last executing test programs: 2m34.607781253s ago: executing program 2 (id=171): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000022"], 0x50) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), 0x0, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000100)=@tcp=r4, 0x1}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) 2m30.272662232s ago: executing program 2 (id=174): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="950000000000000085100000faffffff851000000200000091a24000160000001835000001000000000000000000000018340000050000000000000000000000180000007400000000000000020000008510000004", @ANYRES32, @ANYBLOB="0f0000000091452590c4706dea000000000000058e982dbb0eb20ac4e79cc86233f7515200"/46], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 2m24.75241947s ago: executing program 2 (id=184): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="950000000000000085100000faffffff851000000200000091a24000160000001835000001000000000000000000000018340000050000000000000000000000180000007400000000000000020000008510000004", @ANYRES32, @ANYBLOB="0f0000000091452590c4706dea000000000000058e982dbb0eb20ac4e79cc86233f7515200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 2m21.860582474s ago: executing program 2 (id=186): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40c0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) 2m19.533142441s ago: executing program 2 (id=190): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="950000000000000085100000faffffff851000000200000091a24000160000001835000001000000000000000000000018340000050000000000000000000000180000007400000000000000020000008510000004", @ANYRES32, @ANYBLOB="0f0000000091452590c4706dea000000000000058e982dbb0eb20ac4e79cc86233f75152000000000000000000002aa8dc"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 2m15.694531299s ago: executing program 2 (id=196): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xee01, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000240)='\r', 0x1, 0x20000000}]) 1m59.810096258s ago: executing program 32 (id=196): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xee01, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000240)='\r', 0x1, 0x20000000}]) 17.272523241s ago: executing program 1 (id=403): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="950000000000000085100000faffffff851000000200000091a24000160000001835000001000000000000000000000018340000050000000000000000000000180000007400000000000000020000008510000004", @ANYRES32, @ANYBLOB="0f0000000091452590c4706dea000000000000058e982dbb0eb20ac4e79cc86233f75152000000000000000000002aa8dc"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 17.037102133s ago: executing program 3 (id=404): r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9800, &(0x7f0000000580)={0x100003, 0x1, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c", @ANYRESOCT], 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="ca6ab0"}, 0x20) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xddd, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffe8eff80ec003108004570007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffff000000000186400000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fdeefc2c"], 0x0) 15.396362546s ago: executing program 1 (id=407): r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000340)=""/181, 0x0, 0xb5, 0xfffffffd}, 0x28) socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x3, 0xfffffffa, 0x0, 'queue1\x00', 0x3}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000080), 0x4) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x316575}}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x5) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000000)=0x200) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) close_range(r0, r0, 0x0) r6 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r7 = dup2(r6, r1) r8 = userfaultfd(0x401) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:333'], 0x9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r9) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r10, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r11, @ANYBLOB="1000270001007063690011000200303030303a30303a31302e300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0700000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0061010000080001007063690011000200303030303a30303a31302e300000000008000b000200"/162], 0xa8}, 0x1, 0x0, 0x0, 0x4004011}, 0x4000000) write(r8, &(0x7f00000001c0)="92c682ac66d5cd2e54270093d513f8495b14f2f9a7405e9b645f8836bdbb530faf5c2fc6b1dfa473d9b80b07d78ac444bf4af0d89c92c3b7", 0x38) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000100)={0x6, r0, 'id0\x00'}) fsconfig$FSCONFIG_SET_STRING(r6, 0x3, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) 15.285423944s ago: executing program 0 (id=409): semget$private(0x0, 0x4000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9}]}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) unshare(0x8000000) semget$private(0x0, 0x1, 0x4a5) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xc) fchdir(r2) write$nbd(r2, &(0x7f0000000000)={0x67446698, 0x1, 0x3, 0x2, 0x3, "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"}, 0x1010) 14.572883692s ago: executing program 0 (id=410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0xfcff, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 13.866577193s ago: executing program 0 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x0, &(0x7f0000000240)="e0001584f2a9d60000004799e3411c0c9dc2c54bbe854be732a81fa656cf85f5e6c0000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3af000}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000bc0)=@conn_svc_rsp={0x0, 0x0, 0xa, "d08b10a6", {0x3, 0x0, 0x0, 0x10, 0x8000, 0xf, 0x7}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xb006}, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000005}, 0x240000a4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 13.051644493s ago: executing program 3 (id=413): prctl$PR_SET_VMA(0x3d, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x0, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) syz_usb_connect$uac1(0x0, 0xed, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x8, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xf1}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0x8, "254be7d7"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x4, 0x6, 0x81}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0xf0, "b61332"}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x5, 0x40, "03a77354"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x7, "70f126"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x100, 0x2, "fc1930966cc13e76ad"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x2, 0x24, 0x1, "17a2"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x2}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0x7f, "8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x0, 0x7, {0x7, 0x25, 0x1, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x56, 0x1001}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x5, 0x81, "6f9a4450a140c9e3"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfd, 0x5, 0x5, {0x7, 0x25, 0x1, 0x0, 0x4, 0xf1e5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x4, 0x4, 0x2, 0x10, 0x80}, 0x8, &(0x7f0000000340)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x424}}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x5}, 0x20) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 12.043285169s ago: executing program 1 (id=414): socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40c0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) 11.940423179s ago: executing program 0 (id=415): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9800, &(0x7f0000000580)={0x100003, 0x1, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f4", @ANYRESOCT], 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="ca6ab0"}, 0x20) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xddd, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffe8eff80ec003108004570007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffff000000000186400000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fdeefc2c"], 0x0) 11.164861075s ago: executing program 3 (id=416): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000d00000001090224000100000000090400000903000000092000000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='xdp_bulk_tx\x00', r1, 0x0, 0x4}, 0xa) timerfd_gettime(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_TESTDATA={0x7d, 0x45, "75cbf5a700d442bd2dd45ebe140523cc332c8e3c116bb48f45d440c799e650dd53ce09801f23534ebe596cc92bd2f5ffe3efa08119284a67f85bb19be600ea990338465ece9a6a721fe01ca5a94831e5bdbdef375c7cec4faaeb98ba7eb1399401aa0ff1dcd7bbf827b7a1bcf4ec443945e4af4eb14020e2f5"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048051}, 0x4) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 7.841337047s ago: executing program 4 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0x80}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2, @ANYRES8, @ANYRES16=r3, @ANYRES16=r7], 0x0) 7.570634945s ago: executing program 3 (id=420): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9800, &(0x7f0000000580)={0x100003, 0x1, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47a", @ANYRESOCT], 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xddd, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffe8eff80ec003108004570007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffff000000000186400000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fdeefc2c"], 0x0) 6.055278737s ago: executing program 5 (id=214): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x2000c000) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) mlockall(0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) 5.122282542s ago: executing program 1 (id=421): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x89) 4.544484318s ago: executing program 5 (id=422): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x2000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) 4.514737897s ago: executing program 4 (id=423): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x2000c000) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlockall(0x7) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)={0xb6, 0x4, 0x226b, 0x40, "cbd2316b2271f725e67bf0d65446b01750c2f6394168faa5dcfc7376245cf7ce11ccd4a4962a936cc43c2ef2d03987133dcaa77cbf276e1f43965dd322f61d627e04129308266fcc58da7f552deb8cc5cae3eb46295c85cb6ca4a84ccb889678e1274c55020ba7533b5ffbd0968373ae531720f0161371526f4c088d42fd40e40f1cce6a6e89f823775e1f0bc06fe2957b6a42d1f148baa6e5076337e0b6"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 3.771865454s ago: executing program 0 (id=424): setreuid(0xee01, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/33) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x10000000, 0x0, 0xfffe, 0x0, 0xe6d7, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) 3.716597116s ago: executing program 1 (id=425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000040601020000000000000000050000010900020073797a32000000000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x40018}, 0x800) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r6 = socket(0xa, 0x3, 0x87) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfe91, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000d00001000"/20, @ANYRES32=r8, @ANYBLOB="000000000021010024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ppoll(&(0x7f0000000140)=[{r6}], 0x1, &(0x7f0000000080), 0x0, 0x3c) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0xa2242, 0x13b) sendfile(r12, r5, 0x0, 0x80000001) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r14}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r13}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) r15 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000300002d0001aced857a0904000a020301010109210a00000122ec0f090581038a08000905020342490405060000"], &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xe7, 0x3, 0x4, 0x20, 0x6a}, 0x49, &(0x7f0000000d40)={0x5, 0xf, 0x49, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0xf0, 0x4, 0x9, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x26, 0x9f29}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "ff44a1f633f79279cc5c676b71fc5d2b"}, @ss_container_id={0x14, 0x10, 0x4, 0x67, "9b77397fa77dd3591847b0e731690971"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc04}}, {0x70, &(0x7f0000000480)=@string={0x70, 0x3, "ebdeacb08064780483abf5b29fb31048bc008ca04e785a6ee4616b736bcf80272485cfd122ef2100ab27d0c75497877a5350feade94fcbd11a2955d51c14d85ac0c25987416b066a137373d7aba52d835debbf87180737202bafab0be5627676b0fb2134efe95fb60373ef578571"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_control_io(r15, &(0x7f0000000800)={0x2c, &(0x7f0000000680)={0x0, 0x2, 0xb1, {0xb1, 0x11, "6d0112621da7aa555b295d065a419287c7c6b86d58f82f5077e3fbb3e044927a683244748ea3e874cc55d93a4798624b4951941d8d1fbef0a07cac2cbe3d3e5aea5fc880feba8ea7ced012319b95b7432d13f776d5a70a9385df10fea0a4c97f315b677e982a712f1dbd9bc86d3083ed9eded4004e1d3d660733d55512f96c3e84be1935c8344d3f50fd837ca38bb3061bf3a3c6db5a3b58cc528a3ceb3c86dd27be55c61fb5568700ff8349849e0e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x32, @string={0x32, 0x3, "6c95fd4f492134e6f7f8c8f091a76c956b9f378d776b1208a07612734a261bea36e66854c565910fe368ef90baa8faca"}}, &(0x7f0000000740)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x19, 0x8, 0x9e, 0x1, "dec9b06c", "dce84bad"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x80, 0x7, 0x6, 0x1}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x20, 0x17, 0x73, "b208649d64a4b225b4571452ccb16af830f5168a31584cf72b7baa51553722fcf876ebabc9059ef0610b2f8d6b9b063e0f5e575e9048094f33efc8bcec5e2f2e830ad24ee4dd9f3bb0d5d09956664758b28bb8f4f65bf2ba0c80f402e000fa7152dbd5bedec796fdcb84ff5fde8871efed2f67"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0xb, 0x2, 'xd'}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "37a8"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c40)={0x40, 0x21, 0x1}}) 3.589195649s ago: executing program 5 (id=426): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x4000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="950000000000000085100000faffffff851000000200000091a24000160000001835000001000000000000000000000018340000050000000000000000000000180000007400000000000000020000008510000004", @ANYRES32, @ANYBLOB="0f0000000091452590c4706dea000000000000058e982dbb0eb20ac4e79cc86233f75152000000000000000000002aa8dc"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) 3.587731762s ago: executing program 4 (id=427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r1, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0xafd, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.591839448s ago: executing program 4 (id=428): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000005c0)={0x2, 0x0, 0xffffffff, 0x40000000001}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x5}) migrate_pages(0x0, 0x6, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sysfs$1(0x1, &(0x7f00000000c0)='sysfs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000040000000200000004"], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008800}], 0x1, 0x4040800) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r10, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r9, 0x0, 0x0, 0x800, 0x0, 0x6, r9}]) sendmsg$xdp(r9, &(0x7f0000000580)={&(0x7f0000000380)={0x2c, 0x2, 0x0, 0x28}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="62ae75ce7667ecefa392a1f9832a45d5f6a5a99e607b862982a3a63d0c505d0b24853753f91c6f4a9923cd2c0df0a78641904818325b8281007a6e4ec94828dac6cebaa7941893b3ad6d056839820b117f6733338dcb16606a8e34c51bb07f6c9f5bc0d3fbfb8711454a1a7f45548ab2cbce6cdaf4c477595ace50c99241e6acefc06f785b9292bc5f6cc992b394f2729028bbb479a879314269854f0bf7", 0x9e}, {&(0x7f0000000500)="eabb080c9aeff8b28cb9620bc9a2de7aeef5d32003c9be68a5b76d8b3b97f4b616c05b929f0c153bda12aa2ba5f4c81b3029dbd75214f6d597661830084d814ff233e9580306b69929cf8410a8095d3785214d", 0x53}, {&(0x7f0000000600)="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", 0xffffffd9}, {&(0x7f0000002d40)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4800}, 0x45) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_LINKAT={0x27, 0x6b, 0x0, r1, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='./file0\x00', r9, 0x400}) 2.147291485s ago: executing program 5 (id=429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x2e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_socket_connect_nvme_tcp() close(r4) 1.820378618s ago: executing program 3 (id=430): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000000)={0x700, 0x7, 0x1, 0xfffffffd, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x7, 0xe}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x62d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 631.396086ms ago: executing program 5 (id=431): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x2710, @multicast2}, 0x10) 536.999508ms ago: executing program 4 (id=432): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) 277.482417ms ago: executing program 0 (id=433): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x40) fcntl$lock(r1, 0x26, &(0x7f0000000200)={0x1, 0x1, 0x37, 0x8, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x2d, [0x0, 0x8, 0x101, 0x6, 0x1, 0x6], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/45}, &(0x7f00000001c0)=0x78) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="87", 0x1}, {0x0}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 119.696794ms ago: executing program 1 (id=434): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) setpgid(0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300), 0x0, 0x2000c000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r5}, 0x18) mlockall(0x7) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0xa2, 0x4, 0x226b, 0x40, "cbd2316b2271f725e67bf0d65446b01750c2f6394168faa5dcfc7376245cf7ce11ccd4a4962a936cc43c2ef2d03987133dcaa77cbf276e1f43965dd322f61d627e04129308266fcc58da7f552deb8cc5cae3eb46295c85cb6ca4a84ccb889678e1274c55020ba7533b5ffbd0968373ae531720f0161371526f4c088d42fd40e40f1cce6a6e89f823775e"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 44.910356ms ago: executing program 4 (id=435): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x4000000, 0x105, 0xfffffff8, 0x3d}}, 0x0) 0s ago: executing program 3 (id=436): socket$inet6(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f0000000340)={0x0, 0xf96d, 0x3010, 0x1, 0x17e}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x8e, 0x96, &(0x7f00000003c0)="1adb0dd19d7c1bc9cd5e30e811b3cc91a1f45b171184e90804ff9f82c989cac47f4a09e41d5131c918b8cb634d73d2e1acf79638965cd476f0c4ba4d27ad160f0753a9eaa489b292525680c7a95729c3fc338c404621a57db06ffc6ee8da14949720fb2b6b2dbd3f1080bdde84b4f8e6c52e20be3880296ba5f5cb6b83b96e00cc92d0ce81b941db132761dd3125", &(0x7f0000000480)=""/150, 0x2, 0x0, 0x3b, 0x4e, &(0x7f0000000000)="06a765ce129247a85e0be3502cf6aae5e40e1e16b8438d7ac7457d3fc30dae3d4720e2daf9eb2ffb6e70fa557eaa742a6e865f317e1484b77f1d97", &(0x7f0000000240)="16dc4a2841a8db488e52ab9b2ef9e1becda1657f8ccfb45a2560abf0699ffa16de5473a0ace2814475df6c22c8f1eac1ce3368fe262380dd66d58714eae2b0b8e4044e52b6ca5c1c6528a53b4033", 0x6, 0x0, 0x9}, 0x50) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4000, @fd_index=0xa, 0x1, 0x0, 0x0, 0xa, 0x1, {0x1, r4}}) syz_io_uring_complete(r3) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x6e, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xd, 0x1}) r6 = socket(0xa, 0x3, 0x3a) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r10, &(0x7f00000001c0), 0x0}, 0x20) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001180), 0x40041, 0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f00000033c0), 0x2, 0x0) r13 = dup2(r11, r12) ioctl$KVM_IRQ_LINE_STATUS(r13, 0xc008ae67, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 91.839453][ T5787] cgroup: Unknown subsys name 'net' [ 92.080654][ T5787] cgroup: Unknown subsys name 'cpuset' [ 92.090001][ T9] cfg80211: failed to load regulatory.db [ 92.145537][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.110268][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.106921][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.108591][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.109863][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.110037][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.113301][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.114151][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.166926][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.169635][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.175668][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.190997][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.202477][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.224983][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.227376][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.229121][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.229947][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.338521][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.369555][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.372748][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.387036][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.395008][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.399214][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.400159][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.414905][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.417980][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.419468][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.291242][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 98.310586][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 98.418685][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 98.966216][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 99.065996][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 99.206243][ T5117] Bluetooth: hci0: command tx timeout [ 99.275117][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.275962][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.276392][ T5806] bridge_slave_0: entered allmulticast mode [ 99.278441][ T5806] bridge_slave_0: entered promiscuous mode [ 99.284804][ T61] Bluetooth: hci2: command tx timeout [ 99.285023][ T5117] Bluetooth: hci1: command tx timeout [ 99.385921][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.386035][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.386175][ T5799] bridge_slave_0: entered allmulticast mode [ 99.388079][ T5799] bridge_slave_0: entered promiscuous mode [ 99.413265][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.413421][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.413740][ T5806] bridge_slave_1: entered allmulticast mode [ 99.418590][ T5806] bridge_slave_1: entered promiscuous mode [ 99.444833][ T61] Bluetooth: hci3: command tx timeout [ 99.445054][ T5117] Bluetooth: hci4: command tx timeout [ 99.615866][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.615999][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.616227][ T5799] bridge_slave_1: entered allmulticast mode [ 99.618360][ T5799] bridge_slave_1: entered promiscuous mode [ 99.833046][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.833159][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.833307][ T5800] bridge_slave_0: entered allmulticast mode [ 99.836829][ T5800] bridge_slave_0: entered promiscuous mode [ 100.013378][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.013538][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.013677][ T5800] bridge_slave_1: entered allmulticast mode [ 100.018068][ T5800] bridge_slave_1: entered promiscuous mode [ 100.129514][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.218770][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.232645][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.368665][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.709217][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.935980][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.936113][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.936315][ T5810] bridge_slave_0: entered allmulticast mode [ 100.938547][ T5810] bridge_slave_0: entered promiscuous mode [ 100.944975][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.015746][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.015922][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.018784][ T5808] bridge_slave_0: entered allmulticast mode [ 101.020708][ T5808] bridge_slave_0: entered promiscuous mode [ 101.024540][ T5806] team0: Port device team_slave_0 added [ 101.028036][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.028216][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.028443][ T5810] bridge_slave_1: entered allmulticast mode [ 101.031781][ T5810] bridge_slave_1: entered promiscuous mode [ 101.137817][ T5799] team0: Port device team_slave_0 added [ 101.138405][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.138559][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.138739][ T5808] bridge_slave_1: entered allmulticast mode [ 101.140976][ T5808] bridge_slave_1: entered promiscuous mode [ 101.146805][ T5806] team0: Port device team_slave_1 added [ 101.278125][ T5799] team0: Port device team_slave_1 added [ 101.285148][ T5117] Bluetooth: hci0: command tx timeout [ 101.364888][ T61] Bluetooth: hci2: command tx timeout [ 101.364995][ T5117] Bluetooth: hci1: command tx timeout [ 101.508209][ T5800] team0: Port device team_slave_0 added [ 101.524813][ T61] Bluetooth: hci3: command tx timeout [ 101.524901][ T5117] Bluetooth: hci4: command tx timeout [ 101.700195][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.702351][ T5800] team0: Port device team_slave_1 added [ 101.999380][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.000718][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.000731][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.000750][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.005981][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.086530][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.086544][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.086562][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.091830][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.092584][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.092595][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.092614][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.277861][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.277879][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.277906][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.436562][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.436580][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.436606][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.520952][ T5810] team0: Port device team_slave_0 added [ 102.523227][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.523240][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.523259][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.529144][ T5808] team0: Port device team_slave_0 added [ 102.536684][ T5810] team0: Port device team_slave_1 added [ 102.647561][ T5808] team0: Port device team_slave_1 added [ 103.233133][ T5806] hsr_slave_0: entered promiscuous mode [ 103.234385][ T5806] hsr_slave_1: entered promiscuous mode [ 103.336626][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.336644][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.336671][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.365313][ T5117] Bluetooth: hci0: command tx timeout [ 103.432649][ T5799] hsr_slave_0: entered promiscuous mode [ 103.433732][ T5799] hsr_slave_1: entered promiscuous mode [ 103.435712][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 103.435852][ T5799] Cannot create hsr debugfs directory [ 103.441013][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.441029][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.441061][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.443938][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.443953][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.443984][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.445804][ T61] Bluetooth: hci2: command tx timeout [ 103.445898][ T5117] Bluetooth: hci1: command tx timeout [ 103.541274][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.541297][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.541327][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.577324][ T5800] hsr_slave_0: entered promiscuous mode [ 103.579013][ T5800] hsr_slave_1: entered promiscuous mode [ 103.580150][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 103.580178][ T5800] Cannot create hsr debugfs directory [ 103.615822][ T5117] Bluetooth: hci4: command tx timeout [ 103.615868][ T5117] Bluetooth: hci3: command tx timeout [ 104.382930][ T5810] hsr_slave_0: entered promiscuous mode [ 104.383933][ T5810] hsr_slave_1: entered promiscuous mode [ 104.385264][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 104.385297][ T5810] Cannot create hsr debugfs directory [ 104.488934][ T5808] hsr_slave_0: entered promiscuous mode [ 104.490191][ T5808] hsr_slave_1: entered promiscuous mode [ 104.490970][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 104.490994][ T5808] Cannot create hsr debugfs directory [ 105.444777][ T61] Bluetooth: hci0: command tx timeout [ 105.524869][ T61] Bluetooth: hci1: command tx timeout [ 105.524899][ T61] Bluetooth: hci2: command tx timeout [ 105.637460][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.685325][ T5117] Bluetooth: hci3: command tx timeout [ 105.685359][ T5117] Bluetooth: hci4: command tx timeout [ 105.686454][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.730848][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.767080][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.885651][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.913555][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.955643][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.004280][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.130671][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.177889][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.216829][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.266834][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.408259][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.459850][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.510166][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.568297][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.720839][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.747779][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.789803][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.826363][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.864529][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.940145][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.986559][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.986679][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.003013][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.036155][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.036291][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.121760][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.160332][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.160490][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.171335][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.207394][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.207556][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.279128][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.297461][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.322454][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.322594][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.383230][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.384149][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.437041][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.488206][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.492009][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.492157][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.549681][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.549830][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.671138][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.720952][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.721170][ T1348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.777039][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.777186][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.860805][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.063802][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.185200][ T5806] veth0_vlan: entered promiscuous mode [ 108.242097][ T5806] veth1_vlan: entered promiscuous mode [ 108.323831][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.379397][ T5799] veth0_vlan: entered promiscuous mode [ 108.467193][ T5799] veth1_vlan: entered promiscuous mode [ 108.472840][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.474444][ T5806] veth0_macvtap: entered promiscuous mode [ 108.521783][ T5806] veth1_macvtap: entered promiscuous mode [ 108.639200][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.639532][ T5800] veth0_vlan: entered promiscuous mode [ 108.664415][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.701009][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.712529][ T5800] veth1_vlan: entered promiscuous mode [ 108.723164][ T5799] veth0_macvtap: entered promiscuous mode [ 108.781964][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.788257][ T5799] veth1_macvtap: entered promiscuous mode [ 108.797048][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.802081][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.812844][ T4532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.975742][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.055964][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.124010][ T5808] veth0_vlan: entered promiscuous mode [ 109.131728][ T4532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.147460][ T4532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.171870][ T5800] veth0_macvtap: entered promiscuous mode [ 109.174325][ T4532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.203326][ T4532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.218173][ T5800] veth1_macvtap: entered promiscuous mode [ 109.224113][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.224139][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.281828][ T5808] veth1_vlan: entered promiscuous mode [ 109.434410][ T5810] veth0_vlan: entered promiscuous mode [ 109.502090][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.502110][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.528591][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.561551][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.577684][ T5810] veth1_vlan: entered promiscuous mode [ 109.658429][ T4532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.665164][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.665189][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.672284][ T4532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.701105][ T4532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.710501][ T4532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.722730][ T5808] veth0_macvtap: entered promiscuous mode [ 109.782407][ T5808] veth1_macvtap: entered promiscuous mode [ 109.873118][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.873139][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.121178][ T5810] veth0_macvtap: entered promiscuous mode [ 110.140266][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.168731][ T5810] veth1_macvtap: entered promiscuous mode [ 110.183592][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.334761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.964893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.258568][ T4532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.260104][ T4532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.261446][ T4532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.264187][ T4532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.362385][ T1348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.362408][ T1348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.473193][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.490023][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.594667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.926276][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.004207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.004230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.130002][ T1348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.224666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.284673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.475265][ T1348] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.531723][ T1348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.562695][ T1348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.639602][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.639619][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.197763][ T3035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.197784][ T3035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.764733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.021223][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.021246][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.684657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.974668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.064401][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.064423][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.942432][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.159772][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.905640][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.384704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.384993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.744510][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.759809][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.863714][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.647204][ T5869] Dead loop on virtual device wlan0, fix it urgently! [ 135.421266][ T6054] syz.1.30 (6054) used greatest stack depth: 17040 bytes left [ 138.426994][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.427089][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.403599][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.438433][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.294474][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.053167][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.674670][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.926522][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.026138][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.316290][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.686146][ T6135] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 151.131468][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.878569][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.600205][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.732762][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.126222][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.338829][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.604062][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.551732][ T6172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.853935][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.849273][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.610637][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.610773][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.647408][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.306098][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.834931][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.312776][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.629738][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.099664][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.900256][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.916184][ T6479] syz.3.121 (6479) used greatest stack depth: 16560 bytes left [ 222.137807][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.376793][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.469862][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.167324][ T6552] Bluetooth: hci1: command 0x0406 tx timeout [ 223.167583][ T6552] Bluetooth: hci3: command 0x0406 tx timeout [ 223.167846][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.169283][ T6552] Bluetooth: hci4: command 0x0406 tx timeout [ 223.231914][ T6552] Bluetooth: hci0: command 0x0406 tx timeout [ 223.231944][ T6566] Bluetooth: hci2: command 0x0406 tx timeout [ 223.433453][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.766501][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 225.463674][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.668435][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.496091][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.451722][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 234.587075][ T6646] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 237.323246][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.420934][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.454034][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.642919][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.752768][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.854816][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.469079][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.850470][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.042649][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.186331][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.468226][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.724744][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.160117][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.006293][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.163366][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.687149][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.906209][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.216917][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.369205][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.638839][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.959134][ T6802] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 258.959172][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.025255][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 259.138104][ T6809] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 259.138356][ T6809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.192424][ T6809] vhci_hcd vhci_hcd.0: Device attached [ 259.616363][ T6802] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 259.616491][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 259.616560][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 259.657295][ T6802] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 259.657329][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.657460][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 259.659516][ T6802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.667518][ T6802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.678786][ T6802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 259.709468][ T6810] vhci_hcd: connection closed [ 259.713888][ T6804] vhci_hcd: connection closed [ 259.748810][ T58] vhci_hcd: stop threads [ 259.749813][ T58] vhci_hcd: release socket [ 259.789596][ T58] vhci_hcd: disconnect device [ 259.792618][ T58] vhci_hcd: stop threads [ 259.792638][ T58] vhci_hcd: release socket [ 259.792712][ T58] vhci_hcd: disconnect device [ 259.828253][ T6815] vhci_hcd: connection closed [ 259.835648][ T79] vhci_hcd: stop threads [ 259.835669][ T79] vhci_hcd: release socket [ 259.835734][ T79] vhci_hcd: disconnect device [ 259.854676][ T5856] vhci_hcd: vhci_device speed not set [ 260.443447][ T6817] vhci_hcd: connection closed [ 260.444105][ T3584] vhci_hcd: stop threads [ 260.444125][ T3584] vhci_hcd: release socket [ 260.447753][ T3584] vhci_hcd: disconnect device [ 260.490945][ T6824] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 260.491253][ T6824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.496510][ T6824] vhci_hcd vhci_hcd.0: Device attached [ 261.075835][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.077271][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.165106][ T6826] vhci_hcd: connection closed [ 261.198630][ T58] vhci_hcd: stop threads [ 261.198650][ T58] vhci_hcd: release socket [ 261.198679][ T58] vhci_hcd: disconnect device [ 285.151941][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.174607][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.177962][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.179401][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.180976][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.372468][ T5802] Bluetooth: hci5: command tx timeout [ 289.641598][ T5802] Bluetooth: hci5: command tx timeout [ 289.815099][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 289.815128][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 289.815396][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 289.864071][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 289.864101][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 289.864164][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 289.884909][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 289.884936][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 289.885004][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 289.914666][ T6966] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 289.914699][ T6966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 289.914762][ T6966] vhci_hcd vhci_hcd.0: Device attached [ 289.916609][ T6966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 289.922919][ T6966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 289.931247][ T6966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 289.963025][ T6972] vhci_hcd: connection closed [ 289.964311][ T37] vhci_hcd: stop threads [ 289.964336][ T37] vhci_hcd: release socket [ 289.964421][ T37] vhci_hcd: disconnect device [ 289.965475][ T6975] vhci_hcd: connection closed [ 289.966152][ T37] vhci_hcd: stop threads [ 289.966162][ T37] vhci_hcd: release socket [ 289.966259][ T37] vhci_hcd: disconnect device [ 289.966388][ T6969] vhci_hcd: connection closed [ 289.968608][ T37] vhci_hcd: stop threads [ 289.968622][ T37] vhci_hcd: release socket [ 289.968697][ T37] vhci_hcd: disconnect device [ 289.968829][ T6967] vhci_hcd: connection closed [ 289.973697][ T37] vhci_hcd: stop threads [ 289.973712][ T37] vhci_hcd: release socket [ 289.973788][ T37] vhci_hcd: disconnect device [ 290.024728][ T10] vhci_hcd: vhci_device speed not set [ 291.684723][ T5802] Bluetooth: hci5: command tx timeout [ 293.160987][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 293.766087][ T5802] Bluetooth: hci5: command tx timeout [ 296.000587][ T4532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.647824][ T4532] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.218174][ T7033] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 300.218204][ T7033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.220608][ T7033] vhci_hcd vhci_hcd.0: Device attached [ 300.354612][ T7029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 300.354641][ T7029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.354704][ T7029] vhci_hcd vhci_hcd.0: Device attached [ 300.435000][ T7034] vhci_hcd: connection closed [ 300.435548][ T7030] vhci_hcd: connection closed [ 300.444747][ T1180] vhci_hcd: stop threads [ 300.444770][ T1180] vhci_hcd: release socket [ 300.444864][ T1180] vhci_hcd: disconnect device [ 300.445375][ T1180] vhci_hcd: stop threads [ 300.445386][ T1180] vhci_hcd: release socket [ 300.445459][ T1180] vhci_hcd: disconnect device [ 304.566165][ T4532] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.953149][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.953253][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.953440][ T6941] bridge_slave_0: entered allmulticast mode [ 304.978738][ T6941] bridge_slave_0: entered promiscuous mode [ 305.947907][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.948081][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.948315][ T6941] bridge_slave_1: entered allmulticast mode [ 305.951122][ T6941] bridge_slave_1: entered promiscuous mode [ 306.622092][ T7073] netlink: 68 bytes leftover after parsing attributes in process `syz.3.249'. [ 306.751672][ T4532] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.954072][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.984325][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.490492][ T6941] team0: Port device team_slave_0 added [ 307.603486][ T6941] team0: Port device team_slave_1 added [ 308.000344][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.000359][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.000378][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.004160][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.004173][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.004192][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.478575][ T4532] bridge_slave_1: left allmulticast mode [ 308.478728][ T4532] bridge_slave_1: left promiscuous mode [ 308.480903][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.622283][ T4532] bridge_slave_0: left allmulticast mode [ 308.622307][ T4532] bridge_slave_0: left promiscuous mode [ 308.622489][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.416937][ T5856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 316.315476][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 316.347313][ T5856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.718736][ T5856] usb 2-1: config 2 has an invalid interface number: 120 but max is 0 [ 316.718776][ T5856] usb 2-1: config 2 has no interface number 0 [ 316.718842][ T5856] usb 2-1: config 2 interface 120 has no altsetting 0 [ 316.820096][ T5856] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 316.820129][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.820149][ T5856] usb 2-1: Product: syz [ 316.820164][ T5856] usb 2-1: Manufacturer: ꊴ陚扉ꤣᘬ낐츒ഇ봨릕䲱鲔瓌踗쁁䞁ડ薙ꮲ說뜽쭢獵峀沺쵗关Ꞥᑋ퇮䘳䚤韤筐Ȿṷ㠐㘿ٲ䃝挣⪏缹獽퇡ꆀ䊍䠩럃╴⻓⁤해▪꡶骼⮯⾴䂓✳࡮㗻䏠ڂ형穱꨷챈΄ᝮ鉨䊀⩋ꂧ∖򐩅 [ 316.820194][ T5856] usb 2-1: SerialNumber: syz [ 317.014659][ T2071] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 317.164066][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 317.164101][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 317.260010][ T2071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.260048][ T2071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.260072][ T2071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.260117][ T2071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.260141][ T2071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.615044][ T2071] usb 5-1: config 0 descriptor?? [ 318.890355][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890403][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890432][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890460][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890489][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890516][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890542][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890569][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890595][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 318.890623][ T2071] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 319.179018][ T2071] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 319.331495][ T2071] usb 5-1: USB disconnect, device number 2 [ 319.475408][ T4532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.575967][ T4532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.618470][ T4532] bond0 (unregistering): Released all slaves [ 319.716101][ T7143] fido_id[7143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 320.090176][ T7146] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 320.099125][ T6941] hsr_slave_0: entered promiscuous mode [ 320.100752][ T6941] hsr_slave_1: entered promiscuous mode [ 320.101920][ T6941] debugfs: 'hsr0' already exists in 'hsr' [ 320.101949][ T6941] Cannot create hsr debugfs directory [ 320.295093][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.268'. [ 320.328277][ T7150] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 320.339630][ T7153] FAULT_INJECTION: forcing a failure. [ 320.339630][ T7153] name failslab, interval 1, probability 0, space 0, times 1 [ 320.339758][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 320.339783][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.339808][ T7153] Call Trace: [ 320.339823][ T7153] [ 320.339833][ T7153] dump_stack_lvl+0x189/0x250 [ 320.339878][ T7153] ? __pfx____ratelimit+0x10/0x10 [ 320.339915][ T7153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.339942][ T7153] ? __pfx__printk+0x10/0x10 [ 320.339979][ T7153] ? __pfx___might_resched+0x10/0x10 [ 320.340013][ T7153] ? fs_reclaim_acquire+0x7d/0x100 [ 320.340057][ T7153] should_fail_ex+0x46c/0x600 [ 320.340092][ T7153] ? getname_flags+0xb8/0x540 [ 320.340124][ T7153] should_failslab+0xa8/0x100 [ 320.340153][ T7153] ? getname_flags+0xb8/0x540 [ 320.340180][ T7153] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 320.340220][ T7153] ? cap_capable+0x11f/0x460 [ 320.340264][ T7153] getname_flags+0xb8/0x540 [ 320.340293][ T7153] ? security_capable+0x7e/0x2e0 [ 320.340334][ T7153] user_path_at+0x24/0x60 [ 320.340370][ T7153] vfs_open_tree+0x251/0x7c0 [ 320.340408][ T7153] ? __pfx_vfs_open_tree+0x10/0x10 [ 320.340434][ T7153] ? ksys_write+0x230/0x260 [ 320.340475][ T7153] ? __pfx_ksys_write+0x10/0x10 [ 320.340519][ T7153] __x64_sys_open_tree+0x7d/0xf0 [ 320.340549][ T7153] do_syscall_64+0xfa/0xfa0 [ 320.340582][ T7153] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.340616][ T7153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.340641][ T7153] ? clear_bhb_loop+0x60/0xb0 [ 320.340673][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.340696][ T7153] RIP: 0033:0x7f4d074deec9 [ 320.340724][ T7153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.340742][ T7153] RSP: 002b:00007f4d05746038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 320.340772][ T7153] RAX: ffffffffffffffda RBX: 00007f4d07735fa0 RCX: 00007f4d074deec9 [ 320.340791][ T7153] RDX: 0000000000089101 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 320.340808][ T7153] RBP: 00007f4d05746090 R08: 0000000000000000 R09: 0000000000000000 [ 320.340822][ T7153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.340837][ T7153] R13: 00007f4d07736038 R14: 00007f4d07735fa0 R15: 00007ffd4370bda8 [ 320.340878][ T7153] [ 320.677210][ T7157] FAULT_INJECTION: forcing a failure. [ 320.677210][ T7157] name failslab, interval 1, probability 0, space 0, times 0 [ 320.677240][ T7157] CPU: 1 UID: 0 PID: 7157 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 320.677258][ T7157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.677281][ T7157] Call Trace: [ 320.677306][ T7157] [ 320.677316][ T7157] dump_stack_lvl+0x189/0x250 [ 320.677359][ T7157] ? __pfx____ratelimit+0x10/0x10 [ 320.677387][ T7157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.677410][ T7157] ? __pfx__printk+0x10/0x10 [ 320.677435][ T7157] ? __pfx___might_resched+0x10/0x10 [ 320.677465][ T7157] should_fail_ex+0x46c/0x600 [ 320.677498][ T7157] should_failslab+0xa8/0x100 [ 320.677523][ T7157] __kmalloc_noprof+0xcc/0x7d0 [ 320.677551][ T7157] ? kfree+0x51/0x950 [ 320.677593][ T7157] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.677621][ T7157] tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.677658][ T7157] ? tomoyo_domain+0xda/0x130 [ 320.677698][ T7157] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 320.677723][ T7157] tomoyo_path_number_perm+0x1e8/0x5a0 [ 320.677751][ T7157] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.677773][ T7157] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 320.677802][ T7157] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.677874][ T7157] ? __fget_files+0x2a/0x420 [ 320.677901][ T7157] ? __fget_files+0x3a6/0x420 [ 320.677921][ T7157] ? __fget_files+0x2a/0x420 [ 320.677943][ T7157] security_file_ioctl+0xcb/0x2d0 [ 320.677968][ T7157] __se_sys_ioctl+0x47/0x170 [ 320.678003][ T7157] do_syscall_64+0xfa/0xfa0 [ 320.678036][ T7157] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.678065][ T7157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.678084][ T7157] ? clear_bhb_loop+0x60/0xb0 [ 320.678107][ T7157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.678122][ T7157] RIP: 0033:0x7fd462caeec9 [ 320.678136][ T7157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.678155][ T7157] RSP: 002b:00007fd460f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.678178][ T7157] RAX: ffffffffffffffda RBX: 00007fd462f05fa0 RCX: 00007fd462caeec9 [ 320.678195][ T7157] RDX: 0000200000000000 RSI: 00000000c0386106 RDI: 0000000000000003 [ 320.678208][ T7157] RBP: 00007fd460f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 320.678220][ T7157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.678232][ T7157] R13: 00007fd462f06038 R14: 00007fd462f05fa0 R15: 00007ffc68625f38 [ 320.678266][ T7157] [ 320.678278][ T7157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.748017][ T2071] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 321.719927][ T2071] usb 5-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 321.719957][ T2071] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.730012][ T2071] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 321.730046][ T2071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.730070][ T2071] usb 5-1: SerialNumber: syz [ 322.011956][ T2071] usb 5-1: 0:2 : does not exist [ 322.012297][ T2071] usb 5-1: unit 5 not found! [ 322.045262][ T5856] i2c-tiny-usb 2-1:2.120: version 68.f3 found at bus 002 address 002 [ 322.045840][ T5856] (null): failure setting delay to 10us [ 322.045904][ T5856] i2c-tiny-usb 2-1:2.120: probe with driver i2c-tiny-usb failed with error -5 [ 322.246217][ T2071] usb 5-1: USB disconnect, device number 3 [ 322.365384][ T7144] udevd[7144]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.489629][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.489734][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.756063][ T2071] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 323.759634][ T44] usb 2-1: USB disconnect, device number 2 [ 324.135059][ T2071] usb 4-1: Using ep0 maxpacket: 8 [ 324.191130][ T2071] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 324.191161][ T2071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.191180][ T2071] usb 4-1: Product: syz [ 324.191194][ T2071] usb 4-1: Manufacturer: syz [ 324.191208][ T2071] usb 4-1: SerialNumber: syz [ 324.253410][ T2071] usb 4-1: config 0 descriptor?? [ 324.292322][ T2071] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 324.801288][ T2071] gspca_sn9c2028: read1 error -110 [ 324.801782][ T2071] gspca_sn9c2028: read1 error -32 [ 324.802238][ T2071] gspca_sn9c2028: read1 error -32 [ 324.802330][ T2071] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 324.967911][ T2071] usb 4-1: USB disconnect, device number 2 [ 325.824648][ T4532] hsr_slave_0: left promiscuous mode [ 325.874872][ T4532] hsr_slave_1: left promiscuous mode [ 325.877904][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.878011][ T4532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.046394][ T5976] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 326.183336][ T4532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.183370][ T4532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.219370][ T5976] usb 1-1: Invalid ep0 maxpacket: 32 [ 326.384679][ T5976] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 326.443699][ T4532] veth1_macvtap: left promiscuous mode [ 326.444008][ T4532] veth0_macvtap: left promiscuous mode [ 326.444321][ T4532] veth1_vlan: left promiscuous mode [ 326.464956][ T4532] veth0_vlan: left promiscuous mode [ 326.555116][ T5976] usb 1-1: Invalid ep0 maxpacket: 32 [ 326.555701][ T5976] usb usb1-port1: attempt power cycle [ 326.929380][ T5976] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 326.945868][ T5976] usb 1-1: Invalid ep0 maxpacket: 32 [ 327.074779][ T5976] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 327.097009][ T5976] usb 1-1: Invalid ep0 maxpacket: 32 [ 327.102811][ T5976] usb usb1-port1: unable to enumerate USB device [ 327.378387][ T7235] FAULT_INJECTION: forcing a failure. [ 327.378387][ T7235] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 327.378476][ T7235] CPU: 0 UID: 0 PID: 7235 Comm: syz.4.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 327.378497][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.378508][ T7235] Call Trace: [ 327.378515][ T7235] [ 327.378523][ T7235] dump_stack_lvl+0x189/0x250 [ 327.378551][ T7235] ? __pfx____ratelimit+0x10/0x10 [ 327.378579][ T7235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.378601][ T7235] ? __pfx__printk+0x10/0x10 [ 327.378638][ T7235] should_fail_ex+0x46c/0x600 [ 327.378666][ T7235] _copy_to_user+0x31/0xb0 [ 327.378688][ T7235] simple_read_from_buffer+0xe1/0x170 [ 327.378710][ T7235] proc_fail_nth_read+0x1b6/0x220 [ 327.378737][ T7235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.378763][ T7235] ? rw_verify_area+0x2ac/0x4e0 [ 327.378790][ T7235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.378816][ T7235] vfs_read+0x206/0xa30 [ 327.378853][ T7235] ? __pfx_vfs_read+0x10/0x10 [ 327.378877][ T7235] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 327.378907][ T7235] ? mutex_lock_nested+0x154/0x1d0 [ 327.378935][ T7235] ? fdget_pos+0x253/0x320 [ 327.378964][ T7235] ksys_read+0x14b/0x260 [ 327.378995][ T7235] ? __pfx_ksys_read+0x10/0x10 [ 327.379027][ T7235] ? do_syscall_64+0xbe/0xfa0 [ 327.379060][ T7235] do_syscall_64+0xfa/0xfa0 [ 327.379087][ T7235] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.379117][ T7235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.379136][ T7235] ? clear_bhb_loop+0x60/0xb0 [ 327.379160][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.379178][ T7235] RIP: 0033:0x7f4d074dd8dc [ 327.379196][ T7235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.379211][ T7235] RSP: 002b:00007f4d05746030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.379231][ T7235] RAX: ffffffffffffffda RBX: 00007f4d07735fa0 RCX: 00007f4d074dd8dc [ 327.379245][ T7235] RDX: 000000000000000f RSI: 00007f4d057460a0 RDI: 0000000000000005 [ 327.379258][ T7235] RBP: 00007f4d05746090 R08: 0000000000000000 R09: 0000000000000000 [ 327.379269][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.379279][ T7235] R13: 00007f4d07736038 R14: 00007f4d07735fa0 R15: 00007ffd4370bda8 [ 327.379306][ T7235] [ 327.830073][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.854666][ T5976] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 327.984727][ T5976] usb 2-1: device descriptor read/64, error -71 [ 328.046304][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 328.204794][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 328.232811][ T10] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 328.232839][ T10] usb 5-1: config 0 has no interface number 0 [ 328.232882][ T10] usb 5-1: config 0 interface 202 has no altsetting 0 [ 328.244726][ T5976] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 328.264381][ T10] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=29.3e [ 328.264413][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.264427][ T10] usb 5-1: Product: syz [ 328.264437][ T10] usb 5-1: Manufacturer: syz [ 328.264448][ T10] usb 5-1: SerialNumber: syz [ 328.322941][ T10] usb 5-1: config 0 descriptor?? [ 328.374709][ T5976] usb 2-1: device descriptor read/64, error -71 [ 328.487088][ T5976] usb usb2-port1: attempt power cycle [ 328.527660][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.550115][ T10] redrat3 5-1:0.202: Couldn't find all endpoints [ 328.763094][ T44] usb 5-1: USB disconnect, device number 4 [ 328.854701][ T5976] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 328.875664][ T5976] usb 2-1: device descriptor read/8, error -71 [ 329.104799][ T2071] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 329.119856][ T5976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 329.135659][ T5976] usb 2-1: device descriptor read/8, error -71 [ 329.248028][ T5976] usb usb2-port1: unable to enumerate USB device [ 329.386274][ T2071] usb 1-1: config index 0 descriptor too short (expected 4132, got 36) [ 329.386336][ T2071] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 329.386379][ T2071] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.386404][ T2071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.415849][ T2071] usb 1-1: config 0 descriptor?? [ 329.469741][ T2071] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 329.548291][ T4532] team0 (unregistering): Port device team_slave_1 removed [ 329.735571][ T4532] team0 (unregistering): Port device team_slave_0 removed [ 329.824197][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.857691][ T2071] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 330.014635][ T2071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.014695][ T2071] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 330.014717][ T2071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.046383][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.051826][ T2071] usb 5-1: config 0 descriptor?? [ 330.369650][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.380090][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.428057][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.428687][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.738539][ T10] usb 5-1: USB disconnect, device number 5 [ 331.420506][ T9] kernel read not supported for file /248/attr/prev (pid: 9 comm: kworker/0:0) [ 331.810548][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.886226][ T7265] syz.4.298 uses obsolete (PF_INET,SOCK_PACKET) [ 332.095282][ T7265] veth1_vlan: entered allmulticast mode [ 332.157074][ T7271] FAULT_INJECTION: forcing a failure. [ 332.157074][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 332.157113][ T7271] CPU: 1 UID: 0 PID: 7271 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.157137][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.157150][ T7271] Call Trace: [ 332.157158][ T7271] [ 332.157168][ T7271] dump_stack_lvl+0x189/0x250 [ 332.157200][ T7271] ? __pfx____ratelimit+0x10/0x10 [ 332.157233][ T7271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.157259][ T7271] ? __pfx__printk+0x10/0x10 [ 332.157293][ T7271] ? __pfx___might_resched+0x10/0x10 [ 332.157324][ T7271] ? fs_reclaim_acquire+0x7d/0x100 [ 332.157353][ T7271] should_fail_ex+0x46c/0x600 [ 332.157386][ T7271] ? getname_flags+0xb8/0x540 [ 332.157410][ T7271] should_failslab+0xa8/0x100 [ 332.157452][ T7271] ? getname_flags+0xb8/0x540 [ 332.157481][ T7271] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 332.157530][ T7271] getname_flags+0xb8/0x540 [ 332.157560][ T7271] do_sys_openat2+0xbc/0x1c0 [ 332.157592][ T7271] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.157622][ T7271] ? exc_page_fault+0x82/0x100 [ 332.157659][ T7271] ? do_user_addr_fault+0xc85/0x1380 [ 332.157696][ T7271] __x64_sys_openat+0x138/0x170 [ 332.157731][ T7271] do_syscall_64+0xfa/0xfa0 [ 332.157763][ T7271] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.157794][ T7271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.157815][ T7271] ? clear_bhb_loop+0x60/0xb0 [ 332.157842][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.157864][ T7271] RIP: 0033:0x7fd462cad710 [ 332.157882][ T7271] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 332.157900][ T7271] RSP: 002b:00007fd460f0bef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 332.157929][ T7271] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd462cad710 [ 332.157944][ T7271] RDX: 0000000000000002 RSI: 00007fd462d31c6c RDI: 00000000ffffff9c [ 332.157958][ T7271] RBP: 00007fd462d31c6c R08: 0000000000000000 R09: 0000000000000000 [ 332.157971][ T7271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 332.157983][ T7271] R13: 0000000000000036 R14: 0000200000000000 R15: 00007ffc68625f38 [ 332.158018][ T7271] [ 332.276231][ T2071] usb 1-1: USB disconnect, device number 6 [ 333.167393][ T6941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.261724][ T38] audit: type=1326 audit(1760381136.055:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.289447][ T6941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.317866][ T38] audit: type=1326 audit(1760381136.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351353][ T38] audit: type=1326 audit(1760381136.155:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351398][ T38] audit: type=1326 audit(1760381136.155:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351439][ T38] audit: type=1326 audit(1760381136.155:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351471][ T38] audit: type=1326 audit(1760381136.175:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351649][ T38] audit: type=1326 audit(1760381136.175:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.351690][ T38] audit: type=1326 audit(1760381136.175:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.528885][ T38] audit: type=1326 audit(1760381136.335:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.528946][ T38] audit: type=1326 audit(1760381136.345:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7285 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd462caeec9 code=0x7ffc0000 [ 333.656978][ T6941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.902280][ T7289] binder: BINDER_SET_CONTEXT_MGR already set [ 335.902296][ T7289] binder: 7288:7289 ioctl 4018620d 2000000000c0 returned -16 [ 335.944631][ T6941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.486607][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 336.684294][ T10] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 336.684324][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.704857][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.704887][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.704907][ T10] usb 2-1: Product: syz [ 336.704923][ T10] usb 2-1: Manufacturer: syz [ 336.704938][ T10] usb 2-1: SerialNumber: syz [ 336.989981][ T10] usb 2-1: 0:2 : does not exist [ 337.095201][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 337.296174][ T10] usb 2-1: USB disconnect, device number 7 [ 338.902865][ T7326] sit0: entered promiscuous mode [ 338.943017][ T7326] netlink: 21 bytes leftover after parsing attributes in process `syz.3.307'. [ 339.012726][ T7144] udevd[7144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.544652][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 339.550793][ T7347] process 'syz.1.313' launched '/dev/fd/6' with NULL argv: empty string added [ 339.698895][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.698923][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.700478][ T44] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.700506][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 339.700528][ T44] usb 5-1: SerialNumber: syz [ 340.962081][ T44] usb 5-1: 0:2 : does not exist [ 340.962206][ T44] usb 5-1: unit 255 not found! [ 341.593570][ T44] usb 5-1: USB disconnect, device number 6 [ 341.723842][ T7144] udevd[7144]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.430372][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.448317][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.462122][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.480069][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.543422][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.607109][ T5804] Bluetooth: hci0: command tx timeout [ 346.384686][ T5856] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 346.558595][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.561763][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.565636][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.569618][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.590617][ T5856] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.592776][ T5856] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 346.592814][ T5856] usb 5-1: can't read configurations, error -71 [ 347.686538][ T5804] Bluetooth: hci0: command tx timeout [ 347.934695][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 348.086360][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 348.088187][ T5869] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.088205][ T5869] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 348.088219][ T5869] usb 4-1: config 1 has no interface number 1 [ 348.088287][ T5869] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.088316][ T5869] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.090417][ T5869] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.090436][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.090450][ T5869] usb 4-1: Product: syz [ 348.090460][ T5869] usb 4-1: Manufacturer: syz [ 348.090471][ T5869] usb 4-1: SerialNumber: syz [ 348.124678][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 348.314644][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 348.317159][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 348.317193][ T5856] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 348.317214][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 348.317231][ T5856] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 348.369667][ T5856] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 348.369699][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.369720][ T5856] usb 2-1: Product: syz [ 348.369734][ T5856] usb 2-1: Manufacturer: syz [ 348.369747][ T5856] usb 2-1: SerialNumber: syz [ 348.412982][ T5856] usb 2-1: config 0 descriptor?? [ 348.423820][ T5856] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 348.606055][ T5869] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 348.606096][ T5869] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 348.606113][ T5869] usb 4-1: 2:1 : invalid channels 0 [ 348.649369][ T5856] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 348.845852][ T5869] usb 4-1: USB disconnect, device number 3 [ 348.886602][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.887222][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.132074][ T7144] udevd[7144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.639984][ T7376] chnl_net:caif_netlink_parms(): no params data found [ 349.671688][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.774963][ T5804] Bluetooth: hci0: command tx timeout [ 349.823534][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.576869][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.182988][ T5804] Bluetooth: hci0: command tx timeout [ 352.735618][ T7474] hsr0: entered promiscuous mode [ 352.736144][ T7474] macsec1: entered allmulticast mode [ 352.736163][ T7474] hsr0: entered allmulticast mode [ 352.736176][ T7474] hsr_slave_0: entered allmulticast mode [ 352.736195][ T7474] hsr_slave_1: entered allmulticast mode [ 352.737830][ T7476] input: syz0 as /devices/virtual/input/input5 [ 352.785581][ T7477] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 353.626724][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.626825][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.627013][ T7376] bridge_slave_0: entered allmulticast mode [ 353.630513][ T7376] bridge_slave_0: entered promiscuous mode [ 353.675301][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.675538][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.675799][ T7376] bridge_slave_1: entered allmulticast mode [ 353.681225][ T7376] bridge_slave_1: entered promiscuous mode [ 353.935786][ T6110] bridge_slave_1: left allmulticast mode [ 353.935808][ T6110] bridge_slave_1: left promiscuous mode [ 353.935978][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.194853][ T6110] bridge_slave_0: left allmulticast mode [ 354.194883][ T6110] bridge_slave_0: left promiscuous mode [ 354.195146][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.434666][ T5996] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 354.494399][ T7497] mmap: syz.4.344 (7497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 354.594733][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 354.596501][ T5996] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 354.596520][ T5996] usb 1-1: config 0 has no interface number 0 [ 354.596552][ T5996] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 354.596570][ T5996] usb 1-1: config 0 interface 196 has no altsetting 0 [ 354.599202][ T5996] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 354.599221][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.599235][ T5996] usb 1-1: Product: syz [ 354.599246][ T5996] usb 1-1: Manufacturer: syz [ 354.599256][ T5996] usb 1-1: SerialNumber: syz [ 354.603410][ T5996] usb 1-1: config 0 descriptor?? [ 354.613114][ T7492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 355.117641][ T7497] binder_alloc: 7496: binder_alloc_buf, no vma [ 355.118595][ T7497] binder: 7496:7497 ioctl c0306201 200000000240 returned -11 [ 355.336443][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.337114][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.418310][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.419378][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.544894][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.545093][ T5996] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 355.545462][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.548380][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.548755][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.098308][ T6110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.695700][ T6110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.125646][ T6110] bond0 (unregistering): Released all slaves [ 360.035522][ T5996] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 360.052842][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.179558][ T5996] usb 1-1: USB disconnect, device number 7 [ 360.180265][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.404725][ T5869] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 360.422457][ T6110] hsr_slave_0: left promiscuous mode [ 360.470774][ T6110] hsr_slave_1: left promiscuous mode [ 360.472054][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.574725][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.692392][ T5869] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 360.692519][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.753998][ T5869] usb 5-1: config 0 descriptor?? [ 360.819429][ T5869] cp210x 5-1:0.0: cp210x converter detected [ 361.793255][ T5869] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 361.793309][ T5869] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 361.815740][ T5869] usb 5-1: cp210x converter now attached to ttyUSB1 [ 361.875796][ T5869] usb 5-1: USB disconnect, device number 9 [ 361.894945][ T5869] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 361.898175][ T5869] cp210x 5-1:0.0: device disconnected [ 362.635941][ T5804] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 362.641406][ T7553] Zero length message leads to an empty skb [ 362.660904][ T5976] usb 2-1: USB disconnect, device number 8 [ 362.710934][ T5976] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 362.711885][ T5976] omninet 2-1:0.0: device disconnected [ 363.689338][ T7576] tmpfs: Bad value for 'mpol' [ 364.959991][ T6110] team0 (unregistering): Port device team_slave_1 removed [ 366.111300][ T6110] team0 (unregistering): Port device team_slave_0 removed [ 366.647517][ T5804] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.648951][ T5804] Bluetooth: hci2: Injecting HCI hardware error event [ 366.650700][ T5804] Bluetooth: hci2: hardware error 0x00 [ 368.211537][ T7605] FAULT_INJECTION: forcing a failure. [ 368.211537][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 368.211603][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.211646][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.211660][ T7605] Call Trace: [ 368.211669][ T7605] [ 368.211679][ T7605] dump_stack_lvl+0x189/0x250 [ 368.211712][ T7605] ? __pfx____ratelimit+0x10/0x10 [ 368.211745][ T7605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.211773][ T7605] ? __pfx__printk+0x10/0x10 [ 368.211806][ T7605] ? __pfx___might_resched+0x10/0x10 [ 368.211844][ T7605] should_fail_ex+0x46c/0x600 [ 368.211879][ T7605] should_failslab+0xa8/0x100 [ 368.211905][ T7605] __kmalloc_noprof+0xcc/0x7d0 [ 368.211928][ T7605] ? kernfs_fop_write_iter+0x159/0x540 [ 368.211958][ T7605] kernfs_fop_write_iter+0x159/0x540 [ 368.211989][ T7605] aio_write+0x542/0x7b0 [ 368.212024][ T7605] ? __pfx_aio_write+0x10/0x10 [ 368.212085][ T7605] ? __might_fault+0xb0/0x130 [ 368.212132][ T7605] io_submit_one+0x78b/0x1310 [ 368.212177][ T7605] ? __pfx_io_submit_one+0x10/0x10 [ 368.212208][ T7605] ? __might_fault+0xb0/0x130 [ 368.212245][ T7605] ? __might_fault+0xb0/0x130 [ 368.212273][ T7605] __se_sys_io_submit+0x185/0x2f0 [ 368.212302][ T7605] ? __pfx___se_sys_io_submit+0x10/0x10 [ 368.212325][ T7605] ? ksys_write+0x230/0x260 [ 368.212372][ T7605] ? do_syscall_64+0xbe/0xfa0 [ 368.212411][ T7605] do_syscall_64+0xfa/0xfa0 [ 368.212452][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.212474][ T7605] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 368.212497][ T7605] ? clear_bhb_loop+0x60/0xb0 [ 368.212525][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.212546][ T7605] RIP: 0033:0x7fd462caeec9 [ 368.212565][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.212584][ T7605] RSP: 002b:00007fd460ecc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 368.212608][ T7605] RAX: ffffffffffffffda RBX: 00007fd462f06180 RCX: 00007fd462caeec9 [ 368.212624][ T7605] RDX: 00002000000001c0 RSI: 0000000000000001 RDI: 00007fd463a43000 [ 368.212645][ T7605] RBP: 00007fd460ecc090 R08: 0000000000000000 R09: 0000000000000000 [ 368.212658][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.212671][ T7605] R13: 00007fd462f06218 R14: 00007fd462f06180 R15: 00007ffc68625f38 [ 368.212707][ T7605] [ 369.785729][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.786356][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.954758][ T5804] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 370.474962][ T5869] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 370.642669][ T5869] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 370.642699][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.642718][ T5869] usb 4-1: Product: syz [ 370.642731][ T5869] usb 4-1: Manufacturer: syz [ 370.642745][ T5869] usb 4-1: SerialNumber: syz [ 370.693762][ T5869] usb 4-1: config 0 descriptor?? [ 370.916506][ T5869] hso 4-1:0.0: Can't find BULK IN endpoint [ 370.919308][ T5869] usb-storage 4-1:0.0: USB Mass Storage device detected [ 371.686722][ T5869] usb 4-1: USB disconnect, device number 4 [ 371.898928][ T5996] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 372.013096][ T7640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.379'. [ 372.021154][ T7376] team0: Port device team_slave_0 added [ 372.050717][ T7376] team0: Port device team_slave_1 added [ 373.006258][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 373.148962][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.148981][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.149009][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.643905][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.643923][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.643952][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.354682][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.534753][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 375.542790][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.564141][ T7376] hsr_slave_0: entered promiscuous mode [ 375.565597][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 375.565637][ T5869] usb 1-1: can't read configurations, error -61 [ 375.612312][ T7376] hsr_slave_1: entered promiscuous mode [ 375.664763][ T7376] debugfs: 'hsr0' already exists in 'hsr' [ 375.664805][ T7376] Cannot create hsr debugfs directory [ 375.734605][ T5869] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.956463][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 375.960374][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.962662][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 375.962698][ T5869] usb 1-1: can't read configurations, error -61 [ 375.963162][ T5869] usb usb1-port1: attempt power cycle [ 376.324635][ T5869] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 376.360288][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 376.362612][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.364331][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 376.364356][ T5869] usb 1-1: can't read configurations, error -61 [ 376.664718][ T5869] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 376.687758][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 376.690888][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.693328][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 376.693363][ T5869] usb 1-1: can't read configurations, error -61 [ 376.693804][ T5869] usb usb1-port1: unable to enumerate USB device [ 378.947473][ T5870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 379.124650][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 379.127291][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 379.127317][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 379.127338][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 379.127367][ T5870] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 379.130432][ T5870] usb 1-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 379.130462][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.130483][ T5870] usb 1-1: Product: syz [ 379.130499][ T5870] usb 1-1: Manufacturer: syz [ 379.130514][ T5870] usb 1-1: SerialNumber: syz [ 379.298554][ T5870] usb 1-1: config 0 descriptor?? [ 379.327539][ T5870] omninet 1-1:0.0: ZyXEL - omni.net usb converter detected [ 379.344627][ T5856] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 379.352362][ T5870] usb 1-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 379.504608][ T5856] usb 4-1: Using ep0 maxpacket: 16 [ 379.509134][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 379.509164][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 379.509189][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 379.509210][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 379.515228][ T5856] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 379.515258][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.515279][ T5856] usb 4-1: Product: syz [ 379.515294][ T5856] usb 4-1: Manufacturer: syz [ 379.515310][ T5856] usb 4-1: SerialNumber: syz [ 379.622095][ T5856] usb 4-1: config 0 descriptor?? [ 379.636667][ T5856] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 379.669171][ T5856] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB1 [ 379.804163][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.829560][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.830144][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.930412][ T5870] usb 4-1: USB disconnect, device number 5 [ 379.963886][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.050843][ T5870] omninet ttyUSB1: ZyXEL - omni.net usb converter now disconnected from ttyUSB1 [ 380.051685][ T5870] omninet 4-1:0.0: device disconnected [ 380.427933][ T7743] overlayfs: failed to resolve './file1': -2 [ 381.810047][ T7753] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 382.509859][ T7376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.667998][ T7376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.747218][ T7376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 382.858935][ T7376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.433461][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.515312][ T7376] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.547308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.548548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.573763][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.595131][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.946772][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.946861][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.532994][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.533584][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.646567][ T7797] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 385.034685][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 385.080552][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.184630][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 385.187326][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 385.187355][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 385.187381][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.187403][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 385.191660][ T5870] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 385.191689][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.191709][ T5870] usb 4-1: Product: syz [ 385.191724][ T5870] usb 4-1: Manufacturer: syz [ 385.191739][ T5870] usb 4-1: SerialNumber: syz [ 385.244958][ T5870] usb 4-1: config 0 descriptor?? [ 385.270773][ T5870] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 385.351756][ T5870] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB1 [ 385.504826][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.505461][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.596789][ T5870] usb 4-1: USB disconnect, device number 6 [ 385.741633][ T5870] omninet ttyUSB1: ZyXEL - omni.net usb converter now disconnected from ttyUSB1 [ 385.742429][ T5870] omninet 4-1:0.0: device disconnected [ 386.722803][ T7376] veth0_vlan: entered promiscuous mode [ 386.804647][ T5870] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 386.855425][ T7376] veth1_vlan: entered promiscuous mode [ 386.987132][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.987167][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.987192][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.987235][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= d.00 [ 386.987259][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.993357][ T5870] usb 4-1: config 0 descriptor?? [ 387.289888][ T7376] veth0_macvtap: entered promiscuous mode [ 387.304135][ T7376] veth1_macvtap: entered promiscuous mode [ 387.348333][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.409978][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.499756][ T3520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.500867][ T3520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.502228][ T3520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.503887][ T3520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.835948][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 388.677862][ T7860] cgroup: No subsys list or none specified [ 390.043972][ T5869] usb 4-1: USB disconnect, device number 7 [ 390.313422][ T6228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.313443][ T6228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.551330][ T5996] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 390.711503][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.711518][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.713113][ T10] usb 1-1: USB disconnect, device number 12 [ 390.745054][ T5996] usb 5-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 390.745083][ T5996] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.746689][ T5996] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.746715][ T5996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.746736][ T5996] usb 5-1: SerialNumber: syz [ 391.083953][ T10] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 391.098980][ T10] omninet 1-1:0.0: device disconnected [ 391.281057][ T5996] usb 5-1: 0:2 : does not exist [ 391.281155][ T5996] usb 5-1: unit 255 not found! [ 391.441651][ T5996] usb 5-1: USB disconnect, device number 10 [ 391.770820][ T7144] udevd[7144]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.143551][ T7910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.425'. [ 395.244720][ T5869] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 395.384593][ T5869] usb 2-1: device descriptor read/64, error -71 [ 395.764731][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 396.002420][ T5869] usb 2-1: device descriptor read/64, error -71 [ 396.115723][ T5869] usb usb2-port1: attempt power cycle [ 396.949127][ T5869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 396.983531][ T5869] usb 2-1: device descriptor read/8, error -71 [ 397.258199][ T5869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 397.466651][ T5869] usb 2-1: device not accepting address 12, error -71 [ 397.473688][ T5869] usb usb2-port1: unable to enumerate USB device [ 398.352228][ T7956] ------------[ cut here ]------------ [ 398.352251][ T7956] WARNING: CPU: 1 PID: 7956 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc59/0xd50 [ 398.352290][ T7956] Modules linked in: [ 398.352310][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.352334][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.352347][ T7956] RIP: 0010:nsfs_fh_to_dentry+0xc59/0xd50 [ 398.352370][ T7956] Code: 64 24 40 e9 3e f8 ff ff e8 64 74 81 ff 90 0f 0b 90 e9 61 f6 ff ff e8 56 74 81 ff 90 0f 0b 90 e9 a8 f6 ff ff e8 48 74 81 ff 90 <0f> 0b 90 e9 f0 f6 ff ff e8 3a 74 81 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 398.352389][ T7956] RSP: 0018:ffffc90006367a40 EFLAGS: 00010287 [ 398.352407][ T7956] RAX: ffffffff823d78e8 RBX: 00000000effffffe RCX: 0000000000080000 [ 398.352423][ T7956] RDX: ffffc9000e71c000 RSI: 000000000000003e RDI: 000000000000003f [ 398.352437][ T7956] RBP: ffffc90006367b10 R08: 0000000000000000 R09: 0000000000000000 [ 398.352451][ T7956] R10: dffffc0000000000 R11: fffffbfff1deeccf R12: ffffffff823d6dcc [ 398.352467][ T7956] R13: dffffc0000000000 R14: ffff88802646a794 R15: 0000000000000000 [ 398.352483][ T7956] FS: 00007f4d057466c0(0000) GS:ffff888126cc9000(0000) knlGS:0000000000000000 [ 398.352501][ T7956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.352534][ T7956] CR2: 0000200000000000 CR3: 00000000628b2000 CR4: 00000000003526f0 [ 398.352552][ T7956] Call Trace: [ 398.352561][ T7956] [ 398.352575][ T7956] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 398.352617][ T7956] exportfs_decode_fh_raw+0x178/0x6e0 [ 398.352659][ T7956] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 398.352693][ T7956] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 398.352779][ T7956] do_handle_to_path+0xa4/0x1a0 [ 398.352811][ T7956] do_handle_open+0x6b4/0x8f0 [ 398.352846][ T7956] ? __pfx_do_handle_open+0x10/0x10 [ 398.352878][ T7956] ? rcu_is_watching+0x15/0xb0 [ 398.352919][ T7956] ? do_syscall_64+0xbe/0xfa0 [ 398.352960][ T7956] do_syscall_64+0xfa/0xfa0 [ 398.352995][ T7956] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.353032][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.353054][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 398.353083][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.353105][ T7956] RIP: 0033:0x7f4d074deec9 [ 398.353123][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.353141][ T7956] RSP: 002b:00007f4d05746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 398.353174][ T7956] RAX: ffffffffffffffda RBX: 00007f4d07735fa0 RCX: 00007f4d074deec9 [ 398.353190][ T7956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.353203][ T7956] RBP: 00007f4d07561f91 R08: 0000000000000000 R09: 0000000000000000 [ 398.353216][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.353229][ T7956] R13: 00007f4d07736038 R14: 00007f4d07735fa0 R15: 00007ffd4370bda8 [ 398.353264][ T7956] [ 398.353279][ T7956] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.353294][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.4.435 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.353316][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.353329][ T7956] Call Trace: [ 398.353355][ T7956] [ 398.353364][ T7956] dump_stack_lvl+0x99/0x250 [ 398.353393][ T7956] ? __asan_memcpy+0x40/0x70 [ 398.353427][ T7956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.353455][ T7956] ? __pfx__printk+0x10/0x10 [ 398.353500][ T7956] vpanic+0x237/0x6d0 [ 398.353522][ T7956] ? __pfx_vpanic+0x10/0x10 [ 398.353556][ T7956] panic+0xb9/0xc0 [ 398.353578][ T7956] ? __pfx_panic+0x10/0x10 [ 398.353617][ T7956] __warn+0x31b/0x4b0 [ 398.353638][ T7956] ? nsfs_fh_to_dentry+0xc59/0xd50 [ 398.353665][ T7956] ? nsfs_fh_to_dentry+0xc59/0xd50 [ 398.353690][ T7956] report_bug+0x2be/0x4f0 [ 398.353721][ T7956] ? nsfs_fh_to_dentry+0xc59/0xd50 [ 398.353746][ T7956] ? nsfs_fh_to_dentry+0xc59/0xd50 [ 398.353771][ T7956] ? nsfs_fh_to_dentry+0xc5b/0xd50 [ 398.353796][ T7956] handle_bug+0x84/0x160 [ 398.353820][ T7956] exc_invalid_op+0x1a/0x50 [ 398.353844][ T7956] asm_exc_invalid_op+0x1a/0x20 [ 398.353877][ T7956] RIP: 0010:nsfs_fh_to_dentry+0xc59/0xd50 [ 398.353900][ T7956] Code: 64 24 40 e9 3e f8 ff ff e8 64 74 81 ff 90 0f 0b 90 e9 61 f6 ff ff e8 56 74 81 ff 90 0f 0b 90 e9 a8 f6 ff ff e8 48 74 81 ff 90 <0f> 0b 90 e9 f0 f6 ff ff e8 3a 74 81 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 398.353924][ T7956] RSP: 0018:ffffc90006367a40 EFLAGS: 00010287 [ 398.353942][ T7956] RAX: ffffffff823d78e8 RBX: 00000000effffffe RCX: 0000000000080000 [ 398.353957][ T7956] RDX: ffffc9000e71c000 RSI: 000000000000003e RDI: 000000000000003f [ 398.353972][ T7956] RBP: ffffc90006367b10 R08: 0000000000000000 R09: 0000000000000000 [ 398.353986][ T7956] R10: dffffc0000000000 R11: fffffbfff1deeccf R12: ffffffff823d6dcc [ 398.354002][ T7956] R13: dffffc0000000000 R14: ffff88802646a794 R15: 0000000000000000 [ 398.354020][ T7956] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 398.354046][ T7956] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 398.354082][ T7956] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 398.354131][ T7956] exportfs_decode_fh_raw+0x178/0x6e0 [ 398.354167][ T7956] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 398.354197][ T7956] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 398.354274][ T7956] do_handle_to_path+0xa4/0x1a0 [ 398.354304][ T7956] do_handle_open+0x6b4/0x8f0 [ 398.354335][ T7956] ? __pfx_do_handle_open+0x10/0x10 [ 398.354366][ T7956] ? rcu_is_watching+0x15/0xb0 [ 398.354397][ T7956] ? do_syscall_64+0xbe/0xfa0 [ 398.354433][ T7956] do_syscall_64+0xfa/0xfa0 [ 398.354462][ T7956] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.354497][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.354518][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 398.354542][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.354561][ T7956] RIP: 0033:0x7f4d074deec9 [ 398.354576][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.354610][ T7956] RSP: 002b:00007f4d05746038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 398.354625][ T7956] RAX: ffffffffffffffda RBX: 00007f4d07735fa0 RCX: 00007f4d074deec9 [ 398.354636][ T7956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 398.354646][ T7956] RBP: 00007f4d07561f91 R08: 0000000000000000 R09: 0000000000000000 [ 398.354669][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.354678][ T7956] R13: 00007f4d07736038 R14: 00007f4d07735fa0 R15: 00007ffd4370bda8 [ 398.354701][ T7956] [ 398.355046][ T7956] Kernel Offset: disabled