 4-1: USB disconnect, device number 18 [ 435.031071][ T5642] Bluetooth: hci2: command tx timeout [ 436.192545][ T1246] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 436.381959][ T1246] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 436.383620][ T1246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.383667][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.439723][ T1246] usb 4-1: config 0 descriptor?? [ 437.452921][ T5642] Bluetooth: hci2: command tx timeout [ 437.724678][ T1246] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 437.987583][ T1246] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 440.157328][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.159041][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.160749][ T7774] bridge_slave_0: entered allmulticast mode [ 440.186949][ T7774] bridge_slave_0: entered promiscuous mode [ 440.203981][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.204247][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.204431][ T7774] bridge_slave_1: entered allmulticast mode [ 440.207102][ T7774] bridge_slave_1: entered promiscuous mode [ 440.330980][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.353891][ T5652] Bluetooth: hci2: command tx timeout [ 440.408196][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.451976][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 441.453165][ T1246] usb 4-1: USB disconnect, device number 19 [ 441.453246][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 443.845420][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 445.918590][ T7888] ================================================================== [ 445.918664][ T7888] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 445.918733][ T7888] Read of size 1 at addr ffff8880516a2418 by task syz.2.408/7888 [ 445.918751][ T7888] [ 445.918770][ T7888] CPU: 1 UID: 0 PID: 7888 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.918798][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 445.918812][ T7888] Call Trace: [ 445.918821][ T7888] [ 445.918831][ T7888] dump_stack_lvl+0xe8/0x150 [ 445.918863][ T7888] print_address_description+0x55/0x1e0 [ 445.918904][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 445.918933][ T7888] print_report+0x58/0x70 [ 445.918956][ T7888] kasan_report+0x117/0x150 [ 445.918977][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 445.919007][ T7888] __kasan_check_byte+0x2a/0x40 [ 445.919028][ T7888] lock_acquire+0x7d/0x350 [ 445.919065][ T7888] ? rcu_is_watching+0x16/0xb0 [ 445.919086][ T7888] _raw_spin_lock_irqsave+0x40/0x60 [ 445.919111][ T7888] ? rt_spin_lock+0x157/0x400 [ 445.919134][ T7888] rt_spin_lock+0x157/0x400 [ 445.919161][ T7888] ? lock_acquire+0x115/0x350 [ 445.919188][ T7888] ? __pfx_rt_spin_lock+0x10/0x10 [ 445.919212][ T7888] ? atomic_notifier_call_chain+0x26/0x180 [ 445.919240][ T7888] stop_tty+0x2e/0x110 [ 445.919332][ T7888] kbd_event+0x2e8d/0x41f0 [ 445.919419][ T7888] ? __lock_acquire+0x747/0x2de0 [ 445.919445][ T7888] ? __pfx_kbd_event+0x10/0x10 [ 445.919472][ T7888] ? try_to_take_rt_mutex+0x842/0xb00 [ 445.919500][ T7888] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 445.919527][ T7888] ? __lock_acquire+0x747/0x2de0 [ 445.919566][ T7888] ? lock_acquire+0x115/0x350 [ 445.919595][ T7888] input_handle_events_default+0xd4/0x1a0 [ 445.919684][ T7888] ? input_pass_values+0x8d/0x890 [ 445.919702][ T7888] input_pass_values+0x288/0x890 [ 445.919724][ T7888] ? input_handle_event+0x6fd/0xf10 [ 445.919782][ T7888] input_event_dispose+0x35f/0x700 [ 445.919811][ T7888] input_inject_event+0x1fa/0x310 [ 445.919838][ T7888] ? input_inject_event+0xb7/0x310 [ 445.919865][ T7888] evdev_write+0x328/0x4c0 [ 445.919916][ T7888] ? __lock_acquire+0x747/0x2de0 [ 