last executing test programs: 11m36.332690746s ago: executing program 3 (id=289): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x60381, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x9}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'sed\x00', 0x19, 0x4, 0x10072}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x300000d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x402, 0x0) write(r2, &(0x7f0000000500)='dum', 0x3) 11m33.919550646s ago: executing program 3 (id=294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, '\x00', "59fd4d7ba4efd381f62a75b2daaff4e321bccef0fe33f7926d750d72aac6ded4", "89a2f763"}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) io_uring_setup(0x1562, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 11m31.444275198s ago: executing program 3 (id=299): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r5 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000019800)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) 11m25.777506469s ago: executing program 3 (id=307): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r5 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000019800)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 11m11.058255286s ago: executing program 3 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000900)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000940)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0) read$msr(r3, &(0x7f00000009c0)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000199c0)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r4, &(0x7f0000019a00), 0x0) 11m8.850861891s ago: executing program 3 (id=333): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r5 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 10m53.664199229s ago: executing program 32 (id=333): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000002c0)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000192c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000019300)={0x3f}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000019340)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r5 = openat$binfmt_format(0xffffff9c, &(0x7f00000197c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) 8m8.632613279s ago: executing program 1 (id=729): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) futex(0xffffffffffffffff, 0x8, 0x2, 0x0, 0x0, 0x1) process_vm_writev(0x0, &(0x7f0000000f00)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 8m6.647290089s ago: executing program 1 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0xa, 0x1, 0x6) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000280)=0x5) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$msr(r4, &(0x7f0000002980)=""/102399, 0x18fff) 8m4.706492717s ago: executing program 1 (id=737): socket$nl_route(0x10, 0x3, 0x0) unshare(0x10070100) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f00000005c0), 0x6e, &(0x7f0000000640)}, 0x140) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000001780)={0x8, 0x2, 0x9, 0xb, 0xfffbffff, 0xc}) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) umount2(&(0x7f0000001800)='.\x00', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8m2.941029591s ago: executing program 1 (id=743): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x0, 0x2d) syz_fuse_handle_req(r4, &(0x7f0000002440)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004540)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000006700)=""/134, 0x86) 8m0.807466604s ago: executing program 1 (id=746): socket$netlink(0x10, 0x3, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) futex(0xffffffffffffffff, 0x8, 0x2, 0x0, 0x0, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000001040)="2e000300010001", 0x7) 7m58.371884455s ago: executing program 1 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, 0x0) 7m43.213678752s ago: executing program 33 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, 0x0) 25.945019394s ago: executing program 2 (id=2800): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x2081, 0x8) 25.68318783s ago: executing program 2 (id=2808): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) 24.414059502s ago: executing program 2 (id=2821): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 23.210064991s ago: executing program 2 (id=2829): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r0, &(0x7f0000000340)="02", 0x1, 0x14, 0x0, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 23.006069877s ago: executing program 2 (id=2833): syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x400) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x8041, 0x4, 0xa8df, 0x6, 0x7ffd, 0x7, 0x41, 0xdfe, 0x1, 0xeba7, 0x204, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000400)={0x14, 0x0, 0x0}, 0x0) 21.728769179s ago: executing program 2 (id=2843): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x181) mkdir(&(0x7f0000000b40)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setresgid(0xee00, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.761611156s ago: executing program 6 (id=2943): socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x15b, 0x0) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x42000, &(0x7f0000006c80)=ANY=[]) read$FUSE(r1, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000028c0)="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", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40a, 0x6, 0x20000, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000005}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000070c0)={0x600, 0x1000000}) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000006ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b80)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0x8}}, {0x0, 0x6}}}, 0x0, 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000680)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000700)=0x108) landlock_restrict_self(0xffffffffffffffff, 0xc) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mq_getsetattr(r0, &(0x7f0000000640)={0x800, 0x0, 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x194, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x400}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0xee54}, {0x8, 0xb, 0x51}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xaa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x10001}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x5}, {0x8}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.287297558s ago: executing program 6 (id=2949): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 3.20364288s ago: executing program 0 (id=2950): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 3.036759774s ago: executing program 6 (id=2952): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) listen(r0, 0x5) shutdown(r0, 0x0) 2.239630864s ago: executing program 0 (id=2954): syslog(0x2, &(0x7f0000001740)=""/220, 0xdc) 2.239424204s ago: executing program 5 (id=2955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0123456789abcdef0123456789abcdef", 0x10) 2.239320254s ago: executing program 6 (id=2956): r0 = syz_open_dev$vbi(&(0x7f0000000c80), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000cc0)={0x6, @vbi={0x7df, 0x5, 0x4, 0x50424752, [0x5, 0x9d], [0x10001, 0x8], 0x13a}}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x7}, 0x94) epoll_create1(0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000c40)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0xe) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x70bd07, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x50}}, 0x20008000) 2.102171567s ago: executing program 5 (id=2957): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0xc000002, 0x0, 0x0, 0x1, 0x3}]}) 1.970190631s ago: executing program 6 (id=2958): r0 = syz_open_dev$dvb_frontend(&(0x7f0000002240), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000002280)={0x4, &(0x7f00000022c0)=[{0x14, '\x00', @st={0x4, [{0x2, @svalue=0xd8}, {0x0, @svalue=0x7f}, {0x2, @svalue}, {0x1}]}, 0x7}, {0x34, '\x00', @data=0x89, 0x6448}, {0x46, '\x00', @st={0x4, [{0x0, @svalue=0x5}, {0x0, @svalue=0x5}, {0x2, @svalue=0x8}, {0x1, @svalue=0x9}]}, 0x9b14}, {0x29, '\x00', @buffer={"e495e86998b11bc72044260687e4af38ce62e7f21758d435999c4b1b6760fbc4", 0x20}, 0x2}]}) 1.899543153s ago: executing program 4 (id=2959): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80, &(0x7f0000000880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 1.899364233s ago: executing program 5 (id=2960): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.806525045s ago: executing program 6 (id=2961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.754551546s ago: executing program 4 (id=2962): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000006c0)="a6", 0x1, 0x20000045, &(0x7f0000000700)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 1.631380169s ago: executing program 5 (id=2963): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, 0x0) preadv2(r4, &(0x7f0000000400)=[{0x0}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, &(0x7f0000000300)={0x5, 0x81, {0x51, 0x1, 0x7f, {0x2, 0x8000}, {0x8, 0x7}, @period={0x5c, 0x2, 0x2, 0x0, 0xffff, {0x1, 0xff, 0x3, 0xde8}, 0x0, 0x0}}, {0x575aa2de3e4f50a2, 0xff, 0x5, {0x20, 0x7f}, {0x2, 0x2}, @ramp={0x3, 0x3, {0x8000, 0x0, 0x2, 0xfffe}}}}) connect$inet(r6, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @remote}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.565012311s ago: executing program 0 (id=2964): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 738.623322ms ago: executing program 4 (id=2965): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c804}, 0x20008190) 381.195331ms ago: executing program 5 (id=2966): madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 306.261972ms ago: executing program 0 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x1c, 0x0, 0x105, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 306.093202ms ago: executing program 4 (id=2968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002cc0)={0x73622a85, 0x1001, 0x1, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1040}]}) 235.555554ms ago: executing program 0 (id=2969): r0 = io_uring_setup(0xb37, &(0x7f0000000040)={0x0, 0x32b6, 0x80, 0x0, 0x316}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 164.858576ms ago: executing program 5 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000004c0), 0x812001, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000800)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000840)) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="e8880d8d", 0x4}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x44}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0x3, 0x1, 0x5, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x2) 91.590968ms ago: executing program 4 (id=2971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 68.940518ms ago: executing program 0 (id=2972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000580)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0x9, 0x0, 0x5, {[@exp_fastopen={0xfe, 0x5, 0xf989, "fa"}, @timestamp={0x8, 0xa, 0x800, 0x7f}, @eol, @md5sig={0x13, 0x12, "c8497a470a3d8d11651cedc09be42aa5"}, @timestamp={0x8, 0xa, 0x5, 0x3}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x6, [0x3]}, @fastopen={0x22, 0x8, "fa4639cd0579"}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0xd9a6, 0x9}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=2973): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000000100)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000500), 0x800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) kernel console output (not intermixed with test programs): iscuous mode [ 75.882182][ T4271] device veth0_macvtap entered promiscuous mode [ 75.930125][ T4278] device veth1_vlan entered promiscuous mode [ 75.943645][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.951769][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.960055][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.970226][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.978857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.988011][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.004922][ T4271] device veth1_macvtap entered promiscuous mode [ 76.019385][ T4285] device veth1_macvtap entered promiscuous mode [ 76.030371][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.041887][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.052780][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.081314][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.092940][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.106928][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.120380][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.129110][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.138803][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.149410][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.158294][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.167406][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.176579][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.188965][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.199633][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.212511][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.229358][ T4285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.239627][ T4285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.248672][ T4285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.257533][ T4285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.268774][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.278325][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.288737][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.302265][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.312237][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.320860][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.332996][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.343216][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.354501][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.366487][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.377349][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.387979][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.399409][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.411890][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423090][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.432035][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.442102][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.463509][ T4272] device veth0_vlan entered promiscuous mode [ 76.470137][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.482857][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.504353][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.517920][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.528232][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.539777][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.551074][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.560342][ T4278] device veth0_macvtap entered promiscuous mode [ 