last executing test programs: 4m54.141841407s ago: executing program 4 (id=1249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x1fbc, &(0x7f0000000500)={0x0, 0x40d2a, 0x10, 0x5, 0xea}) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, 0x0, 0x0) 4m54.069916869s ago: executing program 4 (id=1250): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x20, 0x1, 0x2000000, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff8, 0xfffffffff7ffffff, 0x8a, 0x9, 0x4, 0x9, "16b0bc450cfc47961ed5d8167d4f7865", 0x8, 0x53, 0x1, 0x49, 0x9, 0x9, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x29, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000012c0)=ANY=[], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000004000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a0afe582730000000000900030073797a310000000050000000060a010400000000000000000100000308000b400000000028000480240001800b0001007470726f7879000014000280080003400000001108000140000000000900010073797a300000000014000000110001000000000000000000"], 0xc4}}, 0x0) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000800)=0x5f5e0f7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x403, 0x0) unshare(0x20040600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x6, 0x0, 0xffffffff}, 0xc) recvmmsg(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/30, 0x1e}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/168, 0xa8}, {&(0x7f0000003c40)=""/105, 0x69}], 0x6}, 0x6}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x11c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "d6d3cb7f6624b779bab337944ee514178c0ec787e903d0b2535d078d724bc00bf81ec36670e215557d61468e9c9f264ae7ddd4f919172e041f3c160ec9f3f9ab3f3035e9b371be34cdfc99bcb9957ebcd7f8d303aace76484680ee8b0a48b0f2a9375da52e4f177c88854f53b2bc3955c16c2c0f4034d208c519eedee232629775f167f26ed715187e5db088bf67de1c959cf730fb7227f4e470832759e724e8f65a96eae1a7656a43a9ea08da88817d151281541f998fb800e58654482c396604b0504d29413479017cfa549e06827c1a5f4b4bf62e8ccb46da3051f7d9ae54"}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x160, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x180, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x158, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x38, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000880) 4m53.817616615s ago: executing program 4 (id=1253): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') socket$key(0xf, 0x3, 0x2) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) close(0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f62760009051cc200000000000705e37e1b82e60905f202"], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x64}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="0651daeca6a72014863e80594c73b69ace69b7f407495ca6e8f059c86dee4669bfa887bd222c02c9fe10bf8c551f3077158d357d23026e455b9affbad746a7f74c47a18e", 0x44}], 0x1}}], 0x1, 0x801) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r4, 0x0, 0x61000006, 0x0) userfaultfd(0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x3b, 0x0, &(0x7f0000000340)) preadv(r0, &(0x7f0000004580)=[{&(0x7f0000000080)=""/151, 0x97}, {0x0}, {0x0}], 0x3, 0x0, 0x8) 4m53.369529501s ago: executing program 4 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') preadv(r1, &(0x7f0000002180)=[{&(0x7f00000010c0)=""/62, 0x3e}], 0x1, 0x40, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r2 = semget(0x0, 0x1, 0x206) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000240)={{0x0, r3, 0x0, r3, 0x189, 0x80, 0xae38}, 0x23d, 0x4, 0x2, 0x0, 0x7ffd}) r4 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r5, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) futex_waitv(&(0x7f0000001b00)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1) 4m53.113801728s ago: executing program 4 (id=1261): socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1) 4m53.015630878s ago: executing program 4 (id=1262): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fspick(0xffffffffffffff9c, &(0x7f0000005fc0)='./file0\x00', 0x1) sendmsg$netlink(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000000540)={0x15c, 0x3c, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="9e3543df57302979a89844", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x128, 0x14f, 0x0, 0x1, [@generic="03b5f93293841e27690afe3ead346165d81ecf314f09651dd60f9b16875ead6de5647e47bec9ee71298270505f185273b4ea3f86f07ed6bfc0f811cf5178dfdd6189739acc961a4095a55772a0cdef622f46a53ecabcfdc6637f36af4daf176e4011fdb6f19f4a833dc7eaa06021f34d50ff901f2196a14771885c0883fcd0137e6e34c863db703c31e59cb440f9dcf38d325f54ae8224a7916abf48e1b8d552ee", @nested={0x4, 0x139}, @nested={0x4, 0x88}, @generic="6928fc47e05d571c6f1d27cacab28fad977c687b36bff129e37146b2a9f2eba2f74df2e604f71070c5893aa8af9da18345a2cdad48b714dc72d1eb4b3a60e140faf57ea3b8c053c691cf3d6594b429730f131006aa8994cb8620129c0648de03cafe18ee4d4783aae3faa1e9541a561c6122f8f200a88e5b9e2fe4"]}, @typed={0x4, 0x49}]}, 0x15c}, {&(0x7f00000006c0)={0x148, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="92822340cda9ac01439fe69348760ab21ea114678386f54829b3c393e2cab7bd71f06c6c7f33a078e9438f4b3b3bad54fa86b9fae0fea3cc905f114eda089aed307ff996648951542c02c33567fd91bf5096e37ffcf097de397e3806afd7a81d685ee5bc112c08a38c9a789be55c68954fdb793d2b7fb22128996f4c5fc2905902f770ed6b9c27fde3c128394e83fb2a20c61de807df016ad1f35baf3f17c14262c550a8a4a610a7a933f906799736426a87cfc1115ca83268a662b92a6cea", @typed={0x8, 0x131, 0x0, 0x0, @uid}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@loopback}, @generic="25bda31bfb3dc0db82f8ea9c1b8766e76650405c79c073b9b88b0ef21f68662061cf605ab1894cbffce3dd6992bf5755075a", @nested={0x28, 0x14c, 0x0, 0x1, [@generic="85b7e29e47bbdd9e021ad2488e7c31e87e3bd0ab7f554bcc02e608d2c895902b106d81cb"]}]}, 0x148}, {&(0x7f0000000840)={0xf8, 0x37, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}}, @generic="d281c016f26b788f14b5cbcfa10e44b501936130354c55fd4fd26938666bb7879d4be5edec88f180484639da2e45e6e0204640bad0a1edf00400506923a16201f4f935663d7ad7dff25acf462a711f94076e3ca93423607a109d9f9194249fa418464daaab641a09e54abc7290716312de96592b0021d5dd7ef7e18c0cfd4016ac13102a9a77ed11d9d528ffe18655bed4edf6ea667f0faf16e3049484eda851fe3385f4e150480702fd84a294bf7737ed498b04c5213b9b6f39bc89cd1daa64ad9e053796a97004431c8cf23753ef5bdefeb89e3ddc7c4d25", @typed={0x4, 0x33}]}, 0xf8}, {&(0x7f0000001f80)={0x1648, 0x18, 0x2, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0x22, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0xf1, 0xac, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @uid=0xee00}, @generic="83672bff804ce9b1d7634e3f060352e6d9447a8b7c9c35c68c36b1dc6e3760e6f09b007862a72f08bbcb228b785ca7465c21433c38d7ed14904ebf6b362f5589accfecfd41f9fb8a51b3c5d82e3efed210c87e1177fd5b24433faa9e7cd4228743aa56b73c8e526ccc9cd85885d42763dc989ddde2efee8b79684d1a633b1c61a27e7ee703bb09ba6c3c2b501e542e36ebdfdfb76a767c6450159401c8266b1ffcf9b061bddd00abefdefe4efd671fbf9eabdca7d67226d5a6ef41c1ad952b22e04e23a40c0ddb6377ef3004a1dcadc3f25d6019dcf13733dc6a0a1022", @nested={0x4, 0x63}, @nested={0x4, 0x15b}]}, @nested={0x2ab, 0xae, 0x0, 0x1, [@nested={0x4, 0x5d}, @generic="d26d967c4eec3eef0e93b57d4a72ba1f20c8282648c8e60fb2fb859429ff7eff6509329d842acc5f7fb0b64432493d4d70ccb5eda891f49b597015a5703d59cc18ec0b50231bdd7b2d1732361b28417031d30c18e80fa0bf01cd7f62e120fc874434a4d4e3119d5f229db08783b9c48b60a347952f084ac457a83b7d7383132a1e8194670ee7817bac63c9a3754b7a1d7e1ac2aa4a54500cc95dd698f78279a566c2a812f3c1e30c0ed38589bcbe8701aeb3ec44e8ce9ecf4ec2c0ac6bf6147ef8ed7546a1777b6ae8512128aea19bdaaedc", @nested={0x4, 0xf0}, @nested={0x4, 0x8a}, @generic="db7f903c16b8317c2adac59e2d4f50a4aa879caff5ee85dc0103652d6ef60cef6f0be8358e4fc58c5da302e32b4d82d2dede4f48fe5a9a6f8dbd2ef321cf40dcd911111b32c595ae3e98c004696dd6baea098439c1a5c6e0b36218951d59841d76a63584d4376dd633019f44a62d987f20cdffa4be70da0f6acfe9e53a8c4a1b98a7ac333821a3dc34c901395f9bff58b68c748fadeb1ba33c75646b0794e1136b871462ea89b7c4bc98935168a9a5c29fff9d2ee3564901a91c65198adbd5d4f31cc5b950053e7c347a048d62c61014dc288a23d90738c06c4cab366d2ba4af9af66f7dcc1351b063", @nested={0x4, 0x56}, @generic="8daedf45380f52cb0f6b7342e0d08179e3245887e65cea876f6f3b64b6989bea79717ad525c2cb802e8cf1b69b1b0723e4b35012021acad382d76592f1a23921956043452a740a12baba530e7deaf1c5dd13567eb8881a25cceb4ef65132986078ea6c3302b34c36a758e8c9daf1522c5507f90c6d580fa07808f26bb3bcc271f1aed75babe2f2dbec1f6ce79722d851df9ce0c021731b16a6123d6bbe2706002881e915df31a1f4d9e45b63d8c4353110bedc1d395151c4542c4ef5dadae09a13c1689ae0c1eae06fce02ef6f321049dc67e6093db6f4f0a30aeef4"]}, @generic="2a134d93cda0b3eac6219c67c9b71002dfa8a91833ae218efe617a5f98e57ec65db173c928ac87", @generic="a946230fe8570bb5de3092cc70762d1b54d4916486f1f8de11a21b71891e2328a99e663ab9c7343b8290b8e0fe267966fc3c92838ecc05713bb1bb65ad30b4df2297440820242ddc1c903360f0fcd3fd24d7d01c6c033cd5689408ab62e3a37f737c0d5efea639bcd8ad3be9e69c466da5dbf4b859c3fe06fbdc63f8d60657b7f8115fc4551cfb5a2e89c04224eb7a075725df0645006b219dfa852c32d9d8d31afcc0c70591efc0cfca3b262e9a8a22448c274dc72e18603ab0f886482964bbcb0ddb7fdeb9ee01", @nested={0x10ea, 0xac, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @uid=r6}, @generic="e2c4d9dd2e231897c0bb14a047100b17b52537f82c36e66f037412c9c6da6ae33cc9526288287332e08ad24d5786c07c6c97894f96f2e8b808f2edcaa69462255ce915eb117126f3d9eb1d86285dca39cb17603fad7d779c594e6d1bc93db42fb0aee174d2b6006a66ec6e5b43cb633eb3cda651b441c58a2232521b781b9e4859170f6686d0797c5f7ea32d6975d752e289adffd96caad50120c5b0e5d03c99495a3132f524986225ce399b7bfc78faf7f148ebbd199b7e24aab720521781d02905b25d39b271c5f1741c00e27f1664641396b87c55", @generic, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@multicast1}, @generic="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"]}, @generic="3c1900bc82fd4e62034551f0806d512f886b25d6470f6aec6893a3b8aac9298c61d76a49352f96e3ee59675821fd4050ab487b0b3f1890e71518dc5b9565f7626a5157fb25cdd5adfb3ba26e41d0b17a7bc4d2088abfaa5712d55e01902ff55f01a445fce4216f0160706668e99f62e2d906ec195c1061b1c53dc4729d0dcf1b4f19a438e5b4f79a74979621d7f1d9ca79ec52ed4a5fa9cbb98de44c58fa9a01f8aba23f83d6447b3d"]}, 0x1648}, {&(0x7f0000003600)={0x137c, 0x3d, 0x20, 0x70bd2c, 0x25dfdbff, "", [@nested={0xd9, 0xcf, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x1000}, @generic="9ebd943b7312a11a4efe6d91722f8dab6fd026375b5d23117eed47468a0694985a64ab656dc62f78d5a9b5933a146f5fd69766b27320ff8d3e6e52a8fb0bbf6e21c304a4a25912b11f98674f6f3b790023d6b2bf428c528442fba46c43355d2cb326e207bad649de44ec05b4ceeb566187c3d633672767adc3a33aba0937f4dcd8952760b9d3e1f18b9d768332df49a697c2c407509f3ce600c1c00d63b3a07d528c330aeedca004a0c2e22ebcbbced6079cc4c910f23bfdb29668054c49c5c13d3c826b889050d9e0"]}, @generic="b1fbe87337ca24dcc0b6c06d9128fed9fa87dc7726453fe2fbc1472d5b61d99e86a2c41375e085669dac741655007f6615732044fb6cb03d0783cbbbbc0531c579f951b8b50f7d8671af27f2e0f26fb356e794f5f1236a757287b5fd8970d5dfadc39f932d75c3bccc627423f458585108301630bb845f5b95f83ff9a70c7bfa21db4c96e93da1f731e11fcdb89587d44397f28fbac1153635a2a8eb4bde7e9497d57517c5c62e33f31b5eedc237cb39b864cc15c6b4d57896352ec9110219a1e1456b39e00a83fc6e536308c0b861752d95f1291c", @nested={0x6f, 0xe7, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @u32=0xe856}, @generic="3f330be0a4b678766870900cf41cd3129a84fcb786b0db85da46c3018ad6116c4edc206a87be9abdac87ee395f8bbfc5a1eac3520ffd4bdaeb664115d038fb3a5b354c", @nested={0x4, 0xb4}, @generic="04", @typed={0x8, 0x46, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="1604c3c5247cd7d0f536ff"]}, @typed={0x5, 0x117, 0x0, 0x0, @str='\x00'}, @generic="de70880afbdebb46304fb13fe822334414bd29ea18e526b522eaef76517317eefb81db858bf6a6099dd0f127d7a62a0f50ca7e88e7b362b70588d7c41cc187c3a54910db391c341c07bbb377fb3261990347b16ba97ad2228836b48002aaa7f8af75722366ea3218ef75a5e8c9aaea183fa877a75a728d6759b23171a785e8ccb2fa735457dda9124d51080c250da82299d6739f7c5c5087", @generic="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", @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x130, 0x0, 0x0, @fd=r3}, @generic="a6283eee33bdc584df911233e1ea450edbb958811fc7237f60b2fb263e693e13a1a66531d3ee95c19888f7dbb905ba71273dda9328421f0841fbf6946523cafab3591d6dad2ca8f0d900de4d8edac09ef508d36cbc5c7620f45e4dd0d754ef1d3292a1fcdc00d0c48dc321503129de6fb1f741aa4c0188a75d8d09654d13088e8f955e43d286863b3f1008f0"]}, 0x137c}, {&(0x7f0000004980)={0x1260, 0x24, 0x200, 0x70bd27, 0x25dfdbfe, "", [@nested={0x157, 0x151, 0x0, 0x1, [@generic="59ff911812913c7bc4aa3db25b0b588c698972fb21cfad27d27c8537240f3321301f2e1d4557f178f8c706dd293c9dd7ddc3fcf31613f35b4c1faa51dd662f8b93e68bbc7c800cfb3251eded40830534d0ecc60adee01b75bf286bb20ee7fd0f4130347472cc9d411e46a7af868f7b0493032816dac1c97a76f8ddad42b4524fb8b10b63725da86ceffb5514390422bdc25672f9fbb2f2f4356bf78550468ed84718130ec5af9df950c0bd61b02b964236b9fa6c289e3fe781d734c91fdeca0d12292b66738353371a8337756759577bc974752e756264dc8a15c6d49c5a0397a0dbf1dee750d6b500cc35b486ac09a2f4", @generic="f53d3a0c82b411a94230b7c2535a612be90eeec63cb72aac1bd8592e6526daaa242d731498aa6f167624ddeb79a0eccb0a2314f7ff2071c3abc6aea74d05a517bd9f3b9be6e5bb9b729a204ea9b617becef0beac3ca41de2abb9cc28f9da", @nested={0x4, 0xda}]}, @nested={0x9d, 0xd0, 0x0, 0x1, [@nested={0x4, 0x72}, @generic="0803b0c8a99ff91deefbc79e4972dfab489fcdfe35ba8053a791f90661bc5fe40ad436db5ea63021e2e0d5e7940ed11b80dc9435748403545c26aa2542a799e2082c7915e3d0f3bac1976bf59367077efb237d99fbf3cd60ceaab122422d890da941c012098f9b77840a6f6cc2db852fd63e6ee4414a87ab887adbcf2b762a9753", @typed={0x5, 0xd1, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x10d}, @nested={0x4, 0x94}, @nested={0x4, 0x2e}]}, @typed={0x8, 0x136, 0x0, 0x0, @pid=r2}, @generic, @generic="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", @generic="129f2c5b5e307a52d87dba9f69d3407a16f7", @typed={0x3c, 0x1b, 0x0, 0x0, @binary="fd0866222ab369af23ce688c656c9611fe59b9e8595c05d85e29894cb49bc0f3fe27d3fed8c65f6342139f50cd2a8b0d2a9abd4320e7eb58"}]}, 0x1260}, {&(0x7f0000005c00)={0x150, 0x12, 0x10, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x155}, @typed={0xae, 0x71, 0x0, 0x0, @binary="8f97702ff04b9d3927434432c6816bf313926154e2bf3ce4de01637a230a475e14318d8b8d94d95826e08bf3d9f78468607ca490b95eb3a8e7048dcafd9c5a30d67c95faae99054e337556da114db8aed3fe74b9e78e7f4df4e5e239d2f1ed663a70154cdc167b77040e1d23ecae12cf3e7447ddb302c50b2dd1f668ebd1f7b88f1f64790a4411c84119176bc589ee9c691c1affc85b1c194e0f7454a31fb6f20578bdc319ebebe6979f"}, @generic="5db6ee280c14225d1d008f294bfa49e48ad6c862664dab5802b1aefb1b9016240a2b94617bf4699a341d8a7926c2cdaa3a7eaaf1cbe10e5188f0d839b069bf0e1b63fd1078374aec2715c798c1061f6588cec29fd22d5f8646612eac6a4b8039dd8ddc3367b35c2a471cb7ab0eabeb3156d768211c24da9ca2d4089b0cc454a956e633e1b6059376af24bf84"]}, 0x150}, {&(0x7f0000005d80)={0xf0, 0x33, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0xdf, 0xe1, 0x0, 0x1, [@generic="13fdfbd58d19cfa8af64a7158e80a3efebb89e6e6414d043979bb615ecf8214ecc42b4f8dae043a41094ba1cd21dbd1f194b17174c01cba078b6cf0ea7581ffe16a9af17ad277cd3e4a2cae1b9603b636ee31f2580f8d147afe0973285522996ee4f844f8832f69d76f4bec47d26abda2f699b8463569e2122dd1474cc2114bd3787b223ca33cd653213a0efb076deed5d6e4aaec279f775c003e9d761d338dbb0878bbf2ef364609422031440fed6138bbab995e63e7cfe75c88b0113f6c0f8544859cddc636e", @typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf8}, @typed={0x5, 0x6c, 0x0, 0x0, @str='\x00'}]}]}, 0xf0}, {&(0x7f0000005e80)={0x58, 0x28, 0x0, 0x70bd27, 0x25dfdbfd, "", [@nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @pid=r2}]}, @nested={0x38, 0xa5, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0x14b}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x121}, @typed={0x14, 0x120, 0x0, 0x0, @ipv6=@local}]}, @typed={0x4, 0x120}]}, 0x58}], 0x9, &(0x7f0000006000)=[@rights={{0x28, 0x1, 0x1, [r0, r7, r5, r1, r4, r4]}}], 0x28, 0x80}, 0x20004000) ioctl$VT_DISALLOCATE(r1, 0x5608) readahead(r1, 0x1, 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a01010200000000000000000000000006000000040300"], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 2m11.508848762s ago: executing program 0 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') preadv(r3, &(0x7f0000002180)=[{&(0x7f00000010c0)=""/62, 0x3e}], 0x1, 0x40, 0x7fffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = semget(0x0, 0x1, 0x206) r5 = getgid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000240)={{0x0, r5, 0x0, r5, 0x189, 0x80, 0xae38}, 0x23d, 0x4, 0x2, 0x0, 0x7ffd}) r6 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r7, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000001300)={0x4d3, 0x7d, 0x8001, {{0x0, 0x4b3, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x4100000, 0xfffffff2, 0x7, 0xa4, 0x189, '\x85u\xbak\x10\xf7x\xee\xdb\xd5\xa6\xd2\xd5\xfb\x8a:Q\xc7\x8e\xb8\xdb\x06SYu|VY\x98\xa2M5MJ\xba\xfc\xef\x96\xe8J\xe5\xb1W\x18\xc2J/\xfd\tGg\x8d\xc7>,T\x8b\x15\r\xc3u\xe6\xed\xc06~C^a\x8b@\"\xb3\xff\xe9yvR\v\xf2\xdfZG\xce2\xfc\xe3\xd1j\xf6\xedR\f\r%gz#\xd96D\xaf$n\xc4\xe5\x16\x9f\xae/\xd0\xa8\x88\x125rZG\xc9L\x17H\x981[\xe90\x1b(e\xbcdv\x86\x90\xf7\x15t\xac\x8e\xb0\xd3\x98\a2\x7f\xeb]\xaeD\x11\xb1\x96\xb1d\xe5\x87\x9c\x05\x9ab\xf4\x16\"\x95\'8\xc1\xa8\a\xceJ\xf5\x193\xa0\x05D\xec&j\xb6\xd9u\xf3lD\xfd(\x02\xd1Zx\xe8\x06Q\xf3R\x1a\xf1\v <\xff\xfa\xb4\x11J\xcd\xc4\xc7\xdc\xf2\x11\xa4\xbe\xbcn\xedK\xa0\xc3[p\xa8\xe3e7S\x01\x89\x18*\x1b\x1b\xbd\xa1+\x99\x911\xd3\x95 J\xf3\x93<\x9e\"\x86\xf2\xe9d\xf7\x95\xc1\xd0\xcc3\xbaF\xca\rd\xca\x8eCO\x13\x96L\r\xec1\x11\xb9j\x03ciS\x15\xa0\x9d\n\x92\x92\xb2~\xcf\x1b\xed\x9f\xc6\xa4\xa1\xce\x85\xd7\x86\xf1S\xda\xd5A\xef\x9a\x95=\xb5\xfb\xba\xd6\xd6\xf4=\x8f\xcb\x13O\xbf\xa3\"\xdf\xd7\xbc\x0e_\x7fSf\x00\x1c\"\xbbM<\xcf\xe2Z\xb8d>\xf9\x055VXp\x91n\xaat\xbb\x06^\xcf\x14F\xed\xda\xc7?\xf9}\x00\'\xbc\x11\xff\xa5U$\xbc\xa9\x11F?O`\x9ca\xd3\xe8\xf6\xa3\x9d\x12\xadX\x89\xfb', 0x3c, '\xf6\xb6+\r\xaa\x12\xe4\x98B\xad\xe4H8\xc43>w\xe6?\xc3\x85\xd6\x8f\xefl\xf61\xb3N<\tc\xd3XSP{z\xafRc\xd0\xfc\xa3\xf4\x1eV\x13\x9b\x854#C*\x91\x1e$\xaf\xed\xdf', 0x12d, '\x17\xe0_\x00\x00\x00\x00\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0PI\xff\x02)\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xf0|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x93#s\xbf\xfc\x12\xa2\xd6\xf3\x1bv\xbc6\x04\x8c\x10No\xb5\xe5\x82\xd1^f\xd3\x8bs\x91\x8d@.1mT>\xca\xf0\'\xb9\xf7\xb5K]\'\xda\x0fp\xca\x94\xe7\xe9{W0\x12\xa0\x90\x1b\xadB\xeaW\x14G4)\xf8\x1eP\xa69\xb0\xab\x96\x15\xdc\xdf\xc2\xf4\xe31!wG\x86\xa9Y;:\x93\x94KS\x16\xa7R\x11\xb6\xd6?\x9e\xac:\xf2\xd74\xa2dE\xfc\x1b;8\xca|<\xd9\x97h^mK\vF\xf5\xe2\xd3\x83bn\xbaQt\xfc\xf6\xbeI\x9awZ\x91\xf5\xc8yP\xef\t\xaaY\xb7f\x12\xc5zfz>R\xee\xc8\x16n.\xcd\xb1\x89@v5\x1d30\x00\xb5.\xf1\xd7\x03\x04&\xe197Jd\x85', 0x18e, '\x8fE\x88i\xa1\xda}\xeaO\x1c\xbf\xbb\xde\x95V$\xdc\xb1\x1a\xfc\xa0\xd7R\x80!\x1aA|\'\x8d\xc2\x80?\xa4\x13\xd0@\xcb$\xc6\xf4\x14\x9aEQ\'Ku\xec49\xbc\x06\x8f\x1bE\x00\x04\xad\xf3\xcfIb\xbd\x14\xa9\x0e\x92\xc1\xcb\xe71\xdc\xe4\xb2\x820\xf9Q\xbb\xdd\x80\x13[\xeb=\t\xddnV\x1a\x96\xb1?\x0f\x8b\xbe\x03M~\xb1\x14c\xa6\x89\n{\xfd\xa9O\x00\x88\xbb2\xd4\xa7\x90\x1f\x90\xf3\xd8\xc0\xb3\x83IUH`AAb\x19I<\x17Wu\x06\x0f\xcd\xe7)\xf34?