445.919947][ T7888] ? __pfx_evdev_write+0x10/0x10 [ 445.919970][ T7888] ? bpf_lsm_file_permission+0x9/0x20 [ 445.920007][ T7888] ? security_file_permission+0x75/0x260 [ 445.920046][ T7888] ? rw_verify_area+0x209/0x4d0 [ 445.920073][ T7888] ? __pfx_evdev_write+0x10/0x10 [ 445.920092][ T7888] vfs_write+0x29f/0xbb0 [ 445.920123][ T7888] ? __pfx_vfs_write+0x10/0x10 [ 445.920156][ T7888] ? __fget_files+0x2a/0x420 [ 445.920181][ T7888] ? __fget_files+0x2a/0x420 [ 445.920203][ T7888] ? __fget_files+0x3a8/0x420 [ 445.920226][ T7888] ? __fget_files+0x2a/0x420 [ 445.920255][ T7888] ksys_write+0x156/0x270 [ 445.920282][ T7888] ? __pfx_ksys_write+0x10/0x10 [ 445.920315][ T7888] do_syscall_64+0x166/0x520 [ 445.920342][ T7888] ? trace_irq_disable+0x3b/0x140 [ 445.920372][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.920394][ T7888] ? clear_bhb_loop+0x70/0xc0 [ 445.920417][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.920439][ T7888] RIP: 0033:0x7fe3d969e1d9 [ 445.920459][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.920478][ T7888] RSP: 002b:00007fe3d78d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.920502][ T7888] RAX: ffffffffffffffda RBX: 00007fe3d9926090 RCX: 00007fe3d969e1d9 [ 445.920518][ T7888] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 445.920533][ T7888] RBP: 00007fe3d9735888 R08: 0000000000000000 R09: 0000000000000000 [ 445.920548][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.920561][ T7888] R13: 00007fe3d9926128 R14: 00007fe3d9926090 R15: 00007ffefe5fb2c8 [ 445.920587][ T7888] [ 445.920596][ T7888] [ 445.920607][ T7888] Allocated by task 7886: [ 445.920654][ T7888] kasan_save_track+0x3e/0x80 [ 445.920686][ T7888] __kasan_kmalloc+0x93/0xb0 [ 445.920704][ T7888] __kmalloc_cache_noprof+0x3d5/0x680 [ 445.920734][ T7888] alloc_tty_struct+0xa6/0x7c0 [ 445.920758][ T7888] tty_init_dev+0x59/0x4d0 [ 445.920781][ T7888] tty_open+0x7e5/0xcd0 [ 445.920826][ T7888] chrdev_open+0x4dc/0x600 [ 445.920843][ T7888] do_dentry_open+0x849/0x1420 [ 445.920860][ T7888] vfs_open+0x3b/0x350 [ 445.920876][ T7888] path_openat+0x1448/0x1d60 [ 445.920898][ T7888] do_file_open+0x23e/0x4a0 [ 445.920921][ T7888] do_sys_openat2+0x115/0x200 [ 445.920936][ T7888] __x64_sys_openat+0x138/0x170 [ 445.920949][ T7888] do_syscall_64+0x166/0x520 [ 445.920971][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.920988][ T7888] [ 445.920993][ T7888] Freed by task 10: [ 445.921002][ T7888] kasan_save_track+0x3e/0x80 [ 445.921029][ T7888] kasan_save_free_info+0x40/0x50 [ 445.921052][ T7888] __kasan_slab_free+0x5c/0x80 [ 445.921069][ T7888] kfree+0x1c5/0x6d0 [ 445.921093][ T7888] process_scheduled_works+0xc3d/0x1630 [ 445.921119][ T7888] worker_thread+0xa47/0xfb0 [ 445.921155][ T7888] kthread+0x38b/0x470 [ 445.921173][ T7888] ret_from_fork+0x514/0xb70 [ 445.921201][ T7888] ret_from_fork_asm+0x1a/0x30 [ 445.921219][ T7888] [ 445.921224][ T7888] Last potentially related work creation: [ 445.921232][ T7888] kasan_save_stack+0x3e/0x60 [ 445.921255][ T7888] kasan_record_aux_stack+0xbd/0xd0 [ 445.921273][ T7888] insert_work+0x3d/0x330 [ 445.921293][ T7888] __queue_work+0xd4e/0x1130 [ 445.921320][ T7888] queue_work_on+0x106/0x1d0 [ 445.921346][ T7888] tty_release_struct+0xb8/0xd0 [ 445.921370][ T7888] tty_release+0xc6b/0x1680 [ 445.921393][ T7888] __fput+0x41f/0xa80 [ 445.921410][ T7888] task_work_run+0x1d9/0x270 [ 445.921430][ T7888] exit_to_user_mode_loop+0x204/0x770 [ 445.921457][ T7888] do_syscall_64+0x328/0x520 [ 445.921483][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.921502][ T7888] [ 445.921507][ T7888] The buggy address belongs to the object at ffff8880516a2000 [ 445.921507][ T7888] which belongs to the cache kmalloc-cg-4k of size 4096 [ 445.921529][ T7888] The buggy address is