76.586255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.599230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.608345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.622689][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.632347][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.643427][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652136][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.670042][ T4272] device veth1_vlan entered promiscuous mode [ 76.706411][ T4278] device veth1_macvtap entered promiscuous mode [ 76.788877][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.800222][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.808669][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.821008][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.829757][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.872411][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.889499][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.900416][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.913820][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.924487][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.936245][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.947653][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.957266][ T4272] device veth0_macvtap entered promiscuous mode [ 76.980573][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.984155][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.996805][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.998881][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.017576][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.026738][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.037657][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.048608][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.059172][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.069894][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.080027][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.090625][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.102468][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.121570][ T4272] device veth1_macvtap entered promiscuous mode [ 77.128671][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.145039][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.154012][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.161561][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.170972][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.181734][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.200694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.215041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.223993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.241246][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.252466][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.263394][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.274190][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.284212][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.296532][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.306631][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.317534][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.328678][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.357233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.366611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.377581][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.390343][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.400858][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.412074][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.422881][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.433392][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.443197][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.454145][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.465812][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.488751][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.500104][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.535914][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.544924][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.547718][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.564316][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.573048][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.582486][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.608520][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.654678][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 77.654699][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 77.660705][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 77.666857][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 77.703720][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.708245][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.711559][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.725354][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.728776][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.747274][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.757391][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.797114][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.814321][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 77.826412][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.843717][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.853720][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.861899][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.945230][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.953088][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.966862][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.037096][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.060471][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.078374][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.091608][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.102737][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.114834][ T4385] FAULT_INJECTION: forcing a failure. [ 78.114834][ T4385] name failslab, interval 1, probability 0, space 0, times 1 [ 78.673279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.953317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.963308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.973306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.983305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 78.993331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.003312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.013312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.023307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.033315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 79.423381][ T4385] CPU: 1 PID: 4385 Comm: syz.0.1 Not tainted syzkaller #0 [ 79.430547][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.440632][ T4385] Call Trace: [ 79.443932][ T4385] [ 79.446879][ T4385] dump_stack_lvl+0x188/0x24e [ 79.451602][ T4385] ? show_regs_print_info+0x12/0x12 [ 79.456826][ T4385] ? load_image+0x410/0x410 [ 79.461350][ T4385] ? __might_sleep+0xd0/0xd0 [ 79.465945][ T4385] ? __lock_acquire+0x7ea0/0x7ea0 [ 79.470988][ T4385] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 79.476973][ T4385] should_fail_ex+0x390/0x4c0 [ 79.481666][ T4385] should_failslab+0x5/0x20 [ 79.486163][ T4385] slab_pre_alloc_hook+0x59/0x300 [ 79.491192][ T4385] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 79.496824][ T4385] __kmem_cache_alloc_node+0x4f/0x270 [ 79.502202][ T4385] ? memcg_alloc_slab_cgroups+0x81/0x120 [ 79.507838][ T4385] __kmalloc_node+0xa2/0x240 [ 79.512434][ T4385] memcg_alloc_slab_cgroups+0x81/0x120 [ 79.517902][ T4385] slab_post_alloc_hook+0xba/0x490 [ 79.523019][ T4385] ? legacy_init_fs_context+0x4d/0xb0 [ 79.528392][ T4385] __kmem_cache_alloc_node+0x19d/0x270 [ 79.533847][ T4385] ? legacy_init_fs_context+0x4d/0xb0 [ 79.539219][ T4385] kmalloc_trace+0x26/0xe0 [ 79.543632][ T4385] legacy_init_fs_context+0x4d/0xb0 [ 79.548829][ T4385] alloc_fs_context+0x628/0x7d0 [ 79.553677][ T4385] __se_sys_fsopen+0xa0/0x2c0 [ 79.558350][ T4385] do_syscall_64+0x4c/0xa0 [ 79.562760][ T4385] ? clear_bhb_loop+0x60/0xb0 [ 79.567431][ T4385] ? clear_bhb_loop+0x60/0xb0 [ 79.572103][ T4385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.577994][ T4385] RIP: 0033:0x7f8e49f9e559 [ 79.582403][ T4385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.602009][ T4385] RSP: 002b:00007f8e4adb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 79.610436][ T4385] RAX: ffffffffffffffda RBX: 00007f8e4a225fa0 RCX: 00007f8e49f9e559 [ 79.618401][ T4385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 79.626370][ T4385] RBP: 00007f8e4a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 79.634334][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.642301][ T4385] R13: 00007f8e4a226038 R14: 00007f8e4a225fa0 R15: 00007ffc912e6278 [ 79.650278][ T4385] [ 79.664190][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.203388][ T955] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.447361][ T955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.588166][ T955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 80.804193][ T955] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.838081][ T955] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 80.850639][ T955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.264616][ T955] rtsx_usb: probe of 2-1:1.0 failed with error -8 [ 81.417298][ T7] cfg80211: failed to load regulatory.db [ 81.510837][ T955] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.819855][ T955] usb 2-1: USB disconnect, device number 2 [ 81.844432][ T4422] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.717688][ T14] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.888847][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.952964][ T14] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 82.983249][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.036814][ T14] usb 3-1: Product: syz [ 83.053247][ T14] usb 3-1: Manufacturer: syz [ 83.077730][ T14] usb 3-1: SerialNumber: syz [ 83.112277][ T14] usb 3-1: config 0 descriptor?? [ 83.135275][ T7] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 83.147189][ T4452] FAULT_INJECTION: forcing a failure. [ 83.147189][ T4452] name failslab, interval 1, probability 0, space 0, times 0 [ 83.157517][ T14] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 83.176844][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.197382][ T7] usb 4-1: config 0 descriptor?? [ 83.231349][ T4452] CPU: 0 PID: 4452 Comm: syz.4.16 Not tainted syzkaller #0 [ 83.238608][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.248678][ T4452] Call Trace: [ 83.251971][ T4452] [ 83.254914][ T4452] dump_stack_lvl+0x188/0x24e [ 83.259620][ T4452] ? show_regs_print_info+0x12/0x12 [ 83.264839][ T4452] ? load_image+0x410/0x410 [ 83.269364][ T4452] ? __might_sleep+0xd0/0xd0 [ 83.273971][ T4452] ? __lock_acquire+0x7ea0/0x7ea0 [ 83.279030][ T4452] should_fail_ex+0x390/0x4c0 [ 83.283735][ T4452] should_failslab+0x5/0x20 [ 83.288252][ T4452] slab_pre_alloc_hook+0x59/0x300 [ 83.293303][ T4452] kmem_cache_alloc_lru+0x49/0x2e0 [ 83.298433][ T4452] ? __d_alloc+0x2e/0x6e0 [ 83.302783][ T4452] __d_alloc+0x2e/0x6e0 [ 83.306960][ T4452] d_alloc+0x46/0x250 [ 83.310961][ T4452] rpc_mkpipe_dentry+0x1a9/0x4c0 [ 83.315931][ T4452] ? rpc_mkpipe_data+0x380/0x380 [ 83.320901][ T4452] rpc_fill_super+0x48e/0x7a0 [ 83.325599][ T4452] ? up_write+0x1b6/0x410 [ 83.329946][ T4452] ? rpc_fs_get_tree+0xc0/0xc0 [ 83.334730][ T4452] ? kill_litter_super+0xa0/0xa0 [ 83.339686][ T4452] ? rpc_fs_get_tree+0xc0/0xc0 [ 83.344470][ T4452] get_tree_keyed+0xd8/0x190 [ 83.349083][ T4452] vfs_get_tree+0x88/0x270 [ 83.353516][ T4452] do_new_mount+0x247/0xa40 [ 83.358041][ T4452] __se_sys_mount+0x2e3/0x3d0 [ 83.362735][ T4452] ? __x64_sys_mount+0xc0/0xc0 [ 83.367521][ T4452] ? lockdep_hardirqs_on+0x94/0x140 [ 83.372736][ T4452] ? __x64_sys_mount+0x1c/0xc0 [ 83.377523][ T4452] do_syscall_64+0x4c/0xa0 [ 83.381972][ T4452] ? clear_bhb_loop+0x60/0xb0 [ 83.386664][ T4452] ? clear_bhb_loop+0x60/0xb0 [ 83.391358][ T4452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.397269][ T4452] RIP: 0033:0x7f25df39e559 [ 83.401705][ T4452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.421330][ T4452] RSP: 002b:00007f25e01b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.429770][ T4452] RAX: ffffffffffffffda RBX: 00007f25df625fa0 RCX: 00007f25df39e559 [ 83.437758][ T4452] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 83.445748][ T4452] RBP: 00007f25df4358b0 R08: 0000000000000000 R09: 0000000000000000 [ 83.453732][ T4452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.461715][ T4452] R13: 00007f25df626038 R14: 00007f25df625fa0 R15: 00007ffd586cf858 [ 83.469720][ T4452] [ 83.490874][ T4456] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 83.518973][ T4456] CIFS: Attempting to mount \\127.0.0.1\share [ 83.526918][ T4456] CIFS: VFS: No username specified [ 84.360130][ T4462] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 84.387463][ T7] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 84.436359][ T7] [drm] Initialized udl on minor 2 [ 84.899944][ T7] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 84.947579][ T7] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 84.985641][ T7] usb 4-1: USB disconnect, device number 2 [ 85.016165][ T4342] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 85.027467][ T4342] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 85.036242][ T4342] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 85.212171][ T4464] input: syz1 as /devices/virtual/input/input5 [ 85.543601][ T14] gspca_stk1135: reg_w 0xf err -71 [ 85.611892][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.656427][ T14] gspca_stk1135: Sensor write failed [ 85.701446][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.728569][ T14] gspca_stk1135: Sensor write failed [ 85.738719][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.787589][ T14] gspca_stk1135: Sensor read failed [ 85.804147][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.810534][ T14] gspca_stk1135: Sensor read failed [ 85.849936][ T14] gspca_stk1135: Detected sensor type unknown (0x0) [ 85.863337][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.881967][ T14] gspca_stk1135: Sensor read failed [ 85.902223][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 85.909452][ T4476] FAULT_INJECTION: forcing a failure. [ 85.909452][ T4476] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.909905][ T4476] CPU: 1 PID: 4476 Comm: syz.3.23 Not tainted syzkaller #0 [ 85.930266][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.940314][ T4476] Call Trace: [ 85.943587][ T4476] [ 85.946509][ T4476] dump_stack_lvl+0x188/0x24e [ 85.951188][ T4476] ? show_regs_print_info+0x12/0x12 [ 85.956396][ T4476] ? load_image+0x410/0x410 [ 85.960933][ T4476] ? __lock_acquire+0x7ea0/0x7ea0 [ 85.965958][ T4476] should_fail_ex+0x390/0x4c0 [ 85.970639][ T4476] prepare_alloc_pages+0x1e1/0x5b0 [ 85.975763][ T4476] __alloc_pages+0x130/0x4f0 [ 85.980345][ T4476] ? zone_statistics+0x170/0x170 [ 85.985271][ T4476] ? wp_page_copy+0xcb5/0x1660 [ 85.990040][ T4476] ? verify_lock_unused+0x140/0x140 [ 85.995230][ T4476] __folio_alloc+0xe/0x30 [ 