last executing test programs: 15.029486107s ago: executing program 0 (id=113): ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2], [0x800]}) 9.228820329s ago: executing program 2 (id=129): r0 = socket$alg(0x26, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x15031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 9.075974063s ago: executing program 2 (id=130): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000000c0)=[{r3, 0x3023}], 0x1, 0x0, 0x0, 0x0) 6.74399785s ago: executing program 0 (id=138): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_BLKTRACESTOP(r0, 0x1275, 0x0) 6.743755537s ago: executing program 1 (id=139): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4) eventfd2(0xe5c, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001f80)=""/4096, 0x1000) 6.526336119s ago: executing program 3 (id=140): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000680)={{0x0, 0x0, 0x40, 0x2, 0x20004000000}, {&(0x7f0000000480)=[{0x7, 0x7}, {0x5}, {0x7ff, 0x8001}, {0x6, 0x100000000}, {0x87c, 0x9}], 0x5, 0x10, 0x8, 0x7}, {0x0, 0x0, 0x8, 0x8, 0x1}, {0x0, 0x0, 0x28, 0x0, 0x5}, {0x0, 0x0, 0x8, 0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0x0, 0x82, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.266038394s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 6.116000524s ago: executing program 0 (id=143): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4.859975205s ago: executing program 0 (id=144): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0x3, {0x1, 0x1, 0x406, 0x870}}) 4.818331195s ago: executing program 1 (id=145): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x300, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000340)=[{r2, 0x2000}, {r2, 0x87ac}], 0x2, 0x0, 0x0, 0x0) close_range(r0, r2, 0x0) 4.676023829s ago: executing program 4 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@ng={0x4, 0x4}, 0x2, 0x0) 4.55021525s ago: executing program 4 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x75e, 0x5020860e, 0x0, 0xc, 0x0, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x200000000101, 0xb, 0x0, {0x1, 0xffffffffffffffff, 0xbdd7, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc1c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 4.511982403s ago: executing program 3 (id=148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800a000100aaaaaaaaaa3d0000140014006c6f000000000000000000000000000008000400e1ff0000"], 0x5c}}, 0x0) 4.251734106s ago: executing program 3 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) socket$inet(0x2, 0x1, 0x8f10) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x15}, 0xa) 4.250522967s ago: executing program 2 (id=150): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@broadcast, @in6=@remote, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0xa0, 0xa0, 0xff}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0xb, 0xffffffffffffffff, 0x10, 0x20000000007}, {0x0, 0x400, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd2a, 0x0, 0xa, 0x203c9f533866402, 0x4, 0x28}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.244126756s ago: executing program 0 (id=151): landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x6) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) landlock_restrict_self(r0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) 4.12396524s ago: executing program 1 (id=152): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4) eventfd2(0xe5c, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001f80)=""/4096, 0x1000) 4.094495917s ago: executing program 4 (id=153): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x8, 0x4, 0x2, 0x0, 0x6}) 3.968861267s ago: executing program 2 (id=154): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000fc0)=@multiplanar_overlay={0x1, 0x3, 0x4, 0x100, 0x391, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0x1, 0x40, 0x2, "9d5d25db"}, 0x2d0, 0x3, {0x0}, 0x2}) 2.970262467s ago: executing program 1 (id=155): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket(0x840000000002, 0x3, 0x100) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 2.970106182s ago: executing program 4 (id=156): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000001800)={0x4000000, 0x0, 0x0, 0x1, 0x80000000}) 2.819957489s ago: executing program 3 (id=157): syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) unshare(0x24060400) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20040810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.630830771s ago: executing program 1 (id=158): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b300"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.627964884s ago: executing program 2 (id=159): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x22601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 2.548409814s ago: executing program 4 (id=160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800a000100aaaaaaaaaa3d0000140014006c6f000000000000000000000000000008000400e1ff0000"], 0x5c}}, 0x0) 2.54814788s ago: executing program 0 (id=161): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000000c0)=[{r3, 0x3023}], 0x1, 0x0, 0x0, 0x0) 2.37421255s ago: executing program 4 (id=162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.229363778s ago: executing program 3 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x120b41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2) 1.393728464s ago: executing program 2 (id=164): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x4b, 0x0, 0x6}, 0x14) 0s ago: executing program 3 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5c, 0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo\x00') fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 89.559636][ T5605] cgroup: Unknown subsys name 'net' [ 89.810324][ T5605] cgroup: Unknown subsys name 'cpuset' [ 89.875578][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.876535][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.027110][ T821] cfg80211: failed to load regulatory.db [ 