located 1048 bytes inside of [ 445.921529][ T7888] freed 4096-byte region [ffff8880516a2000, ffff8880516a3000) [ 445.921553][ T7888] [ 445.921559][ T7888] The buggy address belongs to the physical page: [ 445.921576][ T7888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x516a0 [ 445.921599][ T7888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 445.921617][ T7888] memcg:ffff8880516a1011 [ 445.921626][ T7888] flags: 0x80000000000040(head|node=0|zone=1) [ 445.921643][ T7888] page_type: f5(slab) [ 445.921666][ T7888] raw: 0080000000000040 ffff88813ff08500 dead000000000100 dead000000000122 [ 445.921686][ T7888] raw: 0000000000000000 0000000300040004 00000000f5000000 ffff8880516a1011 [ 445.921704][ T7888] head: 0080000000000040 ffff88813ff08500 dead000000000100 dead000000000122 [ 445.921720][ T7888] head: 0000000000000000 0000000300040004 00000000f5000000 ffff8880516a1011 [ 445.921739][ T7888] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 445.921757][ T7888] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 445.921767][ T7888] page dumped because: kasan: bad access detected [ 445.921781][ T7888] page_owner tracks the page as allocated [ 445.921789][ T7888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6086, tgid 6086 (syz-executor), ts 243287552474 [ 445.921825][ T7888] post_alloc_hook+0x1f9/0x250 [ 445.921852][ T7888] get_page_from_freelist+0x2591/0x2600 [ 445.921872][ T7888] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 445.921892][ T7888] allocate_slab+0x7d/0x620 [ 445.921914][ T7888] refill_objects+0x2d8/0x350 [ 445.921937][ T7888] __pcs_replace_empty_main+0x339/0x690 [ 445.921959][ T7888] __kmalloc_node_track_caller_noprof+0x61e/0x7b0 [ 445.921989][ T7888] kmemdup_noprof+0x2b/0x70 [ 445.922022][ T7888] __addrconf_sysctl_register+0xa7/0x4b0 [ 445.922151][ T7888] addrconf_sysctl_register+0x168/0x1c0 [ 445.922170][ T7888] ipv6_add_dev+0xd64/0x1400 [ 445.922194][ T7888] addrconf_notify+0x771/0x1050 [ 445.922211][ T7888] notifier_call_chain+0x1a5/0x3d0 [ 445.922230][ T7888] register_netdevice+0x18c0/0x1ed0 [ 445.922332][ T7888] veth_newlink+0x6a2/0xdd0 [ 445.922430][ T7888] rtnl_newlink_create+0x305/0x7b0 [ 445.922503][ T7888] page last free pid 6393 tgid 6393 ts 238908516627 stack trace: [ 445.922518][ T7888] __free_frozen_pages+0xf8e/0x1070 [ 445.922545][ T7888] __slab_free+0x250/0x2a0 [ 445.922562][ T7888] qlist_free_all+0x99/0x100 [ 445.922588][ T7888] kasan_quarantine_reduce+0x148/0x160 [ 445.922616][ T7888] __kasan_slab_alloc+0x22/0x80 [ 445.922633][ T7888] __kmalloc_noprof+0x3b9/0x790 [ 445.922660][ T7888] load_elf_binary+0x2ca/0x28f0 [ 445.922686][ T7888] bprm_execve+0x930/0x1590 [ 445.922711][ T7888] kernel_execve+0x8c3/0x9c0 [ 445.922734][ T7888] call_usermodehelper_exec_async+0x212/0x360 [ 445.922760][ T7888] ret_from_fork+0x514/0xb70 [ 445.922778][ T7888] ret_from_fork_asm+0x1a/0x30 [ 445.922797][ T7888] [ 445.922802][ T7888] Memory state around the buggy address: [ 445.922814][ T7888] ffff8880516a2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.922829][ T7888] ffff8880516a2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.922842][ T7888] >ffff8880516a2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.922853][ T7888] ^ [ 445.922864][ T7888] ffff8880516a2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.922877][ T7888] ffff8880516a2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.922888][ T7888] ================================================================== [ 445.922905][ T7888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 446.852950][ T7888] CPU: 1 UID: 0 PID: 7888 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 446.862647][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.872695][ T7888] Call Trace: [ 