85.999547][ T4476] vma_alloc_folio+0x499/0x900 [ 86.004317][ T4476] wp_page_copy+0x24b/0x1660 [ 86.008911][ T4476] ? __lock_acquire+0x7ea0/0x7ea0 [ 86.013944][ T4476] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 86.019574][ T4476] ? do_raw_spin_unlock+0x11d/0x230 [ 86.024766][ T4476] ? _raw_spin_unlock+0x24/0x40 [ 86.029611][ T4476] ? do_wp_page+0x678/0x16b0 [ 86.034200][ T4476] handle_mm_fault+0x1b1b/0x3d40 [ 86.039132][ T4476] ? mt_find+0x157/0x830 [ 86.043383][ T4476] ? numa_migrate_prep+0x250/0x250 [ 86.048498][ T4476] ? lock_chain_count+0x20/0x20 [ 86.053358][ T4476] ? lock_mm_and_find_vma+0xae/0x2f0 [ 86.058641][ T4476] do_user_addr_fault+0x58e/0xb20 [ 86.063701][ T4476] exc_page_fault+0x60/0x100 [ 86.068297][ T4476] asm_exc_page_fault+0x22/0x30 [ 86.073149][ T4476] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 86.079748][ T4476] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 86.099374][ T4476] RSP: 0018:ffffc900045b7648 EFLAGS: 00050206 [ 86.105440][ T4476] RAX: ffffffff84148601 RBX: 0000000000022fe0 RCX: 000000000001d2a0 [ 86.113404][ T4476] RDX: 0000000000022fe0 RSI: ffff888054a85d40 RDI: 0000200000006000 [ 86.121370][ T4476] RBP: 0000000000000000 R08: ffff888054aa2fdf R09: 1ffff1100a9545fb [ 86.129333][ T4476] R10: dffffc0000000000 R11: ffffed100a9545fc R12: 00007ffffffdc020 [ 86.137308][ T4476] R13: 0000000000022fe0 R14: ffff888054a80000 R15: 00002000000002c0 [ 86.145280][ T4476] ? copyout+0x31/0x120 [ 86.149444][ T4476] copyout+0xe7/0x120 [ 86.153431][ T4476] _copy_to_iter+0x482/0x1050 [ 86.158114][ T4476] ? iov_iter_init+0x1f0/0x1f0 [ 86.162881][ T4476] ? __virt_addr_valid+0x188/0x540 [ 86.167999][ T4476] ? __virt_addr_valid+0x467/0x540 [ 86.173112][ T4476] ? __phys_addr_symbol+0x2b/0x70 [ 86.178132][ T4476] ? __check_object_size+0x4f6/0xa70 [ 86.183419][ T4476] __skb_datagram_iter+0xde/0x740 [ 86.188444][ T4476] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 86.194073][ T4476] ? skb_copy_datagram_iter+0x290/0x290 [ 86.199618][ T4476] skb_copy_datagram_iter+0xd7/0x290 [ 86.204912][ T4476] __unix_dgram_recvmsg+0x69b/0xda0 [ 86.210115][ T4476] ? unix_unhash+0x10/0x10 [ 86.214531][ T4476] ? aa_af_perm+0x340/0x340 [ 86.219033][ T4476] ? __might_fault+0xa6/0x120 [ 86.223707][ T4476] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 86.228988][ T4476] ? security_socket_recvmsg+0x85/0xb0 [ 86.234442][ T4476] ? unix_dgram_recvmsg+0xa9/0xd0 [ 86.239465][ T4476] ? unix_dgram_sendmsg+0x16f0/0x16f0 [ 86.244832][ T4476] ____sys_recvmsg+0x2c8/0x5b0 [ 86.249599][ T4476] ? __sys_recvmsg_sock+0x40/0x40 [ 86.254631][ T4476] ? import_iovec+0x6f/0xa0 [ 86.259138][ T4476] ___sys_recvmsg+0x210/0x590 [ 86.263813][ T4476] ? __sys_recvmsg+0x2a0/0x2a0 [ 86.268583][ T4476] ? __fget_files+0x3fc/0x460 [ 86.273298][ T4476] __x64_sys_recvmsg+0x20d/0x2e0 [ 86.278236][ T4476] ? ___sys_recvmsg+0x590/0x590 [ 86.283095][ T4476] ? lockdep_hardirqs_on+0x94/0x140 [ 86.288293][ T4476] do_syscall_64+0x4c/0xa0 [ 86.292704][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 86.297376][ T4476] ? clear_bhb_loop+0x60/0xb0 [ 86.302055][ T4476] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.307941][ T4476] RIP: 0033:0x7f9fdc79e559 [ 86.312355][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.331957][ T4476] RSP: 002b:00007f9fdd594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 86.340372][ T4476] RAX: ffffffffffffffda RBX: 00007f9fdca25fa0 RCX: 00007f9fdc79e559 [ 86.348338][ T4476] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 86.356301][ T4476] RBP: 00007f9fdc8358b0 R08: 0000000000000000 R09: 0000000000000000 [ 86.364263][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.372226][ T4476] R13: 00007f9fdca26038 R14: 00007f9fdca25fa0 R15: 00007ffd21e10ab8 [ 86.380206][ T4476] [ 86.434067][ T14] gspca_stk1135: Sensor read failed [ 86.453385][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 86.459766][ T14] gspca_stk1135: Sensor write failed [ 86.496399][ T14] gspca_stk1135: serial bus timeout: status=0x00 [ 86.516632][ T14] gspca_stk1135: Sensor write failed [ 86.522063][ T14] stk1135: probe of 3-1:0.0 failed with error -71 [ 86.533927][ T4344] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 86.568338][ T14] usb 3-1: USB disconnect, device number 2 [ 86.814745][ T4344] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 86.824108][ T4344] usb 5-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.473830][ T4344] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 87.573529][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.012170][ T26] audit: type=1800 audit(1792184488.613:2): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.30" name="no_out_endpoint" dev="configfs" ino=34310 res=0 errno=0 [ 89.086277][ T4344] usb 5-1: string descriptor 0 read error: -71 [ 89.369086][ T4344] usb 5-1: USB disconnect, device number 2 [ 90.225769][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.752293][ T4342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.998309][ T4342] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 92.613890][ T4342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 92.884615][ T4342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 93.087269][ T4342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 93.114056][ T4342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 93.143526][ T4342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 93.163405][ T4342] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.306847][ T4342] usb 3-1: string descriptor 0 read error: -71 [ 93.323852][ T4342] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 93.343151][ T4342] usb 3-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 93.403417][ T4342] usb 3-1: can't set config #1, error -71 [ 93.449413][ T4342] usb 3-1: USB disconnect, device number 3 [ 93.588756][ T4529] input: syz1 as /devices/virtual/input/input6 [ 96.826702][ T4572] loop9: detected capacity change from 0 to 7 [ 96.851302][ T4572] Dev loop9: unable to read RDB block 7 [ 96.857245][ T4572] loop9: unable to read partition table [ 96.863660][ T4572] loop9: partition table beyond EOD, truncated [ 96.869915][ T4572] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.250216][ T26] audit: type=1326 audit(1792184499.853:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 100.331276][ T26] audit: type=1326 audit(1792184499.893:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 100.963106][ T26] audit: type=1326 audit(1792184499.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 102.530119][ T4603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.55'. [ 102.594498][ T26] audit: type=1326 audit(1792184499.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 102.694761][ T26] audit: type=1326 audit(1792184499.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 102.799117][ T26] audit: type=1326 audit(1792184499.903:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 103.933697][ T26] audit: type=1326 audit(1792184499.903:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 104.010019][ T4610] input: syz1 as /devices/virtual/input/input7 [ 104.183629][ T26] audit: type=1326 audit(1792184499.903:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fdc79e559 code=0x7ffc0000 [ 105.513388][ T26] audit: type=1326 audit(1792184499.963:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 105.625696][ T26] audit: type=1326 audit(1792184500.053:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 105.713451][ T26] audit: type=1326 audit(1792184500.053:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 106.693336][ T26] audit: type=1326 audit(1792184500.053:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 106.810934][ T26] audit: type=1326 audit(1792184500.053:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 106.875825][ T26] audit: type=1326 audit(1792184500.053:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 106.915927][ T4649] FAULT_INJECTION: forcing a failure. [ 106.915927][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 106.973561][ T26] audit: type=1326 audit(1792184500.053:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 106.997875][ T4649] CPU: 0 PID: 4649 Comm: syz.2.68 Not tainted syzkaller #0 [ 107.005102][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.015169][ T4649] Call Trace: [ 107.018453][ T4649] [ 107.021380][ T4649] dump_stack_lvl+0x188/0x24e [ 107.026065][ T4649] ? show_regs_print_info+0x12/0x12 [ 107.031268][ T4649] ? load_image+0x410/0x410 [ 107.035766][ T4649] ? __might_sleep+0xd0/0xd0 [ 107.040356][ T4649] ? __lock_acquire+0x7ea0/0x7ea0 [ 107.045387][ T4649] should_fail_ex+0x390/0x4c0 [ 107.050071][ T4649] should_failslab+0x5/0x20 [ 107.054571][ T4649] slab_pre_alloc_hook+0x59/0x300 [ 107.059602][ T4649] kmem_cache_alloc+0x56/0x2f0 [ 107.064372][ T4649] ? security_file_alloc+0x30/0x110 [ 107.069588][ T4649] security_file_alloc+0x30/0x110 [ 107.074618][ T4649] __alloc_file+0xc2/0x230 [ 107.079052][ T4649] alloc_empty_file+0x90/0x180 [ 107.083826][ T4649] alloc_file+0x5b/0x5f0 [ 107.088074][ T4649] alloc_file_pseudo+0x180/0x200 [ 107.093024][ T4649] ? alloc_empty_file_noaccount+0x80/0x80 [ 107.098749][ T4649] ? alloc_anon_inode+0x22e/0x300 [ 107.103773][ T4649] ? memcpy+0x3c/0x60 [ 107.107755][ T4649] ? bpf_lsm_inode_init_security_anon+0x5/0x10 [ 107.113909][ T4649] ? security_inode_init_security_anon+0x7e/0xa0 [ 107.120241][ T4649] __anon_inode_getfile+0x22f/0x350 [ 107.125444][ T4649] ? anon_inode_getfile+0x1a0/0x1a0 [ 107.130638][ T4649] ? __might_fault+0xa6/0x120 [ 107.135313][ T4649] ? __might_fault+0xc2/0x120 [ 107.140072][ T4649] ? __might_fault+0xa6/0x120 [ 107.144749][ T4649] io_uring_create+0x8ae/0xd6c [ 107.149516][ T4649] __x64_sys_io_uring_setup+0x21b/0x230 [ 107.155064][ T4649] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 107.160700][ T4649] ? lockdep_hardirqs_on+0x94/0x140 [ 107.165898][ T4649] do_syscall_64+0x4c/0xa0 [ 107.170310][ T4649] ? clear_bhb_loop+0x60/0xb0 [ 107.174985][ T4649] ? clear_bhb_loop+0x60/0xb0 [ 107.179659][ T4649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.185584][ T4649] RIP: 0033:0x7f4e1bd9e559 [ 107.189993][ T4649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.209604][ T4649] RSP: 002b:00007f4e19ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 107.218018][ T4649] RAX: ffffffffffffffda RBX: 00007f4e1c025fa0 RCX: 00007f4e1bd9e559 [ 107.225992][ T4649] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000146f [ 107.233972][ T4649] RBP: 00007f4e1be358b0 R08: 0000000000000000 R09: 0000000000000000 [ 107.241941][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.249910][ T4649] R13: 00007f4e1c026038 R14: 00007f4e1c025fa0 R15: 00007ffc13db6b58 [ 107.257889][ T4649] [ 107.328548][ T26] audit: type=1326 audit(1792184500.053:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 107.564754][ T26] audit: type=1326 audit(1792184500.053:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 107.923457][ T26] audit: type=1326 audit(1792184500.063:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.3.51" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9fdc75ed8e code=0x7ffc0000 [ 108.019616][ T4662] FAULT_INJECTION: forcing a failure. [ 108.019616][ T4662] name failslab, interval 1, probability 0, space 0, times 0 [ 108.043547][ T4662] CPU: 0 PID: 4662 Comm: syz.0.71 Not tainted syzkaller #0 [ 108.050821][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.060906][ T4662] Call Trace: [ 108.064212][ T4662] [ 108.067159][ T4662] dump_stack_lvl+0x188/0x24e [ 108.071865][ T4662] ? show_regs_print_info+0x12/0x12 [ 108.077089][ T4662] ? load_image+0x410/0x410 [ 108.081632][ T4662] ? __might_sleep+0xd0/0xd0 [ 108.086248][ T4662] ? __lock_acquire+0x7ea0/0x7ea0 [ 108.091309][ T4662] should_fail_ex+0x390/0x4c0 [ 108.096024][ T4662] should_failslab+0x5/0x20 [ 108.100548][ T4662] slab_pre_alloc_hook+0x59/0x300 [ 108.105600][ T4662] ? security_prepare_creds+0x47/0x130 [ 108.111101][ T4662] __kmem_cache_alloc_node+0x4f/0x270 [ 108.116504][ T4662] ? security_prepare_creds+0x47/0x130 [ 108.121978][ T4662] __kmalloc+0xa3/0x240 [ 108.126125][ T4662] security_prepare_creds+0x47/0x130 [ 108.131411][ T4662] prepare_creds+0x450/0x610 [ 108.136008][ T4662] set_current_groups+0x18/0x160 [ 108.140968][ T4662] __se_sys_setgroups+0x34b/0x410 [ 108.146017][ T4662] do_syscall_64+0x4c/0xa0 [ 108.150427][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 108.155100][ T4662] ? clear_bhb_loop+0x60/0xb0 [ 108.159791][ T4662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.165686][ T4662] RIP: 0033:0x7f8e49f9e559 [ 108.170118][ T4662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.189749][ T4662] RSP: 002b:00007f8e4adb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 108.198195][ T4662] RAX: ffffffffffffffda RBX: 00007f8e4a225fa0 RCX: 00007f8e49f9e559 [ 108.206199][ T4662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.214201][ T4662] RBP: 00007f8e4a0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 108.222207][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.230207][ T4662] R13: 00007f8e4a226038 R14: 00007f8e4a225fa0 R15: 00007ffc912e6278 [ 108.238224][ T4662] [ 110.984404][ T4675] input: syz1 as /devices/virtual/input/input8 [ 111.239754][ T4681] loop9: detected capacity change from 0 to 7 [ 111.249576][ T4681] Dev loop9: unable to read RDB block 7 [ 111.255446][ T4681] loop9: unable to read partition table [ 111.262749][ T4681] loop9: partition table beyond EOD, truncated [ 111.269087][ T4681] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.293784][ T4717] sctp: [Deprecated]: syz.4.83 (pid 4717) Use of int in max_burst socket option. [ 116.293784][ T4717] Use struct sctp_assoc_value instead [ 118.062240][ T4731] input: syz1 as /devices/virtual/input/input9 [ 118.454471][ T127] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 118.665162][ T127] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 118.694426][ T127] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 118.750802][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.794979][ T127] usb 1-1: Product: syz [ 118.799188][ T127] usb 1-1: Manufacturer: syz [ 118.837573][ T127] usb 1-1: SerialNumber: syz [ 119.625731][ T127] usb 1-1: config 0 descriptor?? [ 119.638587][ T127] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 119.851386][ T14] usb 1-1: USB disconnect, device number 2 [ 124.345181][ T4779] input: syz1 as /devices/virtual/input/input10 [ 125.615083][ T4792] Zero length message leads to an empty skb [ 126.497351][ T30] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.533019][ T30] Bluetooth: hci5: Frame reassembly failed (-84) [ 127.223684][ T4816] cgroup2: Unknown parameter 'pid' [ 128.543719][ T4287] Bluetooth: hci5: command 0x1003 tx timeout [ 128.544369][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 130.596235][ T4830] input: syz1 as /devices/virtual/input/input11 [ 132.616371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.622705][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.503574][ T4660] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.223601][ T4660] usb 1-1: Using ep0 maxpacket: 8 [ 134.235277][ T4660] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 134.339527][ T4660] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.719214][ T4660] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.730483][ T4660] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.741521][ T4660] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.755960][ T4660] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.786961][ T4660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.802058][ T4872] input: syz1 as /devices/virtual/input/input12 [ 135.820598][ T4660] usb 1-1: GET_CAPABILITIES returned 0 [ 135.836500][ T4660] usbtmc 1-1:16.0: can't read capabilities [ 136.096207][ T4660] usb 1-1: USB disconnect, device number 3 [ 141.997158][ T4919] input: syz1 as /devices/virtual/input/input13 [ 145.693334][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.923463][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 145.967362][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 146.053509][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.107957][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.835175][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.971882][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.985272][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.994927][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.076684][ T7] usb 4-1: can't set config #16, error -71 [ 149.096147][ T7] usb 4-1: USB disconnect, device number 3 [ 155.573639][ T127] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.813561][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 155.824542][ T127] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 155.921393][ T127] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.016807][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.117916][ T127] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.220207][ T127] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.332707][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.417370][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.784419][ T127] usb 1-1: GET_CAPABILITIES returned 0 [ 156.790333][ T127] usbtmc 1-1:16.0: can't read capabilities [ 158.450411][ T14] usb 1-1: USB disconnect, device number 4 [ 159.959287][ T5052] ======================================================= [ 159.959287][ T5052] WARNING: The mand mount option has been deprecated and [ 159.959287][ T5052] and is ignored by this kernel. Remove the mand [ 159.959287][ T5052] option from the mount to silence this warning. [ 159.959287][ T5052] ======================================================= [ 159.999292][ T5052] jffs2: notice: (5052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.260649][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 163.260662][ T26] audit: type=1800 audit(1792184562.863:30): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.187" name="no_out_endpoint" dev="configfs" ino=36914 res=0 errno=0 [ 164.957668][ T26] audit: type=1326 audit(1792184564.563:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 165.454018][ T26] audit: type=1326 audit(1792184564.563:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 165.478919][ T26] audit: type=1326 audit(1792184564.563:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 165.510735][ T26] audit: type=1326 audit(1792184564.563:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 165.547804][ T26] audit: type=1326 audit(1792184564.563:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 165.772653][ T26] audit: type=1326 audit(1792184564.563:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 166.516107][ T26] audit: type=1326 audit(1792184564.563:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 166.904949][ T26] audit: type=1326 audit(1792184564.563:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 166.933116][ T26] audit: type=1326 audit(1792184564.563:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.1.194" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e8679e559 code=0x7ffc0000 [ 168.397692][ T4274] Bluetooth: hci4: command 0x0405 tx timeout [ 171.434053][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 171.434066][ T26] audit: type=1800 audit(1792184571.043:42): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.217" name="no_out_endpoint" dev="configfs" ino=37043 res=0 errno=0 [ 175.895893][ T26] audit: type=1800 audit(1792184575.503:43): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.229" name="no_out_endpoint" dev="configfs" ino=37089 res=0 errno=0 [ 179.536039][ T5263] input: syz1 as /devices/virtual/input/input14 [ 183.070460][ T26] audit: type=1800 audit(1792184582.673:44): pid=5298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="no_out_endpoint" dev="configfs" ino=37199 res=0 errno=0 [ 186.450799][ T4342] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.764957][ T4342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.780500][ T4342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.801146][ T4342] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.832160][ T4342] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 186.852364][ T4342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.883983][ T4342] ims_pcu 2-1:1.0: Missing CDC union descriptor [ 186.894584][ T4342] ims_pcu: probe of 2-1:1.0 failed with error -22 [ 186.919333][ T26] audit: type=1800 audit(1792184586.523:45): pid=5333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.262" name="no_out_endpoint" dev="configfs" ino=36631 res=0 errno=0 [ 187.083766][ T4342] usb 2-1: USB disconnect, device number 3 [ 190.045916][ T5359] loop9: detected capacity change from 0 to 7 [ 190.067839][ T5359] Dev loop9: unable to read RDB block 7 [ 190.073649][ T5359] loop9: unable to read partition table [ 190.079875][ T5359] loop9: partition table beyond EOD, truncated [ 190.086205][ T5359] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.270194][ T26] audit: type=1800 audit(1792184592.873:46): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.274" name="no_out_endpoint" dev="configfs" ino=36692 res=0 errno=0 [ 194.432083][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444087][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.453392][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 196.460745][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 196.467877][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 196.474847][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 196.478130][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 197.894192][ T5397] input: syz1 as /devices/virtual/input/input18 [ 201.883403][ T4339] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.985152][ T5411] input: syz1 as /devices/virtual/input/input19 [ 202.113439][ T4339] usb 1-1: Using ep0 maxpacket: 8 [ 202.126856][ T4339] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 202.169836][ T4339] usb 1-1: config 0 has no interface number 0 [ 202.188711][ T4339] usb 1-1: config 0 interface 200 altsetting 2 has an invalid endpoint with address 0xB5, skipping [ 202.226154][ T4339] usb 1-1: config 0 interface 200 has no altsetting 0 [ 202.252104][ T4339] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 202.277932][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.318619][ T4339] usb 1-1: Product: syz [ 202.322832][ T4339] usb 1-1: Manufacturer: syz [ 202.333797][ T4339] usb 1-1: SerialNumber: syz [ 202.372260][ T4339] usb 1-1: config 0 descriptor?? [ 202.716264][ T4339] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 203.299004][ T4339] usb 1-1: USB disconnect, device number 5 [ 204.128755][ T127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 204.364797][ T26] audit: type=1800 audit(1792184603.973:47): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="no_out_endpoint" dev="configfs" ino=37352 res=0 errno=0 [ 204.364846][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.497983][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.510636][ T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.613797][ T127] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 204.623544][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.636034][ T127] usb 3-1: config 0 descriptor?? [ 205.350356][ T5440] input: syz1 as /devices/virtual/input/input20 [ 206.046246][ T127] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 206.098586][ T127] acrux 0003:1A34:0802.0001: no inputs found [ 206.112201][ T127] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 207.227976][ T7] usb 3-1: USB disconnect, device number 4 [ 210.269115][ T5448] fido_id[5448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 211.512495][ T5468] input: syz1 as /devices/virtual/input/input21 [ 212.706459][ T26] audit: type=1800 audit(1792184612.313:48): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.304" name="no_out_endpoint" dev="configfs" ino=37383 res=0 errno=0 [ 219.254100][ T5513] input: syz1 as /devices/virtual/input/input23 [ 219.404504][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 222.610507][ T26] audit: type=1800 audit(1792184622.213:49): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.319" name="no_out_endpoint" dev="configfs" ino=37975 res=0 errno=0 [ 223.000656][ T5542] input: syz1 as /devices/virtual/input/input24 [ 230.162720][ T26] audit: type=1800 audit(1792184629.763:50): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.336" name="no_out_endpoint" dev="configfs" ino=37521 res=0 errno=0 [ 230.343508][ T4339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 230.492539][ T5595] fuse: Bad value for 'fd' [ 231.194337][ T4339] usb 2-1: Using ep0 maxpacket: 16 [ 232.511268][ T4339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.616687][ T4339] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.143145][ T5600] input: syz1 as /devices/virtual/input/input25 [ 234.075670][ T4339] usb 2-1: string descriptor 0 read error: -71 [ 234.093773][ T4339] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.103564][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.121797][ T4339] usb 2-1: can't set config #1, error -71 [ 234.129837][ T4339] usb 2-1: USB disconnect, device number 4 [ 235.551066][ T5629] loop9: detected capacity change from 0 to 7 [ 237.178460][ T5629] Dev loop9: unable to read RDB block 7 [ 237.184296][ T5629] loop9: unable to read partition table [ 237.190550][ T5629] loop9: partition table beyond EOD, truncated [ 237.197059][ T5629] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.849898][ T26] audit: type=1800 audit(1792184637.453:51): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.350" name="no_out_endpoint" dev="configfs" ino=37590 res=0 errno=0 [ 238.479535][ T5651] fuse: Bad value for 'fd' [ 242.050031][ T5665] sched: RT throttling activated [ 242.096413][ T5666] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.357' sets config #0 [ 242.983145][ T4286] Bluetooth: Wrong link type (-22) [ 243.975411][ T26] audit: type=1800 audit(1792184643.583:52): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.362" name="no_out_endpoint" dev="configfs" ino=37708 res=0 errno=0 [ 246.059357][ T5688] input: syz1 as /devices/virtual/input/input26 [ 247.092700][ T5715] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.264329][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.285273][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.293931][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.302483][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.310465][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 249.319101][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.438759][ T5729] loop9: detected capacity change from 0 to 7 [ 250.239929][ T5729] Dev loop9: unable to read RDB block 7 [ 250.243138][ T5713] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.373480][ T5729] loop9: unable to read partition table [ 250.379332][ T5729] loop9: partition table beyond EOD, truncated [ 250.409669][ T5729] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.341696][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 252.788977][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 253.320730][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.338342][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.354458][ T5713] device bridge_slave_0 entered promiscuous mode [ 253.371583][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.379700][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.389474][ T5713] device bridge_slave_1 entered promiscuous mode [ 253.413769][ T4274] Bluetooth: hci5: command 0x041b tx timeout [ 253.510996][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.570978][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.667055][ T5713] team0: Port device team_slave_0 added [ 253.695618][ T5713] team0: Port device team_slave_1 added [ 253.775488][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.788220][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.836578][ T5766] Bluetooth: MGMT ver 1.22 [ 253.846157][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.627952][ T4922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.666713][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.674437][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.711550][ T26] audit: type=1800 audit(1792184654.313:53): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="no_out_endpoint" dev="configfs" ino=37854 res=0 errno=0 [ 254.763370][ T3653] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 254.783451][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.829566][ T5772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.896268][ T5772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.922771][ T5778] loop9: detected capacity change from 0 to 7 [ 254.935190][ T5704] Dev loop9: unable to read RDB block 7 [ 254.943175][ T5704] loop9: unable to read partition table [ 254.982866][ T5704] loop9: partition table beyond EOD, truncated [ 255.027564][ T5778] Dev loop9: unable to read RDB block 7 [ 255.032166][ T3653] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 255.041779][ T5778] loop9: unable to read partition table [ 255.048433][ T5778] loop9: partition table beyond EOD, truncated [ 255.054970][ T5778] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.146996][ T4922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.495250][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.501578][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.507945][ T4274] Bluetooth: hci5: command 0x040f tx timeout [ 255.686331][ T3653] usb 2-1: config 0 has no interface number 0 [ 255.692561][ T3653] usb 2-1: config 0 interface 41 has no altsetting 0 [ 255.718543][ T3653] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 255.732244][ T3653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.732808][ T4922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.740581][ T3653] usb 2-1: Product: syz [ 255.740598][ T3653] usb 2-1: Manufacturer: syz [ 255.760211][ T3653] usb 2-1: SerialNumber: syz [ 255.784233][ T3653] usb 2-1: config 0 descriptor?? [ 255.845146][ T5713] device hsr_slave_0 entered promiscuous mode [ 255.892515][ T5713] device hsr_slave_1 entered promiscuous mode [ 255.910780][ T5713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.939534][ T5713] Cannot create hsr debugfs directory [ 256.324492][ T4922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.964146][ T3653] CoreChips: probe of 2-1:0.41 failed with error -71 [ 257.270617][ T3653] usb 2-1: USB disconnect, device number 5 [ 257.643622][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 