\xa3\xf6\xc5\xfd\x15Q\t$$\"k]\xce\xf5\n\xf0\x13\xf9\xf2g\xa0\x84\x10\\\xf0+f\x02-\v5vP\xcbs)\xfd\x1bt\x85p\xd7M6\x8c\xea\x80\xed\xd9\xe7J\"N\\\xc7\x19\b\x15\x02\x14\xb9\x14\xac\xaa3Q\'\x02f\xc8[u\xf5\xbe\x94\xe1\xc47W04\xf9=\xbc\xe5\xc6\xb4\x87\x14\xa7\t\xdb\x8d\x0e]\x7f0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2m8.844658482s ago: executing program 0 (id=1714): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r0 = msgget(0x2, 0x200) msgctl$IPC_RMID(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000091) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') msgget(0x0, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgget(0x3, 0x606) syz_emit_ethernet(0x96, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x60, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x4, 0x4, 0x2, 0x9, 0x20, 0x2, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0xfd}, @empty, 0x7, 0x8000, 0x41, 0x500, 0x5, 0x10e0012}) 2m8.122350845s ago: executing program 0 (id=1717): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 2m6.604970869s ago: executing program 0 (id=1724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x120, &(0x7f0000001000)={0x2, 0x4e23, @remote}, 0x10) r1 = memfd_secret(0x80000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001040)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001080)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000010c0)={0x28, 0x3, r2, r3, 0x7fffffff, 0x10}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000001100)={0x28, 0x4, r2, r3, 0x108d23, 0x6, 0x3, 0x382915}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001180), 0x210241, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000011c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001240)) socket$unix(0x1, 0x1, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001280), 0x80000, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f00000012c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r6) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000001540)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x15c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe68}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6522e2c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4645}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x834}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000814) arch_prctl$ARCH_GET_CPUID(0x1011) write(r1, &(0x7f0000001580)="215d7e7a3d178d394daf91832b5df7c2bfcfbca49252893502e001f2b9fd5e6275a295c48fe35bffa523e4d8dce0f5bfe5eff497e0cc76d0440f56ca1443c7352225ec07938fe71df83f35eb70687031cd8750f0e6229583fe8460f1b714841beb95b80dd038eab741becfa7fadf748c04cf09290f7db7899173711f0470deca545f93548ded7fd5f55de422424b482eb83e621be0565f066b", 0x99) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001640), 0x100, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000001680)={0x48, 0x1, r3, 0x0, 0x2, 0x2}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000001800)={0x48, 0x4, 0x0, 0x0, 0xfa, &(0x7f0000001700)="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", 0x9}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000001880)=@attr_pmu_init) r9 = syz_open_dev$loop(&(0x7f00000018c0), 0x1, 0x402) sendfile(r9, r6, &(0x7f0000001900)=0x4, 0x7fff) read$eventfd(r6, &(0x7f0000001940), 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x80800, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001e00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0xac, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008000) 2m5.731435509s ago: executing program 32 (id=1724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x120, &(0x7f0000001000)={0x2, 0x4e23, @remote}, 0x10) r1 = memfd_secret(0x80000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001040)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001080)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f00000010c0)={0x28, 0x3, r2, r3, 0x7fffffff, 0x10}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000001100)={0x28, 0x4, r2, r3, 0x108d23, 0x6, 0x3, 0x382915}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001180), 0x210241, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000011c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001240)) socket$unix(0x1, 0x1, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001280), 0x80000, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f00000012c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r6) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000001540)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x15c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe68}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6522e2c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4645}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x834}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000814) arch_prctl$ARCH_GET_CPUID(0x1011) write(r1, &(0x7f0000001580)="215d7e7a3d178d394daf91832b5df7c2bfcfbca49252893502e001f2b9fd5e6275a295c48fe35bffa523e4d8dce0f5bfe5eff497e0cc76d0440f56ca1443c7352225ec07938fe71df83f35eb70687031cd8750f0e6229583fe8460f1b714841beb95b80dd038eab741becfa7fadf748c04cf09290f7db7899173711f0470deca545f93548ded7fd5f55de422424b482eb83e621be0565f066b", 0x99) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001640), 0x100, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000001680)={0x48, 0x1, r3, 0x0, 0x2, 0x2}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000001800)={0x48, 0x4, 0x0, 0x0, 0xfa, &(0x7f0000001700)="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", 0x9}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r1, 0x4018aee1, &(0x7f0000001880)=@attr_pmu_init) r9 = syz_open_dev$loop(&(0x7f00000018c0), 0x1, 0x402) sendfile(r9, r6, &(0x7f0000001900)=0x4, 0x7fff) read$eventfd(r6, &(0x7f0000001940), 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x80800, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001e00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0xac, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008000) 11.90401269s ago: executing program 1 (id=2015): unshare(0x4a000200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$P9_RREAD(r1, &(0x7f00000003c0)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001740), 0x12) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x6, 0xa, 0x3, 0xffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = fsmount(r3, 0x1, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 5.229160386s ago: executing program 1 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001ff299a00000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00020200e000000200000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (fail_nth: 3) 5.069279216s ago: executing program 1 (id=2027): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'pimreg\x00', {0x9}, 0xff}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'pimreg\x00', {0x9}, 0xff}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) 3.055401837s ago: executing program 2 (id=2031): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000040)=0x1) connect$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1.874259994s ago: executing program 2 (id=2034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x5, 0xa, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x2) 1.661458597s ago: executing program 2 (id=2035): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e0009002700080018d71cf9f700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async, rerun: 64) mmap(&(0x7f00003c8000/0x4000)=nil, 0x4000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) (async, rerun: 64) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, 0x0, 0x8, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)="d4eacbcfa84801e4519c97e25afa72fe16818bb454", 0x15}, {0x0}], 0x2) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000300000000000000060000001811000094779d7fa78f8efd2473663959e09bb4945109250f3a3e92aa5b1b2c0d37f94dcb47b4e7dbbbec1145ad15d7e6ac17e4a26dcf7a11030431709d649f46962f8c3f49253fb1f5a494c10a8872257dfdb77d29bcf614d5a61306a7f26f7b91c5977e1dba457c569df0d3ffab49b59a0255b29960543a045da42f459d0200"/154, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d303f4ff04000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x53, &(0x7f00000002c0)=""/83, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x4, 0xe, 0x9}, {0x5, 0x1, 0x10, 0xa}], 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f00000001c0), &(0x7f0000000540)=r5}, 0x20) (async) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.id\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000400)={0x8, &(0x7f00000003c0)=[{0x8001, 0x1e, 0xb4, 0x7}, {0x9e7, 0x62, 0x6, 0x40}, {0xfff2, 0x5, 0x2, 0x3}, {0x7, 0x3, 0x8, 0xfff}, {0x2, 0xc6, 0x0, 0x10001}, {0x8, 0x40, 0x7f, 0x8}, {0xc36, 0x9, 0x1, 0xd}, {0x0, 0x4, 0x4}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_on}]}) 1.661265988s ago: executing program 1 (id=2036): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/custom0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4, 0x5, '\x00', 0x1}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000900)={"34b30f02c5ccf6e3b71cda04b68b6891370cd0a442844b737a7254514f9ff20d0954650127067cd50d8f25db5fc9ccd4dbb2ecc29dc8dc51bcd2291a6a12912a3ce524ba851af6d1366d2b46f9f063dde6bea45fb0f4ab6a35088ea81c8a5ea6d0c3fbc6a89ae582119699a04f2be00b3aa3766c9f658af98e3122b00522a2ee14e3746ec2266e538c13710185ec5a7e4936e212c07483e1798957ffbb6311f2a13a7109d4293b216f78d59d41eb3af775e48dbc4a4091ac7cc96c56a1a4288c672fbf1072ae9c51060f80707d1bc48eb1802a805df2ee990bcece5fe8b0ebba31c4d5efa47b3353aa02663aca26e817c88dc094d75330fbe2fea0037d4f92435d2eed5585bfaeddfdb50bb10bed6860313613f4a96d7d0b263cb0930f155ed09f2ff433f90d5065a376d43502ac8f17257c0fe5f448d9805a835286f2ff887e02e8a243902c124d3d52a1057f20a29ca1c012869a6d606e3440cc563da66021bae0cf8c0a5af7a21c79481b1a31b98fe0c29fb5dfc5737442cdfad6421ec95345bd0165c6f6123e616873d97282e5098add56b95e805782aa67f237269b5b2b3e24edd1dc78f25130926496f5623ae306bc3d72d2b80f8939e60526330f873d00360441d906627f0183607151b1f03602050670984a3640871c2690496bbc8949fb63abd5033e508055dc0dd759913beba87e39e7af72170d622e2ecf9aeb4e479bbff8ad292a3a5bd70f8f433bc4b89be144ace57501f8f016868ed7dd8bab97f4f3feb242f4f620913c478058c036df363abbf7c239d340017c2de6b688e322c9b51c269aa110def3ad16337d197f3c452ac661bac7c0531c4d98618f99d750b0c3d8539051188a0f4583dd3538982e8a84121055cd721571ca98bb0c3ec3e446c4c7bc5c9b800367a859a00ef3a505327f9f2da247ce118a82deeb04ad22eeaf97dbd454518defd5adeb288a7842e9e2839ec587e3275abf3a812154080aa60182e60cb73b2020d2865551141ac1e004197673c896069dc253f81dac7ca4e906bf2c0d241f59e4b8dad8549871e94b33755db2526223d1e290e300701a0a926033d515429f751f72a87f2eb0336cc72be75af2b75b82c70807718604aa9c6b3c2bc27551f1a0dcffc5eef025f86c13f1fbb426de372b15e4d6a63c4754cecd5071e25e8d6f5796830e7ef62b65c5c076ad2a9ab0850f97c5765ece5885caf0ca0d63a56c45d09c77553ba254983c05d7c722bd7e2061bb71e8e9a7cc444a24643ff32bb80f95ddf50455ed9b59288df68da87510cc3ff08521b39002fe8ea04ee30135324934c286cebc277a9189ac3322b96e8df8fd2a00a0a3da54b3dbe4e9cd46b762ac7f2c7ded1aa8c9741b675f7fe2dc699ab9a2615924fda6e879fc2ae27030d149ed88482945304447d8d02700"}) 1.504567732s ago: executing program 3 (id=2037): r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) (fail_nth: 3) 1.487634942s ago: executing program 2 (id=2038): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}}, 0x40000) 1.377623169s ago: executing program 3 (id=2039): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000200)="311d", 0x2}], 0x2) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @rose, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a0500f434b9eaafdc0a00e9bfde908990817b364e51afe9c01a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9453c0eeba864400000000000000d8e5b1dc91c5499bea097700400000000000000000000000000000000000002819788d86205d947db7ad62b6e98f722ec61dc101adbfa8d0d057e307342511e1e33c25fead122ddacd0aaff826821627a99e8e9c65c5086bcb1df5ea822fb450ef904aed1c6822f05b7604ec9691e8d0c471fba901bf90dea634b2edea2e25c09fbae059aca9ace1b3baf1baf1f0a4f5f1386cd30b9f7019527f91379c1662dcb8"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x1, 0x103, 0x9}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r3], 0x20}}, 0x8000010) accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "52ae0000"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902240001000000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002300090425d9f900ffd3df2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) 1.173967805s ago: executing program 3 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x35052000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, 0x0, 0x4840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x4004004) socket$nl_netfilter(0x10, 0x3, 0xc) 770.458884ms ago: executing program 2 (id=2041): r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3, 0x80) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0x5eae) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) close_range(r1, r1, 0x2) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4002000) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f00000049c0)={0x6000004, 0x11ab, &(0x7f0000000300)=[0x10, 0x5, 0x5, 0xfffffff2, 0x3, 0x9, 0x2, 0x800, 0x900, 0x1b, 0x2, 0x10, 0x5, 0xfffffffe, 0x80000001, 0x7, 0x1, 0x0, 0x2, 0xa, 0x4, 0x5, 0x22, 0x1, 0x1, 0xffff, 0x6, 0x6, 0x81, 0xe6, 0x2, 0x80000000, 0x6249, 0xfa, 0x573b, 0x7ff, 0x1, 0xffffffff, 0x3c5, 0x3, 0x1ff, 0x3, 0xd, 0x5eba, 0x200, 0xa4, 0x2, 0x2, 0xffff, 0x7, 0x8, 0x7, 0x4, 0x8, 0x8, 0x800, 0x4, 0x7, 0x200, 0x6, 0x7c9b, 0x80, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0xc, 0x7, 0xb0, 0x1, 0x101, 0x10, 0x800, 0xd, 0x1, 0xf, 0x9a, 0x10000, 0x10000, 0x6, 0x7, 0x101, 0x2, 0x1, 0x0, 0xa83, 0x8, 0x4, 0x7, 0x2, 0x2582, 0x5, 0x1c, 0x0, 0xfffffff8, 0x2, 0x3, 0x8, 0x1, 0x3, 0x3ff, 0x1, 0x8000, 0x80000001, 0x3, 0x7, 0x9187, 0x2, 0x4, 0x9, 0xff, 0x8, 0x29, 0xe, 0xc000000, 0x2, 0x1, 0x3, 0x3, 0x5, 0xfffffffc, 0x47bc, 0x3, 0x8, 0x70, 0x5, 0x3, 0x2, 0xe000000, 0x7, 0x4, 0x5, 0x2, 0x1, 0x6e, 0x6, 0x43, 0x5, 0xa1, 0x5489, 0x1, 0x1, 0x883c, 0x5, 0x0, 0x29c, 0x3, 0x7, 0x7fff, 0x1, 0x61da, 0xff, 0x6, 0x8, 0xd6, 0x9a8, 0x5e17, 0x8001, 0x4, 0xfffffffe, 0x7f, 0x7, 0x7, 0xfffffffe, 0x81, 0x6, 0x1, 0x1, 0x6, 0x830, 0x3, 0x4, 0x634c4228, 0xacf, 0xe, 0x9, 0x2, 0xfffffff9, 0x1d3e2127, 0x9, 0x1, 0x2, 0x2, 0x3, 0x5, 0x140000, 0xb9, 0x176, 0x0, 0xfffffff9, 0xd540, 0x9, 0x6a0, 0x6, 0x7, 0xd2d9, 0x8, 0x9, 0xb, 0x5, 0x10001, 0x1, 0x5, 0x9, 0x1, 0x0, 0x96a2, 0x7, 0x1, 0x24, 0x0, 0x9, 0x7fff, 0x7fff, 0x2, 0x8, 0x2, 0x45, 0x4, 0xb7, 0x3, 0xbb8, 0x3, 0x9, 0x3, 0x5, 0x8, 0x2, 0x3, 0x4, 0x7, 0x1, 0x80, 0x8f, 0x3, 0x80000000, 0x5, 0x6, 0x4, 0x7, 0x200, 0x8, 0x3, 0x6, 0xfffffbff, 0xe394, 0x0, 0x1, 0x81, 0x288, 0xa943, 0x2, 0x800, 0x6, 0xffffffff, 0x8, 0x2, 0x6, 0x80000000, 0x3, 0x9, 0xbca, 0x8, 0x200, 0x9, 0x5a, 0x5, 0x5, 0x10, 0xc, 0x8, 0x8000, 0x5, 0x3, 0x3, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x6, 0x9, 0x7, 0x0, 0x5, 0x80, 0x3, 0x2, 0x7, 0x5, 0x7, 0x3ff, 0x10000, 0x5, 0x3, 0x7ff, 0xfff, 0xfffff001, 0x7fffffff, 0xff, 0x8001, 0xe0, 0x8001, 0x1, 0xd86b, 0x1, 0x7, 0xb, 0xffff, 0x19, 0x4, 0x9, 0xe, 0x8, 0xfffffffc, 0x3, 0x8, 0x1ff, 0xffffffff, 0x9, 0x8, 0x9, 0x5, 0x414f15e1, 0x8, 0x6, 0x3c7, 0x0, 0x9, 0x3, 0x8, 0x4, 0xc, 0x3, 0xfffffffb, 0x11ceabd1, 0x400, 0xc525, 0x80dd, 0x6, 0xb, 0x1, 0xbe5, 0x5, 0x0, 0x3ff, 0x1, 0x1, 0x6, 0x7, 0x1, 0x8001, 0x800, 0x7, 0x5, 0x9, 0x4, 0x400, 0x6, 0xfffff254, 0x7f, 0x0, 0xfff, 0x0, 0x40, 0x2, 0x7fffffff, 0x2, 0x4, 0x40, 0x1, 0xb8ec, 0x2, 0x10, 0x1, 0x6, 0x2, 0x72, 0x1, 0x1ff, 0x200, 0x9, 0x3, 0x5, 0x9, 0x6, 0x40000, 0x3, 0x800, 0x7, 0x80000001, 0x1, 0x7, 0x81, 0x6, 0x4, 0x3, 0x2, 0x8001, 0x6, 0x2, 0x9, 0xfffffe00, 0x7, 0x7, 0x4, 0x0, 0x5, 0xff, 0x1ff, 0xad, 0xb7, 0x3, 0x8, 0x1c, 0x1ff, 0x3, 0x3, 0x1, 0x5, 0x7fffffff, 0x5, 0x7fff, 0x7f, 0x800, 0x9, 0x2, 0x80000001, 0x101, 0x6, 0xd, 0xa6, 0x8, 0xf14b, 0x5, 0x32, 0x7, 0xffff, 0x7d7b, 0x8000, 0x8, 0x5, 0x6, 0x4, 0x6, 0x10000, 0x0, 0xa, 0x8, 0x7, 0x1, 0x5969c877, 0x2b5, 0x0, 0x3, 0x14a718ae, 0x7, 0x6, 0x3, 0xffffff81, 0x7, 0x400, 0x0, 0x4, 0x0, 0x8, 0x9, 0x9, 0x9, 0x5, 0x0, 0xffffffff, 0x3, 0x1, 0x8d, 0x8, 0xffffff81, 0x2, 0x0, 0x8, 0x4, 0xfffffff7, 0x6, 0x4, 0x7, 0x7, 0xa6, 0x10000, 0x80000000, 0xfffffff2, 0x1, 0x5, 0xfffffffb, 0x0, 0x1, 0x5, 0x2, 0x211c, 0x1, 0x9229, 0x0, 0x8, 0x3, 0x0, 0x6, 0xfff, 0x2, 0x9, 0x0, 0x4, 0x77f, 0x3, 0x1, 0x80, 0x6, 0x3, 0x3, 0x0, 0x2, 0xf, 0x5, 0x7, 0xfbc, 0xfffffffd, 0x6, 0x2, 0x5, 0x0, 0x8, 0x5, 0x2, 0xf04e, 0x2, 0x7ff, 0x79, 0x5, 0x9, 0x1000, 0x3, 0x10000, 0x6, 0xb, 0x37, 0x919, 0x5, 0x8000, 0x8, 0x2, 0x401, 0xf1, 0x4, 0xffff670b, 0xc4, 0x4b8, 0x80000000, 0x6, 0x4, 0x7ff, 0x2, 0x2, 0x0, 0x5, 0x7b6e, 0x7fffffff, 0x3, 0x14, 0x8, 0x7, 0x2, 0x8, 0x9, 0x5, 0x943d, 0x9, 0x0, 0x9, 0xfffff801, 0x520, 0x800, 0xffffffc0, 0x2700, 0x20b, 0x7, 0x759b, 0x4d, 0x872d, 0x6, 0x6, 0x100, 0x8001, 0x1, 0x0, 0x7a, 0x2, 0x88, 0x9, 0x8, 0xb, 0x7, 0x1, 0x8000, 0x8, 0xd21, 0xd4, 0x0, 0x3, 0x9, 0x5, 0x2, 0xf, 0x71, 0x9, 0x9, 0x8, 0x7, 0x101, 0x65, 0x3ff, 0x80000001, 0x6, 0x9, 0xfffffffd, 0x81e1, 0x8, 0xf, 0x1800, 0x3, 0x6, 0x1, 0x2, 0x3, 0xfffffff4, 0x4, 0xc, 0xff, 0x10, 0xe1d, 0x2, 0x17b, 0x10001, 0x9, 0x4e53, 0x4, 0x7f, 0x2, 0x7, 0x8, 0xe43, 0xd, 0x34, 0x1, 0x6, 0x1, 0x80, 0x27, 0xfffffff8, 0x1000, 0x3, 0x24, 0x40, 0x3, 0x7, 0xfa70, 0x297, 0xf7d, 0x9, 0x6, 0x0, 0x200, 0x7, 0x1, 0xa, 0x5, 0x5, 0x0, 0x2, 0x509c, 0x6, 0x5, 0x5bb3, 0x80, 0x9ae5, 0xfffffffa, 0x10001, 0x7, 0x6, 0x9, 0x5, 0x8000, 0xffff4322, 0x1b4, 0x7, 0x1000, 0x0, 0x2, 0x8, 0x6, 0x8, 0x945473a, 0x0, 0x4, 0x88c, 0x28, 0x6, 0x4, 0x1, 0x9, 0x8, 0x5, 0xa, 0xffffffff, 0x80000000, 0xffffff7f, 0x80000001, 0x1, 0x3cc, 0x4d, 0x4, 0x6, 0x5, 0x8, 0x6, 0x9, 0x7, 0x76, 0xe2c7, 0x7fffffff, 0x4, 0x72361e8d, 0x7fffffff, 0x8b12278a, 0x8, 0x9, 0x0, 0x7, 0x16ac, 0xd827, 0x9, 0xff, 0x80000001, 0x6, 0x2, 0x7ee, 0xffffffff, 0x2, 0x0, 0x2, 0x10, 0x4, 0x4d, 0x0, 0x8000, 0x6, 0x0, 0x10001, 0x8, 0x9, 0xfffffc00, 0x7, 0x2, 0x0, 0xd, 0x22ea, 0xfffffffa, 0x5, 0x6, 0x5, 0x8, 0x1, 0x0, 0x3, 0x1, 0x1, 0x9, 0x30, 0x4, 0x10001, 0x6, 0x101, 0x200, 0x7, 0x3, 0x9, 0x40, 0x1, 0x6, 0x3, 0x615b, 0xfffffff9, 0x100, 0x464, 0x8, 0x5, 0x91e9, 0x100, 0x8, 0x9, 0x226, 0x7, 0xe, 0x3, 0x81, 0xfffffffa, 0x7, 0x5, 0x1, 0x80000001, 0x10, 0x401, 0x8, 0x90000000, 0xa, 0x7, 0x7, 0x5, 0x159, 0xe, 0xe, 0x7, 0x2, 0x7, 0x9, 0xe17, 0x6, 0x0, 0xac7, 0xffffffff, 0x2, 0x2, 0x9, 0x1, 0x8, 0xff, 0x9, 0x4, 0xfff, 0xfffffff9, 0xfffff801, 0x81, 0x0, 0x7, 0x7, 0x5, 0xf5, 0x3, 0x3, 0x1, 0x4, 0x10001, 0x0, 0x9, 0x4, 0xfffffff8, 0x1, 0x4, 0xd0, 0x0, 0x5, 0x3f, 0x1, 0xd4f, 0xffffffc2, 0x2, 0xfffffffd, 0x1, 0x0, 0x75, 0x8, 0x5, 0x3, 0xf, 0x4, 0x2, 0x7a, 0x800000, 0x401, 0x3, 0x1, 0xf, 0x0, 0x8, 0x3, 0x6, 0x3, 0x0, 0x1, 0x3, 0x0, 0x1, 0x4, 0x9, 0x2, 0x7fff, 0x7, 0x8, 0x2, 0x7ff, 0x4, 0x1, 0xfffffffb, 0x2, 0x2, 0x1, 0x5, 0x9, 0x8422, 0x71, 0x3, 0x1ff, 0xaac, 0x7f, 0x8000, 0x9, 0xd5, 0x4, 0x401, 0xa4a80000, 0x81, 0x4, 0x8, 0x70e2, 0x101, 0x3, 0x67cd, 0x4, 0x7, 0x746, 0x3, 0xfffffc72, 0x7, 0x2, 0x10001, 0x9, 0xca06, 0x40, 0x40, 0x3, 0x0, 0x1, 0x10, 0x7ff, 0xa, 0x20000000, 0x9, 0x3, 0x80, 0xd05c, 0xe02, 0x10000, 0x4d, 0x1, 0x78147aa8, 0xe0e3, 0x25130acb, 0x8, 0xfffffffb, 0x0, 0x3, 0xf4ec, 0x80, 0x6, 0x6e, 0xfffffff7, 0x8, 0x9, 0x9, 0x3, 0x1, 0x6, 0x1, 0x4c0, 0x7ff, 0x8000, 0x9, 0x29f, 0x77, 0x8, 0x4, 0xa06d5352, 0x0, 0x3c00000, 0x2, 0x0, 0x2, 0x80000000, 0xfffffffe, 0x8001, 0x80000000, 0xac, 0xf90eaae, 0x100, 0x81, 0x0, 0xfffffffe, 0x7, 0x5, 0x213, 0xffff, 0x65, 0x80000000, 0x3, 0x5bc, 0xffffffff, 0x5, 0x5, 0x10, 0x3ff, 0xe930, 0x10000, 0xffffffff, 0x3, 0x1, 0x80, 0x101, 0xb556, 0xfff, 0x9, 0x8000, 0x4, 0x3, 0x3, 0xa8, 0xfffffffc, 0x0, 0x7ff, 0x7, 0xb33, 0x6, 0xd2, 0x2, 0x1, 0x800, 0xfff, 0x2, 0xffff, 0x81, 0x0, 0xf, 0x1, 0x4, 0x0, 0x0, 0x1, 0x4f, 0x80000000, 0x0, 0x80, 0x1, 0x3, 0x0, 0xfffffffe, 0x5, 0x9, 0x7, 0x4, 0xfffff37d, 0x1dd, 0x5, 0x4, 0x3, 0x7ff, 0x5, 0x957, 0x3, 0x43f9, 0x1, 0x7, 0x8000, 0xac2, 0x0, 0x0, 0x7, 0x800, 0x6, 0x101, 0xffffff6d, 0x0, 0x3, 0x6, 0xfffffe00, 0x5, 0xb32, 0x1000, 0x3ff, 0x4, 0x6dfb, 0x0, 0x100, 0x3ff, 0x4, 0x6, 0x9, 0x62, 0x9, 0x5, 0x5, 0x1, 0x99, 0x8, 0x10001, 0x5, 0xc, 0x3, 0xc984, 0x81, 0x80000001, 0xfc2, 0x8, 0x7f, 0x7, 0x1, 0x8001, 0x7, 0x6, 0x80000001, 0x2, 0x8, 0x1, 0x1000, 0x6, 0x66fa3a21, 0xd, 0xee, 0x935, 0x1, 0x8, 0x800, 0x2, 0xd, 0x5, 0x1, 0x1, 0x100, 0x1, 0xb44, 0x5, 0x1000, 0x9, 0xff, 0x8, 0x9cd, 0x14, 0xef, 0x5, 0x7, 0x6, 0x1c32, 0x80000001, 0xffffffff, 0x5, 0x124, 0x3, 0x8, 0x800, 0xffffffff, 0x9, 0x4, 0x7, 0xfffffff7, 0x1, 0x6, 0x4cf, 0x7ff, 0x2, 0xd15, 0x5, 0x8001, 0xab0, 0x0, 0x1000, 0x2, 0x8, 0xa7, 0xc380, 0xed6d, 0x7e2e, 0xfffffff8, 0x80000001, 0xfffffc01, 0x4, 0x4, 0x4, 0x8, 0x0, 0x5, 0x3, 0x1, 0x1, 0x0, 0x3b, 0xfffffff7, 0x1, 0x3, 0x10001, 0x8, 0x6, 0x9, 0x8, 0x2, 0x9, 0x1ff, 0x100, 0x47e8, 0x3, 0x200, 0x4, 0x9, 0x5, 0x423, 0x5, 0x800, 0x4, 0x0, 0xfffffff2, 0x3, 0x8, 0xdd, 0x5, 0x9, 0x530, 0x5, 0xffffffff, 0x7, 0x7fff, 0x1, 0x0, 0x4, 0x9, 0x8, 0xa, 0x0, 0x1a, 0x2, 0x0, 0xc6d, 0x0, 0x5, 0x5, 0xc, 0x4, 0x9f, 0x3, 0x10, 0x96b, 0x0, 0x708, 0x7f, 0x2, 0xffffffff, 0x4eb, 0x1, 0xfffffffd, 0x2, 0x4, 0x83a, 0xff, 0x7, 0x0, 0x8, 0x1ff, 0xa, 0x80000000, 0x8, 0x4, 0x8, 0x100, 0x101, 0x3c2, 0xf, 0x9, 0x0, 0x2, 0x4, 0x8, 0x8001, 0x3, 0xc, 0x0, 0x7, 0xd5c6, 0x8, 0x3, 0x3, 0x5, 0xb, 0x1, 0x4800000, 0x6, 0x6, 0x1, 0xe, 0x1, 0x6, 0xa849, 0xfffffff9, 0x1, 0x5, 0x6173, 0x9, 0xe, 0x9, 0x4, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x5, 0x6, 0x875, 0x6, 0x8e0, 0x4, 0x6, 0x5, 0x508, 0x101, 0x2, 0x40, 0x6, 0x5, 0x9, 0x7, 0x1000, 0x7, 0xa9, 0x8, 0xd154, 0x7, 0xc, 0x1, 0xff, 0x9, 0xfffffffe, 0x6f1f, 0x7f, 0x0, 0x1, 0x7, 0x7, 0x7, 0x101, 0x9, 0x37e, 0xf, 0x7, 0x1, 0xb2, 0x7, 0x9, 0x7fffffff, 0x6, 0x7, 0xf, 0x0, 0x2, 0x9, 0x4, 0x3, 0x2, 0x8, 0x7fff, 0x8001, 0x2, 0x80000001, 0x3, 0xfffffff6, 0x6, 0x81, 0x1, 0x8001, 0x8, 0x10001, 0x8, 0x4, 0x80000000, 0x2, 0x6, 0x200, 0xf, 0xe4a5, 0x9, 0xe50, 0x1000, 0x800, 0x3, 0x5, 0x1, 0xc, 0x6, 0x101, 0xf7, 0x0, 0x9, 0x8000, 0x6, 0x9, 0x7fffffff, 0x6, 0x5, 0xfff, 0x8, 0x59ea, 0x7, 0x0, 0x8, 0x5, 0x7, 0x7, 0x7, 0x0, 0x0, 0x6, 0x60b92167, 0x9a, 0x3e29557b, 0x1000, 0x0, 0xd, 0x615, 0x57e6, 0x8001, 0x9, 0x4, 0x8, 0x3, 0xa, 0xff, 0x7, 0xab67, 0x3, 0x40000, 0x6, 0x1, 0x9, 0x0, 0x6, 0xfffffffd, 0x4, 0x400, 0x0, 0xa, 0x80, 0x7, 0x0, 0x4, 0xc, 0x6, 0x81, 0x5, 0xffff8000, 0x78, 0x8000, 0x2, 0x4, 0x512e, 0x9, 0x3, 0xffffffff, 0x10001, 0x10001, 0x401, 0x9b58000, 0xfffffff8, 0xfffffffa, 0x8, 0x1, 0x22d, 0x12afd498, 0x4089, 0x3, 0x6, 0xc, 0x0, 0xfffffffe, 0xbe88, 0x7, 0x7e, 0x12, 0x80000001, 0x3ff, 0xb, 0xd3a, 0x3, 0xfffffffe, 0x4b413df4, 0x0, 0xfffe0000, 0x100, 0x80000001, 0x8, 0x800, 0x101, 0x5, 0x0, 0xc, 0x5, 0x1, 0x2, 0x1, 0x400, 0x1, 0x6, 0x4, 0x0, 0x800000, 0x8, 0x40, 0x4, 0x7fffffff, 0x4, 0x7fffffff, 0x0, 0xc40, 0x1ff, 0x9522, 0xddbe, 0x1, 0x7, 0x101, 0x3, 0x7, 0xc, 0xffff, 0x7f, 0x7, 0x5, 0x6, 0x4, 0xaee, 0xd5, 0x6, 0x4, 0x7ff, 0x10001, 0x8000, 0xa517, 0xfff, 0x3, 0x8, 0x9, 0x9, 0x3, 0x4873, 0xffffc71f, 0x3, 0x2, 0x6, 0x7, 0x8, 0xe, 0x81, 0xec, 0x7, 0x7, 0x2, 0x1, 0x2, 0x8, 0x80, 0x1, 0x8, 0x5, 0x0, 0x3, 0xfffffff9, 0x600, 0x0, 0x0, 0xc760cbd, 0x8, 0x1, 0x5, 0xfffffbff, 0xe, 0x4, 0x695a, 0x200, 0xf, 0x1, 0x6, 0x7, 0x9, 0x0, 0x1, 0x1b, 0x6, 0x5, 0x4, 0x24, 0x1, 0x9, 0x8e, 0x501, 0x1, 0x9, 0x2, 0x8, 0x9, 0x3, 0x8001, 0x8, 0x4, 0x7, 0x1, 0x0, 0x2, 0x9, 0x6, 0xf, 0x0, 0x4, 0xda, 0x227, 0x3, 0xd87, 0x3, 0x2, 0xe78e, 0x7, 0x1, 0x78ad4010, 0x7, 0x1495, 0xe, 0x2, 0x81, 0x800, 0xf1f, 0x6, 0x101, 0x9, 0x8, 0x7, 0x5, 0xfffffff6, 0x79, 0x4, 0x3, 0xffff60e8, 0xfffffff3, 0xc, 0xffff, 0x3, 0x3, 0x7f, 0xf990, 0xffffff9f, 0x10, 0x10, 0x73a, 0x4, 0x2, 0x80000001, 0x0, 0xffff9ae4, 0x2, 0x0, 0x12, 0x2, 0x2, 0x4, 0x100, 0x0, 0x5, 0x4, 0xed4c, 0x3, 0x8020, 0x400, 0x5, 0xffffff01, 0xffffffff, 0x1, 0x6d1, 0x10000, 0x8000, 0x2, 0x200, 0x7, 0x45f, 0x7, 0x3, 0x4, 0x0, 0xd, 0xb6, 0x36a8, 0xe30, 0xeaa6, 0xf1, 0x12000000, 0x400, 0x101, 0x8, 0x400, 0x6dc0, 0x40, 0x80, 0x0, 0xfffffff9, 0x100, 0x1ff, 0x3, 0x9, 0x273, 0x1, 0x3, 0x4, 0x7, 0x1, 0x8, 0x5, 0xffff0001, 0x6, 0x6, 0xfffffff9, 0x8, 0xfffffff4, 0x0, 0x2, 0x3, 0x10, 0x800, 0x9, 0x865b, 0x6, 0xfffffffd, 0x9, 0x1000, 0x9, 0x3, 0x3, 0x100, 0xa24, 0x8, 0xe9e, 0x3, 0x7fffffff, 0x2, 0x0, 0x1, 0x7, 0x9, 0x5, 0xffff, 0x6, 0xa, 0x0, 0x33, 0x10, 0x98, 0xffff, 0x5, 0x3ff, 0x65, 0x7fffffff, 0x3, 0x6, 0x20000000, 0x6, 0x8, 0x2, 0x1, 0x8e, 0x2, 0x5, 0x2f07, 0xc0, 0x40, 0x1, 0x2, 0xd0, 0x8, 0xf5c00000, 0xd, 0xffff, 0x6, 0x7ff, 0x6, 0x7b07, 0x64, 0xf06, 0x1, 0x6e, 0x7, 0x4, 0x6, 0x4, 0xfffffffd, 0x0, 0x5, 0x5, 0x3, 0x4, 0x5, 0x2, 0xffff, 0x5, 0xef000, 0x8, 0x9, 0x80, 0x2, 0x1ff, 0x7, 0x4, 0x7fff, 0x6, 0x1, 0x0, 0x20, 0x5f, 0x7fffffff, 0x3155, 0xad4de21, 0xe08, 0x0, 0x4, 0x2d488661, 0xb, 0xa98, 0x6, 0x0, 0x9, 0x7fffffff, 0x4, 0x65, 0x6fc, 0x7, 0x8, 0x8000000, 0x5, 0x1, 0xc8, 0x0, 0x2, 0xd, 0x2dc, 0xff, 0xfffffffc, 0x7, 0x90be, 0x8, 0x4, 0x3, 0x0, 0x7, 0xbd, 0x3, 0x5, 0x3, 0x0, 0xc0000000, 0xde61, 0x3, 0x5, 0x6154, 0x0, 0x9, 0x3, 0x7, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0x7, 0x5ee, 0x9, 0x5, 0x5, 0x3, 0x8, 0x6, 0x1, 0x80000001, 0x3ff, 0x6, 0x800, 0x6, 0x3692, 0xf84c, 0x10001, 0x10200000, 0x2, 0x1, 0x5, 0x6, 0x8, 0x20, 0x6, 0x7, 0x6, 0x859, 0x2, 0xfffffffb, 0x9, 0x0, 0xd96, 0x0, 0x8000, 0x2, 0x3, 0x1, 0x8, 0x4, 0x7, 0x9, 0x800, 0x4, 0x80, 0x1, 0x1, 0x9, 0x1db2fec2, 0x1, 0x8, 0x6, 0x619, 0x5, 0x1, 0x8, 0x6, 0x2b0, 0x5b7f, 0x401, 0xfff, 0x80000000, 0x2, 0x8, 0x5299, 0x7, 0x10000, 0x1, 0x1, 0x9, 0x6, 0x10001, 0x6200, 0x8, 0x4, 