446.875982][ T7888] [ 446.878917][ T7888] vpanic+0x56d/0xa60 [ 446.882912][ T7888] ? __pfx_vpanic+0x10/0x10 [ 446.887439][ T7888] panic+0xc5/0xd0 [ 446.891177][ T7888] ? __pfx_panic+0x10/0x10 [ 446.895582][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.900942][ T7888] ? rcu_is_watching+0x16/0xb0 [ 446.905690][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.911048][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.916403][ T7888] check_panic_on_warn+0x89/0xb0 [ 446.921328][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.926711][ T7888] end_report+0x73/0x170 [ 446.930942][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.936296][ T7888] kasan_report+0x128/0x150 [ 446.940778][ T7888] ? _raw_spin_lock_irqsave+0x40/0x60 [ 446.946130][ T7888] __kasan_check_byte+0x2a/0x40 [ 446.950961][ T7888] lock_acquire+0x7d/0x350 [ 446.955359][ T7888] ? rcu_is_watching+0x16/0xb0 [ 446.960100][ T7888] _raw_spin_lock_irqsave+0x40/0x60 [ 446.965276][ T7888] ? rt_spin_lock+0x157/0x400 [ 446.969938][ T7888] rt_spin_lock+0x157/0x400 [ 446.974442][ T7888] ? lock_acquire+0x115/0x350 [ 446.979151][ T7888] ? __pfx_rt_spin_lock+0x10/0x10 [ 446.984189][ T7888] ? atomic_notifier_call_chain+0x26/0x180 [ 446.990009][ T7888] stop_tty+0x2e/0x110 [ 446.994090][ T7888] kbd_event+0x2e8d/0x41f0 [ 446.998521][ T7888] ? __lock_acquire+0x747/0x2de0 [ 447.003442][ T7888] ? __pfx_kbd_event+0x10/0x10 [ 447.008209][ T7888] ? try_to_take_rt_mutex+0x842/0xb00 [ 447.013560][ T7888] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 447.019088][ T7888] ? __lock_acquire+0x747/0x2de0 [ 447.024013][ T7888] ? lock_acquire+0x115/0x350 [ 447.028680][ T7888] input_handle_events_default+0xd4/0x1a0 [ 447.034383][ T7888] ? input_pass_values+0x8d/0x890 [ 447.039382][ T7888] input_pass_values+0x288/0x890 [ 447.044294][ T7888] ? input_handle_event+0x6fd/0xf10 [ 447.049490][ T7888] input_event_dispose+0x35f/0x700 [ 447.054580][ T7888] input_inject_event+0x1fa/0x310 [ 447.059594][ T7888] ? input_inject_event+0xb7/0x310 [ 447.064698][ T7888] evdev_write+0x328/0x4c0 [ 447.069097][ T7888] ? __lock_acquire+0x747/0x2de0 [ 447.074028][ T7888] ? __pfx_evdev_write+0x10/0x10 [ 447.078955][ T7888] ? bpf_lsm_file_permission+0x9/0x20 [ 447.084308][ T7888] ? security_file_permission+0x75/0x260 [ 447.089927][ T7888] ? rw_verify_area+0x209/0x4d0 [ 447.094760][ T7888] ? __pfx_evdev_write+0x10/0x10 [ 447.099681][ T7888] vfs_write+0x29f/0xbb0 [ 447.103909][ T7888] ? __pfx_vfs_write+0x10/0x10 [ 447.108651][ T7888] ? __fget_files+0x2a/0x420 [ 447.113223][ T7888] ? __fget_files+0x2a/0x420 [ 447.117791][ T7888] ? __fget_files+0x3a8/0x420 [ 447.122458][ T7888] ? __fget_files+0x2a/0x420 [ 447.127068][ T7888] ksys_write+0x156/0x270 [ 447.131411][ T7888] ? __pfx_ksys_write+0x10/0x10 [ 447.136271][ T7888] do_syscall_64+0x166/0x520 [ 447.140843][ T7888] ? trace_irq_disable+0x3b/0x140 [ 447.145855][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.151912][ T7888] ? clear_bhb_loop+0x70/0xc0 [ 447.156575][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.162450][ T7888] RIP: 0033:0x7fe3d969e1d9 [ 447.166845][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.186430][ T7888] RSP: 002b:00007fe3d78d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.194848][ T7888] RAX: ffffffffffffffda RBX: 00007fe3d9926090 RCX: 00007fe3d969e1d9 [ 447.202801][ T7888] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 447.210750][ T7888] RBP: 00007fe3d9735888 R08: 0000000000000000 R09: 0000000000000000 [ 447.218801][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.226782][ T7888] R13: 00007fe3d9926128 R14: 00007fe3d9926090 R15: 00007ffefe5fb2c8 [ 447.234761][ T7888] [ 447.238033][ T7888] Kernel Offset: disabled [ 447.242350][ T7888] Rebooting in 86400 seconds..