259.363956][ T26] audit: type=1800 audit(1792184658.973:54): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.396" name="no_out_endpoint" dev="configfs" ino=38576 res=0 errno=0 [ 259.607027][ T5713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.663819][ T4286] Bluetooth: hci5: command 0x0405 tx timeout [ 260.132771][ T5713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.443881][ T5713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.689575][ T5713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 261.743406][ T4381] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 261.946552][ T4381] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 261.984053][ T4381] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.248821][ T4381] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.369761][ T4381] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 262.448332][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.571783][ T4381] usb 2-1: config 0 descriptor?? [ 262.893731][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.672975][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.693660][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.701016][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.723561][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.741180][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.761425][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.769174][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.787068][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.806010][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.833355][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.861657][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.882698][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.890699][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.913528][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.941813][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 263.972347][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 264.033846][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 264.041297][ T4381] magicmouse 0003:05AC:0324.0002: unknown main item tag 0x0 [ 264.103971][ T4381] magicmouse 0003:05AC:0324.0002: hidraw0: USB HID v0.10 Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 264.223009][ T4381] usb 2-1: USB disconnect, device number 6 [ 264.374902][ T5845] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.401942][ T5852] fido_id[5852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 264.469669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.500554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.220264][ T26] audit: type=1800 audit(1792184665.823:55): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.407" name="no_out_endpoint" dev="configfs" ino=39122 res=0 errno=0 [ 266.308170][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.663768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.687718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.702815][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.710006][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.854334][ T5713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 267.908098][ T5713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.937967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.969256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.019153][ T5881] Bluetooth: MGMT ver 1.22 [ 268.170025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.650206][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.657404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.783701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.864045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.884386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.948963][ T5888] fuse: Bad value for 'fd' [ 269.007927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.154645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.369069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.621279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.704260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.713069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.768968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.784061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.792023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.855138][ T26] audit: type=1800 audit(1792184672.463:56): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.420" name="no_out_endpoint" dev="configfs" ino=39186 res=0 errno=0 [ 275.202018][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.243575][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.257082][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.283053][ T4922] device hsr_slave_0 left promiscuous mode [ 275.449072][ T4922] device hsr_slave_1 left promiscuous mode [ 275.512788][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.977181][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.281640][ T4922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.323594][ T4922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.361591][ T4922] device bridge_slave_1 left promiscuous mode [ 276.373480][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.491698][ T4922] device bridge_slave_0 left promiscuous mode [ 276.498211][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.744619][ T4922] device veth1_macvtap left promiscuous mode [ 276.769777][ T4922] device veth0_macvtap left promiscuous mode [ 276.791307][ T4922] device veth1_vlan left promiscuous mode [ 276.798952][ T4922] device veth0_vlan left promiscuous mode [ 278.172607][ T5971] 9pnet_virtio: no channels available for device ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 281.717259][ T4922] team0 (unregistering): Port device team_slave_1 removed [ 281.985989][ T4922] team0 (unregistering): Port device team_slave_0 removed [ 282.070793][ T4922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.210065][ T4922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.690038][ T4922] bond0 (unregistering): Released all slaves [ 285.241956][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 285.263977][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.343998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.352470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.399894][ T5713] device veth0_vlan entered promiscuous mode [ 285.437202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.457732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.540462][ T5713] device veth1_vlan entered promiscuous mode [ 285.617989][ T5713] device veth0_macvtap entered promiscuous mode [ 285.660581][ T5713] device veth1_macvtap entered promiscuous mode [ 285.707445][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.723234][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.804514][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.855756][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.867702][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.883494][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.528354][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.571088][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.611603][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.654713][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.707102][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.793383][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.852948][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.916533][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.518015][ T26] audit: type=1800 audit(1792184687.123:57): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.445" name="no_out_endpoint" dev="configfs" ino=38871 res=0 errno=0 [ 287.647845][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.410791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.456288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.515141][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.546616][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.591273][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.601950][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.623631][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.643410][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.664536][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.680908][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.551773][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.667041][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.676693][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.694772][ T5713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.830802][ T5713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.862286][ T5713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.873335][ T5713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.396440][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.433768][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.442279][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.522862][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.547824][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.571335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.069554][ T6171] fuse: Bad value for 'fd' [ 302.883388][ T26] audit: type=1326 audit(1792184701.833:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.483" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e1bd9e559 code=0x0 [ 305.323197][ T6233] fuse: Bad value for 'fd' [ 310.853459][ T6285] fuse: Bad value for 'fd' [ 313.388105][ T4286] Bluetooth: Wrong link type (-22) [ 316.997493][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.004867][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.154098][ T26] audit: type=1800 audit(1792184717.763:59): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.517" name="no_out_endpoint" dev="configfs" ino=40291 res=0 errno=0 [ 324.930712][ T26] audit: type=1800 audit(1792184724.533:60): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.530" name="no_out_endpoint" dev="configfs" ino=40488 res=0 errno=0 [ 329.520364][ T6462] Device name cannot be null; rc = [-22] [ 336.147100][ T6519] fuse: Bad value for 'fd' [ 337.143553][ T33] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 337.353926][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 337.366215][ T33] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 337.422640][ T33] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 337.455313][ T33] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 337.493297][ T33] usb 3-1: Product: syz [ 337.503524][ T33] usb 3-1: Manufacturer: syz [ 337.528554][ T33] usb 3-1: SerialNumber: syz [ 337.550214][ T33] usb 3-1: config 0 descriptor?? [ 337.667308][ T6521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 337.700071][ T33] hub 3-1:0.0: bad descriptor, ignoring hub [ 337.852762][ T33] hub: probe of 3-1:0.0 failed with error -5 [ 338.194389][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 339.134617][ T4381] usb 3-1: USB disconnect, device number 5 [ 340.341982][ T4274] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 342.006351][ T4274] Bluetooth: Wrong link type (-22) [ 346.611973][ T6608] CIFS: Attempting to mount \\127.0.0.1\share [ 346.619376][ T6608] CIFS: VFS: No username specified [ 349.019058][ T4274] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 349.023336][ T4286] Bluetooth: hci1: command 0x1003 tx timeout [ 349.453417][ T5025] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 349.675935][ T5025] usb 3-1: not running at top speed; connect to a high speed hub [ 349.716460][ T5025] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.840549][ T5025] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 349.951208][ T5025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.225279][ T5025] usb 3-1: Found UVC 1.00 device (046d:0825) [ 350.252732][ T5025] usb 3-1: No streaming interface found for terminal 2. [ 350.364334][ T5025] usb 3-1: USB disconnect, device number 6 [ 351.968535][ T6655] rxe_eth0 speed is unknown, defaulting to 1000 [ 354.153372][ T6674] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.487001][ T4539] Bluetooth: hci1: Frame reassembly failed (-84) [ 359.641518][ T4286] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 362.500032][ T6758] CIFS: Attempting to mount \\127.0.0.1\share [ 362.506228][ T6758] CIFS: VFS: No username specified [ 364.205107][ T6776] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.501847][ T6816] CIFS: Attempting to mount \\127.0.0.1\share [ 369.508342][ T6816] CIFS: VFS: No username specified [ 370.665486][ T6828] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.733549][ T6852] Device name cannot be null; rc = [-22] [ 376.170324][ T6876] CIFS: Attempting to mount \\127.0.0.1\share [ 376.177548][ T6876] CIFS: VFS: No username specified [ 376.202573][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 378.503505][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.182888][ T6937] CIFS: Attempting to mount \\127.0.0.1\share [ 381.189263][ T6937] CIFS: VFS: No username specified [ 381.770529][ T6942] fuse: Bad value for 'fd' [ 384.163475][ T6961] fuse: Bad value for 'fd' [ 387.782466][ T6992] CIFS: Attempting to mount \\127.0.0.1\share [ 387.788901][ T6992] CIFS: VFS: No username specified [ 388.274580][ T6995] Device name cannot be null; rc = [-22] [ 391.540886][ T4286] Bluetooth: Wrong link type (-22) [ 394.994974][ T7060] FAULT_INJECTION: forcing a failure. [ 394.994974][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 395.016300][ T7060] CPU: 1 PID: 7060 Comm: syz.5.686 Not tainted syzkaller #0 [ 395.023636][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.033723][ T7060] Call Trace: [ 395.037015][ T7060] [ 395.039960][ T7060] dump_stack_lvl+0x188/0x24e [ 395.044663][ T7060] ? show_regs_print_info+0x12/0x12 [ 395.049880][ T7060] ? load_image+0x410/0x410 [ 395.054402][ T7060] ? __might_sleep+0xd0/0xd0 [ 395.059003][ T7060] ? __lock_acquire+0x7ea0/0x7ea0 [ 395.064051][ T7060] should_fail_ex+0x390/0x4c0 [ 395.068761][ T7060] should_failslab+0x5/0x20 [ 395.073274][ T7060] slab_pre_alloc_hook+0x59/0x300 [ 395.078324][ T7060] kmem_cache_alloc+0x56/0x2f0 [ 395.083108][ T7060] ? security_inode_alloc+0x30/0x110 [ 395.088414][ T7060] security_inode_alloc+0x30/0x110 [ 395.093540][ T7060] inode_init_always+0x910/0xc90 [ 395.098496][ T7060] new_inode_pseudo+0x91/0x1c0 [ 395.103286][ T7060] new_inode+0x25/0x1d0 [ 395.107470][ T7060] __rpc_create_common+0x5d/0x2e0 [ 395.112513][ T7060] ? _raw_spin_unlock+0x24/0x40 [ 395.117389][ T7060] rpc_mkpipe_dentry+0x26e/0x4c0 [ 395.122375][ T7060] ? rpc_mkpipe_data+0x380/0x380 [ 395.127343][ T7060] ? net_generic+0x1e/0x240 [ 395.131880][ T7060] rpc_pipefs_event+0x125/0x1e0 [ 395.136761][ T7060] blocking_notifier_call_chain+0x103/0x1b0 [ 395.142679][ T7060] rpc_fill_super+0x573/0x7a0 [ 395.147384][ T7060] ? rpc_fs_get_tree+0xc0/0xc0 [ 395.152171][ T7060] ? kill_litter_super+0xa0/0xa0 [ 395.157124][ T7060] ? rpc_fs_get_tree+0xc0/0xc0 [ 395.161908][ T7060] get_tree_keyed+0xd8/0x190 [ 395.166520][ T7060] vfs_get_tree+0x88/0x270 [ 395.170953][ T7060] do_new_mount+0x247/0xa40 [ 395.175500][ T7060] __se_sys_mount+0x2e3/0x3d0 [ 