0x0, 0x9, 0x4, 0x1, 0x4, 0x4, 0x5, 0x7ff, 0x5, 0xde5f, 0x8, 0x10000, 0x5, 0x5, 0x3, 0x6, 0x6, 0x0, 0x0, 0x4, 0x40, 0x0, 0x74, 0x10001, 0x2, 0x9, 0x9, 0xfffffffd, 0xc, 0x0, 0x2, 0xff, 0x7fffffff, 0x8, 0x5, 0x5, 0x5bcc, 0x7ee3, 0x2, 0x59f, 0xd, 0x7, 0x3, 0x81, 0x7, 0x6, 0x4, 0x3, 0xc, 0x7, 0x9, 0x6, 0x3ff80, 0xa, 0x0, 0x7, 0x3, 0x0, 0x101, 0x0, 0x3, 0x1, 0x8000, 0x9, 0xfffffffb, 0xfffffffd, 0x8, 0x9d1a, 0xd, 0x1, 0x6, 0x8, 0xfffffffa, 0x1, 0xffffffff, 0x3, 0x2, 0x6, 0xffffff8a, 0x81, 0x3, 0x3, 0x3, 0x78b5, 0x6, 0x40, 0x83b, 0x5, 0x10000, 0x2, 0x6, 0x6, 0x2, 0x7, 0x0, 0xff, 0x1, 0x400, 0x7ff, 0xd, 0x6, 0x7f, 0x80000001, 0x9, 0xfffffffb, 0x1, 0x2, 0x8, 0x0, 0x0, 0x7, 0x4f8, 0x6, 0x3, 0x10000, 0x400, 0x400, 0xfff, 0x5, 0x1000, 0x2, 0xffffffff, 0x4, 0x0, 0x4, 0x4, 0x8000, 0x1, 0x6, 0x7fffffff, 0xffff, 0x9, 0x400, 0x10, 0x9, 0x8, 0x0, 0x3, 0xfff, 0xd, 0x1, 0x5, 0x3, 0x8, 0xd, 0x3, 0x2, 0xb, 0x0, 0x0, 0x2, 0xe3d, 0xf, 0xa02, 0x400, 0x7, 0x5, 0x5, 0x3c280bb8, 0xfffffff1, 0x1bd, 0xffffff81, 0xb800000, 0xe, 0xfff, 0x10, 0x8, 0xab7, 0x1000, 0x0, 0x81, 0x7, 0x80, 0x2, 0x3, 0x2, 0x1, 0x7799, 0x3, 0x7761, 0x3, 0x80000001, 0x1310, 0x4, 0x1, 0x1000, 0x3, 0xe, 0x10000, 0x5, 0x9, 0x9, 0x6, 0x1000, 0x4, 0x400, 0x1, 0x0, 0x1, 0xb, 0xc6, 0xb7, 0x2, 0xfffffffb, 0x4, 0x4, 0x2, 0x9, 0x2df, 0x3ff, 0xffffff01, 0x2, 0x1020, 0x0, 0x10000, 0x3, 0x3, 0x1, 0xff, 0x80000000, 0x9f6e, 0x6, 0x4, 0x9, 0x7, 0x10001, 0x9, 0x2, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1dc6, 0x8, 0x4000, 0x3, 0x4, 0x0, 0x8, 0x0, 0x101, 0x8000, 0x24, 0x5, 0x0, 0x7ed, 0xfffffff9, 0x10001, 0x9, 0xfffff76b, 0xb, 0x6, 0x9, 0xffff0001, 0x1, 0x203a9d04, 0x0, 0x80000001, 0x7687, 0x4, 0xc4, 0x6, 0x3, 0x5a97ac21, 0x3db5, 0xeb9, 0x0, 0x4, 0x4, 0x7, 0x4, 0x3, 0x7, 0x9, 0x1ff, 0x1, 0x800, 0x9, 0x8, 0xe3, 0xa, 0x7, 0xfffff1b9, 0x79cee667, 0x3ff, 0x958e, 0x6, 0x8, 0xff, 0x848, 0xc, 0x1, 0x7, 0x7, 0xc985, 0xffff8001, 0x6, 0x8, 0x5, 0x8, 0x3, 0xfffffff7, 0x1, 0xfffffffb, 0x7, 0x8, 0x12e453f7, 0x1, 0x0, 0x8, 0xffffffff, 0x7, 0x3, 0x4, 0x5, 0x7, 0x8, 0x4, 0x80000000, 0xfffffffa, 0xfffff960, 0xb, 0x2, 0x4, 0xfffffffc, 0x80000000, 0xad, 0x8, 0x7, 0xb9, 0xd, 0xf7, 0x0, 0x7, 0xe, 0x49ad, 0x5, 0x0, 0x2, 0x2, 0xea9, 0x0, 0x3, 0x8, 0xf0, 0x9, 0x9, 0x1, 0x60000, 0x4, 0x6, 0x5, 0x40, 0x40, 0x3, 0x40, 0x2, 0x81, 0x80000000, 0x8, 0x3, 0x9, 0x2, 0x3, 0x4, 0x80000001, 0x7, 0x7b, 0x7f, 0x401, 0x0, 0xe, 0x80000001, 0x7, 0x6, 0x8, 0x2, 0x5, 0x53c, 0x9, 0x1, 0x4, 0x6, 0xffff, 0x4, 0x3, 0x5, 0xfffffffc, 0x7fffffff, 0x5fe, 0xe58e, 0x7, 0x1, 0x2, 0x4, 0x8, 0x101, 0xf96, 0x5, 0xf, 0x6, 0xe5a, 0xf, 0xa70, 0x7, 0x9, 0x1, 0x1, 0x65, 0x7f, 0x9, 0x101, 0xffc00000, 0x9, 0x5, 0x7, 0xfffffff5, 0x10, 0x6, 0xffff, 0x0, 0x2, 0x3ff, 0x100, 0x2000000, 0x10000, 0x6, 0xd2, 0xfffffefb, 0x0, 0x6, 0x1, 0x8, 0x5c, 0xffffff67, 0x6, 0x47c0f793, 0xfff, 0x22, 0x101, 0x5, 0x8, 0x0, 0x81, 0xd, 0x6d2eff9c, 0xab, 0x4, 0x8, 0x4, 0x8, 0x10, 0x7, 0x2, 0xf, 0x7, 0x80000000, 0x1, 0x1ff, 0x80000001, 0x608, 0x3, 0x6, 0x1, 0x0, 0x2, 0x7f, 0x6, 0x101, 0x1, 0xa20c, 0x7, 0x2, 0xf400000, 0x6, 0x9, 0x1df, 0x7, 0x3, 0x8, 0xa, 0x63, 0x7, 0x4, 0x9, 0x1, 0x5, 0x1, 0x8, 0x6, 0x5a43, 0x7, 0x71c00000, 0x9, 0x4, 0xfffffff9, 0x8, 0x650c, 0xf, 0x6, 0x1000, 0x0, 0xb, 0x1, 0x80000000, 0x5, 0x9, 0x7, 0x2, 0xf500000, 0x777, 0xff, 0x8, 0x7, 0x9, 0x1000, 0x6, 0xf2, 0x5, 0x1, 0x0, 0x5, 0x0, 0x4, 0x0, 0x4, 0x5, 0x7, 0x3, 0x0, 0xb, 0x10, 0x4, 0x7, 0x55, 0x8, 0x6, 0xd1, 0xffffffff, 0x401, 0x0, 0x5, 0x1, 0x0, 0x5ad0, 0x1000, 0xff, 0x8, 0x6, 0x2, 0xf5, 0x1, 0x9, 0x0, 0x4, 0x9, 0x7fff, 0x5, 0x5, 0x3, 0x7, 0x5c570000, 0x2, 0x8000, 0x4fde, 0x7, 0x80000000, 0xffffff01, 0x800, 0xffffffff, 0x400, 0x4486, 0x9, 0x8, 0x3, 0x9, 0x1, 0xb7, 0x1, 0x7, 0x1, 0x81, 0x2, 0x7, 0x5, 0xffff, 0x200, 0xffffffff, 0x800, 0x1, 0x7fff, 0x0, 0xfffffffe, 0x9, 0x6, 0x400, 0x0, 0xebf, 0x9, 0x1c6b, 0x7, 0xa, 0x6, 0x5, 0xc2, 0x4, 0x7, 0x2, 0x6, 0x2, 0x2, 0xfffffffd, 0x1, 0xffffffff, 0x8000, 0x4, 0x800, 0x4, 0x64, 0x7fffffff, 0x0, 0x1, 0x80000000, 0x1, 0x3c4c, 0x6, 0x6, 0x46e, 0x4b, 0x3, 0x4, 0x0, 0x7, 0x2, 0x8, 0x4c, 0x7, 0x2, 0x7f, 0x2, 0x400, 0x1, 0x6, 0x5, 0x4, 0x5, 0x0, 0x5, 0x7, 0x0, 0x27, 0xfd0, 0x1, 0x7ff, 0x1800000, 0x4, 0x3, 0x7, 0x44e9, 0x0, 0xa, 0x8000, 0x4, 0x0, 0xe220, 0x6, 0x1, 0x400, 0x2e, 0x3, 0x9, 0x80000001, 0x8, 0x3, 0x2, 0x8, 0x5, 0x1, 0x8, 0xf, 0x23, 0x6, 0x4, 0x6, 0x5, 0xc, 0x2, 0x3, 0x2, 0x9, 0x8, 0xffff8000, 0xb83, 0xff, 0x4, 0x6, 0x3831, 0x7, 0x4, 0x2, 0x7ff, 0xfffffff3, 0xffffff67, 0x10000, 0x0, 0x80, 0xfffffffe, 0xfffffff7, 0xaf6b, 0x5, 0x5, 0x7, 0x4, 0x3, 0x100, 0x7, 0x7, 0x3, 0x9, 0x7, 0xff, 0x2, 0x10ea, 0x4, 0x800, 0x1, 0x4ae, 0x9, 0x80000001, 0xfffffffc, 0x2, 0x7, 0xed5, 0x599, 0x2c28, 0x6, 0x8, 0x400, 0x9, 0x4, 0xe17, 0x4, 0x5, 0x2, 0x401, 0x1000, 0x1ce, 0x7fff, 0x2, 0x2, 0x5, 0x7fffffff, 0x4, 0x4, 0xb, 0xe, 0x5, 0x4, 0x401, 0x8, 0x6, 0x8, 0x5, 0xe61, 0x75f, 0x2c1c, 0x4, 0x817, 0x6e, 0x5, 0x457, 0x7, 0x8000, 0x8001, 0x1e6, 0x400, 0x8, 0x7, 0x9, 0xffff8e24, 0xffff, 0x0, 0x0, 0x0, 0xfffffc01, 0x6, 0xff, 0x81, 0x0, 0x6, 0xffff, 0x8, 0x4, 0xffffffff, 0x1, 0x8bd, 0x10, 0x1, 0x0, 0x1, 0x6, 0x7, 0x7fffffff, 0xfa4, 0x1, 0x1, 0x3, 0x0, 0xfda, 0x4000000, 0x8, 0x0, 0xfffffffc, 0x10, 0x9, 0xfffff000, 0x3, 0x4, 0x6d65b580, 0x0, 0x40, 0x4, 0x8000, 0x8, 0x800, 0x8, 0x6, 0x6, 0x80000000, 0x3, 0x8, 0x1, 0x7fff, 0x1000, 0x8, 0x8, 0x67cf, 0x10001, 0x800, 0xa802, 0x3, 0x0, 0x5, 0x8, 0x2, 0x1, 0x8001, 0x83, 0x0, 0x2, 0x6, 0xfff, 0x2, 0x51ad, 0x0, 0x6, 0x33e, 0x1a3e, 0x8, 0xe, 0xfffffc01, 0xb300000, 0x4, 0x5, 0x5, 0x5, 0x7, 0x9, 0x7, 0xfffffff9, 0x2, 0xee4e, 0x3, 0x101, 0x8, 0x3, 0x4, 0xb, 0xa, 0x0, 0x9, 0x6, 0x8000, 0x5, 0xb8, 0x218, 0x5, 0x8, 0xf35, 0x1, 0x8, 0x9, 0xfae, 0x7fff, 0x4, 0x1, 0x6e3c, 0x6, 0x8000, 0x1000, 0x6, 0x2, 0x8, 0x3, 0x6, 0x488b, 0x0, 0x0, 0xd, 0x1000, 0x3, 0x3, 0x2, 0x4, 0xe, 0x7ff, 0x2, 0x3, 0xe1, 0x4, 0x100, 0x4, 0xffff, 0x4, 0x0, 0x5, 0xffff8001, 0xffffffff, 0x0, 0x3, 0x9, 0x7, 0x1, 0x4, 0x8, 0x6, 0x9, 0x5a03, 0x1, 0xfffffff9, 0x0, 0x5, 0x3, 0x4, 0x4, 0x7, 0x3, 0x5, 0x1, 0x1, 0x5, 0x4, 0xa1f, 0x85a4, 0x3, 0xfff, 0x20c6, 0x3, 0x4eb, 0xffffffff, 0x7, 0x8, 0x5, 0x67, 0x9, 0x658, 0x40, 0x10000, 0x7, 0x7, 0x359800, 0x4, 0x2, 0x9, 0x3, 0xf2b6, 0x7, 0x5, 0x2, 0x9, 0x8e, 0x10, 0x6, 0x0, 0x4, 0x8001, 0x5, 0x5, 0x7fff, 0x80000001, 0x0, 0x7, 0x6, 0xecd3, 0x3, 0xc1, 0x1, 0x52, 0xa36, 0x6, 0xbfb, 0x2cb, 0x0, 0x4, 0x1, 0x0, 0x10000, 0x6, 0x7, 0x0, 0x0, 0x7fffffff, 0x81, 0x2aac6cc, 0x2, 0xe, 0x40ab, 0x401, 0x7, 0x9, 0x0, 0x8, 0x94, 0x0, 0x5, 0x2, 0x5, 0xac3, 0x6, 0x1c8f, 0x9, 0x4, 0xd, 0x4, 0x5, 0x7, 0xff, 0x0, 0x1, 0x3, 0x5, 0x76, 0x93, 0x6, 0xf, 0x10000, 0x3, 0x81, 0xffffffff, 0x0, 0x7ff, 0x4, 0x8, 0x3, 0x1, 0x3, 0x10001, 0x0, 0xed000000, 0x7, 0x401, 0xb2, 0xa, 0x25, 0x0, 0x3, 0x2, 0x3, 0xe41c, 0xb, 0x6, 0xe3da, 0xffff0000, 0x2, 0x1, 0x1, 0x8, 0x1, 0x75e, 0x3ff, 0x6f8, 0xf, 0x5, 0x401, 0x2, 0x5, 0x6, 0x0, 0x80000000, 0x1, 0x7, 0x2, 0x9, 0x0, 0x1000, 0x3, 0x8, 0x6, 0x5, 0x800, 0x6, 0x3, 0x6, 0x2, 0x879, 0x2, 0x800, 0x4, 0x76, 0x8, 0x1, 0x7, 0x2, 0x3, 0x7fff, 0x7f06bc93, 0x2, 0x0, 0x0, 0x9, 0x0, 0xf5b, 0x1, 0x4, 0xe, 0x7, 0x7, 0xf23, 0x45a0, 0x7fffffff, 0x0, 0x1f, 0x8, 0x7, 0x3, 0x0, 0x55, 0x3, 0x4, 0x9, 0xad0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x7, 0xc4, 0x2, 0x401, 0xc, 0xffffffff, 0x1, 0x6, 0x4, 0x100, 0x9, 0x1b, 0x401, 0xd0, 0x82, 0x5, 0xf00000, 0x7fff, 0x7, 0xa23, 0x80000000, 0xfff, 0x3f8, 0x9, 0xd8, 0x9, 0x6, 0xd, 0x45, 0xfffffffd, 0x1, 0x0, 0x5, 0xf6d, 0x0, 0x40, 0x5, 0x4, 0x9, 0xfffffffe, 0x4c6, 0x2, 0x7, 0x3, 0x40, 0x90, 0x9, 0xc3e, 0x9, 0x4, 0x10000, 0x3, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x2165, 0xffffffff, 0x4, 0xfffffffe, 0x4, 0xfffffff8, 0x6, 0x1, 0x1, 0xe, 0x8, 0x5, 0x5, 0x3, 0x5, 0xffffff01, 0xc629, 0x33c00000, 0xffff, 0xfffffff7, 0xcd1, 0x7fff, 0x2, 0xa97a, 0x8bbf, 0x1, 0x7f, 0x40, 0x5, 0x8, 0x1, 0x6, 0x4, 0x9, 0x1f2, 0x7fff, 0x7, 0x8, 0x1, 0x1, 0x9, 0x8d7, 0xae3d, 0x6942, 0x1000, 0xffffffff, 0x1, 0xfffff800, 0x7e6e, 0x8a9a569, 0x3ff, 0x10001, 0x7f, 0x5, 0xe90, 0x401, 0x0, 0x5, 0x2, 0x0, 0x8, 0x8, 0x86a, 0x1, 0x0, 0x6, 0x5861, 0x1, 0x3ed0ad44, 0xffffffda, 0x2, 0x5, 0x1, 0x1, 0x4, 0x7, 0x2, 0x5, 0x8, 0x5, 0xffff, 0x10001, 0x8, 0x1, 0x3, 0x8, 0xffff, 0x8, 0x401, 0x1, 0x9, 0xfff, 0x4, 0x8, 0x9, 0x9, 0x8, 0x8, 0xb, 0x2, 0x7f, 0xa, 0x1, 0x4, 0x8, 0x3, 0x7, 0x4, 0xd, 0x2, 0xff, 0x88, 0x7ff, 0x7f, 0x81, 0x7, 0x0, 0x8, 0x3, 0x7f, 0x0, 0x4, 0x80000000, 0x2, 0x2, 0x5, 0x6, 0x0, 0x0, 0x4, 0x7fff, 0x8, 0x1, 0x80, 0x7fffffff, 0x0, 0xf25, 0x43b6, 0x1, 0x8, 0x8f, 0xe, 0x2, 0x6, 0x1, 0x401, 0x1, 0x7, 0x8, 0x401, 0x1000, 0x8, 0x37, 0xaf, 0xff, 0x6, 0x9, 0x2, 0x2, 0x4, 0x0, 0x80000000, 0x6, 0x8000, 0xeb, 0x3, 0x9, 0x7, 0x7, 0x8, 0xffff3a2c, 0x8, 0x80000000, 0x200, 0x1, 0xc2b, 0xb541, 0x2802, 0x4, 0x7a6625c1, 0xe0, 0xfffffffd, 0x0, 0xfffffffe, 0xa4d, 0x9, 0x9, 0x3, 0x8, 0x6, 0x7, 0xb55a, 0x7, 0xfffffffa, 0x74, 0x80000000, 0xfc5, 0x8000, 0x3, 0x24, 0x7, 0x8, 0x1, 0xf80000, 0x5, 0x2, 0x1000, 0x0, 0x6, 0x240, 0x7f, 0x7, 0x5, 0x2, 0x80000000, 0x5, 0x5, 0x1, 0xfffffffa, 0x8, 0x100, 0x6, 0x3, 0x2, 0xf, 0x7, 0x2, 0xe, 0x44ce, 0x80, 0x1ff, 0x4, 0x8, 0x1, 0xc, 0xe8e3, 0x4800000, 0x4, 0xe, 0xfb6, 0x9, 0x400, 0xea28, 0xffff16b5, 0x800, 0x41, 0x7, 0xa17, 0x8e7, 0xce2, 0x3, 0xff, 0x7, 0x1, 0x3, 0x9, 0x1, 0xffffff01, 0x8, 0x0, 0x3, 0x100, 0x8000, 0x7f, 0xee, 0x8000, 0x2, 0x80000000, 0x5, 0xfffffff5, 0x4, 0x4, 0xffffffc0, 0x6, 0x5, 0x2, 0x2, 0x9, 0x10000, 0xd828, 0x8000000, 0x3d9, 0x0, 0x52, 0x6, 0x3, 0xfffffff7, 0x10001, 0x8, 0x3, 0x8, 0xf15, 0x7, 0x3, 0x0, 0x3, 0xb, 0x8001, 0x7, 0x4, 0x8, 0x9, 0x3b, 0xf, 0x7c, 0x9, 0x10000, 0x5, 0x1, 0x7, 0x8, 0x6, 0x4, 0x5, 0x5, 0x0, 0xb66b, 0x2, 0x0, 0xfff, 0x2, 0xfff, 0x0, 0x7, 0x1, 0x40, 0x33, 0x7, 0x8001, 0x7, 0x2800, 0xd84, 0x0, 0x226, 0x5, 0x0, 0x3, 0x6, 0x31f87fc7, 0x100, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x0, 0x3, 0x80, 0xe, 0xe5e7, 0x81, 0x9, 0x2, 0x9, 0x0, 0x5, 0x81, 0x7, 0x100, 0x0, 0xbfb, 0x2294, 0x9, 0x2, 0x9, 0xc, 0xaeb, 0x0, 0x400, 0x8, 0x8f, 0x9, 0x401, 0x7, 0x10, 0x1, 0x6, 0x7, 0x6, 0x8, 0x5, 0x0, 0x0, 0x3, 0x6, 0x1dc, 0x40, 0x246, 0x4, 0x4, 0x8, 0xb, 0x0, 0x59, 0x80000000, 0x5, 0x93d, 0x9, 0xd4, 0x4, 0x9, 0x6, 0x9, 0x0, 0xf, 0x7fff, 0x0, 0x6, 0x9, 0x4, 0x4, 0x7c53, 0x2, 0x5, 0x934b, 0x9, 0x9, 0x4, 0xdcb9, 0x7, 0x8, 0x4, 0x8, 0xb1, 0xa3, 0xc0000000, 0x7f, 0x3, 0x3, 0xc, 0x4, 0xc825, 0x7fff, 0x9, 0x4, 0x2, 0x200, 0x7, 0x3, 0x3, 0x81, 0x2, 0x80, 0x736d, 0x0, 0x80000001, 0xf3, 0xc268, 0x8000, 0x76c1, 0x7fff, 0xffffff7f, 0xea7a, 0xfffffffb, 0x6, 0x8001, 0xffffffff, 0x4, 0x8, 0x0, 0x8, 0x2, 0xc, 0x0, 0x0, 0x4, 0x8, 0x9, 0xb2, 0x150, 0x1, 0x67, 0x517, 0xfffffff9, 0xcd, 0x7, 0x1, 0x0, 0x6, 0x3, 0x10, 0x3, 0x7, 0xe4c, 0xacab, 0x4, 0x2909, 0x6, 0x10, 0x3, 0x1, 0x0, 0x81, 0x80000001, 0x9, 0xd0f3, 0x6c49, 0x0, 0x3, 0x1000, 0xd, 0x2, 0x10, 0x8, 0x4, 0x4, 0x5, 0xd094, 0xe6d8, 0x6203f14f, 0x6, 0x80000001, 0x10001, 0x6, 0x9, 0xdf89, 0xa, 0x4, 0x10000, 0x7136c5af, 0x5, 0x7, 0x3, 0x345, 0x80000001, 0x1, 0xc, 0x7, 0x3e35, 0x6, 0x8, 0x8, 0x9, 0x1, 0x6, 0x3, 0x100, 0x100, 0xffff, 0xa, 0x4, 0x7, 0x80000000, 0x3, 0x80000000, 0x8, 0xa50, 0x8f, 0x80, 0x3, 0x9, 0x4, 0x1, 0x5, 0x9, 0x4, 0x9f, 0x2, 0x115c, 0x40, 0x101, 0x8, 0xc, 0x9, 0x2e97, 0x8, 0x100, 0x5, 0x9, 0x8, 0x2, 0x6b, 0x0, 0x9, 0x9, 0xd9b, 0x7c89fa3e, 0x6, 0xcb2, 0x3, 0x6, 0xff, 0x29, 0x9, 0x49fb6bb1, 0x6, 0xfffffffc, 0xdf, 0xfffffffd, 0x9, 0x4, 0x8, 0x8, 0xf18d, 0x10000, 0x2, 0x9, 0xffff, 0x9, 0x9, 0x8, 0x7, 0x80000000, 0x4, 0xa, 0x4800, 0x5, 0x18000000, 0x80000001, 0x3, 0x8, 0x81, 0xfffffff0, 0x6, 0x3d, 0xff, 0x7, 0x26, 0x6, 0x4, 0x164, 0x8, 0x9, 0x10000, 0x37, 0x1d, 0x40, 0x81, 0xfffff800, 0x5, 0xb, 0x8, 0x8, 0x5, 0x80, 0x7f, 0x66f, 0x80000001, 0x341, 0x5, 0xff, 0x80, 0x8, 0x6, 0xffffff00, 0xa, 0x800, 0x4, 0xfff, 0xfffffff8, 0xc, 0x1000, 0x4, 0x3, 0x3ff, 0xffffffff, 0x8, 0x2, 0x9, 0x80000000, 0x5, 0xfffffffc, 0x9, 0xc, 0x8, 0xe9, 0x7, 0x4, 0x7fff, 0x7fffffff, 0x7fffffff, 0x10, 0xe, 0x7, 0x40, 0xc9, 0x9, 0x81, 0x4d, 0x8001, 0x401, 0x6, 0x3, 0x7, 0x3, 0x8, 0x4, 0x8, 0x3d7666c, 0x6b, 0x3, 0x699, 0x0, 0xc, 0x2, 0x16, 0x7fffffff, 0x5, 0x8, 0xa, 0xfffffffd, 0x101, 0x0, 0x1000, 0x3, 0x3, 0xfff, 0x5, 0x3, 0x0, 0x9, 0xffff3887, 0x101, 0xd, 0x4, 0xc, 0x8, 0x3957, 0x0, 0xe, 0xfffffffb, 0x4, 0x9, 0x6, 0x9, 0x9d30, 0x7, 0x81, 0x7fffffff, 0x0, 0x7f, 0x3, 0x800, 0x5, 0x6, 0x16, 0x8, 0x3, 0xfffff001, 0x1dae, 0x6, 0x10001, 0x10001, 0x5, 0x9, 0x401, 0x0, 0x1d92, 0x2, 0x2, 0x8000, 0x4, 0x0, 0x70, 0x1, 0x8, 0xfffffffc, 0x7, 0x1, 0x2, 0xfffffff8, 0x5, 0x3, 0x6, 0x81, 0x5, 0x1, 0xf, 0x8, 0x7, 0x1ff, 0xad2, 0x9, 0x40, 0x7d, 0x2, 0x4, 0x2, 0x8, 0x0, 0x6, 0xd, 0x0, 0xffffdfb0, 0x5, 0x2, 0x6, 0x1, 0x1ff, 0xb6b, 0xffff, 0x80000000, 0x5, 0x4, 0x2, 0x6, 0x3ff, 0x192, 0x7, 0xffff, 0x5, 0x1000, 0x2, 0x81, 0xfffffffd, 0x1000, 0x200, 0x6, 0x80, 0x5, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 0x6, 0x10000, 0x1000, 0x0, 0x2, 0x2, 0x7, 0x6, 0x5, 0x0, 0xddf, 0x7fffffff, 0xc, 0x2, 0xfffffffb, 0xff, 0xfb, 0x6, 0x81e0, 0xd76, 0x5, 0x8, 0x7, 0x6, 0x2, 0x1, 0xdb86, 0xfff, 0x4, 0x3, 0x9, 0x0, 0xb9b, 0x3, 0x1000, 0x6, 0x827, 0x3, 0x1, 0xa, 0xa3, 0x1, 0xb8, 0x0, 0x3ff, 0x8001, 0x5, 0x2, 0x9, 0x249, 0xb6ef, 0x9, 0xb, 0xc4c, 0x0, 0x3, 0xf, 0x1, 0x240000, 0x3, 0x2b1, 0x5, 0x3922, 0x7ebe, 0x5, 0x6, 0x35bd, 0x65, 0x10, 0x10001, 0x7ff, 0x0, 0x3, 0x7fff, 0xf00a, 0x5f, 0x7, 0x7ff, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x200, 0x3, 0x7c8d, 0x8001, 0x92, 0x80000000, 0x9, 0xffff, 0x3, 0x10000, 0x4, 0x7c0, 0x3, 0x7fffffff, 0xff, 0x5, 0x6, 0x1, 0xe, 0x3, 0x3, 0x7, 0x0, 0xe6, 0x9, 0x8119, 0x4, 0x9, 0xcdb9, 0x0, 0xfffffff8, 0x3, 0x800, 0x7, 0x3, 0x9, 0x3, 0x7, 0x5, 0x0, 0xeb2, 0x0, 0x20, 0x3, 0x1, 0x4, 0x1, 0xc, 0x2, 0x8, 0x9, 0x6d2, 0x400, 0x1, 0x9, 0x3, 0x3, 0x5, 0xc4, 0x5, 0xe7, 0x7, 0x80000001, 0x7, 0x4, 0x66, 0x1, 0x344, 0x7ff, 0x37e54c3, 0x4, 0x800, 0x7, 0x94, 0x819d, 0x8, 0x8001, 0xf, 0x2f1, 0x14000, 0x9, 0xfff, 0x12, 0x3, 0xd108, 0x7, 0xd303, 0x5, 0x3, 0x1, 0x10000000, 0x2, 0x4, 0x80000000, 0x9, 0x2, 0x32, 0x8fb, 0x0, 0x0, 0x8, 0x4, 0x10000, 0x8, 0x10, 0x2, 0x1ff, 0x2, 0x1, 0x7, 0x7ad, 0x5, 0xffffffff, 0x780000, 0x9, 0x0, 0xfffffff7, 0x3ff, 0xe36, 0x2, 0x1, 0x0, 0x6130, 0xfff, 0xa78, 0x3, 0x0, 0x8001, 0x8, 0x200, 0xa, 0x3, 0x2, 0x66, 0x8, 0xb04, 0x0, 0x8, 0x7fff, 0x6, 0x8, 0x7, 0x3ff, 0x5, 0x7, 0xf604, 0x9, 0x9, 0x7ff, 0x7f, 0x5, 0x9, 0xa62, 0x0, 0x2, 0x10000, 0x8001, 0x100, 0x18, 0x10000, 0xfffffffa, 0x8, 0x7fff, 0x1c3, 0x80000001, 0x1, 0xfffff2bc, 0x0, 0x3, 0x1, 0x9, 0x7fffffff, 0x8001, 0x1c, 0x0, 0x6, 0x0, 0x2943, 0x9, 0xf, 0x8, 0xa81b, 0x1ff, 0x6, 0x8, 0x6, 0x80, 0x2, 0x9, 0x3, 0x7, 0x79, 0x8, 0xe2f2, 0x0, 0xe07, 0x8000, 0x0, 0x8, 0x0, 0x7fff, 0x10, 0x3, 0xf, 0x6c, 0x9, 0x0, 0x0, 0x400, 0x2, 0x2, 0x4, 0x6, 0x1, 0x4, 0xb5d0, 0x5ccf, 0x9, 0x0, 0x6, 0x2, 0x400, 0x7, 0xa, 0x1, 0x2, 0x7, 0x1, 0xd6a, 0x3ff, 0x5, 0x9, 0x8, 0x1, 0x1, 0x0, 0x1ff, 0xff, 0x3, 0x3, 0x5, 0x6, 0x0, 0x0, 0x0, 0x8, 0xc0ee, 0x7, 0x2, 0x9, 0x9, 0xc, 0x8, 0x7fff, 0xc3, 0x3, 0x8, 0xbe, 0xce, 0x9, 0xf, 0x5, 0x7, 0x800, 0x3, 0x5, 0xa5c88682, 0x3, 0x1, 0x5, 0x7, 0x4, 0x1, 0x2, 0xcc, 0x400, 0x6, 0xe, 0x0, 0xfffffffc, 0x2c, 0x1, 0x400, 0xfffffff7, 0x400, 0x6b, 0x2, 0x3, 0x8, 0x4, 0x1000, 0x7, 0x7ff, 0x8, 0xfffffff9, 0x5, 0x3, 0xd0, 0x9, 0xc, 0x3, 0x4ff2, 0x4, 0xe, 0x1ff, 0x15, 0x101, 0x1, 0x8, 0x40, 0x7, 0x3ff, 0x917d415, 0x3, 0x2, 0x4, 0x0, 0x800, 0xfffffffb, 0x8, 0x0, 0x0, 0x7fff, 0x5, 0x9, 0x9, 0x4, 0xb0000000, 0x1, 0x8, 0x3, 0x40, 0x5, 0x1, 0xbd, 0x6, 0x40, 0x7, 0x7, 0x6, 0x7, 0xd3, 0x8000, 0x8, 0x5, 0x9, 0x5, 0x7fff, 0xc, 0x4, 0xcc54, 0x0, 0x2, 0x1ff, 0x6, 0xff, 0x1ff, 0xffffffff, 0xfffff801, 0xfff, 0xe, 0x53afc1b2, 0x9, 0x73, 0x0, 0x0, 0x6, 0x20000, 0x6, 0x401, 0x6, 0x0, 0x9, 0x200, 0x7, 0x81, 0x240000, 0x80000001, 0x5, 0x10, 0x2, 0x9, 0x9, 0xd, 0x6, 0x8, 0x7ff, 0x4a65, 0xffff, 0x4, 0x168, 0x1, 0x2, 0x5, 0x4, 0x1f, 0x81, 0x2, 0x27, 0x8, 0x2a6e, 0x800, 0xffffc586, 0x6c, 0x9, 0x8, 0x1a2d, 0x9, 0x101, 0xfffffff8, 0x7fff, 0x1, 0x2, 0x4, 0x2, 0x2f14, 0x101, 0x1, 0xff, 0x8f23, 0x0, 0x0, 0x4, 0x0, 0x6, 0x9, 0x400, 0x401, 0x1, 0x3, 0x6, 0x1000, 0x8, 0x8000, 0x87, 0x4, 0x1, 0x101, 0x9, 0x5, 0x3, 0x6, 0xfffffff9, 0x8, 0x2, 0x8000, 0xff, 0x3612, 0x3, 0x0, 0x10001, 0x0, 0x100, 0x0, 0x4, 0xffffc825, 0xe87, 0x5, 0x7fffffff, 0x7fff, 0x3, 0x30000, 0x800, 0x2, 0x7ff, 0x0, 0xe0d0260, 0xffffff4f, 0xfffffffe, 0x3, 0x5, 0x3ff, 0x71a94307, 0x2], 0x4, 0x7}) 742.454458ms ago: executing program 3 (id=2042): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r6) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000040)=0x1) connect$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 653.813175ms ago: executing program 2 (id=2043): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 525.555703ms ago: executing program 3 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) r4 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) 386.682808ms ago: executing program 1 (id=2045): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0xa541) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) getrandom(&(0x7f0000004440)=""/34, 0x22, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x3436324d, 0x6, 0x2, [{0x10008c, 0xf}, {0x4, 0xffffffff}, {0x1, 0x5}, {0x400, 0xf}, {0x7fffffff, 0x9}, {0x5, 0x100}, {0xfffffffb, 0x10}, {0x10001, 0x1f}], 0xf, 0xb, 0x8, 0x1, 0x2}}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x14, r5, 0x80485dc1c126afb3, 0x0, 0xfffffffc, {0x33}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c62c86cfcaeef6dcaab6562bda70000001a00010029bd700700000000822020000000000000204797e22933befe68000005001b0011000000ee055dc515de6ce01b90047f163de1bf6c10eb315e0eab1634000056e5cea342fb63058bd4413320f316d153d530353d1eae0cc1a6072c1fdfdc3ed0f0a77da44119eaa9156383b7ee151e2c1a5ad785c122bac6b8427cc0437c9f3bc4e2850c0da597ca2290159b8f2e96185f56703e2f5a67e059827b6291f09c1e84a1df89c474ba70decdee2e403a91893a55c301a5bcd5e9a40fd61d0209eed4b65148b803be86dbe2258b9ee27c99ca9624506d6b3e942afdf8e8d2237c662bcb730e90"], 0x2c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)=0x2) 385.86898ms ago: executing program 3 (id=2046): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x40400) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000002"], 0x14}], 0x1}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000016500), 0x0, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000180)={0x5, 0x0, [{0xc0000001, 0x2, 0x3, 0x0, 0x101, 0xc, 0x9}, {0xc0000000, 0xfffffff9, 0x7, 0x8, 0x7, 0x0, 0x9}, {0x4000000d, 0x3, 0x0, 0x1, 0x400, 0x600000, 0x4}, {0x4, 0x8, 0x3, 0x4, 0x3, 0x2, 0x7}, {0x80000007, 0x6, 0x1, 0x8, 0xa, 0x2, 0x2}]}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x560e, &(0x7f0000000140)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000008140)={0x2020}, 0x2020) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(xeta-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000400)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000146c0000000000001400000000000000000000000000000000000000007f000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000006000000000000000010000000000000fdffffffffffffff0000000000000000000000000000008000000000020001062c00000000000000480003006465666c61746500"/191, @ANYBLOB="f7b64bc56c8b71f3942771af8d03146cd22b31b3bdd62d5befeef9a96f49734cf03af2b62e4464ad08cdeed903bd019108592f02dd264754a62f09662b92005f1caf94e5770517c071f70aea96fb3efc61b9dd2cfad2379067be6c4b61329905e306ea4a4e0a4ce05c4695a27228ab733fb48a9ec327a1bc803523f2787dcce956cde33cf0f4fa6066b8e709eea64f56610f899ab3b499d6b758c9f4e13cff559430f315838dd37cb874632e3af623df09bf0d30a37456dab7bea4b2ed89d02d76226251c1304066", @ANYRESOCT=r4], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 0s ago: executing program 1 (id=2047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (fail_nth: 3) kernel console output (not intermixed with test programs): T5913] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 475.563389][ T5913] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 475.563419][ T5913] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 475.563440][ T5913] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 475.780203][ T5913] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 475.850796][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1687'. [ 476.479995][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.652844][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.722963][ T158] bond0 (unregistering): Released all slaves [ 476.891249][ T5913] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 476.891636][ T5913] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 476.998333][ T5913] usb 1-1: USB disconnect, device number 44 [ 477.093730][T10508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.156245][ T6034] imon_raw 2-1:5.29: IR endpoint missing [ 477.172329][ T6034] usb 2-1: USB disconnect, device number 59 [ 478.395824][T10508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.608284][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 478.774630][ T31] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 478.774664][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 478.782017][ T31] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 478.782047][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.782066][ T31] usb 1-1: Product: syz [ 478.782079][ T31] usb 1-1: Manufacturer: syz [ 478.782092][ T31] usb 1-1: SerialNumber: syz [ 478.810930][ T31] usb 1-1: config 0 descriptor?? [ 478.830583][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 478.858053][ T6034] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 478.918026][ T158] hsr_slave_0: left promiscuous mode [ 478.922391][T10830] FAULT_INJECTION: forcing a failure. [ 478.922391][T10830] name failslab, interval 1, probability 0, space 0, times 0 [ 478.922428][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.3.1698 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 478.922452][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 478.922463][T10830] Call Trace: [ 478.922471][T10830] [ 478.922481][T10830] dump_stack_lvl+0xe8/0x150 [ 478.922518][T10830] should_fail_ex+0x46b/0x600 [ 478.922553][T10830] should_failslab+0xa8/0x100 [ 478.922580][T10830] __kmalloc_cache_noprof+0x84/0x690 [ 478.922606][T10830] ? __se_sys_mount+0x166/0x420 [ 478.922633][T10830] ? memdup_user+0x99/0xd0 [ 478.922659][T10830] __se_sys_mount+0x166/0x420 [ 478.922694][T10830] ? __pfx___se_sys_mount+0x10/0x10 [ 478.922730][T10830] ? __x64_sys_mount+0x20/0xc0 [ 478.922759][T10830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.922788][T10830] do_syscall_64+0x15f/0xf80 [ 478.922816][T10830] ? trace_irq_disable+0x3b/0x140 [ 478.922843][T10830] ? clear_bhb_loop+0x40/0x90 [ 478.922878][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.922897][T10830] RIP: 0033:0x7f8a6448c819 [ 478.922918][T10830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.922936][T10830] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 478.922958][T10830] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 478.922973][T10830] RDX: 0000200000000180 RSI: 0000200000000300 RDI: 0000000000000000 [ 478.922987][T10830] RBP: 00007f8a626e6090 R08: 0000200000000280 R09: 0000000000000000 [ 478.923001][T10830] R10: 0000000002000090 R11: 0000000000000246 R12: 0000000000000001 [ 478.923013][T10830] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 478.923047][T10830] [ 478.973573][ T158] hsr_slave_1: left promiscuous mode [ 479.008534][ T36] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 479.025431][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.027990][ T6034] usb 3-1: Using ep0 maxpacket: 32 [ 479.049030][ T6034] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 479.049058][ T6034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.049075][ T6034] usb 3-1: config 0 has no interface number 0 [ 479.049118][ T6034] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.049151][ T6034] usb 3-1: config 0 interface 196 has no altsetting 0 [ 479.053740][ T6034] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 479.053769][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.053890][ T6034] usb 3-1: Product: syz [ 479.053905][ T6034] usb 3-1: Manufacturer: syz [ 479.053917][ T6034] usb 3-1: SerialNumber: syz [ 479.067290][ T6034] usb 3-1: config 0 descriptor?? [ 479.160851][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.162879][ T6034] ipheth 3-1:0.196: Unable to find endpoints [ 479.187995][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 479.228485][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 2314, setting to 64 [ 479.232024][ T36] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 479.232053][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.232072][ T36] usb 2-1: Product: syz [ 479.232086][ T36] usb 2-1: Manufacturer: syz [ 479.232099][ T36] usb 2-1: SerialNumber: syz [ 479.301515][ T36] usb 2-1: config 0 descriptor?? [ 479.434805][ T31] gspca_sunplus: reg_r err -32 [ 479.434914][ T31] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 479.464066][ T31] usb 1-1: USB disconnect, device number 45 [ 479.465908][ T36] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 479.895352][T10842] FAULT_INJECTION: forcing a failure. [ 479.895352][T10842] name failslab, interval 1, probability 0, space 0, times 0 [ 479.895392][T10842] CPU: 1 UID: 0 PID: 10842 Comm: syz.3.1700 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.895416][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.895428][T10842] Call Trace: [ 479.895437][T10842] [ 479.895445][T10842] dump_stack_lvl+0xe8/0x150 [ 479.895482][T10842] should_fail_ex+0x46b/0x600 [ 479.895517][T10842] should_failslab+0xa8/0x100 [ 479.895547][T10842] __kmalloc_noprof+0xdf/0x7b0 [ 479.895570][T10842] ? kfree+0x4d/0x6c0 [ 479.895589][T10842] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 479.895622][T10842] tomoyo_realpath_from_path+0xe3/0x5d0 [ 479.895649][T10842] ? tomoyo_domain+0xd8/0x130 [ 479.895686][T10842] tomoyo_path_perm+0x283/0x560 [ 479.895711][T10842] ? tomoyo_path_perm+0x251/0x560 [ 479.895734][T10842] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 479.895824][T10842] security_inode_getattr+0x12b/0x310 [ 479.895850][T10842] vfs_getattr+0x23/0x70 [ 479.895881][T10842] vfs_statx_path+0x2b/0x230 [ 479.895906][T10842] ? vfs_statx+0x107/0x200 [ 479.895934][T10842] vfs_statx+0x12e/0x200 [ 479.895964][T10842] ? __pfx_vfs_statx+0x10/0x10 [ 479.895989][T10842] ? strncpy_from_user+0x150/0x2b0 [ 479.896022][T10842] ? do_getname+0x151/0x250 [ 479.896054][T10842] vfs_fstatat+0x11b/0x170 [ 479.896083][T10842] __x64_sys_newfstatat+0x151/0x200 [ 479.896110][T10842] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.896143][T10842] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 479.896194][T10842] ? __pfx_ksys_write+0x10/0x10 [ 479.896230][T10842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.896252][T10842] do_syscall_64+0x15f/0xf80 [ 479.896279][T10842] ? trace_irq_disable+0x3b/0x140 [ 479.896306][T10842] ? clear_bhb_loop+0x40/0x90 [ 479.896331][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.896351][T10842] RIP: 0033:0x7f8a6448c819 [ 479.896373][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.896392][T10842] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 479.896414][T10842] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 479.896428][T10842] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 479.896442][T10842] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.896454][T10842] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 479.896468][T10842] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 479.896503][T10842] [ 479.928182][T10842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.396071][ T31] usb 3-1: USB disconnect, device number 57 [ 480.644141][ T43] usb 2-1: Failed to submit usb control message: -110 [ 480.644193][ T43] usb 2-1: unable to send the bmi data to the device: -110 [ 480.644212][ T43] usb 2-1: unable to get target info from device [ 480.644228][ T43] usb 2-1: could not get target info (-110) [ 480.644385][ T43] usb 2-1: could not probe fw (-110) [ 481.835154][T10859] FAULT_INJECTION: forcing a failure. [ 481.835154][T10859] name failslab, interval 1, probability 0, space 0, times 0 [ 481.835193][T10859] CPU: 1 UID: 0 PID: 10859 Comm: syz.2.1706 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 481.835217][T10859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.835230][T10859] Call Trace: [ 481.835239][T10859] [ 481.835248][T10859] dump_stack_lvl+0xe8/0x150 [ 481.835286][T10859] should_fail_ex+0x46b/0x600 [ 481.835324][T10859] should_failslab+0xa8/0x100 [ 481.835354][T10859] __kmalloc_noprof+0xdf/0x7b0 [ 481.835380][T10859] ? tomoyo_encode+0x28b/0x550 [ 481.835417][T10859] tomoyo_encode+0x28b/0x550 [ 481.835454][T10859] tomoyo_realpath_from_path+0x58d/0x5d0 [ 481.835496][T10859] ? tomoyo_path_number_perm+0x219/0x630 [ 481.835528][T10859] tomoyo_path_number_perm+0x246/0x630 [ 481.835557][T10859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.835581][T10859] ? __lock_acquire+0x6b5/0x2cf0 [ 481.835607][T10859] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.835674][T10859] ? __fget_files+0x2a/0x420 [ 481.835698][T10859] ? __fget_files+0x2a/0x420 [ 481.835717][T10859] ? __fget_files+0x3a6/0x420 [ 481.835736][T10859] ? __fget_files+0x2a/0x420 [ 481.835762][T10859] security_file_ioctl+0xc3/0x2a0 [ 481.835792][T10859] __se_sys_ioctl+0x47/0x170 [ 481.835918][T10859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.835948][T10859] do_syscall_64+0x15f/0xf80 [ 481.835978][T10859] ? trace_irq_disable+0x3b/0x140 [ 481.836006][T10859] ? clear_bhb_loop+0x40/0x90 [ 481.836045][T10859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.836067][T10859] RIP: 0033:0x7f205cf3c819 [ 481.836088][T10859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.836106][T10859] RSP: 002b:00007f205b196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.836131][T10859] RAX: ffffffffffffffda RBX: 00007f205d1b5fa0 RCX: 00007f205cf3c819 [ 481.836147][T10859] RDX: 0000200000000200 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 481.836161][T10859] RBP: 00007f205b196090 R08: 0000000000000000 R09: 0000000000000000 [ 481.836174][T10859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.836187][T10859] R13: 00007f205d1b6038 R14: 00007f205d1b5fa0 R15: 00007ffc007097f8 [ 481.836224][T10859] [ 481.836436][T10859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 483.145986][ T158] team0 (unregistering): Port device team_slave_1 removed [ 483.228836][ T158] team0 (unregistering): Port device team_slave_0 removed [ 484.160315][T10508] team0: Port device team_slave_0 added [ 484.212082][T10508] team0: Port device team_slave_1 added [ 484.304333][T10508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.304352][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.304377][T10508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.362146][T10508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.362162][T10508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.362178][T10508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.381227][ T5890] usb 2-1: USB disconnect, device number 60 [ 484.694030][T10900] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1719'. [ 485.950016][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 486.158839][T10508] hsr_slave_0: entered promiscuous mode [ 486.161982][T10508] hsr_slave_1: entered promiscuous mode [ 486.164750][T10508] debugfs: 'hsr0' already exists in 'hsr' [ 486.164782][T10508] Cannot create hsr debugfs directory [ 486.184748][ T5890] lo speed is unknown, defaulting to 1000 [ 486.505414][ T5464] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.788668][T10944] FAULT_INJECTION: forcing a failure. [ 487.788668][T10944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.788707][T10944] CPU: 0 UID: 0 PID: 10944 Comm: syz.2.1730 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.788729][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.788741][T10944] Call Trace: [ 487.788748][T10944] [ 487.788757][T10944] dump_stack_lvl+0xe8/0x150 [ 487.788793][T10944] should_fail_ex+0x46b/0x600 [ 487.788830][T10944] prepare_alloc_pages+0x22a/0x6b0 [ 487.788867][T10944] __alloc_frozen_pages_noprof+0x12f/0x380 [ 487.788900][T10944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.788933][T10944] ? __pfx_policy_nodemask+0x10/0x10 [ 487.788962][T10944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 487.789000][T10944] ? lockdep_hardirqs_on+0x7a/0x110 [ 487.789032][T10944] alloc_pages_mpol+0xd1/0x380 [ 487.789063][T10944] alloc_pages_noprof+0xd2/0x2f0 [ 487.789092][T10944] get_free_pages_noprof+0xf/0x80 [ 487.789120][T10944] __kasan_populate_vmalloc+0x38/0x1d0 [ 487.789141][T10944] ? rt_spin_unlock+0x160/0x200 [ 487.789168][T10944] alloc_vmap_area+0xd47/0x1480 [ 487.789208][T10944] ? __pfx_alloc_vmap_area+0x10/0x10 [ 487.789230][T10944] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 487.789255][T10944] ? __get_vm_area_node+0x171/0x350 [ 487.789277][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.789308][T10944] __get_vm_area_node+0x226/0x350 [ 487.789338][T10944] __vmalloc_node_range_noprof+0x36a/0x1750 [ 487.789364][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.789414][T10944] ? is_bpf_text_address+0x26/0x2b0 [ 487.789447][T10944] ? kernel_text_address+0xa5/0xe0 [ 487.789477][T10944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.789507][T10944] ? __lock_acquire+0x6b5/0x2cf0 [ 487.789531][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.789554][T10944] __vmalloc_noprof+0xd2/0x120 [ 487.789576][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.789605][T10944] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.789635][T10944] bpf_prog_alloc+0x3c/0x1a0 [ 487.789665][T10944] bpf_prog_load+0x7ba/0x1ae0 [ 487.789704][T10944] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.789807][T10944] ? __might_fault+0xaf/0x130 [ 487.789865][T10944] ? bpf_lsm_bpf+0x9/0x20 [ 487.789892][T10944] ? security_bpf+0x7e/0x2d0 [ 487.789920][T10944] __sys_bpf+0x618/0x950 [ 487.789952][T10944] ? __pfx___sys_bpf+0x10/0x10 [ 487.789985][T10944] ? rt_mutex_slowunlock+0x1cb/0x300 [ 487.790026][T10944] ? ksys_write+0x248/0x270 [ 487.790053][T10944] ? __pfx_ksys_write+0x10/0x10 [ 487.790083][T10944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.790105][T10944] __x64_sys_bpf+0x7c/0x90 [ 487.790130][T10944] do_syscall_64+0x15f/0xf80 [ 487.790157][T10944] ? trace_irq_disable+0x3b/0x140 [ 487.790184][T10944] ? clear_bhb_loop+0x40/0x90 [ 487.790210][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.790232][T10944] RIP: 0033:0x7f205cf3c819 [ 487.790252][T10944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.790268][T10944] RSP: 002b:00007f205b196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.790292][T10944] RAX: ffffffffffffffda RBX: 00007f205d1b5fa0 RCX: 00007f205cf3c819 [ 487.790307][T10944] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 487.790321][T10944] RBP: 00007f205b196090 R08: 0000000000000000 R09: 0000000000000000 [ 487.790333][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.790345][T10944] R13: 00007f205d1b6038 R14: 00007f205d1b5fa0 R15: 00007ffc007097f8 [ 487.790378][T10944] [ 487.793607][T10944] syz.2.1730: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 487.793676][T10944] CPU: 0 UID: 0 PID: 10944 Comm: syz.2.1730 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.793695][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.793706][T10944] Call Trace: [ 487.793713][T10944] [ 487.793720][T10944] dump_stack_lvl+0xe8/0x150 [ 487.793751][T10944] warn_alloc+0x263/0x3e0 [ 487.793775][T10944] ? kasan_quarantine_put+0xbb/0x1f0 [ 487.793797][T10944] ? __pfx_warn_alloc+0x10/0x10 [ 487.793819][T10944] ? __get_vm_area_node+0x23f/0x350 [ 487.793837][T10944] ? __get_vm_area_node+0x171/0x350 [ 487.793856][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.793881][T10944] ? __get_vm_area_node+0x23f/0x350 [ 487.793904][T10944] __vmalloc_node_range_noprof+0x38f/0x1750 [ 487.793941][T10944] ? is_bpf_text_address+0x26/0x2b0 [ 487.793966][T10944] ? kernel_text_address+0xa5/0xe0 [ 487.794047][T10944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 487.794074][T10944] ? __lock_acquire+0x6b5/0x2cf0 [ 487.794096][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.794116][T10944] __vmalloc_noprof+0xd2/0x120 [ 487.794135][T10944] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.794158][T10944] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 487.794184][T10944] bpf_prog_alloc+0x3c/0x1a0 [ 487.794208][T10944] bpf_prog_load+0x7ba/0x1ae0 [ 487.794244][T10944] ? __pfx_bpf_prog_load+0x10/0x10 [ 487.794265][T10944] ? __might_fault+0xaf/0x130 [ 487.794303][T10944] ? bpf_lsm_bpf+0x9/0x20 [ 487.794323][T10944] ? security_bpf+0x7e/0x2d0 [ 487.794346][T10944] __sys_bpf+0x618/0x950 [ 487.794369][T10944] ? __pfx___sys_bpf+0x10/0x10 [ 487.794387][T10944] ? rt_mutex_slowunlock+0x1cb/0x300 [ 487.794421][T10944] ? ksys_write+0x248/0x270 [ 487.794442][T10944] ? __pfx_ksys_write+0x10/0x10 [ 487.794465][T10944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.794483][T10944] __x64_sys_bpf+0x7c/0x90 [ 487.794503][T10944] do_syscall_64+0x15f/0xf80 [ 487.794524][T10944] ? trace_irq_disable+0x3b/0x140 [ 487.794545][T10944] ? clear_bhb_loop+0x40/0x90 [ 487.794566][T10944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.794583][T10944] RIP: 0033:0x7f205cf3c819 [ 487.794602][T10944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.794617][T10944] RSP: 002b:00007f205b196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.794636][T10944] RAX: ffffffffffffffda RBX: 00007f205d1b5fa0 RCX: 00007f205cf3c819 [ 487.794649][T10944] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 487.794660][T10944] RBP: 00007f205b196090 R08: 0000000000000000 R09: 0000000000000000 [ 487.794671][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.794681][T10944] R13: 00007f205d1b6038 R14: 00007f205d1b5fa0 R15: 00007ffc007097f8 [ 487.794711][T10944] [ 487.794718][T10944] Mem-Info: [ 487.794728][T10944] active_anon:263 inactive_anon:5614 isolated_anon:0 [ 487.794728][T10944] active_file:14369 inactive_file:41544 isolated_file:0 [ 487.794728][T10944] unevictable:768 dirty:116 writeback:0 [ 487.794728][T10944] slab_reclaimable:11915 slab_unreclaimable:104859 [ 487.794728][T10944] mapped:30479 shmem:1363 pagetables:1130 [ 487.794728][T10944] sec_pagetables:0 bounce:0 [ 487.794728][T10944] kernel_misc_reclaimable:0 [ 487.794728][T10944] free:1309620 free_pcp:3886 free_cma:0 [ 487.794775][T10944] Node 0 active_anon:1052kB inactive_anon:22456kB active_file:57284kB inactive_file:166176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121916kB dirty:460kB writeback:0kB shmem:3916kB kernel_stack:13136kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.794820][T10944] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 487.794861][T10944] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.794912][T10944] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 487.794941][T10944] Node 0 DMA32 free:1291252kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1052kB inactive_anon:22456kB active_file:57284kB inactive_file:166176kB unevictable:1536kB writepending:460kB zspages:0kB present:3129332kB managed:2565444kB mlocked:0kB bounce:0kB free_pcp:15544kB local_pcp:5032kB free_cma:0kB [ 487.806480][T10944] lowmem_reserve[]: 0 0 0 0 0 [ 487.806519][T10944] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:148kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.806574][T10944] lowmem_reserve[]: 0 0 0 0 0 [ 487.806604][T10944] Node 1 Normal free:3931884kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 487.806658][T10944] lowmem_reserve[]: 0 0 0 0 0 [ 487.806688][T10944] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 487.806837][T10944] Node 0 DMA32: 3987*4kB (UM) 2639*8kB (UME) 1474*16kB (UM) 433*32kB (UME) 249*64kB (UME) 152*128kB (UM) 96*256kB (UME) 55*512kB (UME) 40*1024kB (UME) 17*2048kB (UME) 257*4096kB (M) = 1291076kB [ 487.806989][T10944] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.807078][T10944] Node 1 Normal: 3*4kB (U) 6*8kB (UM) 9*16kB (UM) 9*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931884kB [ 487.807219][T10944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.807235][T10944] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.807250][T10944] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.807265][T10944] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 487.807280][T10944] 57273 total pagecache pages [ 487.807287][T10944] 0 pages in swap cache [ 487.807293][T10944] Free swap = 124996kB [ 487.807300][T10944] Total swap = 124996kB [ 487.807308][T10944] 2097051 pages RAM [ 487.807314][T10944] 0 pages HighMem/MovableOnly [ 487.807321][T10944] 424038 pages reserved [ 487.807327][T10944] 0 pages cma reserved [ 488.011846][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 488.011920][T10947] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 488.011933][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1732'. [ 488.303941][ T5890] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 488.380078][ T5913] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 488.442407][T10511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.456589][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 488.466046][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 488.466104][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.466133][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 488.466158][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.466179][ T5890] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 488.490300][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 488.490362][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.490390][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 488.490414][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.490436][ T5890] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 488.493728][ T5890] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 488.493787][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 488.493817][ T5890] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 488.493844][ T5890] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 488.493867][ T5890] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 488.501157][T10511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.514387][T10511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.544670][T10511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.548277][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 488.551138][ T5890] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=f0.6e [ 488.551170][ T5890] usb 2-1: New USB device strings: Mfr=98, Product=201, SerialNumber=71 [ 488.551190][ T5890] usb 2-1: Product: syz [ 488.551204][ T5890] usb 2-1: Manufacturer: syz [ 488.551219][ T5890] usb 2-1: SerialNumber: syz [ 488.563878][T10511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.564403][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.564426][ T5913] usb 4-1: config 0 has no interfaces? [ 488.603084][ T5913] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 488.603118][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.603139][ T5913] usb 4-1: Product: syz [ 488.603154][ T5913] usb 4-1: Manufacturer: syz [ 488.603168][ T5913] usb 4-1: SerialNumber: syz [ 488.913202][ T5913] usb 4-1: config 0 descriptor?? [ 489.123345][ T31] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 489.123626][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 489.268153][ T5890] adutux 2-1:168.0: interrupt endpoints not found [ 489.355726][ T5890] usb 2-1: USB disconnect, device number 61 [ 489.382829][ T31] usb 3-1: device descriptor read/64, error -32 [ 489.797796][ T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 490.159649][ T5464] 8021q: adding VLAN 0 to HW filter on device eth2 [ 490.177500][ T31] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.177534][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.323091][ T31] usb 3-1: config 0 descriptor?? [ 490.349054][ T31] cp210x 3-1:0.0: cp210x converter detected [ 490.353145][T10951] lo speed is unknown, defaulting to 1000 [ 490.732080][ T31] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 490.733002][ T31] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 490.733027][ T31] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 490.788459][ T31] usb 3-1: cp210x converter now attached to ttyUSB0 [ 491.017938][ T5808] Bluetooth: hci1: command tx timeout [ 491.884749][ T10] usb 4-1: USB disconnect, device number 64 [ 491.923277][T10984] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1737'. [ 492.824535][ T6034] usb 3-1: USB disconnect, device number 59 [ 492.922353][ T6034] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 492.926530][ T6034] cp210x 3-1:0.0: device disconnected [ 493.109001][ T5808] Bluetooth: hci1: command tx timeout [ 493.796027][T11025] netlink: 304 bytes leftover after parsing attributes in process `syz.2.1747'. [ 493.918850][T11027] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1748'. [ 494.465286][T10951] chnl_net:caif_netlink_parms(): no params data found [ 495.254620][ T5808] Bluetooth: hci1: command tx timeout [ 495.559856][T11051] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1751'. [ 496.354109][ T37] audit: type=1326 audit(1776332185.473:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11045 comm="syz.2.1751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f205cf3c819 code=0x0 [ 496.387939][T10951] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.388091][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.388385][T10951] bridge_slave_0: entered allmulticast mode [ 496.594964][T10951] bridge_slave_0: entered promiscuous mode [ 496.758506][T10951] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.758585][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.758774][T10951] bridge_slave_1: entered allmulticast mode [ 496.771458][T10951] bridge_slave_1: entered promiscuous mode [ 496.865822][T11059] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 497.134001][T10951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.263447][ T5808] Bluetooth: hci1: command tx timeout [ 497.305654][T10951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.482214][T10508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.545123][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.827228][T10508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.010513][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.039955][T10951] team0: Port device team_slave_0 added [ 498.044119][T10508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.113051][ T37] audit: type=1326 audit(1776332187.423:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.113117][ T37] audit: type=1326 audit(1776332187.423:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.140380][ T37] audit: type=1326 audit(1776332187.423:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.140438][ T37] audit: type=1326 audit(1776332187.423:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.140477][ T37] audit: type=1326 audit(1776332187.423:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.140516][ T37] audit: type=1326 audit(1776332187.423:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.140554][ T37] audit: type=1326 audit(1776332187.423:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.146028][ T37] audit: type=1326 audit(1776332187.453:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.146077][ T37] audit: type=1326 audit(1776332187.453:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.2.