94.685659][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.702698][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.703602][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.714984][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.722726][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.747781][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.770719][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.773647][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.791626][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.803863][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.820336][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.881584][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.897694][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.925823][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.954070][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.960439][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.962821][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.970984][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.979890][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.987746][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.993643][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.014470][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.017066][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.042176][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.072264][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.967151][ T5633] Bluetooth: hci1: command tx timeout [ 97.125466][ T5633] Bluetooth: hci0: command tx timeout [ 97.125491][ T5623] Bluetooth: hci3: command tx timeout [ 97.125961][ T4934] Bluetooth: hci2: command tx timeout [ 97.204830][ T5633] Bluetooth: hci4: command tx timeout [ 98.019754][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.020004][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.020217][ T5618] bridge_slave_0: entered allmulticast mode [ 98.023441][ T5618] bridge_slave_0: entered promiscuous mode [ 98.071533][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.071792][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.071996][ T5622] bridge_slave_0: entered allmulticast mode [ 98.074580][ T5622] bridge_slave_0: entered promiscuous mode [ 98.100491][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.103505][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.112920][ T5620] bridge_slave_0: entered allmulticast mode [ 98.122216][ T5620] bridge_slave_0: entered promiscuous mode [ 98.156972][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.157290][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.157529][ T5618] bridge_slave_1: entered allmulticast mode [ 98.160124][ T5618] bridge_slave_1: entered promiscuous mode [ 98.201338][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.201580][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.201803][ T5622] bridge_slave_1: entered allmulticast mode [ 98.204320][ T5622] bridge_slave_1: entered promiscuous mode [ 98.217620][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.219257][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.220121][ T5620] bridge_slave_1: entered allmulticast mode [ 98.238390][ T5620] bridge_slave_1: entered promiscuous mode [ 98.242750][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.244422][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.273476][ T5621] bridge_slave_0: entered allmulticast mode [ 98.285291][ T5621] bridge_slave_0: entered promiscuous mode [ 98.311561][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.311828][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.312044][ T5619] bridge_slave_0: entered allmulticast mode [ 98.318150][ T5619] bridge_slave_0: entered promiscuous mode [ 98.380065][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.380319][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.380527][ T5621] bridge_slave_1: entered allmulticast mode [ 98.383098][ T5621] bridge_slave_1: entered promiscuous mode [ 98.428046][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.428375][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.428676][ T5619] bridge_slave_1: entered allmulticast mode [ 98.431445][ T5619] bridge_slave_1: entered promiscuous mode [ 98.522070][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.555822][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.564593][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.612489][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.641320][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.649307][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.665214][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.699705][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.758297][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.791802][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.853438][ T5618] team0: Port device team_slave_0 added [ 98.880263][ T5622] team0: Port device team_slave_0 added [ 98.890918][ T5620] team0: Port device team_slave_0 added [ 98.919347][ T5618] team0: Port device team_slave_1 added [ 98.945253][ T5622] team0: Port device team_slave_1 added [ 98.948675][ T5620] team0: Port device team_slave_1 added [ 98.952160][ T5621] team0: Port device team_slave_0 added [ 98.988879][ T5619] team0: Port device team_slave_0 added [ 99.030438][ T5621] team0: Port device team_slave_1 added [ 99.054844][ T5633] Bluetooth: hci1: command tx timeout [ 99.057337][ T5619] team0: Port device team_slave_1 added [ 99.123264][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.123279][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.123299][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.182242][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.182257][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.182277][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.186741][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.186758][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.186804][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.205625][ T4934] Bluetooth: hci0: command tx timeout [ 99.205751][ T4934] Bluetooth: hci2: command tx timeout [ 99.206140][ T5633] Bluetooth: hci3: command tx timeout [ 99.278242][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.278290][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.278370][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.285508][ T5633] Bluetooth: hci4: command tx timeout [ 99.352163][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.352178][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.352201][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.354426][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.354440][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.354462][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.796188][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.796203][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.796223][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.798599][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.798611][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.798631][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.903652][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.903667][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.903690][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.918340][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.918452][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.918535][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.141389][ T5618] hsr_slave_0: entered promiscuous mode [ 100.143353][ T5618] hsr_slave_1: entered promiscuous mode [ 100.182848][ T5622] hsr_slave_0: entered promiscuous mode [ 100.184610][ T5622] hsr_slave_1: entered promiscuous mode [ 100.190698][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 100.190959][ T5622] Cannot create hsr debugfs directory [ 100.234862][ T5620] hsr_slave_0: entered promiscuous mode [ 100.236703][ T5620] hsr_slave_1: entered promiscuous mode [ 100.238135][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 100.238163][ T5620] Cannot create hsr debugfs directory [ 100.311149][ T5621] hsr_slave_0: entered promiscuous mode [ 100.312888][ T5621] hsr_slave_1: entered promiscuous mode [ 100.314291][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 100.314321][ T5621] Cannot create hsr debugfs directory [ 100.352806][ T5619] hsr_slave_0: entered promiscuous mode [ 100.354540][ T5619] hsr_slave_1: entered promiscuous mode [ 100.358088][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 100.358115][ T5619] Cannot create hsr debugfs directory [ 101.126158][ T5633] Bluetooth: hci1: command tx timeout [ 101.284875][ T5623] Bluetooth: hci2: command tx timeout [ 101.284908][ T5623] Bluetooth: hci0: command tx timeout [ 101.285047][ T5633] Bluetooth: hci3: command tx timeout [ 101.364915][ T5633] Bluetooth: hci4: command tx timeout [ 101.598677][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.658500][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.664373][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.710819][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.714132][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.763973][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.791936][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.823229][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.009514][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.043351][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.054974][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.103114][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.112694][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.151496][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.186365][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.233850][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.416528][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.460270][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.485362][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.519263][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.523289][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.577791][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.618279][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.653887][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.873445][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.911263][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.932025][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.974542][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.997753][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.038276][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.079865][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.112797][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.215971][ T5633] Bluetooth: hci1: command tx timeout [ 103.307081][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.329736][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.360755][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.375109][ T4934] Bluetooth: hci0: command tx timeout [ 103.375142][ T4934] Bluetooth: hci2: command tx timeout [ 103.375200][ T5633] Bluetooth: hci3: command tx timeout [ 103.376114][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.446277][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.454872][ T5633] Bluetooth: hci4: command tx timeout [ 103.463285][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.499882][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.524511][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.569035][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.661175][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.677186][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.747185][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.747407][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.833890][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.834119][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.894953][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.942258][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.968162][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.968345][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.062033][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.062207][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.150999][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.208122][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.208307][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.278653][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.298250][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.298400][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.506201][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.599928][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.635467][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.636103][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.720889][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.721064][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.868277][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.041815][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.042576][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.143893][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.144065][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.583099][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.999109][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.207628][ T5618] veth0_vlan: entered promiscuous mode [ 106.368121][ T5618] veth1_vlan: entered promiscuous mode [ 106.446311][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.603924][ T5620] veth0_vlan: entered promiscuous mode [ 106.632445][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.727717][ T5620] veth1_vlan: entered promiscuous mode [ 106.802047][ T5618] veth0_macvtap: entered promiscuous mode [ 106.885857][ T5618] veth1_macvtap: entered promiscuous mode [ 107.042879][ T5622] veth0_vlan: entered promiscuous mode [ 107.071967][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.107641][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.152853][ T5620] veth0_macvtap: entered promiscuous mode [ 107.192313][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.192526][ T5621] veth0_vlan: entered promiscuous mode [ 107.211231][ T5622] veth1_vlan: entered promiscuous mode [ 107.263749][ T5620] veth1_macvtap: entered promiscuous mode [ 107.310677][ T1472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.339563][ T1472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.390478][ T1472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.391529][ T5621] veth1_vlan: entered promiscuous mode [ 107.425072][ T1472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.556717][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.739295][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.940932][ T1508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.941996][ T5622] veth0_macvtap: entered promiscuous mode [ 107.991931][ T1508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.022602][ T1508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.069659][ T1508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.099684][ T5622] veth1_macvtap: entered promiscuous mode [ 108.186592][ T5621] veth0_macvtap: entered promiscuous mode [ 108.326932][ T5621] veth1_macvtap: entered promiscuous mode [ 108.390624][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.390652][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.558997][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.642994][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.683247][ T5619] veth0_vlan: entered promiscuous mode [ 108.707498][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.769348][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.769371][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.803482][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.820842][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.874496][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.890532][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.908211][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.930777][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.930798][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.968959][ T5619] veth1_vlan: entered promiscuous mode [ 109.003934][ T1394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.068153][ T1394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.091599][ T1394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.123015][ T1394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.412495][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.412516][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.282786][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.282809][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.341029][ T5619] veth0_macvtap: entered promiscuous mode [ 110.605483][ T5619] veth1_macvtap: entered promiscuous mode [ 110.628639][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.628661][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.716247][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.772243][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.830687][ T1466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.843627][ T1466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.178707][ T1466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.779728][ T1491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.429373][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.429395][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.689255][ T5830] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.970126][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.970145][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.499706][ T5833] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 114.499823][ T5833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'. [ 114.504028][ T5833] team0: entered promiscuous mode [ 114.504053][ T5833] team_slave_0: entered promiscuous mode [ 114.504310][ T5833] team_slave_1: entered promiscuous mode [ 114.504501][ T5833] team0: entered allmulticast mode [ 114.504513][ T5833] team_slave_0: entered allmulticast mode [ 114.504533][ T5833] team_slave_1: entered allmulticast mode [ 114.505690][ T5833] bridge0: port 3(team0) entered blocking state [ 114.505998][ T5833] bridge0: port 3(team0) entered disabled state [ 114.511650][ T5833] bridge0: port 3(team0) entered blocking state [ 114.511830][ T5833] bridge0: port 3(team0) entered forwarding state [ 115.368388][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.368411][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.826215][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.826238][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.043427][ T32] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 117.053482][ T32] usb 2-1: config 0 has no interfaces? [ 117.070937][ T32] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 117.070966][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.070986][ T32] usb 2-1: Product: syz [ 117.071000][ T32] usb 2-1: Manufacturer: syz [ 117.071014][ T32] usb 2-1: SerialNumber: syz [ 118.843967][ T32] usb 2-1: config 0 descriptor?? [ 119.443576][ T32] usb 2-1: can't set config #0, error -71 [ 119.731320][ T32] usb 2-1: USB disconnect, device number 2 [ 121.619249][ T5864] mmap: syz.1.17 (5864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.056818][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.085045][ T5625] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.235122][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 123.235277][ T5625] usb 2-1: Using ep0 maxpacket: 32 [ 123.268348][ T5625] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 123.268372][ T5625] usb 2-1: config 0 has no interface number 0 [ 123.268408][ T5625] usb 2-1: config 0 interface 12 has no altsetting 0 [ 123.454713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.464706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.474703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.484704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.494700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.504707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.514711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.524704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.534703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.544705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.614215][ T5625] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 125.614248][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.614269][ T5625] usb 2-1: Product: syz [ 125.614285][ T5625] usb 2-1: Manufacturer: syz [ 125.614299][ T5625] usb 2-1: SerialNumber: syz [ 125.706403][ T5625] usb 2-1: config 0 descriptor?? [ 126.238786][ T822] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 126.238844][ T822] usb 4-1: can't read configurations, error -71 [ 126.322271][ T5625] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 126.322328][ T5625] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 126.322345][ T5625] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 126.322452][ T5625] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 126.410745][ T5895] binder: 5894:5895 ioctl 4018620d 0 returned -22 [ 126.563026][ T5625] usb 2-1: USB disconnect, device number 3 [ 128.884974][ T5607] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.048132][ T5607] usb 2-1: Using ep0 maxpacket: 8 [ 129.067226][ T5607] usb 2-1: config 5 has an invalid interface number: 234 but max is 0 [ 129.067253][ T5607] usb 2-1: config 5 has no interface number 0 [ 129.067284][ T5607] usb 2-1: config 5 interface 234 has no altsetting 0 [ 129.109361][ T5607] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 129.109384][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.109399][ T5607] usb 2-1: Product: syz [ 129.109410][ T5607] usb 2-1: Manufacturer: syz [ 129.109420][ T5607] usb 2-1: SerialNumber: syz [ 129.252692][ T5927] netlink: 104 bytes leftover after parsing attributes in process `syz.2.38'. [ 129.714998][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.783885][ T5929] tmpfs: Bad value for 'mpol' [ 129.926281][ T5913] capability: warning: `syz.1.33' uses 32-bit capabilities (legacy support in use) [ 130.098660][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 130.140626][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.140691][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.140783][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.140807][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.140832][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.232594][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 130.232726][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 130.232750][ T9] usb 4-1: Manufacturer: syz [ 130.370998][ T9] usb 4-1: config 0 descriptor?? [ 130.515619][ T5607] ipw 2-1:5.234: IPWireless converter converter detected [ 130.708514][ T9] rc_core: IR keymap rc-hauppauge not found [ 130.708537][ T9] Registered IR keymap rc-empty [ 130.709121][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 130.714899][ T5607] usb 2-1: USB disconnect, device number 4 [ 130.741664][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 130.873501][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 131.066919][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 131.074467][ T5607] ipw 2-1:5.234: device disconnected [ 131.489558][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.512807][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.525052][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.545441][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.565661][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.586712][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.607042][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.629131][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.649648][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 131.667833][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 132.136239][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.136268][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 133.509564][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.522408][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.015597][ T9] usb 4-1: USB disconnect, device number 4 [ 134.417202][ T5849] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 134.591200][ T5972] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 134.591346][ T5972] CIFS: VFS: Malformed UNC in devname [ 134.615331][ T5849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.637346][ T5849] usb 2-1: not running at top speed; connect to a high speed hub [ 134.663867][ T5849] usb 2-1: config 3 has an invalid interface number: 132 but max is 0 [ 134.663889][ T5849] usb 2-1: config 3 has no interface number 0 [ 134.663911][ T5849] usb 2-1: config 3 interface 132 has no altsetting 0 [ 134.710275][ T5849] usb 2-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice= 8.63 [ 134.710309][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.710329][ T5849] usb 2-1: Product: syz [ 134.710350][ T5849] usb 2-1: Manufacturer: syz [ 134.710362][ T5849] usb 2-1: SerialNumber: syz [ 135.759544][ T5962] IPVS: starting estimator thread 0... [ 136.601324][ T5976] IPVS: using max 8 ests per chain, 19200 per kthread [ 137.240948][ T5849] em28xx 2-1:3.132: audio device (2013:8461): interface 132, class 1 [ 137.342075][ T5849] usb 2-1: USB disconnect, device number 5 [ 137.557717][ T5994] netlink: 448 bytes leftover after parsing attributes in process `syz.1.58'. [ 138.178175][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.60'. [ 138.836170][ T5849] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.996365][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 139.017504][ T5849] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 139.017533][ T5849] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 139.017552][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.017572][ T5849] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.017593][ T5849] usb 4-1: config 0 has no interface number 0 [ 139.017635][ T5849] usb 4-1: config 0 interface 125 has no altsetting 0 [ 139.085792][ T5849] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 139.085826][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.085847][ T5849] usb 4-1: Product: syz [ 139.085862][ T5849] usb 4-1: Manufacturer: syz [ 139.085877][ T5849] usb 4-1: SerialNumber: syz [ 139.296178][ T5849] usb 4-1: config 0 descriptor?? [ 140.026010][ T5849] usb 4-1: USB disconnect, device number 5 [ 140.520260][ T6033] netlink: 448 bytes leftover after parsing attributes in process `syz.2.72'. [ 140.557705][ T38] audit: type=1800 audit(1779677531.767:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file0" dev="tmpfs" ino=79 res=0 errno=0 [ 140.663348][ T38] audit: type=1804 audit(1779677531.847:3): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.67" name="/newroot/12/file0" dev="tmpfs" ino=79 res=1 errno=0 [ 140.918007][ T5627] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.169253][ T5627] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 141.169284][ T5627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 141.211180][ T5627] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 141.211215][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.211237][ T5627] usb 5-1: Product: syz [ 141.211252][ T5627] usb 5-1: Manufacturer: syz [ 141.211266][ T5627] usb 5-1: SerialNumber: syz [ 141.282444][ T6046] geneve2: entered promiscuous mode [ 141.326715][ T5627] usb 5-1: config 0 descriptor?? [ 141.343536][ T5627] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 142.266724][ T5627] gspca_sunplus: reg_r err -110 [ 142.299635][ T5627] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 142.655067][ T5849] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.824812][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 143.078952][ T5849] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 143.078979][ T5849] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.100233][ T5849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.100257][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.100272][ T5849] usb 4-1: SerialNumber: syz [ 144.002072][ T6055] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 144.059828][ T5849] usb 4-1: No union descriptors [ 144.332303][ T5849] usb 4-1: USB disconnect, device number 6 [ 144.457889][ T32] usb 5-1: USB disconnect, device number 2 [ 146.385024][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 146.534750][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 146.557009][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 146.557043][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.557065][ T9] usb 3-1: Product: syz [ 146.557080][ T9] usb 3-1: Manufacturer: syz [ 146.557095][ T9] usb 3-1: SerialNumber: syz [ 146.829287][ T9] usb 3-1: config 0 descriptor?? [ 147.729227][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 149.099769][ T9] gspca_ov534_9: reg_w failed -71 [ 149.494790][ T9] gspca_ov534_9: Unknown sensor 0000 [ 149.494893][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 149.530325][ T9] usb 3-1: USB disconnect, device number 2 [ 154.428512][ T6146] process 'syz.0.109' launched '/dev/fd/7' with NULL argv: empty string added [ 155.746998][ T6151] fuse: Bad value for 'fd' [ 156.235407][ T5627] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 156.388162][ T5627] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.409168][ T5627] usb 2-1: not running at top speed; connect to a high speed hub [ 156.412623][ T5627] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.412652][ T5627] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.458238][ T5627] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 156.458271][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.458302][ T5627] usb 2-1: Product: syz [ 156.458317][ T5627] usb 2-1: Manufacturer: syz [ 156.458333][ T5627] usb 2-1: SerialNumber: syz [ 158.736228][ T5627] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 158.772496][ T5627] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 158.791459][ T5627] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 159.039543][ T5627] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 159.187569][ T5627] usb 2-1: USB disconnect, device number 6 [ 159.775440][ T6179] fuse: Bad value for 'fd' [ 159.822331][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 159.908319][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.134515][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 161.561552][ T38] audit: type=1326 audit(1779677552.807:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ebfecce59 code=0x0 [ 162.784904][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.955305][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 162.960649][ T822] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.962470][ T822] usb 2-1: config 1 has an invalid interface number: 237 but max is 0 [ 162.962489][ T822] usb 2-1: config 1 has no interface number 0 [ 162.962523][ T822] usb 2-1: config 1 interface 237 has no altsetting 0 [ 162.987008][ T822] usb 2-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 162.987093][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.987153][ T822] usb 2-1: Product: syz [ 162.987199][ T822] usb 2-1: Manufacturer: syz [ 162.987241][ T822] usb 2-1: SerialNumber: syz [ 163.528416][ T822] ipaq 2-1:1.237: PocketPC PDA converter detected [ 163.598418][ T822] ipaq 2-1:1.237: probe with driver ipaq failed with error -71 [ 163.756854][ T822] usb 2-1: USB disconnect, device number 7 [ 163.847987][ T6216] fuse: Bad value for 'fd' [ 164.164287][ T6222] capability: warning: `syz.3.137' uses deprecated v2 capabilities in a way that may be insecure [ 165.917395][ T6239] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.143'. [ 165.917643][ T6239] openvswitch: netlink: Message has 512 unknown bytes. [ 169.483911][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 169.511426][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.628612][ T6290] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 169.704789][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 169.707085][ T32] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 169.707111][ T32] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 169.707149][ T32] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.707174][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.842968][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 170.996592][ T6296] ================================================================== [ 170.996615][ T6296] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 170.996654][ T6296] Read of size 8 at addr ffff88803f115d20 by task syz.0.161/6296 [ 170.996674][ T6296] [ 170.996700][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.996725][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.996748][ T6296] Call Trace: [ 170.996757][ T6296] [ 170.996771][ T6296] dump_stack_lvl+0xe8/0x150 [ 170.996810][ T6296] print_address_description+0x55/0x1e0 [ 170.996839][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 170.996868][ T6296] print_report+0x58/0x70 [ 170.996894][ T6296] kasan_report+0x117/0x150 [ 170.996921][ T6296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.996947][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 170.996981][ T6296] ? ep_insert+0xbbb/0x1820 [ 170.997007][ T6296] reverse_path_check_proc+0x5b/0x240 [ 170.997040][ T6296] ? ep_insert+0xbbb/0x1820 [ 170.997065][ T6296] ep_insert+0xc6c/0x1820 [ 170.997099][ T6296] ? __pfx_ep_insert+0x10/0x10 [ 170.997131][ T6296] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.997152][ T6296] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.997173][ T6296] ? mutex_lock_nested+0x152/0x1d0 [ 170.997201][ T6296] ? do_epoll_ctl_file+0xc69/0xed0 [ 170.997228][ T6296] do_epoll_ctl_file+0x8bb/0xed0 [ 170.997256][ T6296] ? do_epoll_ctl_file+0xac3/0xed0 [ 170.997287][ T6296] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 170.997315][ T6296] ? __fget_files+0x3a6/0x420 [ 170.997337][ T6296] ? __fget_files+0x2a/0x420 [ 170.997364][ T6296] __se_sys_epoll_ctl+0x14e/0x210 [ 170.997393][ T6296] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 170.997425][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997449][ T6296] do_syscall_64+0x15f/0x560 [ 170.997470][ T6296] ? trace_irq_disable+0x3b/0x140 [ 170.997495][ T6296] ? clear_bhb_loop+0x40/0x90 [ 170.997520][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997542][ T6296] RIP: 0033:0x7efc4b14ce59 [ 170.997569][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.997587][ T6296] RSP: 002b:00007efc48f41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 170.997617][ T6296] RAX: ffffffffffffffda RBX: 00007efc4b3c6270 RCX: 00007efc4b14ce59 [ 170.997634][ T6296] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 170.997647][ T6296] RBP: 00007efc4b1e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 170.997661][ T6296] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.997675][ T6296] R13: 00007efc4b3c6308 R14: 00007efc4b3c6270 R15: 00007ffefe2f4408 [ 170.997701][ T6296] [ 170.997709][ T6296] [ 170.997714][ T6296] Allocated by task 6288: [ 170.997724][ T6296] kasan_save_track+0x3e/0x80 [ 170.997747][ T6296] __kasan_slab_alloc+0x6c/0x80 [ 170.997770][ T6296] kmem_cache_alloc_noprof+0x33b/0x680 [ 170.997800][ T6296] ep_insert+0x512/0x1820 [ 170.997822][ T6296] do_epoll_ctl_file+0x8bb/0xed0 [ 170.997845][ T6296] __se_sys_epoll_ctl+0x14e/0x210 [ 170.997870][ T6296] do_syscall_64+0x15f/0x560 [ 170.997889][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997909][ T6296] [ 170.997914][ T6296] Freed by task 6283: [ 170.997923][ T6296] kasan_save_track+0x3e/0x80 [ 170.997944][ T6296] kasan_save_free_info+0x46/0x50 [ 170.997974][ T6296] __kasan_slab_free+0x5c/0x80 [ 170.997995][ T6296] kmem_cache_free+0x187/0x6c0 [ 170.998019][ T6296] eventpoll_release_file+0xc2/0x240 [ 170.998042][ T6296] __fput+0x83c/0xa70 [ 170.998060][ T6296] task_work_run+0x1d9/0x270 [ 170.998086][ T6296] get_signal+0x11eb/0x1330 [ 170.998116][ T6296] arch_do_signal_or_restart+0xbc/0x840 [ 170.998138][ T6296] exit_to_user_mode_loop+0x8c/0x4d0 [ 170.998162][ T6296] do_syscall_64+0x33e/0x560 [ 170.998181][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.998200][ T6296] [ 170.998205][ T6296] The buggy address belongs to the object at ffff88803f115d20 [ 170.998205][ T6296] which belongs to the cache ep_head of size 16 [ 170.998223][ T6296] The buggy address is located 0 bytes inside of [ 170.998223][ T6296] freed 16-byte region [ffff88803f115d20, ffff88803f115d30) [ 170.998244][ T6296] [ 170.998249][ T6296] The buggy address belongs to the physical page: [ 170.998267][ T6296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f1158e0 pfn:0x3f115 [ 170.998294][ T6296] memcg:ffff888061ff0801 [ 170.998304][ T6296] flags: 0x80000000000200(workingset|node=0|zone=1) [ 170.998328][ T6296] page_type: f5(slab) [ 170.998348][ T6296] raw: 0080000000000200 ffff8880206afdc0 ffffea0000df4510 ffff88801fe8e088 [ 170.998369][ T6296] raw: ffff88803f1158e0 0000000800800035 00000000f5000000 ffff888061ff0801 [ 170.998380][ T6296] page dumped because: kasan: bad access detected [ 170.998395][ T6296] page_owner tracks the page as allocated [ 170.998403][ T6296] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4991, tgid 4991 (udevd), ts 48365690292, free_ts 48345267454 [ 170.998440][ T6296] post_alloc_hook+0x1f9/0x250 [ 170.998462][ T6296] get_page_from_freelist+0x265c/0x26e0 [ 170.998489][ T6296] __alloc_frozen_pages_noprof+0x18d/0x380 [ 170.998516][ T6296] allocate_slab+0x74/0x5e0 [ 170.998545][ T6296] refill_objects+0x33c/0x3d0 [ 170.998572][ T6296] __pcs_replace_empty_main+0x373/0x720 [ 170.998604][ T6296] kmem_cache_alloc_noprof+0x433/0x680 [ 170.998625][ T6296] ep_insert+0x512/0x1820 [ 170.998646][ T6296] do_epoll_ctl_file+0x8bb/0xed0 [ 170.998669][ T6296] __se_sys_epoll_ctl+0x14e/0x210 [ 170.998693][ T6296] do_syscall_64+0x15f/0x560 [ 170.998712][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.998732][ T6296] page last free pid 29 tgid 29 stack trace: [ 170.998745][ T6296] __free_frozen_pages+0x10af/0x1190 [ 170.998767][ T6296] tlb_remove_table_rcu+0x85/0x100 [ 170.998804][ T6296] rcu_cpu_kthread+0x99e/0x1470 [ 170.998831][ T6296] smpboot_thread_fn+0x541/0xa50 [ 170.998851][ T6296] kthread+0x388/0x470 [ 170.998873][ T6296] ret_from_fork+0x514/0xb70 [ 170.998899][ T6296] ret_from_fork_asm+0x1a/0x30 [ 170.998927][ T6296] [ 170.998932][ T6296] Memory state around the buggy address: [ 170.998944][ T6296] ffff88803f115c00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 170.998958][ T6296] ffff88803f115c80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 170.998973][ T6296] >ffff88803f115d00: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 170.998984][ T6296] ^ [ 170.998995][ T6296] ffff88803f115d80: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 170.999009][ T6296] ffff88803f115e00: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 170.999020][ T6296] ================================================================== [ 171.111705][ T6296] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 171.111796][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.111885][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.111939][ T6296] Call Trace: [ 171.111968][ T6296] [ 171.112000][ T6296] vpanic+0x56c/0xa60 [ 171.112099][ T6296] ? __pfx_vpanic+0x10/0x10 [ 171.112169][ T6296] panic+0xc5/0xd0 [ 171.112233][ T6296] ? __pfx_panic+0x10/0x10 [ 171.112328][ T6296] ? preempt_schedule_thunk+0x16/0x40 [ 171.112388][ T6296] ? preempt_schedule_thunk+0x16/0x40 [ 171.112454][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 171.112533][ T6296] check_panic_on_warn+0x89/0xb0 [ 171.112609][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 171.112692][ T6296] end_report+0x73/0x170 [ 171.112758][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 171.112828][ T6296] kasan_report+0x128/0x150 [ 171.112894][ T6296] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.112958][ T6296] ? reverse_path_check_proc+0x5b/0x240 [ 171.113043][ T6296] ? ep_insert+0xbbb/0x1820 [ 171.113107][ T6296] reverse_path_check_proc+0x5b/0x240 [ 171.113199][ T6296] ? ep_insert+0xbbb/0x1820 [ 171.113285][ T6296] ep_insert+0xc6c/0x1820 [ 171.113386][ T6296] ? __pfx_ep_insert+0x10/0x10 [ 171.113470][ T6296] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.113526][ T6296] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.113580][ T6296] ? mutex_lock_nested+0x152/0x1d0 [ 171.113649][ T6296] ? do_epoll_ctl_file+0xc69/0xed0 [ 171.113711][ T6296] do_epoll_ctl_file+0x8bb/0xed0 [ 171.113778][ T6296] ? do_epoll_ctl_file+0xac3/0xed0 [ 171.113853][ T6296] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 171.113919][ T6296] ? __fget_files+0x3a6/0x420 [ 171.113982][ T6296] ? __fget_files+0x2a/0x420 [ 171.114055][ T6296] __se_sys_epoll_ctl+0x14e/0x210 [ 171.114130][ T6296] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 171.114213][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.114285][ T6296] do_syscall_64+0x15f/0x560 [ 171.114351][ T6296] ? trace_irq_disable+0x3b/0x140 [ 171.114375][ T6296] ? clear_bhb_loop+0x40/0x90 [ 171.114399][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.114420][ T6296] RIP: 0033:0x7efc4b14ce59 [ 171.114439][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.114457][ T6296] RSP: 002b:00007efc48f41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 171.114480][ T6296] RAX: ffffffffffffffda RBX: 00007efc4b3c6270 RCX: 00007efc4b14ce59 [ 171.114497][ T6296] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 171.114510][ T6296] RBP: 00007efc4b1e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 171.114524][ T6296] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.114538][ T6296] R13: 00007efc4b3c6308 R14: 00007efc4b3c6270 R15: 00007ffefe2f4408 [ 171.114563][ T6296] [ 171.115178][ T6296] Kernel Offset: disabled