395.180212][ T7060] ? __x64_sys_mount+0xc0/0xc0 [ 395.185004][ T7060] ? lockdep_hardirqs_on+0x94/0x140 [ 395.190224][ T7060] ? __x64_sys_mount+0x1c/0xc0 [ 395.195006][ T7060] do_syscall_64+0x4c/0xa0 [ 395.199439][ T7060] ? clear_bhb_loop+0x60/0xb0 [ 395.204134][ T7060] ? clear_bhb_loop+0x60/0xb0 [ 395.208830][ T7060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.214756][ T7060] RIP: 0033:0x7f1eb959e559 [ 395.219195][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.238824][ T7060] RSP: 002b:00007f1eba451028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.247260][ T7060] RAX: ffffffffffffffda RBX: 00007f1eb9825fa0 RCX: 00007f1eb959e559 [ 395.255252][ T7060] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 395.264090][ T7060] RBP: 00007f1eb96358b0 R08: 0000000000000000 R09: 0000000000000000 [ 395.272171][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.280160][ T7060] R13: 00007f1eb9826038 R14: 00007f1eb9825fa0 R15: 00007ffe0281b7f8 [ 395.288180][ T7060] [ 395.897669][ T7060] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry blocklayout [ 395.909119][ T7060] net/sunrpc/rpc_pipe.c: rpc_mkpipe_dentry() failed to create pipe nfs/blocklayout (errno = -12) [ 398.693729][ T7113] Device name cannot be null; rc = [-22] [ 401.642748][ T7148] rxe_eth0 speed is unknown, defaulting to 1000 [ 404.958644][ T4286] Bluetooth: Wrong link type (-22) [ 405.045718][ T7189] Device name cannot be null; rc = [-22] [ 408.301216][ T7216] rxe_eth0 speed is unknown, defaulting to 1000 [ 410.288035][ T7246] fuse: Bad value for 'fd' [ 416.732345][ T7300] fuse: Bad value for 'fd' [ 420.912095][ T7348] Device name cannot be null; rc = [-22] [ 423.005356][ T7363] fuse: Bad value for 'fd' [ 425.004877][ T7378] fuse: Bad value for 'fd' [ 429.322325][ T7420] fuse: Bad value for 'fd' [ 431.066688][ T7430] fuse: Bad value for 'fd' [ 434.745546][ T7469] fuse: Bad value for 'fd' [ 438.272023][ T7505] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.775803][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.787656][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.799035][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.811689][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.823536][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.904395][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.915194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.977484][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.476811][ T7515] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.134541][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 442.783317][ T5556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.866216][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 443.567275][ T5556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.774556][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 444.859628][ T5556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.150896][ T5556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.172517][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.218375][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.252871][ T7515] device bridge_slave_0 entered promiscuous mode [ 445.271676][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.279792][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.341441][ T7515] device bridge_slave_1 entered promiscuous mode [ 446.183911][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.893461][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 447.092300][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.164992][ T7515] team0: Port device team_slave_0 added [ 447.176644][ T7515] team0: Port device team_slave_1 added [ 447.194833][ T7600] autofs4:pid:7600:autofs_fill_super: called with bogus options [ 447.344154][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.451279][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.970797][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.986255][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.001687][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.103374][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.138649][ T7606] rxe_eth0 speed is unknown, defaulting to 1000 [ 449.265262][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 449.449578][ T7515] device hsr_slave_0 entered promiscuous mode [ 449.493664][ T7515] device hsr_slave_1 entered promiscuous mode [ 449.519527][ T7515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.543526][ T7515] Cannot create hsr debugfs directory [ 449.999095][ T7637] fuse: Bad value for 'fd' [ 454.066568][ T7677] autofs4:pid:7677:autofs_fill_super: called with bogus options [ 454.490826][ T7687] fuse: Bad value for 'fd' [ 455.523524][ T7689] fuse: Bad value for 'fd' [ 456.072813][ T7515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.092210][ T7515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 456.106419][ T4274] Bluetooth: Wrong link type (-22) [ 456.112922][ T4274] Bluetooth: hci3: link tx timeout [ 456.121908][ T4274] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 456.137708][ T4274] Bluetooth: hci3: link tx timeout [ 456.146212][ T4274] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.995780][ T7515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 457.100955][ T7515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.673688][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 459.331704][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.405773][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.593641][ T7739] autofs4:pid:7739:autofs_fill_super: called with bogus options [ 459.665003][ T7743] fuse: Bad value for 'fd' [ 460.751946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.771513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.793903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.317546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.613870][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.621067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.695585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.740367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.824453][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.831653][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.934018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 461.957158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.984981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.012289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.041049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.178578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 462.202843][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.219910][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.251354][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.264293][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.291608][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.324475][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.363637][ T7515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.067904][ T5556] device hsr_slave_0 left promiscuous mode [ 465.114100][ T5556] device hsr_slave_1 left promiscuous mode [ 465.200781][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.215919][ T5556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.273852][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.324176][ T5556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.487021][ T5556] device bridge_slave_1 left promiscuous mode [ 465.567844][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.831031][ T5556] device bridge_slave_0 left promiscuous mode [ 465.839041][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.890937][ T5556] device veth1_macvtap left promiscuous mode [ 465.901677][ T5556] device veth0_macvtap left promiscuous mode [ 465.911261][ T5556] device veth1_vlan left promiscuous mode [ 465.921540][ T5556] device veth0_vlan left promiscuous mode [ 474.041393][ T5556] team0 (unregistering): Port device team_slave_1 removed [ 475.792454][ T5556] team0 (unregistering): Port device team_slave_0 removed [ 476.070315][ T5556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.394996][ T5556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.273046][ T5556] bond0 (unregistering): Released all slaves [ 481.347777][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.367913][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.443719][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.923036][ T8004] overlayfs: failed to clone upperpath [ 484.719762][ T8017] cgroup2: Unknown parameter 'pids_l' [ 485.563485][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.572299][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.715162][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.733708][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 485.816115][ T7515] device veth0_vlan entered promiscuous mode [ 485.874051][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 485.882132][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.756652][ T8036] tmpfs: Bad value for 'mpol' [ 486.966753][ T7515] device veth1_vlan entered promiscuous mode [ 487.205220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.255546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.366548][ T7515] device veth0_macvtap entered promiscuous mode [ 487.475545][ T7515] device veth1_macvtap entered promiscuous mode [ 487.840037][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.875514][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.889591][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.973030][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.026099][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.066043][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.099089][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.150423][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.286272][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.384853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 488.421761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 488.522043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 488.595533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 488.662400][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.841976][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.513350][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.558027][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.589055][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.673345][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.706167][ T7515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.760257][ T7515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.791404][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.827240][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.844699][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.872936][ T7515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.899519][ T7515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.946138][ T7515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.975642][ T7515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.326675][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.368817][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.401379][ T8080] autofs4:pid:8080:autofs_fill_super: called with bogus options [ 491.463688][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 491.476685][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.497073][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.540677][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 494.155096][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 495.533088][ T8128] autofs4:pid:8128:autofs_fill_super: called with bogus options [ 496.579149][ T8149] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 496.630800][ T8148] IPVS: stopping backup sync thread 8149 ... [ 496.790643][ T4286] Bluetooth: Wrong link type (-22) [ 499.573327][ T4660] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 499.764383][ T4660] usb 7-1: not running at top speed; connect to a high speed hub [ 499.788711][ T4660] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.836192][ T4660] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 499.875157][ T4660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.938554][ T4660] usb 7-1: Found UVC 1.00 device (046d:0825) [ 499.977259][ T4660] usb 7-1: No streaming interface found for terminal 2. [ 500.132714][ T127] usb 7-1: USB disconnect, device number 2 [ 500.195815][ T8201] CIFS: Attempting to mount \\127.0.0.1\share [ 500.217400][ T8201] CIFS: VFS: No username specified [ 501.255277][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.261645][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.527205][ T4286] Bluetooth: Wrong link type (-22) [ 502.324307][ T8242] using random self ethernet address [ 502.357584][ T8242] using random host ethernet address [ 505.273723][ T8273] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8273] [ 506.530180][ T8299] CIFS: Attempting to mount \\127.0.0.1\share [ 506.562402][ T8286] FAULT_INJECTION: forcing a failure. [ 506.562402][ T8286] name fail_futex, interval 1, probability 0, space 0, times 1 [ 506.583542][ T8299] CIFS: VFS: No username specified [ 506.583550][ T8286] CPU: 0 PID: 8286 Comm: syz.6.983 Not tainted syzkaller #0 [ 506.595976][ T8286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.606053][ T8286] Call Trace: [ 506.609345][ T8286] [ 506.612287][ T8286] dump_stack_lvl+0x188/0x24e [ 506.616999][ T8286] ? show_regs_print_info+0x12/0x12 [ 506.622222][ T8286] ? load_image+0x410/0x410 [ 506.626747][ T8286] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 506.632667][ T8286] ? lockdep_hardirqs_on+0x94/0x140 [ 506.637895][ T8286] should_fail_ex+0x390/0x4c0 [ 506.642614][ T8286] get_futex_key+0x1b1/0x1000 [ 506.647324][ T8286] ? futex_setup_timer+0xc0/0xc0 [ 506.652289][ T8286] ? slab_post_alloc_hook+0x4b/0x490 [ 506.657614][ T8286] futex_wait_setup+0xb8/0x270 [ 506.662409][ T8286] ? futex_wait_multiple+0x920/0x920 [ 506.667731][ T8286] futex_wait+0x1b8/0x5c0 [ 506.672090][ T8286] ? futex_setup_timer+0xc0/0xc0 [ 506.677055][ T8286] ? futex_wait_setup+0x270/0x270 [ 506.682124][ T8286] ? __lock_acquire+0x7ea0/0x7ea0 [ 506.687185][ T8286] do_futex+0x310/0x320 [ 506.691365][ T8286] ? do_raw_spin_unlock+0x11d/0x230 [ 506.696615][ T8286] ? __ia32_sys_get_robust_list+0x100/0x100 [ 506.702532][ T8286] ? do_set_mempolicy+0x25e/0x2e0 [ 506.707609][ T8286] __se_sys_futex+0x381/0x410 [ 506.712322][ T8286] ? __x64_sys_futex+0xf0/0xf0 [ 506.717119][ T8286] ? __x64_sys_futex+0x1d/0xf0 [ 506.721910][ T8286] do_syscall_64+0x4c/0xa0 [ 506.726351][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 506.731054][ T8286] ? clear_bhb_loop+0x60/0xb0 [ 506.735759][ T8286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.741682][ T8286] RIP: 0033:0x7fa703d9e559 [ 506.746122][ T8286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.765757][ T8286] RSP: 002b:00007fa704bb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 506.774206][ T8286] RAX: ffffffffffffffda RBX: 00007fa704025fa8 RCX: 00007fa703d9e559 [ 506.782201][ T8286] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa704025fa8 [ 506.790203][ T8286] RBP: 