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 498.305103][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.359318][T10951] team0: Port device team_slave_1 added [ 498.362532][T10508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.728590][T10508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.885770][T10951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.885784][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.885800][T10951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.926310][T10951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.926329][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.926353][T10951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.229130][T11093] dvmrp31: entered allmulticast mode [ 500.457069][T10951] hsr_slave_0: entered promiscuous mode [ 500.498475][T10951] hsr_slave_1: entered promiscuous mode [ 500.501234][T10951] debugfs: 'hsr0' already exists in 'hsr' [ 500.501267][T10951] Cannot create hsr debugfs directory [ 501.829556][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.829624][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.217462][T10511] Bluetooth: hci1: command 0x0405 tx timeout [ 502.716793][T10511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.774236][T10511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.777354][T10511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.901920][T10511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.918758][T10511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 503.665885][T11125] lo speed is unknown, defaulting to 1000 [ 504.267993][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 504.473854][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.477068][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 504.477100][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.477121][ T10] usb 2-1: Product: syz [ 504.477136][ T10] usb 2-1: Manufacturer: syz [ 504.477151][ T10] usb 2-1: SerialNumber: syz [ 504.501305][ T10] usb 2-1: config 0 descriptor?? [ 504.511860][ T10] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 504.734273][ T10] usb 2-1: USB disconnect, device number 62 [ 505.098106][ T5808] Bluetooth: hci2: command tx timeout [ 505.748000][ T5913] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 505.900060][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 505.904239][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 2314, setting to 64 [ 505.908081][ T5913] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 505.908110][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.908147][ T5913] usb 2-1: Product: syz [ 505.908160][ T5913] usb 2-1: Manufacturer: syz [ 505.908173][ T5913] usb 2-1: SerialNumber: syz [ 505.915796][ T5913] usb 2-1: config 0 descriptor?? [ 506.006773][ T5913] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 506.203112][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 507.156796][ T92] usb 2-1: Failed to submit usb control message: -71 [ 507.156834][ T92] usb 2-1: unable to send the bmi data to the device: -71 [ 507.156850][ T92] usb 2-1: unable to get target info from device [ 507.156863][ T92] usb 2-1: could not get target info (-71) [ 507.178016][ T5808] Bluetooth: hci2: command tx timeout [ 507.213009][ T5913] usb 2-1: USB disconnect, device number 63 [ 507.226631][ T92] usb 2-1: could not probe fw (-71) [ 508.428328][ T5913] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 508.505091][T10951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 508.561421][T10951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.600550][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.603766][ T5913] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 508.603798][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.603819][ T5913] usb 2-1: Product: syz [ 508.603834][ T5913] usb 2-1: Manufacturer: syz [ 508.603849][ T5913] usb 2-1: SerialNumber: syz [ 508.693053][ T5913] usb 2-1: config 0 descriptor?? [ 508.704230][ T5913] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 508.949266][ T5913] usb 2-1: USB disconnect, device number 64 [ 509.082322][T10951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 509.123504][T10951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.190723][T10951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 509.258013][ T5808] Bluetooth: hci2: command tx timeout [ 509.261194][T10951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.604471][T10951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 509.621450][T10951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.635301][T11125] chnl_net:caif_netlink_parms(): no params data found [ 509.757961][ T31] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 509.921643][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 509.943596][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 2314, setting to 64 [ 509.960247][ T31] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 509.960283][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.960303][ T31] usb 2-1: Product: syz [ 509.960317][ T31] usb 2-1: Manufacturer: syz [ 509.960331][ T31] usb 2-1: SerialNumber: syz [ 510.024381][ T31] usb 2-1: config 0 descriptor?? [ 510.093586][ T31] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 510.226636][T11245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1792'. [ 510.358107][T11254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'. [ 510.423929][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 510.423952][ T37] audit: type=1326 audit(1776332199.733:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.424433][ T37] audit: type=1326 audit(1776332199.733:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.426380][ T37] audit: type=1326 audit(1776332199.733:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468147][ T37] audit: type=1326 audit(1776332199.743:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468203][ T37] audit: type=1326 audit(1776332199.743:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468249][ T37] audit: type=1326 audit(1776332199.743:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468290][ T37] audit: type=1326 audit(1776332199.743:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468328][ T37] audit: type=1326 audit(1776332199.743:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468367][ T37] audit: type=1326 audit(1776332199.753:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.468413][ T37] audit: type=1326 audit(1776332199.753:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11253 comm="syz.2.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 510.673574][T11254] veth1_to_team: entered promiscuous mode [ 510.686081][T11254] gretap0: entered promiscuous mode [ 510.779626][T11254] hsr1: entered promiscuous mode [ 510.853749][ T5913] usb 2-1: USB disconnect, device number 65 [ 510.926726][ T1058] usb 2-1: Failed to submit usb control message: -71 [ 510.926763][ T1058] usb 2-1: unable to send the bmi data to the device: -71 [ 510.926780][ T1058] usb 2-1: unable to get target info from device [ 510.926793][ T1058] usb 2-1: could not get target info (-71) [ 510.927523][ T1058] usb 2-1: could not probe fw (-71) [ 511.338334][ T5808] Bluetooth: hci2: command tx timeout [ 511.430036][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.430122][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.430678][T11125] bridge_slave_0: entered allmulticast mode [ 511.453399][T11125] bridge_slave_0: entered promiscuous mode [ 511.527894][ T6124] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 511.677916][ T6124] usb 4-1: Using ep0 maxpacket: 32 [ 511.686205][ T6124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 511.706482][ T6124] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 511.706508][ T6124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.706520][ T6124] usb 4-1: Product: syz [ 511.706528][ T6124] usb 4-1: Manufacturer: syz [ 511.706537][ T6124] usb 4-1: SerialNumber: syz [ 511.714350][ T6124] usb 4-1: config 0 descriptor?? [ 511.807576][ T6124] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 511.892471][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.892610][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.892849][T11125] bridge_slave_1: entered allmulticast mode [ 511.904136][T11125] bridge_slave_1: entered promiscuous mode [ 512.059126][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 512.612730][T10511] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 512.768512][ T6034] usb 4-1: USB disconnect, device number 65 [ 512.790037][ T1058] usb 4-1: Failed to submit usb control message: -71 [ 512.790079][ T1058] usb 4-1: unable to send the bmi data to the device: -71 [ 512.790111][ T1058] usb 4-1: unable to get target info from device [ 512.790126][ T1058] usb 4-1: could not get target info (-71) [ 512.790144][ T1058] usb 4-1: could not probe fw (-71) [ 512.975489][T11125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.217998][ T6033] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 513.314635][T11292] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.359457][T11125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.381348][ T6033] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2E, changing to 0xE [ 513.381386][ T6033] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25970, setting to 1024 [ 513.381414][ T6033] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 513.381437][ T6033] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 513.382963][ T6033] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 513.382993][ T6033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.383014][ T6033] usb 2-1: SerialNumber: syz [ 513.498486][T11290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.689839][T11125] team0: Port device team_slave_0 added [ 513.702958][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.703669][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.726881][ T6033] usbtest 2-1:1.0: Linux user mode ISO test driver [ 513.726906][ T6033] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 513.758572][ T6033] usb 2-1: USB disconnect, device number 66 [ 514.006064][T11125] team0: Port device team_slave_1 added [ 514.138013][T10511] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.200732][ T158] bridge_slave_1: left allmulticast mode [ 514.201388][ T158] bridge_slave_1: left promiscuous mode [ 514.201654][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.211454][T11308] tmpfs: Bad value for 'mpol' [ 514.287019][ T158] bridge_slave_0: left allmulticast mode [ 514.287053][ T158] bridge_slave_0: left promiscuous mode [ 514.287340][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.422384][T11311] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 514.422416][T11311] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.544396][T11311] vhci_hcd vhci_hcd.0: Device attached [ 514.657258][T11321] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1813'. [ 514.710609][ T5184] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 514.758853][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.768037][ T5184] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 514.848629][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.916616][ T158] bond0 (unregistering): Released all slaves [ 515.254276][T11125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.254295][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.254324][T11125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.266435][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 515.325887][T11125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.325906][T11125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.325935][T11125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.628418][ T158] hsr_slave_0: left promiscuous mode [ 515.667951][ T158] hsr_slave_1: left promiscuous mode [ 515.669111][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.720637][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.734599][T11317] vhci_hcd: connection reset by peer [ 515.769831][ T1058] vhci_hcd vhci_hcd.2: stop threads [ 515.769863][ T1058] vhci_hcd vhci_hcd.2: release socket [ 515.770572][ T1058] vhci_hcd vhci_hcd.2: disconnect device [ 515.843471][T11338] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1820'. [ 517.189749][ T158] team0 (unregistering): Port device team_slave_1 removed [ 517.288745][ T158] team0 (unregistering): Port device team_slave_0 removed [ 518.044831][T11347] FAULT_INJECTION: forcing a failure. [ 518.044831][T11347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.044868][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.3.1822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 518.044891][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.044905][T11347] Call Trace: [ 518.044913][T11347] [ 518.044922][T11347] dump_stack_lvl+0xe8/0x150 [ 518.044960][T11347] should_fail_ex+0x46b/0x600 [ 518.044997][T11347] _copy_from_user+0x2d/0xb0 [ 518.045020][T11347] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 518.045048][T11347] drm_ioctl+0x5d0/0xb80 [ 518.045070][T11347] ? smk_tskacc+0x311/0x3a0 [ 518.045107][T11347] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 518.045140][T11347] ? __pfx_drm_ioctl+0x10/0x10 [ 518.045179][T11347] ? __fget_files+0x2a/0x420 [ 518.045204][T11347] ? bpf_lsm_file_ioctl+0x9/0x20 [ 518.045231][T11347] ? __pfx_drm_ioctl+0x10/0x10 [ 518.045255][T11347] __se_sys_ioctl+0xff/0x170 [ 518.045280][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.045304][T11347] do_syscall_64+0x15f/0xf80 [ 518.045332][T11347] ? trace_irq_disable+0x3b/0x140 [ 518.045360][T11347] ? clear_bhb_loop+0x40/0x90 [ 518.045386][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.045407][T11347] RIP: 0033:0x7f8a6448c819 [ 518.045433][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.045452][T11347] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.045476][T11347] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 518.045490][T11347] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000005 [ 518.045501][T11347] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.045511][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.045521][T11347] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 518.045562][T11347] [ 518.786535][T11125] hsr_slave_0: entered promiscuous mode [ 518.789130][T11125] hsr_slave_1: entered promiscuous mode [ 518.818270][T11125] debugfs: 'hsr0' already exists in 'hsr' [ 518.818304][T11125] Cannot create hsr debugfs directory [ 519.020769][T11364] FAULT_INJECTION: forcing a failure. [ 519.020769][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 519.020808][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.3.1828 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.020834][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.020848][T11364] Call Trace: [ 519.020857][T11364] [ 519.020878][T11364] dump_stack_lvl+0xe8/0x150 [ 519.020915][T11364] should_fail_ex+0x46b/0x600 [ 519.020951][T11364] should_failslab+0xa8/0x100 [ 519.020980][T11364] __kmalloc_noprof+0xdf/0x7b0 [ 519.021007][T11364] ? sock_kmalloc+0xd6/0x160 [ 519.021041][T11364] sock_kmalloc+0xd6/0x160 [ 519.021073][T11364] skcipher_recvmsg+0x517/0x1140 [ 519.021121][T11364] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 519.021145][T11364] ? __lock_acquire+0x6b5/0x2cf0 [ 519.021170][T11364] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 519.021199][T11364] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 519.021223][T11364] ? security_socket_recvmsg+0x7e/0x2c0 [ 519.021247][T11364] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 519.021271][T11364] sock_recvmsg+0x172/0x1b0 [ 519.021308][T11364] ____sys_recvmsg+0x1f2/0x4b0 [ 519.021346][T11364] ? __pfx_____sys_recvmsg+0x10/0x10 [ 519.021397][T11364] ? import_iovec+0x73/0xa0 [ 519.021426][T11364] ___sys_recvmsg+0x215/0x590 [ 519.021451][T11364] ? get_pid_task+0x20/0x1f0 [ 519.021480][T11364] ? __pfx____sys_recvmsg+0x10/0x10 [ 519.021513][T11364] ? __fget_files+0x2a/0x420 [ 519.021555][T11364] ? __fget_files+0x3a6/0x420 [ 519.021588][T11364] __x64_sys_recvmsg+0x1c0/0x2a0 [ 519.021618][T11364] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 519.021658][T11364] ? __pfx_ksys_write+0x10/0x10 [ 519.021694][T11364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.021717][T11364] do_syscall_64+0x15f/0xf80 [ 519.021748][T11364] ? trace_irq_disable+0x3b/0x140 [ 519.021777][T11364] ? clear_bhb_loop+0x40/0x90 [ 519.021804][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.021826][T11364] RIP: 0033:0x7f8a6448c819 [ 519.021847][T11364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.021873][T11364] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 519.021897][T11364] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 519.021913][T11364] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 519.021928][T11364] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.021941][T11364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.021954][T11364] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 519.021990][T11364] [ 519.067954][ T5890] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 519.217997][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 519.220669][ T5890] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 519.220697][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.286561][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 519.420730][T10951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.485987][ T5913] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 519.494606][ T5890] gspca_nw80x: reg_w err -71 [ 519.494709][ T5890] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 519.499376][ T5890] usb 2-1: USB disconnect, device number 67 [ 519.566143][T11369] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1830'. [ 519.638242][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 519.640527][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 519.640560][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 519.640585][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 519.640613][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 519.640639][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 519.643710][ T5913] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 519.643743][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.643763][ T5913] usb 4-1: Product: syz [ 519.643778][ T5913] usb 4-1: Manufacturer: syz [ 519.643793][ T5913] usb 4-1: SerialNumber: syz [ 519.823555][ T5913] usb 4-1: config 0 descriptor?? [ 519.899378][ T5184] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 520.042612][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.043909][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.046764][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.048820][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.112291][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.146941][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.158553][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.159601][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.204714][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.205490][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.456872][T11381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1833'. [ 520.478940][T10951] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.491761][ T5913] input input10: Device does not respond to id packet M [ 520.743775][T11386] FAULT_INJECTION: forcing a failure. [ 520.743775][T11386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.743811][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.2.1834 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 520.743833][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 520.743844][T11386] Call Trace: [ 520.743852][T11386] [ 520.743859][T11386] dump_stack_lvl+0xe8/0x150 [ 520.743889][T11386] should_fail_ex+0x46b/0x600 [ 520.743920][T11386] _copy_from_user+0x2d/0xb0 [ 520.743939][T11386] __se_sys_move_pages+0x146e/0x1d40 [ 520.743962][T11386] ? get_pid_task+0x20/0x1f0 [ 520.743992][T11386] ? get_pid_task+0x20/0x1f0 [ 520.744006][T11386] ? get_pid_task+0x20/0x1f0 [ 520.744024][T11386] ? __pfx___se_sys_move_pages+0x10/0x10 [ 520.744075][T11386] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 520.744100][T11386] ? lockdep_hardirqs_on+0x7a/0x110 [ 520.744123][T11386] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 520.744145][T11386] ? rt_mutex_slowunlock+0x1cb/0x300 [ 520.744165][T11386] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 520.744193][T11386] ? fput+0xa0/0xd0 [ 520.744222][T11386] ? ksys_write+0x248/0x270 [ 520.744243][T11386] ? __pfx_ksys_write+0x10/0x10 [ 520.744268][T11386] ? __x64_sys_move_pages+0x21/0xf0 [ 520.744291][T11386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.744310][T11386] do_syscall_64+0x15f/0xf80 [ 520.744332][T11386] ? trace_irq_disable+0x3b/0x140 [ 520.744355][T11386] ? clear_bhb_loop+0x40/0x90 [ 520.744376][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.744394][T11386] RIP: 0033:0x7f205cf3c819 [ 520.744412][T11386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.744428][T11386] RSP: 002b:00007f205b175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 520.744448][T11386] RAX: ffffffffffffffda RBX: 00007f205d1b6090 RCX: 00007f205cf3c819 [ 520.744462][T11386] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 520.744474][T11386] RBP: 00007f205b175090 R08: 0000200000000040 R09: 0000000000000000 [ 520.744485][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.744496][T11386] R13: 00007f205d1b6128 R14: 00007f205d1b6090 R15: 00007ffc007097f8 [ 520.744526][T11386] [ 520.976546][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 520.976612][ T5913] input input10: Device does not respond to id packet P [ 521.053407][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.053461][ T5913] input input10: Device does not respond to id packet B [ 521.056511][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.056569][ T5913] input input10: Device does not respond to id packet N [ 521.060124][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.062596][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.064728][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.066671][ T5913] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 521.251612][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.251699][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.422773][ T5913] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 521.541331][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.541789][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.173707][ C1] iforce 4-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 522.173715][ T5913] usb 4-1: USB disconnect, device number 66 [ 523.633451][ T5464] 8021q: adding VLAN 0 to HW filter on device eth1 [ 523.789993][T11423] bond5: option updelay: invalid value (18446744073709551615) [ 523.790021][T11423] bond5: option updelay: allowed values 0 - 2147483647 [ 523.811371][T11423] bond5 (unregistering): Released all slaves [ 524.133718][ T6034] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 524.288674][ T6034] usb 4-1: Using ep0 maxpacket: 32 [ 524.313413][T11437] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1848'. [ 524.338382][ T37] kauditd_printk_skb: 85 callbacks suppressed [ 524.338472][ T37] audit: type=1326 audit(1776332213.633:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338524][ T37] audit: type=1326 audit(1776332213.633:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338570][ T37] audit: type=1326 audit(1776332213.633:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338615][ T37] audit: type=1326 audit(1776332213.633:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338662][ T37] audit: type=1326 audit(1776332213.633:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338706][ T37] audit: type=1326 audit(1776332213.633:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338750][ T37] audit: type=1326 audit(1776332213.633:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338803][ T37] audit: type=1326 audit(1776332213.633:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338844][ T37] audit: type=1326 audit(1776332213.633:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.338882][ T37] audit: type=1326 audit(1776332213.633:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11435 comm="syz.1.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bf7dc819 code=0x7ffc0000 [ 524.762872][ T6034] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 524.762908][ T6034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.762931][ T6034] usb 4-1: Product: syz [ 524.762947][ T6034] usb 4-1: Manufacturer: syz [ 524.762962][ T6034] usb 4-1: SerialNumber: syz [ 524.840269][ T6034] usb 4-1: config 0 descriptor?? [ 524.885512][ T6034] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 525.074069][T11436] kAFS: unable to lookup cell 'syz0' [ 526.579728][T11430] IPv6: addrconf: prefix option has invalid lifetime [ 526.730071][ T6034] gspca_ov534_9: reg_w failed -71 [ 527.358027][ T6034] gspca_ov534_9: Unknown sensor 0000 [ 527.358136][ T6034] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 527.364713][ T6034] usb 4-1: USB disconnect, device number 67 [ 527.502396][T11462] binfmt_misc: register: failed to install interpreter file ./file0 [ 527.543327][ T6033] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 528.418267][ T6033] usb 2-1: Using ep0 maxpacket: 16 [ 528.420967][ T6033] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.420996][ T6033] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 528.425933][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.472209][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.497407][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.528723][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.598862][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.662346][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.688105][ T6033] usb 2-1: string descriptor 0 read error: -71 [ 528.688255][ T6033] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.688279][ T6033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.228039][ T6033] usb 2-1: can't set config #1, error -71 [ 534.664749][ T6033] usb 2-1: USB disconnect, device number 68 [ 534.974118][T10951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.793033][T11524] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 538.304095][T11125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.317983][ T5890] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 538.341277][T11536] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 538.427865][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 538.430767][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.432317][T10951] veth0_vlan: entered promiscuous mode [ 538.433234][T11125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 538.473744][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.492216][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.493565][T11125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 538.517972][ T5890] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 538.517994][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.518006][ T5890] usb 3-1: Product: syz [ 538.518015][ T5890] usb 3-1: Manufacturer: syz [ 538.518026][ T5890] usb 3-1: SerialNumber: syz [ 538.526252][ T5890] usb 3-1: config 0 descriptor?? [ 538.569249][ T5890] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 538.590314][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.607236][T11125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 538.608559][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.608587][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.608626][ T10] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 538.608650][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.660980][ T10] usb 4-1: config 0 descriptor?? [ 538.698340][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.709889][T10951] veth1_vlan: entered promiscuous mode [ 538.763815][ T36] usb 3-1: USB disconnect, device number 60 [ 538.872086][T10951] veth0_macvtap: entered promiscuous mode [ 538.897069][T10951] veth1_macvtap: entered promiscuous mode [ 539.783714][ T36] usb 4-1: USB disconnect, device number 68 [ 539.829435][T10951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.009533][T10951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.581081][ T3623] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.594310][ T1058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.615619][ T1058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.634191][ T1058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.696325][T11551] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 540.908481][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.674319][T11125] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.769644][ T2400] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.769886][ T2400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.928538][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.928667][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.064983][T11571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1875'. [ 543.369464][ T2400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.387903][ T1129] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 543.453872][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.453898][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.487878][ T6124] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 543.578894][ T1129] usb 3-1: Using ep0 maxpacket: 32 [ 543.581342][ T1129] usb 3-1: config 0 has no interfaces? [ 543.586283][ T1129] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 543.586319][ T1129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.586341][ T1129] usb 3-1: Product: syz [ 543.586356][ T1129] usb 3-1: Manufacturer: syz [ 543.586372][ T1129] usb 3-1: SerialNumber: syz [ 543.607015][ T1129] usb 3-1: config 0 descriptor?? [ 543.610016][T11577] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 543.640636][ T6124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.655562][ T6124] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 543.655596][ T6124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.655618][ T6124] usb 2-1: Product: syz [ 543.655633][ T6124] usb 2-1: Manufacturer: syz [ 543.655648][ T6124] usb 2-1: SerialNumber: syz [ 543.698149][ T6124] usb 2-1: config 0 descriptor?? [ 543.706600][ T6124] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 543.823999][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.824606][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.908609][ T5184] usb 2-1: USB disconnect, device number 69 [ 544.036728][ T2400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.058060][ T6124] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 544.208966][ T6124] usb 4-1: Using ep0 maxpacket: 16 [ 544.224783][ T6124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 544.226369][ T6124] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.226394][ T6124] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.288931][ T6124] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 544.288965][ T6124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.288988][ T6124] usb 4-1: Product: syz [ 544.289005][ T6124] usb 4-1: Manufacturer: syz [ 544.289020][ T6124] usb 4-1: SerialNumber: syz [ 544.357161][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.357185][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.605247][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.605971][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.643867][ T6124] usb 4-1: interface 1 not found [ 544.675091][ T6124] usb 4-1: USB disconnect, device number 69 [ 545.028871][ T2400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.154066][ T6034] usb 3-1: USB disconnect, device number 61 [ 545.616418][ T2400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.015836][T11125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.327825][ T6124] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 547.371480][T11629] syz_tun: entered allmulticast mode [ 547.444807][ T5184] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 547.525232][ T6124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.552203][ T6124] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 547.552239][ T6124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.552262][ T6124] usb 3-1: Product: syz [ 547.552279][ T6124] usb 3-1: Manufacturer: syz [ 547.552295][ T6124] usb 3-1: SerialNumber: syz [ 547.599229][ T6124] usb 3-1: config 0 descriptor?? [ 547.625452][ T6124] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 547.704120][ T5184] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 547.704155][ T5184] usb 2-1: config 0 has no interface number 0 [ 547.721663][ T5184] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 547.721697][ T5184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.721719][ T5184] usb 2-1: Product: syz [ 547.721735][ T5184] usb 2-1: Manufacturer: syz [ 547.721750][ T5184] usb 2-1: SerialNumber: syz [ 547.889459][ T6034] usb 3-1: USB disconnect, device number 62 [ 547.920501][ T5184] usb 2-1: config 0 descriptor?? [ 548.204629][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 548.249282][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 548.252378][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 548.262953][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 548.268642][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 548.483381][T11631] syz_tun: left allmulticast mode [ 549.003581][ T5184] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 549.119169][ T5184] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 549.119368][ T5184] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 549.119531][ T5184] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 549.546979][ T5184] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 550.044186][ T5913] usb 2-1: USB disconnect, device number 70 [ 550.201659][ T5913] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 550.207379][ T5913] keyspan 2-1:0.133: device disconnected [ 550.673618][T11633] lo speed is unknown, defaulting to 1000 [ 551.029421][ T5808] Bluetooth: hci5: command tx timeout [ 552.532539][T11672] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1898'. [ 553.064168][ T5464] 8021q: adding VLAN 0 to HW filter on device eth1 [ 553.097905][ T5808] Bluetooth: hci5: command tx timeout [ 553.191287][T11691] io-wq is not configured for unbound workers [ 553.207934][ T6034] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 553.360423][ T6034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.365888][ T6034] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 553.366284][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.366308][ T6034] usb 3-1: Product: syz [ 553.366325][ T6034] usb 3-1: Manufacturer: syz [ 553.366340][ T6034] usb 3-1: SerialNumber: syz [ 553.398970][T11694] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1905'. [ 553.399195][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1905'. [ 553.465164][ T6034] usb 3-1: config 0 descriptor?? [ 553.481976][ T6034] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 553.723522][ T6124] usb 3-1: USB disconnect, device number 63 [ 554.196562][T11704] FAULT_INJECTION: forcing a failure. [ 554.196562][T11704] name failslab, interval 1, probability 0, space 0, times 0 [ 554.196601][T11704] CPU: 1 UID: 0 PID: 11704 Comm: syz.1.1908 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 554.196626][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 554.196641][T11704] Call Trace: [ 554.196651][T11704] [ 554.196661][T11704] dump_stack_lvl+0xe8/0x150 [ 554.196700][T11704] should_fail_ex+0x46b/0x600 [ 554.196741][T11704] should_failslab+0xa8/0x100 [ 554.196772][T11704] __kvmalloc_node_noprof+0x170/0x8e0 [ 554.196803][T11704] ? seq_read_iter+0x203/0xe20 [ 554.196830][T11704] ? mutex_lock_nested+0x152/0x1d0 [ 554.196856][T11704] ? seq_read_iter+0xb8/0xe20 [ 554.196888][T11704] seq_read_iter+0x203/0xe20 [ 554.196928][T11704] ? __asan_memset+0x22/0x50 [ 554.196958][T11704] seq_read+0x36a/0x490 [ 554.196984][T11704] ? kstrtoull+0x12f/0x1d0 [ 554.197022][T11704] ? __pfx_seq_read+0x10/0x10 [ 554.197056][T11704] ? __import_iovec+0x5d4/0x7e0 [ 554.197097][T11704] ? __pfx_seq_read+0x10/0x10 [ 554.197121][T11704] proc_reg_read+0x1f6/0x2f0 [ 554.197152][T11704] vfs_readv+0x597/0x850 [ 554.197186][T11704] ? __pfx_proc_reg_read+0x10/0x10 [ 554.197216][T11704] ? __pfx_vfs_readv+0x10/0x10 [ 554.197265][T11704] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.197301][T11704] ? mutex_lock_nested+0x152/0x1d0 [ 554.197333][T11704] ? fdget_pos+0x252/0x320 [ 554.197364][T11704] do_readv+0x15a/0x2e0 [ 554.197398][T11704] ? __pfx_do_readv+0x10/0x10 [ 554.197438][T11704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.197464][T11704] do_syscall_64+0x15f/0xf80 [ 554.197493][T11704] ? trace_irq_disable+0x3b/0x140 [ 554.197522][T11704] ? clear_bhb_loop+0x40/0x90 [ 554.197551][T11704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.197573][T11704] RIP: 0033:0x7fc5bf7dc819 [ 554.197593][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.197611][T11704] RSP: 002b:00007fc5bda2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 554.197635][T11704] RAX: ffffffffffffffda RBX: 00007fc5bfa55fa0 RCX: 00007fc5bf7dc819 [ 554.197652][T11704] RDX: 0000000000000001 RSI: 00002000000038c0 RDI: 0000000000000004 [ 554.197665][T11704] RBP: 00007fc5bda2e090 R08: 0000000000000000 R09: 0000000000000000 [ 554.197677][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.197689][T11704] R13: 00007fc5bfa56038 R14: 00007fc5bfa55fa0 R15: 00007fffbb8c1108 [ 554.197724][T11704] [ 554.568404][ T2400] bridge_slave_1: left allmulticast mode [ 554.568438][ T2400] bridge_slave_1: left promiscuous mode [ 554.568731][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.676369][ T2400] bridge_slave_0: left allmulticast mode [ 554.676403][ T2400] bridge_slave_0: left promiscuous mode [ 554.676696][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.133733][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1914'. [ 555.187838][ T5808] Bluetooth: hci5: command tx timeout [ 557.067886][ T5184] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 557.222715][ T5184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.226994][ T5184] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 557.227026][ T5184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.227046][ T5184] usb 3-1: Product: syz [ 557.227060][ T5184] usb 3-1: Manufacturer: syz [ 557.227075][ T5184] usb 3-1: SerialNumber: syz [ 557.267839][ T5808] Bluetooth: hci5: command tx timeout [ 557.351041][ T5184] usb 3-1: config 0 descriptor?? [ 557.355756][ T5184] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 557.381319][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.458806][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.558924][ T2400] bond0 (unregistering): (slave team0): Releasing backup interface [ 557.560573][ T36] usb 3-1: USB disconnect, device number 64 [ 557.589027][ T2400] bond0 (unregistering): Released all slaves [ 557.595927][ T2400] bond1 (unregistering): Released all slaves [ 557.633035][ T2400] bond2 (unregistering): Released all slaves [ 558.324771][T11743] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1922'. [ 559.339625][ T1129] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 559.701252][ T1129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.701316][ T1129] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 559.701346][ T1129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 559.701383][ T1129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 559.701407][ T1129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 559.718217][ T1129] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 559.718250][ T1129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 559.718270][ T1129] usb 3-1: Product: syz [ 559.718284][ T1129] usb 3-1: Manufacturer: syz [ 559.718306][ T1129] usb 3-1: SerialNumber: syz [ 559.740288][ T1129] usb 3-1: config 0 descriptor?? [ 559.750716][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1924'. [ 559.947246][ T1129] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 559.947312][ T1129] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 560.176832][ T1129] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 560.176863][ T1129] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 560.177208][ T1129] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 560.700195][T11125] veth0_vlan: entered promiscuous mode [ 560.916449][T11125] veth1_vlan: entered promiscuous mode [ 562.103839][ T6124] usb 3-1: USB disconnect, device number 65 [ 563.198894][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.198986][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.377811][ T1129] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 563.378032][ T6034] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 563.540518][ T1129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.540549][ T1129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.546566][ T1129] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 563.546601][ T1129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.546632][ T1129] usb 2-1: Product: syz [ 563.546647][ T1129] usb 2-1: Manufacturer: syz [ 563.546663][ T1129] usb 2-1: SerialNumber: syz [ 563.551350][ T6034] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.555826][ T6034] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 563.555857][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.555876][ T6034] usb 3-1: Product: syz [ 563.555890][ T6034] usb 3-1: Manufacturer: syz [ 563.555903][ T6034] usb 3-1: SerialNumber: syz [ 563.863482][ T6034] usb 3-1: config 0 descriptor?? [ 564.048593][ T6034] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 564.186087][ T6034] usb 3-1: USB disconnect, device number 66 [ 564.378769][T10511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.501998][T10511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.509055][T10511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.516135][T10511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.517870][T10511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.613633][ T5464] 8021q: adding VLAN 0 to HW filter on device eth2 [ 564.985106][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 567.181952][ T5118] Bluetooth: hci1: command tx timeout [ 567.392855][T11633] chnl_net:caif_netlink_parms(): no params data found [ 568.305179][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 568.469058][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 568.560192][ T31] usb 3-1: config 3 has an invalid interface number: 175 but max is 0 [ 568.560225][ T31] usb 3-1: config 3 has no interface number 0 [ 568.560352][ T31] usb 3-1: config 3 interface 175 has no altsetting 0 [ 568.618700][ T31] usb 3-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=32.bd [ 568.618736][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.618758][ T31] usb 3-1: Product: syz [ 568.618773][ T31] usb 3-1: Manufacturer: syz [ 568.618788][ T31] usb 3-1: SerialNumber: syz [ 568.986376][ T1129] usb 2-1: 0:1 : does not exist [ 568.986557][ T1129] usb 2-1: unit 0 not found! [ 569.177944][ T5808] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 569.177987][ T5118] Bluetooth: hci2: command 0x1003 tx timeout [ 569.257826][ T5808] Bluetooth: hci1: command tx timeout [ 569.585614][T11797] lo speed is unknown, defaulting to 1000 [ 570.968938][ T31] kaweth 3-1:3.175: couldn't find required endpoints [ 570.991808][ T2400] hsr_slave_0: left promiscuous mode [ 571.010818][ T31] usb 3-1: USB disconnect, device number 67 [ 571.161844][ T2400] hsr_slave_1: left promiscuous mode [ 571.164727][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.164757][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.241508][ T2400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.241546][ T2400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.347859][ T5808] Bluetooth: hci1: command tx timeout [ 571.456638][ T2400] veth1_macvtap: left promiscuous mode [ 571.456756][ T2400] veth0_macvtap: left promiscuous mode [ 571.457054][ T2400] veth1_vlan: left promiscuous mode [ 571.457265][ T2400] veth0_vlan: left promiscuous mode [ 571.678518][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1946'. [ 572.598387][ T2400] team0 (unregistering): Port device team_slave_1 removed [ 572.651827][ T2400] team0 (unregistering): Port device team_slave_0 removed [ 572.968639][ T5464] 8021q: adding VLAN 0 to HW filter on device eth3 [ 572.990956][ T31] usb 2-1: USB disconnect, device number 71 [ 573.634634][ T5808] Bluetooth: hci1: command tx timeout [ 574.869247][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.869406][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.869667][T11633] bridge_slave_0: entered allmulticast mode [ 574.886067][T11633] bridge_slave_0: entered promiscuous mode [ 575.943708][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.943857][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.944106][T11633] bridge_slave_1: entered allmulticast mode [ 575.947314][T11633] bridge_slave_1: entered promiscuous mode [ 576.567734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 576.587736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 576.597732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 577.798298][T11880] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 577.798326][T11880] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 577.798384][T11880] vhci_hcd vhci_hcd.0: Device attached [ 577.803986][T11882] vhci_hcd: connection closed [ 577.827474][ T95] vhci_hcd vhci_hcd.1: stop threads [ 577.827509][ T95] vhci_hcd vhci_hcd.1: release socket [ 577.827555][ T95] vhci_hcd vhci_hcd.1: disconnect device [ 577.843990][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.171483][T11890] FAULT_INJECTION: forcing a failure. [ 578.171483][T11890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.171553][T11890] CPU: 1 UID: 0 PID: 11890 Comm: syz.3.1952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 578.171579][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 578.171592][T11890] Call Trace: [ 578.171604][T11890] [ 578.171615][T11890] dump_stack_lvl+0xe8/0x150 [ 578.171655][T11890] should_fail_ex+0x46b/0x600 [ 578.171695][T11890] _copy_to_iter+0x404/0x17d0 [ 578.171735][T11890] ? lockdep_hardirqs_on+0x7a/0x110 [ 578.171767][T11890] ? irqentry_exit+0x218/0x730 [ 578.171804][T11890] ? __pfx__copy_to_iter+0x10/0x10 [ 578.171840][T11890] ? __pfx_single_stop+0x10/0x10 [ 578.171870][T11890] ? seq_read_iter+0xbe6/0xe20 [ 578.171906][T11890] seq_read_iter+0xbf6/0xe20 [ 578.171957][T11890] seq_read+0x36a/0x490 [ 578.171995][T11890] ? __pfx_seq_read+0x10/0x10 [ 578.172038][T11890] ? rw_verify_area+0x2ac/0x4e0 [ 578.172063][T11890] ? __pfx_seq_read+0x10/0x10 [ 578.172093][T11890] vfs_read+0x212/0xa80 [ 578.172128][T11890] ? __pfx_vfs_read+0x10/0x10 [ 578.172157][T11890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.172187][T11890] ? lockdep_hardirqs_on+0x7a/0x110 [ 578.172237][T11890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 578.172268][T11890] ? mutex_lock_nested+0x152/0x1d0 [ 578.172291][T11890] ? fdget_pos+0x252/0x320 [ 578.172324][T11890] ksys_read+0x156/0x270 [ 578.172352][T11890] ? __pfx_ksys_read+0x10/0x10 [ 578.172388][T11890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.172413][T11890] do_syscall_64+0x15f/0xf80 [ 578.172445][T11890] ? clear_bhb_loop+0x40/0x90 [ 578.172473][T11890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.172494][T11890] RIP: 0033:0x7f8a6448c819 [ 578.172516][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.172535][T11890] RSP: 002b:00007f8a626a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.172560][T11890] RAX: ffffffffffffffda RBX: 00007f8a64706180 RCX: 00007f8a6448c819 [ 578.172576][T11890] RDX: 0000000000002020 RSI: 0000200000002400 RDI: 0000000000000005 [ 578.172590][T11890] RBP: 00007f8a626a4090 R08: 0000000000000000 R09: 0000000000000000 [ 578.172604][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.172618][T11890] R13: 00007f8a64706218 R14: 00007f8a64706180 R15: 00007ffd9306cb18 [ 578.172655][T11890] [ 579.462230][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.536796][T11893] FAULT_INJECTION: forcing a failure. [ 579.536796][T11893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.536835][T11893] CPU: 0 UID: 0 PID: 11893 Comm: syz.3.1955 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 579.536860][T11893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.536873][T11893] Call Trace: [ 579.536882][T11893] [ 579.536892][T11893] dump_stack_lvl+0xe8/0x150 [ 579.536930][T11893] should_fail_ex+0x46b/0x600 [ 579.536968][T11893] _copy_from_user+0x2d/0xb0 [ 579.536993][T11893] __sys_bpf+0x229/0x950 [ 579.537025][T11893] ? __pfx___sys_bpf+0x10/0x10 [ 579.537062][T11893] ? kmem_cache_free+0x187/0x6c0 [ 579.537111][T11893] ? ksys_write+0x202/0x270 [ 579.537140][T11893] ? __pfx_ksys_write+0x10/0x10 [ 579.537171][T11893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.537195][T11893] __x64_sys_bpf+0x7c/0x90 [ 579.537222][T11893] do_syscall_64+0x15f/0xf80 [ 579.537252][T11893] ? trace_irq_disable+0x3b/0x140 [ 579.537278][T11893] ? clear_bhb_loop+0x40/0x90 [ 579.537306][T11893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.537328][T11893] RIP: 0033:0x7f8a6448c819 [ 579.537348][T11893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.537368][T11893] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.537392][T11893] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 579.537408][T11893] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000004 [ 579.537423][T11893] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.537437][T11893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.537450][T11893] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 579.537486][T11893] [ 580.011609][T11633] team0: Port device team_slave_0 added [ 580.110543][T11633] team0: Port device team_slave_1 added [ 580.280304][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.280323][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.280355][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.351974][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.351995][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.352026][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.621204][T11633] hsr_slave_0: entered promiscuous mode [ 580.622972][T11633] hsr_slave_1: entered promiscuous mode [ 580.624008][T11633] debugfs: 'hsr0' already exists in 'hsr' [ 580.624038][T11633] Cannot create hsr debugfs directory [ 580.873184][T11797] chnl_net:caif_netlink_parms(): no params data found [ 581.060177][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 581.060202][ T37] audit: type=1804 audit(1776332270.333:405): pid=11911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1960" name="/newroot/336/file0" dev="tmpfs" ino=1754 res=1 errno=0 [ 582.946268][T11797] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.946512][T11797] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.946735][T11797] bridge_slave_0: entered allmulticast mode [ 582.983963][T11797] bridge_slave_0: entered promiscuous mode [ 583.075419][T11797] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.075595][T11797] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.075869][T11797] bridge_slave_1: entered allmulticast mode [ 583.124343][T11797] bridge_slave_1: entered promiscuous mode [ 583.503184][T11958] FAULT_INJECTION: forcing a failure. [ 583.503184][T11958] name failslab, interval 1, probability 0, space 0, times 0 [ 583.503217][T11958] CPU: 1 UID: 0 PID: 11958 Comm: syz.3.1968 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.503238][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 583.503249][T11958] Call Trace: [ 583.503257][T11958] [ 583.503265][T11958] dump_stack_lvl+0xe8/0x150 [ 583.503295][T11958] should_fail_ex+0x46b/0x600 [ 583.503325][T11958] should_failslab+0xa8/0x100 [ 583.503347][T11958] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 583.503367][T11958] ? __alloc_skb+0x1d0/0x7d0 [ 583.503384][T11958] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.503413][T11958] __alloc_skb+0x1d0/0x7d0 [ 583.503436][T11958] netlink_sendmsg+0x5d4/0xb40 [ 583.503464][T11958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.503495][T11958] ? unwind_get_return_address+0x4d/0x90 [ 583.503519][T11958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.503542][T11958] ____sys_sendmsg+0x94c/0x9c0 [ 583.503569][T11958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.503600][T11958] ? import_iovec+0x73/0xa0 [ 583.503624][T11958] ___sys_sendmsg+0x2a5/0x360 [ 583.503644][T11958] ? __lock_acquire+0x6b5/0x2cf0 [ 583.503665][T11958] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.503722][T11958] ? __fget_files+0x2a/0x420 [ 583.503738][T11958] ? __fget_files+0x3a6/0x420 [ 583.503764][T11958] __x64_sys_sendmsg+0x1c3/0x2a0 [ 583.503787][T11958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.503817][T11958] ? __pfx_ksys_write+0x10/0x10 [ 583.503844][T11958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.503863][T11958] do_syscall_64+0x15f/0xf80 [ 583.503886][T11958] ? trace_irq_disable+0x3b/0x140 [ 583.503907][T11958] ? clear_bhb_loop+0x40/0x90 [ 583.503928][T11958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.503945][T11958] RIP: 0033:0x7f8a6448c819 [ 583.503970][T11958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.503986][T11958] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.504007][T11958] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 583.504020][T11958] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 583.504032][T11958] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 583.504043][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.504054][T11958] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 583.504083][T11958] [ 583.736872][T11797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.836344][T11797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.001401][ T5464] 8021q: adding VLAN 0 to HW filter on device eth4 [ 584.373319][ T37] audit: type=1804 audit(1776332273.683:406): pid=11972 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1971" name="/newroot/329/file0" dev="tmpfs" ino=1717 res=1 errno=0 [ 585.105265][T11633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.214464][T11797] team0: Port device team_slave_0 added [ 585.328173][T11797] team0: Port device team_slave_1 added [ 585.653317][T11996] FAULT_INJECTION: forcing a failure. [ 585.653317][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 585.653352][T11996] CPU: 1 UID: 0 PID: 11996 Comm: syz.3.1979 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 585.653374][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 585.653385][T11996] Call Trace: [ 585.653393][T11996] [ 585.653402][T11996] dump_stack_lvl+0xe8/0x150 [ 585.653433][T11996] should_fail_ex+0x46b/0x600 [ 585.653463][T11996] should_failslab+0xa8/0x100 [ 585.653500][T11996] __kmalloc_noprof+0xdf/0x7b0 [ 585.653519][T11996] ? kfree+0x4d/0x6c0 [ 585.653535][T11996] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.653569][T11996] tomoyo_realpath_from_path+0xe3/0x5d0 [ 585.653595][T11996] ? tomoyo_domain+0xd8/0x130 [ 585.653626][T11996] ? tomoyo_path_number_perm+0x219/0x630 [ 585.653646][T11996] tomoyo_path_number_perm+0x246/0x630 [ 585.653670][T11996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 585.653689][T11996] ? __lock_acquire+0x6b5/0x2cf0 [ 585.653709][T11996] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.653762][T11996] ? __fget_files+0x2a/0x420 [ 585.653781][T11996] ? __fget_files+0x2a/0x420 [ 585.653795][T11996] ? __fget_files+0x3a6/0x420 [ 585.653810][T11996] ? __fget_files+0x2a/0x420 [ 585.653829][T11996] security_file_ioctl+0xc3/0x2a0 [ 585.653853][T11996] __se_sys_ioctl+0x47/0x170 [ 585.653872][T11996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.653891][T11996] do_syscall_64+0x15f/0xf80 [ 585.653915][T11996] ? trace_irq_disable+0x3b/0x140 [ 585.653937][T11996] ? clear_bhb_loop+0x40/0x90 [ 585.653959][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.653975][T11996] RIP: 0033:0x7f8a6448c819 [ 585.653994][T11996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.654009][T11996] RSP: 002b:00007f8a626e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.654031][T11996] RAX: ffffffffffffffda RBX: 00007f8a64705fa0 RCX: 00007f8a6448c819 [ 585.654044][T11996] RDX: 0000200000000300 RSI: 00000000c0505350 RDI: 0000000000000003 [ 585.654056][T11996] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 585.654067][T11996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.654078][T11996] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 585.654109][T11996] [ 585.654151][T11996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.672261][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 585.672286][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 585.785171][T12002] binder: 11993:12002 ioctl c0306201 200000000540 returned -22 [ 587.230473][T11999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.462941][T12008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1982'. [ 587.906857][T11633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.974012][T11797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.974033][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.974064][T11797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.137412][T11797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.137432][T11797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.137463][T11797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.581167][ T36] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 588.847545][ T36] usb 2-1: config index 0 descriptor too short (expected 24868, got 36) [ 588.847798][ T36] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 588.847823][ T36] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 588.847842][ T36] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 588.847882][ T36] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 588.847906][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.566087][ T36] usb 2-1: USB disconnect, device number 72 [ 593.057853][ T36] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 593.212640][T11633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.237815][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 593.240319][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 593.242958][ T36] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 593.242984][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.242996][ T36] usb 2-1: Product: syz [ 593.243005][ T36] usb 2-1: Manufacturer: syz [ 593.243013][ T36] usb 2-1: SerialNumber: syz [ 593.246368][ T36] usb 2-1: config 0 descriptor?? [ 594.266673][T12065] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1993'. [ 594.328274][ T36] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 594.367969][T10482] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 594.609140][T10482] usb 4-1: Using ep0 maxpacket: 16 [ 594.614980][T10482] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 594.615012][T10482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.615025][T10482] usb 4-1: Product: syz [ 594.615034][T10482] usb 4-1: Manufacturer: syz [ 594.615042][T10482] usb 4-1: SerialNumber: syz [ 594.673909][T10482] usb 4-1: config 0 descriptor?? [ 594.705583][ T37] audit: type=1804 audit(1776332284.013:407): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1999" name="/newroot/347/file0" dev="tmpfs" ino=1813 res=1 errno=0 [ 594.970681][ T5890] usb 2-1: USB disconnect, device number 73 [ 594.974558][ T1764] usb 2-1: Failed to submit usb control message: -71 [ 594.974599][ T1764] usb 2-1: unable to send the bmi data to the device: -71 [ 594.974619][ T1764] usb 2-1: unable to get target info from device [ 594.974636][ T1764] usb 2-1: could not get target info (-71) [ 594.974655][ T1764] usb 2-1: could not probe fw (-71) [ 595.212937][T10482] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 595.260288][T11797] hsr_slave_0: entered promiscuous mode [ 595.261893][T11797] hsr_slave_1: entered promiscuous mode [ 595.263015][T11797] debugfs: 'hsr0' already exists in 'hsr' [ 595.263042][T11797] Cannot create hsr debugfs directory [ 595.404897][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 595.405009][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 595.502943][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'. [ 595.503023][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 596.529649][T12086] netlink: 'syz.1.2003': attribute type 2 has an invalid length. [ 596.529675][T12086] netlink: 'syz.1.2003': attribute type 8 has an invalid length. [ 596.529690][T12086] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2003'. [ 596.529993][ T36] usb 4-1: USB disconnect, device number 70 [ 596.809324][T11633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.902701][T12096] sctp: [Deprecated]: syz.2.2006 (pid 12096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.902701][T12096] Use struct sctp_sack_info instead [ 596.911122][ T37] audit: type=1326 audit(1776332286.223:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.911626][ T37] audit: type=1326 audit(1776332286.223:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.911670][ T37] audit: type=1326 audit(1776332286.223:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.911931][ T37] audit: type=1326 audit(1776332286.223:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.912441][ T37] audit: type=1326 audit(1776332286.223:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.912482][ T37] audit: type=1326 audit(1776332286.223:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.912751][ T37] audit: type=1326 audit(1776332286.223:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.914065][ T37] audit: type=1326 audit(1776332286.223:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205cf3c819 code=0x7ffc0000 [ 596.914625][ T37] audit: type=1326 audit(1776332286.223:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12095 comm="syz.2.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f205cf3c582 code=0x7ffc0000 [ 597.423077][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.423563][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.661958][T10482] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 597.814960][T10482] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 597.815031][T10482] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 597.815073][T10482] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 597.815099][T10482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.079771][T10482] usb 4-1: string descriptor 0 read error: -71 [ 600.421838][T10482] usb 4-1: USB disconnect, device number 71 [ 601.280918][ T5913] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 601.430156][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.433349][ T5913] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 601.433381][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.433404][ T5913] usb 3-1: Product: syz [ 601.433419][ T5913] usb 3-1: Manufacturer: syz [ 601.433435][ T5913] usb 3-1: SerialNumber: syz [ 601.492864][ T5913] usb 3-1: config 0 descriptor?? [ 601.496709][ T5913] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 601.710794][ T5913] usb 3-1: USB disconnect, device number 68 [ 601.742717][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2018'. [ 602.358001][ T5913] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 602.510634][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.510695][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 602.510723][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 602.510751][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 602.510775][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 602.513933][ T5913] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 602.513963][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 602.513984][ T5913] usb 4-1: Product: syz [ 602.513999][ T5913] usb 4-1: Manufacturer: syz [ 602.514013][ T5913] usb 4-1: SerialNumber: syz [ 602.623376][ T5913] usb 4-1: config 0 descriptor?? [ 603.973443][ T5913] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 603.973475][ T5913] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 603.974893][ T5913] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 603.974918][ T5913] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 603.975262][ T5913] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 604.042000][ T5913] usb 4-1: USB disconnect, device number 72 [ 604.119296][ T2400] bridge_slave_1: left allmulticast mode [ 604.119327][ T2400] bridge_slave_1: left promiscuous mode [ 604.119636][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.226148][ T2400] bridge_slave_0: left allmulticast mode [ 604.226180][ T2400] bridge_slave_0: left promiscuous mode [ 604.226471][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.458157][T10482] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 604.607843][T10482] usb 3-1: Using ep0 maxpacket: 8 [ 604.610928][T10482] usb 3-1: unable to get BOS descriptor or descriptor too short [ 604.613070][T10482] usb 3-1: config 4 interface 0 has no altsetting 0 [ 604.638272][T10482] usb 3-1: string descriptor 0 read error: -22 [ 604.638340][T10482] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 604.638354][T10482] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 604.639846][ T2400] bridge_slave_1: left allmulticast mode [ 604.639866][ T2400] bridge_slave_1: left promiscuous mode [ 604.640046][ T2400] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.656668][T10482] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 604.671738][T10482] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 604.673001][T10482] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 604.673055][T10482] usb 3-1: media controller created [ 604.706503][T10482] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.789514][ T2400] bridge_slave_0: left allmulticast mode [ 604.789546][ T2400] bridge_slave_0: left promiscuous mode [ 604.802989][ T2400] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.829023][T10482] zl10353_read_register: readreg error (reg=127, ret==0) [ 605.935888][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.008580][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.030493][ T2400] bond0 (unregistering): Released all slaves [ 606.540797][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.608592][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.632931][ T2400] bond0 (unregistering): Released all slaves [ 606.689010][ T5464] 8021q: adding VLAN 0 to HW filter on device eth5 [ 606.737746][T10482] usb 3-1: USB disconnect, device number 69 [ 606.842196][T11633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.922269][T11633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.112959][T12195] FAULT_INJECTION: forcing a failure. [ 607.112959][T12195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.112998][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.1.2026 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.113023][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 607.113036][T12195] Call Trace: [ 607.113046][T12195] [ 607.113056][T12195] dump_stack_lvl+0xe8/0x150 [ 607.113109][T12195] should_fail_ex+0x46b/0x600 [ 607.113147][T12195] _copy_from_iter+0x1d3/0x1670 [ 607.113187][T12195] ? trace_kmem_cache_alloc+0x29/0xe0 [ 607.113212][T12195] ? __alloc_skb+0x27d/0x7d0 [ 607.113235][T12195] ? __pfx__copy_from_iter+0x10/0x10 [ 607.113265][T12195] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 607.113289][T12195] ? __alloc_skb+0x27d/0x7d0 [ 607.113319][T12195] ? netlink_sendmsg+0x650/0xb40 [ 607.113340][T12195] ? skb_put+0x11b/0x210 [ 607.113368][T12195] netlink_sendmsg+0x6c0/0xb40 [ 607.113398][T12195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.113422][T12195] ? unwind_get_return_address+0x4d/0x90 [ 607.113447][T12195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 607.113475][T12195] ____sys_sendmsg+0x94c/0x9c0 [ 607.113505][T12195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.113546][T12195] ? import_iovec+0x73/0xa0 [ 607.113572][T12195] ___sys_sendmsg+0x2a5/0x360 [ 607.113597][T12195] ? __lock_acquire+0x6b5/0x2cf0 [ 607.113622][T12195] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.113686][T12195] ? __fget_files+0x2a/0x420 [ 607.113705][T12195] ? __fget_files+0x3a6/0x420 [ 607.113736][T12195] __x64_sys_sendmsg+0x1c3/0x2a0 [ 607.113766][T12195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.113803][T12195] ? __pfx_ksys_write+0x10/0x10 [ 607.113838][T12195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.113860][T12195] do_syscall_64+0x15f/0xf80 [ 607.113888][T12195] ? trace_irq_disable+0x3b/0x140 [ 607.113913][T12195] ? clear_bhb_loop+0x40/0x90 [ 607.113938][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.113958][T12195] RIP: 0033:0x7fc5bf7dc819 [ 607.113981][T12195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.114001][T12195] RSP: 002b:00007fc5bda2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.114027][T12195] RAX: ffffffffffffffda RBX: 00007fc5bfa55fa0 RCX: 00007fc5bf7dc819 [ 607.114044][T12195] RDX: 00000000040080c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 607.114059][T12195] RBP: 00007fc5bda2e090 R08: 0000000000000000 R09: 0000000000000000 [ 607.114083][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.114097][T12195] R13: 00007fc5bfa56038 R14: 00007fc5bfa55fa0 R15: 00007fffbb8c1108 [ 607.114133][T12195] [ 608.028053][ T36] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 608.237139][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.244197][ T36] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 608.244236][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.244255][ T36] usb 3-1: Product: syz [ 608.244269][ T36] usb 3-1: Manufacturer: syz [ 608.244282][ T36] usb 3-1: SerialNumber: syz [ 608.275768][ T36] usb 3-1: config 0 descriptor?? [ 608.302678][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.351459][ T36] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 608.373755][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.397068][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.501938][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.524527][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 608.570451][ T5913] usb 3-1: USB disconnect, device number 70 [ 610.629802][ T5118] Bluetooth: hci2: command tx timeout [ 610.777338][T12248] FAULT_INJECTION: forcing a failure. [ 610.777338][T12248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.777374][T12248] CPU: 0 UID: 0 PID: 12248 Comm: syz.3.2037 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 610.777399][T12248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 610.777412][T12248] Call Trace: [ 610.777421][T12248] [ 610.777431][T12248] dump_stack_lvl+0xe8/0x150 [ 610.777470][T12248] should_fail_ex+0x46b/0x600 [ 610.777509][T12248] _copy_to_user+0x31/0xb0 [ 610.777535][T12248] simple_read_from_buffer+0xe1/0x170 [ 610.777573][T12248] proc_fail_nth_read+0x1be/0x230 [ 610.777612][T12248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.777653][T12248] ? rw_verify_area+0x2ac/0x4e0 [ 610.777676][T12248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.777710][T12248] vfs_read+0x212/0xa80 [ 610.777746][T12248] ? __pfx_vfs_read+0x10/0x10 [ 610.777774][T12248] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 610.777806][T12248] ? lockdep_hardirqs_on+0x7a/0x110 [ 610.777837][T12248] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 610.777867][T12248] ? mutex_lock_nested+0x152/0x1d0 [ 610.777890][T12248] ? fdget_pos+0x252/0x320 [ 610.777922][T12248] ksys_read+0x156/0x270 [ 610.777951][T12248] ? __pfx_ksys_read+0x10/0x10 [ 610.777995][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.778020][T12248] do_syscall_64+0x15f/0xf80 [ 610.778050][T12248] ? trace_irq_disable+0x3b/0x140 [ 610.778079][T12248] ? clear_bhb_loop+0x40/0x90 [ 610.778106][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.778128][T12248] RIP: 0033:0x7f8a6444d04e [ 610.778148][T12248] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 610.778166][T12248] RSP: 002b:00007f8a626e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.778191][T12248] RAX: ffffffffffffffda RBX: 00007f8a626e66c0 RCX: 00007f8a6444d04e [ 610.778207][T12248] RDX: 000000000000000f RSI: 00007f8a626e60a0 RDI: 0000000000000003 [ 610.778221][T12248] RBP: 00007f8a626e6090 R08: 0000000000000000 R09: 0000000000000000 [ 610.778234][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.778247][T12248] R13: 00007f8a64706038 R14: 00007f8a64705fa0 R15: 00007ffd9306cb18 [ 610.778284][T12248] [ 611.370870][ T5464] 8021q: adding VLAN 0 to HW filter on device eth6 [ 612.127819][ T31] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 612.327876][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 612.332342][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 612.336694][ T31] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 612.336729][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.336752][ T31] usb 4-1: Product: syz [ 612.336767][ T31] usb 4-1: Manufacturer: syz [ 612.336782][ T31] usb 4-1: SerialNumber: syz [ 612.360114][ T31] usb 4-1: config 0 descriptor?? [ 612.670742][T12277] FAULT_INJECTION: forcing a failure. [ 612.670742][T12277] name failslab, interval 1, probability 0, space 0, times 0 [ 612.670782][T12277] CPU: 1 UID: 0 PID: 12277 Comm: syz.1.2047 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.670807][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 612.670820][T12277] Call Trace: [ 612.670829][T12277] [ 612.670839][T12277] dump_stack_lvl+0xe8/0x150 [ 612.670879][T12277] should_fail_ex+0x46b/0x600 [ 612.670918][T12277] should_failslab+0xa8/0x100 [ 612.670948][T12277] kmem_cache_alloc_noprof+0x87/0x680 [ 612.670975][T12277] ? alloc_empty_file+0x5b/0x1d0 [ 612.671011][T12277] alloc_empty_file+0x5b/0x1d0 [ 612.671043][T12277] path_openat+0x11b/0x38a0 [ 612.671076][T12277] ? try_to_take_rt_mutex+0x840/0xb00 [ 612.671102][T12277] ? arch_stack_walk+0xfb/0x150 [ 612.671140][T12277] ? __lock_acquire+0x6b5/0x2cf0 [ 612.671168][T12277] ? __pfx_path_openat+0x10/0x10 [ 612.671196][T12277] ? kasan_save_track+0x4f/0x80 [ 612.671217][T12277] ? kasan_save_track+0x3e/0x80 [ 612.671236][T12277] ? __kasan_slab_alloc+0x6c/0x80 [ 612.671259][T12277] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 612.671291][T12277] ? do_raw_spin_lock+0x12b/0x2f0 [ 612.671340][T12277] do_file_open+0x23e/0x4a0 [ 612.671363][T12277] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 612.671398][T12277] ? __pfx_do_file_open+0x10/0x10 [ 612.671420][T12277] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 612.671469][T12277] ? alloc_fd+0x64e/0x6c0 [ 612.671513][T12277] do_sys_openat2+0x113/0x200 [ 612.671550][T12277] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.671583][T12277] ? ksys_write+0x248/0x270 [ 612.671611][T12277] ? __pfx_ksys_write+0x10/0x10 [ 612.671640][T12277] __x64_sys_openat+0x138/0x170 [ 612.671676][T12277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.671699][T12277] do_syscall_64+0x15f/0xf80 [ 612.671728][T12277] ? trace_irq_disable+0x3b/0x140 [ 612.671757][T12277] ? clear_bhb_loop+0x40/0x90 [ 612.671784][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.671806][T12277] RIP: 0033:0x7fc5bf7dc819 [ 612.671829][T12277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.671848][T12277] RSP: 002b:00007fc5bda2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 612.671872][T12277] RAX: ffffffffffffffda RBX: 00007fc5bfa55fa0 RCX: 00007fc5bf7dc819 [ 612.671888][T12277] RDX: 0000000000000100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 612.671904][T12277] RBP: 00007fc5bda2e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.671918][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.671932][T12277] R13: 00007fc5bfa56038 R14: 00007fc5bfa55fa0 R15: 00007fffbb8c1108 [ 612.671968][T12277] [ 612.680975][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2046'. [ 612.702248][ T5118] Bluetooth: hci2: command tx timeout [ 612.882785][ T31] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 613.265895][T12266] ------------[ cut here ]------------ [ 613.265911][T12266] debug_locks && !(!get_current()->pi_blocked_on) [ 613.265921][T12266] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.2.2043/12266 [ 613.265968][T12266] Modules linked in: [ 613.266017][T12266] CPU: 0 UID: 0 PID: 12266 Comm: syz.2.2043 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 613.266046][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.266060][T12266] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 613.266088][T12266] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 70 01 00 cc e8 8a 32 0b f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 6e 32 0b f6 [ 613.266107][T12266] RSP: 0018:ffffc90003fe75a0 EFLAGS: 00010282 [ 613.266125][T12266] RAX: 1ffff11005850167 RBX: 1ffff920007fceb8 RCX: 0000000000000046 [ 613.266141][T12266] RDX: 0000000000000000 RSI: ffffffff8d8819b7 RDI: ffffffff8ba6a900 [ 613.266158][T12266] RBP: ffffc90003fe7660 R08: ffffffff821f6624 R09: ffff88801a03a758 [ 613.266176][T12266] R10: dffffc0000000000 R11: fffffbfff1f16137 R12: ffff88802c280b38 [ 613.266193][T12266] R13: dffffc0000000000 R14: ffff88801a03a700 R15: ffffc90003fe75e0 [ 613.266211][T12266] FS: 00007f205b1966c0(0000) GS:ffff888126124000(0000) knlGS:0000000000000000 [ 613.266231][T12266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.266248][T12266] CR2: fffffffffffffe70 CR3: 00000000547fa000 CR4: 00000000003526f0 [ 613.266269][T12266] Call Trace: [ 613.266280][T12266] [ 613.266295][T12266] ? __pfx_rt_spin_lock+0x10/0x10 [ 613.266323][T12266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.266358][T12266] ? lockdep_hardirqs_on+0x7a/0x110 [ 613.266390][T12266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 613.266427][T12266] ? fill_pool+0x156/0x580 [ 613.266458][T12266] get_from_partial_node+0x54/0x480 [ 613.266484][T12266] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 613.266522][T12266] ? fill_pool+0x156/0x580 [ 613.266553][T12266] ___slab_alloc+0xb2/0x670 [ 613.266637][T12266] kmem_cache_alloc_noprof+0xea/0x680 [ 613.266667][T12266] ? fill_pool+0x156/0x580 [ 613.266702][T12266] fill_pool+0x156/0x580 [ 613.266741][T12266] ? __pfx_fill_pool+0x10/0x10 [ 613.266777][T12266] ? debug_objects_fill_pool+0x6f/0xd0 [ 613.266806][T12266] ? debug_objects_fill_pool+0x6f/0xd0 [ 613.266840][T12266] debug_objects_fill_pool+0x97/0xd0 [ 613.266872][T12266] debug_object_assert_init+0x34/0x340 [ 613.266909][T12266] hrtimer_start_range_ns+0x3f/0xef0 [ 613.266958][T12266] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.266995][T12266] futex_lock_pi+0x8df/0xb10 [ 613.267044][T12266] ? __pfx_futex_lock_pi+0x10/0x10 [ 613.267078][T12266] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 613.267105][T12266] ? __lock_acquire+0x6b5/0x2cf0 [ 613.267151][T12266] ? __pfx_futex_wake_mark+0x10/0x10 [ 613.267207][T12266] do_futex+0x292/0x420 [ 613.267239][T12266] ? __pfx_do_futex+0x10/0x10 [ 613.267273][T12266] __se_sys_futex+0x3a8/0x450 [ 613.267304][T12266] ? __pfx___se_sys_futex+0x10/0x10 [ 613.267330][T12266] ? __task_pid_nr_ns+0x28/0x470 [ 613.267361][T12266] ? __x64_sys_futex+0x21/0xf0 [ 613.267385][T12266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.267412][T12266] do_syscall_64+0x15f/0xf80 [ 613.267445][T12266] ? clear_bhb_loop+0x40/0x90 [ 613.267473][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.267495][T12266] RIP: 0033:0x7f205cf3c819 [ 613.267519][T12266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.267540][T12266] RSP: 002b:00007f205b196028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 613.267565][T12266] RAX: ffffffffffffffda RBX: 00007f205d1b5fa0 RCX: 00007f205cf3c819 [ 613.267583][T12266] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 613.267599][T12266] RBP: 00007f205cfd2c91 R08: 0000000000000000 R09: 0000000000000001 [ 613.267614][T12266] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 613.267631][T12266] R13: 00007f205d1b6038 R14: 00007f205d1b5fa0 R15: 00007ffc007097f8 [ 613.267738][T12266] [ 613.267753][T12266] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 613.267770][T12266] CPU: 0 UID: 0 PID: 12266 Comm: syz.2.2043 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 613.267796][T12266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.267810][T12266] Call Trace: [ 613.267820][T12266] [ 613.267828][T12266] vpanic+0x56c/0xa60 [ 613.267852][T12266] ? __pfx__printk+0x10/0x10 [ 613.267878][T12266] ? __pfx_vpanic+0x10/0x10 [ 613.267898][T12266] ? is_bpf_text_address+0x292/0x2b0 [ 613.267931][T12266] ? is_bpf_text_address+0x26/0x2b0 [ 613.267976][T12266] panic+0xc5/0xd0 [ 613.268002][T12266] ? __pfx_panic+0x10/0x10 [ 613.268052][T12266] __warn+0x315/0x4c0 [ 613.268074][T12266] ? rt_spin_lock+0x31c/0x400 [ 613.268101][T12266] ? rt_spin_lock+0x31c/0x400 [ 613.268130][T12266] __report_bug+0x29a/0x540 [ 613.268170][T12266] ? rt_spin_lock+0x31c/0x400 [ 613.268196][T12266] ? __pfx___report_bug+0x10/0x10 [ 613.268228][T12266] ? __lock_acquire+0x6b5/0x2cf0 [ 613.268254][T12266] ? __lock_acquire+0x6b5/0x2cf0 [ 613.268281][T12266] ? __lock_acquire+0x6b5/0x2cf0 [ 613.268306][T12266] ? rt_spin_lock+0x31c/0x400 [ 613.268330][T12266] report_bug+0x16a/0x220 [ 613.268363][T12266] ? rt_spin_lock+0x31c/0x400 [ 613.268387][T12266] ? rt_spin_lock+0x31e/0x400 [ 613.268411][T12266] handle_bug+0x9c/0x200 [ 613.268436][T12266] exc_invalid_op+0x1a/0x50 [ 613.268459][T12266] asm_exc_invalid_op+0x1a/0x20 [ 613.268482][T12266] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 613.268507][T12266] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 00 70 01 00 cc e8 8a 32 0b f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 6e 32 0b f6 [ 613.268527][T12266] RSP: 0018:ffffc90003fe75a0 EFLAGS: 00010282 [ 613.268548][T12266] RAX: 1ffff11005850167 RBX: 1ffff920007fceb8 RCX: 0000000000000046 [ 613.268565][T12266] RDX: 0000000000000000 RSI: ffffffff8d8819b7 RDI: ffffffff8ba6a900 [ 613.268582][T12266] RBP: ffffc90003fe7660 R08: ffffffff821f6624 R09: ffff88801a03a758 [ 613.268599][T12266] R10: dffffc0000000000 R11: fffffbfff1f16137 R12: ffff88802c280b38 [ 613.268617][T12266] R13: dffffc0000000000 R14: ffff88801a03a700 R15: ffffc90003fe75e0 [ 613.268642][T12266] ? get_from_partial_node+0x54/0x480 [ 613.268677][T12266] ? __pfx_rt_spin_lock+0x10/0x10 [ 613.268704][T12266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.268738][T12266] ? lockdep_hardirqs_on+0x7a/0x110 [ 613.268770][T12266] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 613.268807][T12266] ? fill_pool+0x156/0x580 [ 613.268835][T12266] get_from_partial_node+0x54/0x480 [ 613.268860][T12266] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 613.268898][T12266] ? fill_pool+0x156/0x580 [ 613.268929][T12266] ___slab_alloc+0xb2/0x670 [ 613.268975][T12266] kmem_cache_alloc_noprof+0xea/0x680 [ 613.269002][T12266] ? fill_pool+0x156/0x580 [ 613.269046][T12266] fill_pool+0x156/0x580 [ 613.269085][T12266] ? __pfx_fill_pool+0x10/0x10 [ 613.269125][T12266] ? debug_objects_fill_pool+0x6f/0xd0 [ 613.269154][T12266] ? debug_objects_fill_pool+0x6f/0xd0 [ 613.269189][T12266] debug_objects_fill_pool+0x97/0xd0 [ 613.269220][T12266] debug_object_assert_init+0x34/0x340 [ 613.269259][T12266] hrtimer_start_range_ns+0x3f/0xef0 [ 613.269294][T12266] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.269329][T12266] futex_lock_pi+0x8df/0xb10 [ 613.269372][T12266] ? __pfx_futex_lock_pi+0x10/0x10 [ 613.269406][T12266] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 613.269434][T12266] ? __lock_acquire+0x6b5/0x2cf0 [ 613.269478][T12266] ? __pfx_futex_wake_mark+0x10/0x10 [ 613.269534][T12266] do_futex+0x292/0x420 [ 613.269568][T12266] ? __pfx_do_futex+0x10/0x10 [ 613.269601][T12266] __se_sys_futex+0x3a8/0x450 [ 613.269634][T12266] ? __pfx___se_sys_futex+0x10/0x10 [ 613.269660][T12266] ? __task_pid_nr_ns+0x28/0x470 [ 613.269690][T12266] ? __x64_sys_futex+0x21/0xf0 [ 613.269716][T12266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.269742][T12266] do_syscall_64+0x15f/0xf80 [ 613.269777][T12266] ? clear_bhb_loop+0x40/0x90 [ 613.269806][T12266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.269828][T12266] RIP: 0033:0x7f205cf3c819 [ 613.269848][T12266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.269868][T12266] RSP: 002b:00007f205b196028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 613.269891][T12266] RAX: ffffffffffffffda RBX: 00007f205d1b5fa0 RCX: 00007f205cf3c819 [ 613.269907][T12266] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000200 [ 613.269923][T12266] RBP: 00007f205cfd2c91 R08: 0000000000000000 R09: 0000000000000001 [ 613.269938][T12266] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 613.269954][T12266] R13: 00007f205d1b6038 R14: 00007f205d1b5fa0 R15: 00007ffc007097f8 [ 613.269990][T12266] [ 613.270162][T12266] Kernel Offset: disabled