00007fa704025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 506.798200][ T8286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.806192][ T8286] R13: 00007fa704026038 R14: 00007ffffc82b8a0 R15: 00007ffffc82b988 [ 506.814206][ T8286] [ 509.195135][ T4660] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 509.393516][ T4660] usb 7-1: Using ep0 maxpacket: 8 [ 509.400539][ T4660] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 509.430125][ T4660] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.456060][ T4660] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.487207][ T4660] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 509.520941][ T4660] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 509.551932][ T4660] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.597071][ T4660] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.621767][ T4660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.644558][ T4660] usbtmc: probe of 7-1:16.0 failed with error -22 [ 510.069212][ T4286] Bluetooth: Wrong link type (-22) [ 510.780867][ T8367] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 511.938312][ T7100] usb 7-1: USB disconnect, device number 3 [ 513.119514][ T8407] CIFS: Attempting to mount \\127.0.0.1\share [ 513.216350][ T8407] CIFS: VFS: No username specified [ 514.099442][ T8421] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 514.282271][ T8428] cgroup2: Unknown parameter 'pids_' [ 520.110177][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1038'. [ 522.965220][ T8549] CIFS: Attempting to mount \\127.0.0.1\share [ 522.971391][ T8549] CIFS: VFS: No username specified [ 524.263559][ T8562] IPVS: stopping backup sync thread 8421 ... [ 525.852942][ T8586] fuse: Bad value for 'fd' [ 528.744666][ T8628] fuse: Bad value for 'fd' [ 528.752071][ T8629] fuse: Bad value for 'fd' [ 529.746076][ T8656] CIFS: Attempting to mount \\127.0.0.1\share [ 529.752444][ T8656] CIFS: VFS: No username specified [ 531.480607][ T8674] autofs4:pid:8674:autofs_fill_super: called with bogus options [ 533.107286][ T8696] fuse: Bad value for 'fd' [ 534.008726][ T8713] CIFS: Attempting to mount \\127.0.0.1\share [ 534.014940][ T8713] CIFS: VFS: No username specified [ 534.959682][ T8721] fuse: Bad value for 'fd' [ 536.798187][ T8761] fuse: Bad value for 'fd' [ 537.728613][ T8771] autofs4:pid:8771:autofs_fill_super: called with bogus options [ 537.814978][ T8774] CIFS: Attempting to mount \\127.0.0.1\share [ 537.821268][ T8774] CIFS: VFS: No username specified [ 539.068816][ T8788] fuse: Bad value for 'fd' [ 540.627504][ T8826] autofs4:pid:8826:autofs_fill_super: called with bogus options [ 540.934431][ T8836] CIFS: Attempting to mount \\127.0.0.1\share [ 540.940722][ T8836] CIFS: VFS: No username specified [ 543.104804][ T8889] rxe_eth0 speed is unknown, defaulting to 1000 [ 544.711938][ T8900] CIFS: Attempting to mount \\127.0.0.1\share [ 544.718728][ T8900] CIFS: VFS: No username specified [ 548.024756][ T8945] rxe_eth0 speed is unknown, defaulting to 1000 [ 549.826021][ T8954] fuse: Bad value for 'fd' [ 554.279792][ T9006] fuse: Bad value for 'fd' [ 558.061434][ T9057] autofs4:pid:9057:autofs_fill_super: called with bogus options [ 559.091793][ T9067] fuse: Bad value for 'fd' [ 560.892003][ T9097] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.892501][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.947549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.013558][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 565.344239][ T9134] fuse: Bad value for 'fd' [ 567.586495][ T9159] autofs4:pid:9159:autofs_fill_super: called with bogus options [ 569.044794][ T9189] fuse: Bad value for 'fd' [ 570.245301][ T9202] rxe_eth0 speed is unknown, defaulting to 1000 [ 574.880963][ T9241] fuse: Bad value for 'fd' [ 580.052317][ T9308] autofs4:pid:9308:autofs_fill_super: called with bogus options [ 581.242388][ T9331] fuse: Bad value for 'fd' [ 584.180849][ T9372] fuse: Bad value for 'fd' [ 584.786518][ T9386] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 589.686002][ T9456] fuse: Bad value for 'fd' [ 590.807930][ T9471] fuse: Bad value for 'fd' [ 593.194852][ T9507] fuse: Bad value for 'fd' [ 594.264272][ T9513] fuse: Bad value for 'fd' [ 595.186399][ T9520] autofs4:pid:9520:autofs_fill_super: called with bogus options [ 598.508552][ T9554] fuse: Bad value for 'fd' [ 599.254507][ T9557] fuse: Bad value for 'fd' [ 599.619162][ T9564] autofs4:pid:9564:autofs_fill_super: called with bogus options [ 602.419833][ T9602] fuse: Bad value for 'fd' [ 603.559704][ T9611] fuse: Bad value for 'fd' [ 606.344408][ T9645] fuse: Bad value for 'fd' [ 607.414799][ T9656] fuse: Bad value for 'fd' [ 607.644938][ T4286] Bluetooth: Wrong link type (-22) [ 607.740841][ T9660] CIFS: Attempting to mount \\127.0.0.1\share [ 607.747182][ T9660] CIFS: VFS: No username specified [ 611.750043][ T9707] CIFS: Attempting to mount \\127.0.0.1\share [ 611.756291][ T9707] CIFS: VFS: No username specified [ 614.343602][ T4286] Bluetooth: Wrong link type (-22) [ 617.555663][ T9773] fuse: Bad value for 'fd' [ 617.756438][ T9774] rxe_eth0 speed is unknown, defaulting to 1000 [ 618.763992][ T9785] autofs4:pid:9785:autofs_fill_super: called with bogus options [ 621.680158][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1391'. [ 622.643723][ T9831] fuse: Bad value for 'fd' [ 623.380919][ T9842] fuse: Bad value for 'fd' [ 624.264698][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.271031][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.487999][ T9881] fuse: Bad value for 'fd' [ 628.732885][ T9890] fuse: Bad value for 'fd' [ 632.305573][ T9958] fuse: Bad value for 'fd' [ 632.611685][ T9961] fuse: Bad value for 'fd' [ 636.044811][ T9990] rxe_eth0 speed is unknown, defaulting to 1000 [ 641.706952][ T4274] Bluetooth: Wrong link type (-22) [ 641.712351][ T4274] Bluetooth: hci2: link tx timeout [ 641.718121][ T4274] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 641.726901][ T4274] Bluetooth: hci2: link tx timeout [ 641.732216][ T4274] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 642.249713][T10055] rxe_eth0 speed is unknown, defaulting to 1000 [ 643.914903][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 646.363667][T10082] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1451'. [ 648.218828][T10112] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.913321][ T4286] Bluetooth: Wrong link type (-22) [ 649.922778][ T4286] Bluetooth: hci1: link tx timeout [ 649.929448][ T4286] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 653.715433][T10172] rxe_eth0 speed is unknown, defaulting to 1000 [ 655.464684][ T4286] Bluetooth: Wrong link type (-22) [ 655.473799][ T4286] Bluetooth: hci5: link tx timeout [ 655.480405][ T4286] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 655.489474][ T4286] Bluetooth: hci5: link tx timeout [ 655.495965][ T4286] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 657.727014][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 659.183422][T10244] CIFS: Attempting to mount \\127.0.0.1\share [ 659.190418][T10244] CIFS: VFS: No username specified [ 661.129709][ T4286] Bluetooth: Wrong link type (-22) [ 661.135178][ T4286] Bluetooth: hci1: link tx timeout [ 661.140317][ T4286] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 661.151022][ T4286] Bluetooth: hci1: link tx timeout [ 661.156545][ T4286] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 661.976787][T10280] CIFS: Attempting to mount \\127.0.0.1\share [ 661.982972][T10280] CIFS: VFS: No username specified [ 663.173624][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 663.620679][T10308] fuse: Bad value for 'fd' [ 664.662830][T10315] CIFS: Attempting to mount \\127.0.0.1\share [ 664.669199][T10315] CIFS: VFS: No username specified [ 666.556160][T10351] CIFS: Attempting to mount \\127.0.0.1\share [ 666.562319][T10351] CIFS: VFS: No username specified [ 667.178840][T10357] fuse: Bad value for 'fd' [ 673.172837][T10450] fuse: Bad value for 'fd' [ 675.695189][T10482] fuse: Bad value for 'fd' [ 678.458572][T10508] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.455699][T10544] fuse: Bad value for 'fd' [ 684.220018][T10569] rxe_eth0 speed is unknown, defaulting to 1000 [ 684.908398][T10588] fuse: Bad value for 'fd' [ 685.624649][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.630989][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.010372][T10600] fuse: Bad value for 'fd' [ 689.145806][T10640] fuse: Bad value for 'fd' [ 690.803995][T10654] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.491261][T10673] fuse: Bad value for 'fd' [ 693.267217][T10687] process 'syz.5.1634' launched './file0' with NULL argv: empty string added [ 694.762391][T10709] fuse: Bad value for 'fd' [ 699.627461][T10819] rxe_eth0 speed is unknown, defaulting to 1000 [ 701.762607][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 701.791053][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 701.855662][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 702.476264][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 707.226392][ T4286] Bluetooth: Wrong link type (-22) [ 707.233504][ T4286] Bluetooth: hci4: link tx timeout [ 707.246376][ T4286] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 707.256852][ T4286] Bluetooth: hci4: link tx timeout [ 707.262130][ T4286] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.532070][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 713.865481][T11048] fuse: Bad value for 'fd' [ 721.198967][T11168] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1759'. [ 722.145497][T11174] process '/newroot/360/file0' started with executable stack [ 725.015440][T11219] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1771'. [ 731.197467][T11300] fuse: Bad value for 'fd' [ 734.972599][T11379] fuse: Bad value for 'fd' [ 739.301719][T11438] CIFS: Attempting to mount \\127.0.0.1\share [ 739.308253][T11438] CIFS: VFS: No username specified [ 741.992349][T11475] CIFS: Attempting to mount \\127.0.0.1\share [ 741.998550][T11475] CIFS: VFS: No username specified [ 747.017063][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.083320][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.307203][T11618] rxe_eth0 speed is unknown, defaulting to 1000 [ 750.401922][T11626] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1893'. [ 753.476026][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1908'. [ 755.548866][T11704] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.791624][T11715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1924'. [ 758.301794][T11742] fuse: Bad value for 'fd' [ 760.103367][T11770] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1940'. [ 762.076636][T11807] fuse: Bad value for 'fd' [ 763.336342][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1954'. [ 764.491549][T11854] fuse: Bad value for 'fd' [ 765.726775][T11874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1973'. [ 767.170238][T11896] fuse: Bad value for 'fd' [ 769.697257][T11939] fuse: Bad value for 'fd' [ 773.478397][T12015] fuse: Bad value for 'fd' [ 776.370388][T12070] fuse: Bad value for 'fd' [ 776.647864][T12076] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2035'. [ 779.718380][T12153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2051'. [ 781.527260][T12190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2067'. [ 782.195918][T12212] fuse: Bad value for 'fd' [ 784.802224][T12269] fuse: Bad value for 'fd' [ 788.731232][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 792.461491][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 800.154451][T12603] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2214'. [ 805.470364][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'. [ 805.632490][T12790] rxe_eth0 speed is unknown, defaulting to 1000 [ 808.455811][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.462158][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.164693][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 829.717532][T13387] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.257166][T13753] overlayfs: failed to clone lowerpath [ 845.707201][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 846.022598][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 847.305938][T13811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 849.070456][T13862] overlayfs: failed to clone upperpath [ 850.166748][T13876] rxe_eth0 speed is unknown, defaulting to 1000 [ 851.771740][T13904] overlayfs: failed to clone upperpath [ 851.874546][T13904] overlayfs: failed to resolve './file1': -2 [ 853.176972][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2691'. [ 854.541976][T13957] rxe_eth0 speed is unknown, defaulting to 1000 [ 865.711793][T14103] rxe_eth0 speed is unknown, defaulting to 1000 [ 869.956430][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.962779][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.756504][T14233] overlayfs: failed to clone upperpath [ 872.776901][T14231] overlayfs: failed to clone upperpath [ 873.654396][T14250] rxe_eth0 speed is unknown, defaulting to 1000 [ 873.795753][T14253] mmap: syz.4.2811 (14253): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 873.901525][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 874.606945][T14290] fuse: Bad value for 'fd' [ 875.755057][T14313] fuse: Bad value for 'fd' [ 876.199656][T14327] fuse: Bad value for 'fd' [ 876.961493][T14334] overlayfs: failed to clone upperpath [ 878.184006][T14352] rxe_eth0 speed is unknown, defaulting to 1000 [ 878.350053][T14363] overlayfs: failed to clone upperpath [ 879.122394][T14371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.137453][T14371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 879.194018][T14371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.203747][T14371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 879.212311][T14371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 879.219879][T14371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 879.296039][T14380] 9p: Unknown Cache mode f [ 879.420025][T14369] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.429258][T14386] __vm_enough_memory: pid: 14386, comm: syz.4.2864, no enough memory for the allocation [ 879.838666][ T4420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.553985][ T4420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.219707][ T4420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.254601][T14371] Bluetooth: hci0: command 0x0409 tx timeout [ 881.636814][ T4420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.721520][T14369] chnl_net:caif_netlink_parms(): no params data found [ 882.912489][T14369] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.496387][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 883.533389][T14369] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.602580][T14369] device bridge_slave_0 entered promiscuous mode [ 883.720496][T14369] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.731895][T14369] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.754562][T14369] device bridge_slave_1 entered promiscuous mode [ 883.810789][T14369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.878693][T14369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.363511][T14369] team0: Port device team_slave_0 added [ 884.372924][T14469] rxe_eth0 speed is unknown, defaulting to 1000 [ 884.380847][T14369] team0: Port device team_slave_1 added [ 884.528881][T14369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.560882][T14369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.613091][T14369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.394350][T14369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.411303][T14369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.580434][T14369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.856949][T14369] device hsr_slave_0 entered promiscuous mode [ 885.885031][T14369] device hsr_slave_1 entered promiscuous mode [ 885.936583][T14369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.983806][T14369] Cannot create hsr debugfs directory [ 886.275240][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 887.904673][ T4420] IPVS: stopping backup sync thread 8367 ... [ 888.293859][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 890.107466][T14369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 890.138979][T14369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 890.179481][T14369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 890.212629][ T4420] device hsr_slave_0 left promiscuous mode [ 890.241487][ T4420] device hsr_slave_1 left promiscuous mode [ 890.258679][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.275665][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.294476][ T4420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.301938][ T4420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.330435][ T4420] device bridge_slave_1 left promiscuous mode [ 890.355064][ T4420] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.376214][ T4420] device bridge_slave_0 left promiscuous mode [ 890.393672][ T4420] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.460518][ T4420] device veth1_macvtap left promiscuous mode [ 890.475658][ T4420] device veth0_macvtap left promiscuous mode [ 890.492027][ T4420] device veth1_vlan left promiscuous mode [ 890.506296][ T4420] device veth0_vlan left promiscuous mode [ 890.547580][T14579] tipc: Failed to remove unknown binding: 66,0,0/0:712503020/712503021 [ 890.575702][T14579] tipc: Failed to remove unknown binding: 66,0,0/0:712503020/712503021 [ 892.973070][ T4420] team0 (unregistering): Port device team_slave_1 removed [ 893.020654][ T4420] team0 (unregistering): Port device team_slave_0 removed [ 893.060633][ T4420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.102814][ T4420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.238267][T14624] tipc: Failed to remove unknown binding: 66,0,0/0:22285705/22285706 [ 893.249375][T14624] tipc: Failed to remove unknown binding: 66,0,0/0:22285705/22285706 [ 893.538653][ T4420] bond0 (unregistering): Released all slaves [ 893.593084][T14369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 893.631974][T14632] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 893.855753][T14369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.943894][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 893.962271][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.983935][T14644] rxe_eth0 speed is unknown, defaulting to 1000 [ 894.062979][T14369] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.150234][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 894.176952][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 894.227823][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.235085][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.342102][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 894.392699][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 894.463927][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 894.522019][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.529287][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.631806][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 894.723001][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 894.787602][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 894.851568][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 894.914259][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 894.980480][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 895.054754][T14369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 895.142212][T14369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.226193][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 895.253851][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 895.262579][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 895.318338][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 895.361564][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 895.370463][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.884389][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.895822][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.946230][T14369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.067630][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 897.082940][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 897.951328][T14369] device veth0_vlan entered promiscuous mode [ 898.054329][T14369] device veth1_vlan entered promiscuous mode [ 898.178158][T14369] device veth0_macvtap entered promiscuous mode [ 898.230889][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 898.249967][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 898.288882][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 898.329213][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 898.353832][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 898.374106][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 898.525780][ T4286] Bluetooth: hci5: failed to read key size for handle 200 [ 898.533968][ T4286] [ 898.536314][ T4286] ====================================================== [ 898.543343][ T4286] WARNING: possible circular locking dependency detected [ 898.550385][ T4286] syzkaller #0 Not tainted [ 898.554816][ T4286] ------------------------------------------------------ [ 898.561849][ T4286] kworker/u5:5/4286 is trying to acquire lock: [ 898.568014][ T4286] ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 898.577384][ T4286] [ 898.577384][ T4286] but task is already holding lock: [ 898.584769][ T4286] ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 898.594196][ T4286] [ 898.594196][ T4286] which lock already depends on the new lock. [ 898.594196][ T4286] [ 898.604622][ T4286] [ 898.604622][ T4286] the existing dependency chain (in reverse order) is: [ 898.613650][ T4286] [ 898.613650][ T4286] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 898.621413][ T4286] __mutex_lock+0x12d/0xae0 [ 898.626667][ T4286] hci_remote_features_evt+0x464/0xa10 [ 898.632773][ T4286] hci_event_packet+0x806/0x1290 [ 898.638255][ T4286] hci_rx_work+0x3eb/0xd40 [ 898.643236][ T4286] process_one_work+0x8ab/0x1160 [ 898.648885][ T4286] worker_thread+0xaf5/0x12a0 [ 898.654107][ T4286] kthread+0x29d/0x330 [ 898.658722][ T4286] ret_from_fork+0x1f/0x30 [ 898.663733][ T4286] [ 898.663733][ T4286] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 898.671066][ T4286] __mutex_lock+0x12d/0xae0 [ 898.676124][ T4286] l2cap_chan_connect+0xfb/0xe20 [ 898.681690][ T4286] l2cap_sock_connect+0x576/0x750 [ 898.687271][ T4286] kernel_connect+0x13e/0x1c0 [ 898.692568][ T4286] rfcomm_dlc_open+0x600/0x10c0 [ 898.697967][ T4286] rfcomm_sock_connect+0x2e9/0x600 [ 898.703641][ T4286] __sys_connect+0x3cb/0x450 [ 898.708784][ T4286] __x64_sys_connect+0x76/0x80 [ 898.714092][ T4286] do_syscall_64+0x4c/0xa0 [ 898.719083][ T4286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.725525][ T4286] [ 898.725525][ T4286] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 898.732934][ T4286] __lock_acquire+0x3a03/0x7ea0 [ 898.738407][ T4286] lock_acquire+0x1bc/0x4a0 [ 898.743465][ T4286] __mutex_lock+0x12d/0xae0 [ 898.748511][ T4286] rfcomm_security_cfm+0x95/0x780 [ 898.754085][ T4286] hci_encrypt_cfm+0x363/0x4d0 [ 898.759396][ T4286] hci_cc_read_enc_key_size+0x218/0x380 [ 898.765560][ T4286] hci_cmd_complete_evt+0x4e3/0xa40 [ 898.771305][ T4286] hci_event_packet+0x7b3/0x1290 [ 898.776786][ T4286] hci_rx_work+0x3eb/0xd40 [ 898.781761][ T4286] process_one_work+0x8ab/0x1160 [ 898.787245][ T4286] worker_thread+0xaf5/0x12a0 [ 898.792469][ T4286] kthread+0x29d/0x330 [ 898.797171][ T4286] ret_from_fork+0x1f/0x30 [ 898.802137][ T4286] [ 898.802137][ T4286] other info that might help us debug this: [ 898.802137][ T4286] [ 898.812388][ T4286] Chain exists of: [ 898.812388][ T4286] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 898.812388][ T4286] [ 898.824989][ T4286] Possible unsafe locking scenario: [ 898.824989][ T4286] [ 898.832462][ T4286] CPU0 CPU1 [ 898.837845][ T4286] ---- ---- [ 898.843231][ T4286] lock(hci_cb_list_lock); [ 898.847766][ T4286] lock(&hdev->lock); [ 898.854376][ T4286] lock(hci_cb_list_lock); [ 898.861505][ T4286] lock(rfcomm_mutex); [ 898.865680][ T4286] [ 898.865680][ T4286] *** DEADLOCK *** [ 898.865680][ T4286] [ 898.873835][ T4286] 4 locks held by kworker/u5:5/4286: [ 898.879141][ T4286] #0: ffff88802366f938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 898.889543][ T4286] #1: ffffc900041d7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 898.900981][ T4286] #2: ffff888043b10428 (&hdev->lock){+.+.}-{3:3}, at: hci_cc_read_enc_key_size+0x9b/0x380 [ 898.911040][ T4286] #3: ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_encrypt_cfm+0x2fe/0x4d0 [ 898.920838][ T4286] [ 898.920838][ T4286] stack backtrace: [ 898.926748][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 898.934310][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.944387][ T4286] Workqueue: hci5 hci_rx_work [ 898.949093][ T4286] Call Trace: [ 898.952386][ T4286] [ 898.955330][ T4286] dump_stack_lvl+0x188/0x24e [ 898.960034][ T4286] ? load_image+0x410/0x410 [ 898.964584][ T4286] ? show_regs_print_info+0x12/0x12 [ 898.969810][ T4286] ? print_circular_bug+0x12b/0x1a0 [ 898.975036][ T4286] check_noncircular+0x2f8/0x400 [ 898.980000][ T4286] ? print_deadlock_bug+0x5d0/0x5d0 [ 898.985221][ T4286] ? lockdep_lock+0xf1/0x1f0 [ 898.989840][ T4286] ? _find_first_zero_bit+0xd2/0x100 [ 898.995178][ T4286] __lock_acquire+0x3a03/0x7ea0 [ 899.000051][ T4286] ? __lock_acquire+0x7ea0/0x7ea0 [ 899.005285][ T4286] ? verify_lock_unused+0x140/0x140 [ 899.010524][ T4286] lock_acquire+0x1bc/0x4a0 [ 899.015056][ T4286] ? rfcomm_security_cfm+0x95/0x780 [ 899.020285][ T4286] ? trace_contention_end+0x5f/0x170 [ 899.025596][ T4286] ? __mutex_lock+0x1ab/0xae0 [ 899.030299][ T4286] ? __might_sleep+0xd0/0xd0 [ 899.034993][ T4286] ? read_lock_is_recursive+0x10/0x10 [ 899.040391][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 899.046054][ T4286] ? mutex_unlock+0x10/0x10 [ 899.050588][ T4286] __mutex_lock+0x12d/0xae0 [ 899.055123][ T4286] ? rfcomm_security_cfm+0x95/0x780 [ 899.060355][ T4286] ? rfcomm_security_cfm+0x95/0x780 [ 899.065578][ T4286] ? mutex_lock_nested+0x10/0x10 [ 899.070542][ T4286] ? trace_contention_end+0x5f/0x170 [ 899.075851][ T4286] ? __mutex_lock+0x1ab/0xae0 [ 899.080555][ T4286] ? l2cap_disconn_cfm+0xc0/0xc0 [ 899.085517][ T4286] rfcomm_security_cfm+0x95/0x780 [ 899.090561][ T4286] ? mutex_lock_nested+0x10/0x10 [ 899.095524][ T4286] ? bt_err+0x11e/0x180 [ 899.099702][ T4286] ? rfcomm_send_msc+0x350/0x350 [ 899.104669][ T4286] ? bt_warn+0x180/0x180 [ 899.108933][ T4286] ? rfcomm_send_msc+0x350/0x350 [ 899.113894][ T4286] hci_encrypt_cfm+0x363/0x4d0 [ 899.118691][ T4286] hci_cc_read_enc_key_size+0x218/0x380 [ 899.124276][ T4286] hci_cmd_complete_evt+0x4e3/0xa40 [ 899.129504][ T4286] ? hci_remote_features_evt+0xa10/0xa10 [ 899.135169][ T4286] hci_event_packet+0x7b3/0x1290 [ 899.140131][ T4286] ? lock_chain_count+0x20/0x20 [ 899.145103][ T4286] ? bis_list+0x280/0x280 [ 899.149462][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 899.155370][ T4286] ? kcov_remote_start+0x50f/0x810 [ 899.160512][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 899.165788][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 899.170993][ T4286] hci_rx_work+0x3eb/0xd40 [ 899.175407][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 899.180257][ T4286] ? process_one_work+0x7b4/0x1160 [ 899.185364][ T4286] process_one_work+0x8ab/0x1160 [ 899.190327][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 899.195976][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 899.201020][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 899.206570][ T4286] ? wq_worker_running+0x97/0x190 [ 899.211585][ T4286] worker_thread+0xaf5/0x12a0 [ 899.216263][ T4286] kthread+0x29d/0x330 [ 899.220320][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 899.225331][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 899.229908][ T4286] ret_from_fork+0x1f/0x30 [ 899.234321][ T4286] [ 899.277315][T14369] device veth1_macvtap entered promiscuous mode [ 899.295599][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 899.318760][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 899.331361][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 899.347928][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.358660][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.369091][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.379568][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.389410][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.399909][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.409774][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.420404][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.431544][T14369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.442704][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.464592][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.495061][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.509864][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.539408][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.576821][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.593701][T14369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.604392][T14369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.627528][T14369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.650419][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 899.674612][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 899.698857][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 899.714958][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 899.729463][T14369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.748024][T14369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.757976][T14369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.767037][T14369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.808376][T14369] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 899.853557][ T7586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.857422][T14369] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 899.861399][ T7586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.888481][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 899.915664][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.926684][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.942853][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready