last executing test programs: 20.771130671s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) 20.494564447s ago: executing program 3 (id=214): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) close_range(r3, 0xffffffffffffffff, 0x0) 19.20343333s ago: executing program 1 (id=216): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) 18.825972738s ago: executing program 3 (id=217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xfd, 0x8, 0x71, 0xff, 0x1, 0x6, 0xf, 0xff, 0xd, 0xfa, 0x72, 0xe, 0x8, 0xfb}, 0xe) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) 17.213162555s ago: executing program 3 (id=222): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 17.025104504s ago: executing program 5 (id=224): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) close(r4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xfe, 0x4}]) 15.852827929s ago: executing program 0 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0x2, 0xa24f, 0x6, 0x6, 0xffffffff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x65, 0x9, 0x3, 0x5}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.455728625s ago: executing program 3 (id=226): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x13, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.640928938s ago: executing program 5 (id=227): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_open_dev$sndpcmp(0x0, 0x6, 0x50100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 14.383007589s ago: executing program 3 (id=229): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), 0x0}}, &(0x7f0000bbdffc)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) getpid() getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 14.308010736s ago: executing program 5 (id=230): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r4, &(0x7f0000000200)="9a9c94a4ff", 0x5, 0x20000800, &(0x7f0000001080)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000540)) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000001030101000000000a000000000000000c0002000000000000000069"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776050203010902240001000000000904310002ff0107ff09058a02100000fa000905ff"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 14.100110516s ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r2) getpid() fstat(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001200)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000001300)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r8 = getuid() r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001380)="49787a7f30e3823eb9c2014e395d7bfbd402f33123caba749084ddc63046ea6a1ded1e7d303d25650388bd99a3f2c93382b7bebc57ec2e00139d6bf5d8ab59161467be161fb73883935b50ba82fc9e3e6ba03ab293fc164effaf7e4b454de1841f47fd7c0fa4599f340e78a7047b5b715b5b23b1c537a803479863bdd326e21d45f4a994a676224ec484bb85fcde394f705da11e02464e469f634fed4f57ee94eaf5463dd3521d560661249d41f860448805efad97f12c5114bc9b254714cf5b2a5c564204d49d208504ea6f36a1636b17046a7f78c3e9d6d230616e54e35873acabf49fff6b66482bcdd585fdf1938fffb86d13088d2c64c83595cb11f629a3bb0b118af5061156bda375f083081e186b59f6e694273ba6f79396f52a9da0a375bea746c6ede56a27fcf9270dc22a29f50c5fe09efa99f5b0fc0e067bf94258b674cc928803eeeb3f1fa5ca0a828c6092f2ee1f5bd524a2bf489de1a089d9c4f42e23cf0926417d0cfe2cb5b2f5a43fc907ac625d2eb569178025675d17688194bfaff687810aa2b4bd65ea1bb2cf31a1e6a97e2ea43087df462ac275c2dc50eb5c15707876f64d1fbc43c774060674b811b4a328a4b3c9488c002a069bc003cccbea4414e8c572d38bd8b6e345f16994fd24787b51da7e23cbd9a7ff2109155264af074ea3dfa03c0a654682db8b844aa9a865cc7545d42c1bb5cebb13a5f26eebda3098d2c486cd311232dfc3aeba1b56a22dd0a0e9d2113b3e20bae8c8cbe15c4bbe652919f054e5d69d2d2a42363fad25b5d6fe501741e36d33f318a6c85f547bbbb2a6e3a960d935150e1ed07c7e9daeb4ed72856feef7e40ea490d8d6d80d711e02dd13de64c097d73f1c85adc7e85f4799c39ad101eac45cfc9c60c12ce785dd9f8394b8f2d51ac95a264aea38537b06e2b5811e3f20b33d9575c8e49860fdc8356728c4e33001acbf130047f1250fa86c8fc5f6fd9d088814568b25bbb68ec4478144e7d7c03404a6620d1b5eef7cb07cbdeb0d0a3748acdcc563375e3e92cbef9e9f9e02df50d68538717a72f383b24d9dea7f038bf8b49d7170767991e77cb8eacc4b3651b8f6c61c572df75e997121c423d84369575a46ae1ed8177299a7026ec16ed6fbab74c21e53dfd04cdbc3814effec20b5532a80869eeee2334c24203d477ce516696b2587a8a581cc678348df0babdff5a5460c38c18b879028a4bafec8431364e86717c3a8432fcef305453e840b71fbb6c174dfbffa6b6f2e25347e2ec1cefb12d11e26c655cd8bc824d7387844b400dc95c39d7f015f05e60309d1a1c13ee5ebbdc021d55bd6867f589d5a09e70c8112a13698d7f57614f418cfae0cd1f42952bb7eb995542d6818ecf3fdea5b67fd28911c0ee3a1db0ee60431865f9fcb7021645eacf7041e07bcc1701f267fe52da1c59861895dd68863fb2944eb093b47536dbba3e529882e340f206bb314d8367cbf92861f23f9e2a2ae59e736f7641c1f3a9f3817b2d63bea15f9ddece53ab0a2aa96cb33a64480532a6660ee3cf686fbd6050b0ae8988a98199a661173989ae5257eca7a17915bfd00550c66d8ddf1288409baf3dde22abef845a3d1d97e5185a350df8f8aa07a8c582f5f2ed8f04798e4ecb616fea791240524859670a53c2e06eac5ef26aa49477acbbbe2d81eea16ebb4931afe9e0db9d3758f4190b822f38f4d98f8ad6847a58135b1386ea8a35851bebb469fddd65b8edc6a7f0ebcb9864e57de7ac23cb346b76f87b5dc3182c682b866f91cf55615c9b9b3a59ec07eaeb7da26908f641bd0f12898e309b0e6d960d999a97a82e531cf8bee3ae8a744cf68c346c9a1df16f27c9164528bd50c3b23219fa27e1376921f6b44f4412eadc8fb00026f76f06807d9b3987befc58b8728e30845a69ac733a1c751dff2c8ef3a9847758184797f06510366b148c55090ac41d6f772752acc1fc479e5a941344b6e3328930a4f7cd2c1670612a8d529c547c1a4bf60d67b3d0da72f4b4f8d4472186a8aa5f832f4b545436c017b870ea7548d936b70f212cc8f5ad666c1cec3302224761fa18ec7b274d23ed254f4a08a0a53f6dc277c5c4deabfbabcaa695e65cc317db6b20e0cfc8f0c0b2c4e09ce8aa5751e34484e04d81ef0e7cc6add0e18892037685821db5a1f9a5b74e383ab3b6ed9af826716e4736d4c3180f08ac28810f9b18e208f77fe007e97c02e12f9ff4e21599bf709f702e6797bc0ba88fe9e573205417e8cfa7ac3a6cae4bfb1501126a8f7078d7dad2977f9d918601c66501f8a6c651c2efdc35ce5b35a1b391b5cf53c2d9f09b2ae8e27bcb77b897e4110223360faf15418d92506fb7049c5606feba74ada69453a92cb9e54ec4c5978d45c13f54a03e02aa6a46e956b41d5881a772475733d82cb0d4fab54df99166c33261e07aafcccf012229cc0af44b3f6473add175302cc4dc0f718a41851a57a43daeae3817ca208b47c49ee92acf201425183477c5d4333112115a27bd18a38d4756b6445de92957fa3d9d2c0ea54f3facc1d3a350766dbafd0aedbeb2d05773b8906d15deaafbb66a91f849f2893e31346cb3f506bf7ea05db6afea57ce79948572c9c1cd7aa4faf716e2e58f23d4e8156be2b2236d5a1c333774b69a43e6007eb4d39876ca84d9f5210dde3c847f6c72ab833e7e8015fcd4e4a209b025f0884203b05ce7e20a52a1f8b0f425096ba6432c2d6df0d67e737446afb3c9ff68e5c70ed16c1cbd24d1445641943b1d7e0a0b764589be4cb13cb6ef64d873331102162eda5f9edbd891c11b65d9da5eaa61974fc16792027980fd69b816af078fe657a627021a37e9e0e27fe2a4ced7b6bc1057faa4357f8e0165cab943e1ff16419addc293fae52f978558d161e02e0318c6209d6d537f05e24d97a3f948ead85151e433cdcc4ce1950820e8130e0cd8f828e80e3f9d946fca62663db2e0986f8b045c381f15e78f37a12e6964caf4a723fbe7561e56adb836d9f593a99350055d7a18e268444122fc15e8feb2eed4f79cee19bd0a09e501cbbeb8490cd6e8bcf07c1db4754765fff5f4be50b4faefb5e57a679d6fcd775228ca39b4ccaca4f3412963703546b08e1aade0f4ebbeef008b50567f5a43e79fbc50d1f7c7a601828002b24c974c9e28f70b1215069c04f8d055d8f8cafac9b4bb0d9c831e71be7fac94cd5f607ce3900be15d10ccb3051e8ea0cc53dd967de1069ac7bea77a5654fc7d4fac9ae24819f8584f116d614a80bdc3d224f67c279604924aa6db0346e1458aa6ab4d2a2270280c19a29844785f5bff236963ea8118e10682626d3d65a116a6d72015f9be1fb78f015f588200ac94a338c40df34928a158fb56168d6e71fe8aa23ba3f77ff5a2647721924ed28fa21f4dbc42deb20c2ff6f3a7a1833658b02d4b2f8ba4f59b6c5da6f24b960519f15d3002cb24b6165dbca498b87374744b5834395aea7272494fad2f33e0719d08ad0c25a39290dcc15222979f2f94ef8f4023eef614c8c184ed5ea0345c157e052b85e0cb17628b0ddbad1bd52c8c9d3ad41625d0bcf52c66b3ce90a827dd64b2c8c23b4046eb5704529100eacc1bead58d8238609acb4f256cdc5bf9c4e8606072c2d95ae7a384c0d7bd2794a0724c96ecae31b3d244c9671ff8247129bdb888954c1e4d4fa3b36d91c420519fc46eb702263573abd471fb50f9372144e421b16ea17b559587cf8572484531579852476265dcbee312e0adfa2a6d36349077381f180f8f230d62433a18706a8d2733e196531b888fc0470440ef16b5ae6c3e71983b8abd2014b00dc29b69e2d405902e4d854f18b2a3fdb78c161953ad2aa86022be428ff892a95c3ed346c293e5cf07119f7479e4c59ce2aa40d576642721dd990d2df8db1694803d266b772d0905ea12effb382117688fcc3c6206b4e27207a27185f3580f2de690788b3d5d1b2e8e2648f77200c50604f5577ccfd9cca73b2c0cdc7c582a87900764a4020b57786312bf5a25f9009a8fd2fcc3b3a99952a26fe5693c8d870fd6f39306a62fa96a5d45e4bc8b20dfbf94caa280d356ae531f8365f3dbf18cdb1cc31f90a187a9e09f010b3c6dadaf7017c493b5b68be8561629976c48e6891772f89105707d25d601eeba6539a1a3357e5ceca0b4e2ec833314ffb6f609a8a15d96a35c441b5f72e548c841847b4fdc4f0f11f3fbf3709a435701934261db5546b2d23ca6c22f1923025e624a0ffe351dc3607595951397ee54ddd2532be0e583e651f268bcccd75f28b888d2ee7672f2373f61f18c470a532a15ab2fee3765153454f4d57b292dca4bdbcc6065da586d83cfbc6bbeea13db8a5bec9a12ed9658278ce69c54c94be76f0af2e14529af64fea7a90017795ca3f9037a6188741e663cfec1f04046d426c895c62621a9edc395844b3e83845c331f7135037687e41225db9d5cff3183e091cbd69e9740b247f92f096599e80a5351da662401327057c4fc386638d87f42b45b4b3e8dafe0376b1d023f3e35ae6b4e0cf7b4dd6510c7327d3e408951a385594a7362da8ba40246cdd491383d00e186c41dd70c3ac55e9754534b8445b80cb933c0765542894f71201861374957284b11ed855762317f2633caf2ccd9052e317056621372f536730d07a0c4fb3e7f8aa375b8f7ae74458da11235f72c6547e8693e5dd3ebfef12b5db891f0139950789e5bc5031f369730da8240518df1256afec5d15fafd030a90d035ac38696e4f49d03cdf7d9b9ec8b6a2ec6092d637f83f43bab78f103daa29f0576d2b25e76985e891e254f808e3c20c1a849a202827c06f345c87c8ce969a29b6719967cbfed6e383eb91ed0b9bc9d2104bd025b2d12bc005f349bb2534488afd1ff8b7aef282d87d8c59d86e3da71c331d89882f4500a9828949cf9eb79c35084fedc6126eb5d1664ffa5986711e76f6c3b18dc11fcc321cb868c5299e25d0adf23ea5be194157cb70f7cc571d0769095970d4b45e2a04b9f388cd09e5bd6e8bdef500c1a2df876601ab4c08bd9cf5122f047e08737dc27f0f8c3fd7367819d05b6916fcc597bbba0292922b1c357f47ab11946abaedad86bc3382cf9f7b6702763f96c56034d51f1c24533c6929b65c0179ae5bf9d8d6fe2347adbf11bfd5bbb0d13808d853f1429e2ee16483f977480a0007c9a5264cefef88dbd045de89c70825d7d9cde68a106335ed4b466403ef030658ddbcae05f8d586873df61559d488e19a644208d1d98d34301ff520678f018d3b24374ee43b972b3511c6815a046c634cba275950e0ea078af2fb717104fc672bcf2e2b1fbada5a1fd91861b4d0954457c3dec62f732fe06e417861ab343a7a32d103cef540a56efa4309ee2b5cecb45789942da6518f44954130b8a17720f82d56554916b40ebbeb71759be5089500139675b55b3343bbe1294c7badd214b7eae18f019f210e2a268a3d1dbc93bc4183191bd8c603fce04a7533dc2b94d006927adc659bf6564b77ba6c39a3c3abb560a705313365790b8c069923e2352d7625b78f6c39cf815e1df4195e82974a44950f538be39c20e2f24fdeee038fdfe7382e89ba449f0b6139f7db1799b0276c74a7268cebe576712450f39901ba665f1893a386c289689e71da49e578d5ba2675a5aa20e0c7908f3418d4d39cdf9e8d8c747b978dad68b2d6208d2527e39e63322aa612ae0a4bc865baa2eb7200a0baf628ee9ecb22bceb06a28a035fcb2cf2282454dc4b82997edc38ea252148e675e49c893eb02f9b5fe24dde66c1f064e70b9c0c26af65af68425c8fec92a9ba22c13363a8d1139b08e4804e1d28a010ba750423e7cc0f18da824492a726160390f6e2441f91b98bcae93033a2680989d0c8345a63cb9ca1a3543557614bd3c82abed424c8b042f2b8e2c27eb2f43d9f4372ea4f4a263c6113893a2a98a62ea8deae50fd0011a0d0a3b291ca45f079ce76ac98635ed960c35e9da22192739a29d6c86e7ffd8a0f2c2330360fc954b18c9f68f1e794c961b84902f4d3c12d82d6c2f01accf70fcf506b607af75d9aa4047666595b05a8f1e356fd1c8491142ae9f741eed8ab0b8491d3055ccffcbffbe13b1e3930c0775957ec0bfbc3f2926058671760733818e2aece8fa3b945298dac322f0cf5d91e9a372551debe4f6abd5890b73ac82be18abfce415bbe44bc28ed11e6a0f9921b01f4094a5de2f951631a438c78d21927727e131d8c32bd0413cb5a198b10ea7120fe210b19e8d4198902b6271d7d7017d9588d14c9d03d6ae1d3dcc0338980fbf4fed4e22e3e2b8509f4892402ecee6b3567889ec757e62c62702cf7ca28c3040d801b19e56ef5d9c18060f189fdfe542fac3a190adcc5551f4f8a7dce9fb363041ab929ca59f2fe8228b156f75e21644abfd63d1b53565877c66cd243a6b09330b242ba3f68faec7a8c3da5f0149fa5b3521c4dd9341d413c975d9e687bc39081f6b524f9f5d1b7265afacfc2bff34ae0f7c9c755e03bc84d87ce0cc1815300a872e2e764775524c81a38a7aaa38387874d0d45df03e63308218bba5d4c77362c522589e44631445de2e339d43ec5b5d7ecfaacd46042c47d554368e0551e9bc1f05b4b08b15306ea88aff7a2c9c0190c7fe16ee980a9c57d700d5334442dd5c6419beaa3b563e62404950f24db5b9397fce355304b67cb95c3698d48e9b9fe8410e9cd306f7efd2ff3660e3be9ba7d90d7694b4c88d6ff629148954becc99bf6d2016f706b28981e490e5fa29650f556bdfc7ca77d4e2f9ec59b9ca542845dc65e481067b4fa84005675bccf44b75064d464d385845974bbf139d5084eed006912efbf6e6ba8b86a135fcc1e6605d2bda526ec33c24a8343c5c2ebb7578955022af9bd9a160ebe9e0f77e9d9b891225014d35ddec111fa293f819202b04b746add4b2aca7018111c00627a930958fbc700588258e1062c2699011c6a95b61e0cc4f8f570c7f3a31de56ca4db196e014a8f80ff054edbe1b21db7bbec7ce85a5031d1bf2d39ea671e0e27471b5f25b7959583f6a9e7728bd336ea3508b7f65d87a14740382a9ccae5d950e26061112b7d982e75ffee7392c88a0cf11e265bdb7cb1e3833321a15f0119b96613bc04a2f384e6ca40aed6096cfa0a41e8229245f32a9f2bbad302572428ea9d8993aeb9c44efc10684ee05df42c4e3fe59348c4d07fed4a427a5e1af41ce2c2d306a31dada42cf99c33c1c808f5902d6cd2c909ed77cff14625c1ccacf51bba49d8bbd314d9671511f16e85850ae1ba8f894cc1d593cf12c5d8ae8c8666e471a6a255ffc6872b245ee7b155a87a9fcaf5579ad9f17d2451772a992c872068c4dc5edf9715d58b4dd6ab8f402aecf22e252e1a16732c76e5765b72a4fbebc4625f70036fa75d77b0c3136cf388a9c9859492965209bb1e673ddb2ccf6eb66fbf74cd6cce4a824e1ba17aee1a20294130387efcd21cd8e3362753f45d1a7882afbbde3f675a5d20cc03dde61fd00f6cedaa4092cae48f6e8a80a494fa0d010a2f1c44b62941d780cf77219e981b8eb63287429232caae1b2d7fe74c10505b3a8a299f11d89c3aca39d2187ac1ac3db12eae9ca19aefae149d65c4cce012165433c4bcc720c7e9f3776e94555f924792c0fcce3581325ce9cfc90c766fdbfbc6b1ff46d9b0953a6754971f4d6a7dbf3cecc094a3be12b646999006a01c680846be31fb2a577f18695813c2adddf2490c201b65b3e2c10f932663e46a2d4fa2d5cbe7b6516a2b468a55a788569ce37d7ec712abe46d4df2874120db2489f3ea235d8fec8e5d53613d77484407526970d3da542aec78934277bee3941d0c008dcd1d4aa67f46629dd8e9840334a77bd2346f2ba3388f992c1c4d06ee44042df857884dd0f7275f67851871f3306731f83613e613a13eca8817b8f914ec84716b711694986e0fcaf8241b1bf279159b5c4d59b0847a8d8a7fbefe5a74787cdb66a4c4eab23f951fd679554b3bce38db1c583d555601bb4a6614ad4a70eb7a877ce51b54aa88fad02f6c521eaa696b9b293aab44470baa2f8384a9cef5394186608210f364b151623eb0e3cd51cfa911f936b290fa0517ce4e0ab07ed48e59d20e0356f8d639c7bb2924a417d26aef38315d6554337826fefa594f2e5514dc02c7ef246a68aaabf47817e629d131cd0392b519b429c680da77b2b4a1e1718e73d134af3933c2014e1e8f4e6972d447f8f2bbf34b64bdf373d9824e45f7a73093403593df2e13e0ec10dddf6072e1ccaef77deb1be32301e27ecfc3f39dc39e1ea0b7aae152e2ebc018a4b832e82e0dadb39ca995916b8be8ae2e4c6e0f50938d1d0b0837efecd5ebaa4cc1dc4193488c48534f057c7d24248e60faf9df36dc39e54c75820b7f4392ca368ccfe80907083eaf6d5de7dd52a9ec5cec396abab9c6d6b4644b5620a7e5fabd57c249b7e67f388e30ac95ffa0ff76db15a89932e1bf662cfa6f571bcc01c2c57844d33420a165cf00242e586c24a5f8edb08d4146eaffe35cab2ee40e60654ef06e7bc0929c3fb4afb80e26bc613b12a7edc9ee99d54a50e614df81459944d0c6764ebe63d87ff14f15ec168310e145f332d4a024e9cebea2aa9dcee83afd2e29d69b948aae1107473ec39c60d37451febb85fbd5b7d2540cd8a94176621ff51807fbf02c0ff27b0bd5cdcb752e38d6874d4ff42e9a7bd0e64f14d8cd28c098b34fa3b7cb66c18c37ab707e850207f752b02046c140e3d0a11ffca4dd8caaa6d2ed294767d470f8328824494accaa832fa0bb6c7a7279544405ccf6a74ace0777deb27f5516132f64e9c6e3aa27a3f918cb3ac6924c23fd78e3ec2a1e7779cc275176d10dfe18a3815171136532166f0fe9304dbc9d868023aaad28289b91f716971af8dd7025ab28a4b7d81491e50e1de6a8bd47f21e4fa713695f89fb111fdff9bc73ff920bfde0e119f64f93a3f44e9b05a89171dcd5ea264eb4d1ac34865cc59cc3d856473313d623c4cce2934d5c7feb7896529d3572afe96f91d9ea5a7bd0ec52ff686deb09369e2a1cee15d496f9788a63fe43a1b43f97ce1993bd8640fa2197ed21566f1b4a0d074ca6ab0eddabf7d44a0c9b556b66bf506b96dfe758c592edf4b9becfeb8442fe875b5b6e9a70b0c866088b1bd9856a0f0a637162b518cfc81a2d0e23e9d57057df56791a76872f460c72221b6753d59bce547365d5595f8252daa07302f561104facd873c50688530bf24a8d268dd0b5a53068a23ff8f23756fa4df3de0b87ffd214f77d318052d3bfb42489f67ec45fbd0e4f3cd0669d8e3c7f804ffc3c130a5e00d727c7782b9d3366bf066d38fce5f812591b3921cf2649f740dcfa187ebad877a42237ea06e2aed839a3df41ba3125323184bcd83f7d14d6074cee80d6a6d1cceb924745be86274ab854ffe8b7e4c360bedc4be5b8dc62e2f093b7a0551bdffad9b1b8159a4681bbdff919b919f54249d4d4e5783f82825b13e3932f021f24dfe8dea3ddc167a5c60dcba795c5b960a65073759560ddd7588497f1a750df3e423af8b0050dfd6395fdf473fead3e7f9fee2d6a1a3efbacceff59c7d7d25b9ed64cc615f5a020c235ab4192ff9a3e9cfa53aa60ef4ef0277ceb7c154ad71b824fb39842fb656caad04f91f9aa012f4aa01c6e5ce3ffa8ead2e38872bc626e86610767080a2c30db607df933e8673182d7ccfe793e49389b4b094057df4b62180e8169056a6f8cc3d0776487a840a7556a6ebbba51e3e452d4836147961acec30a404e6a6495866f3325ae6058df5fa1e2ebca8b03b8be193348993618de077867550c77508e4a4e3fb8dab9055527c71381367655d8739cc8eff2cf3c7de6d8d5973154d0f0d6d41f9186927c9e94f90f3a63ae9030c1cf12b2160146c0e2a7767be76dee20c4db1bfa38d689756973fcc87af3d19dfa1fb904193f8006f9e42aaeccd861ee880748236abf86283df17dbea58ba7e394da810597c6d5fd219af768ed1b11b7b4f8b398c501805ae17ef3b269b011c47f9ab8f339666a01e186c3bb93f58b2a0c1a0cee4bdb485831c3fac6ddc0678d7f0a7bd380ef94f9b7dd5a4b92050191552be6d830ce2895f09380b0c161f7a2c68711c4566f0ea712bc4de89f3b0c25a298765d7ae00bf6d8dd124711b508f3d206f08222eb73633e60790ab342b7a1eb24d83ab6d233fed619d1838f2e4777d7418e1bb3f238c02e9e6c36b9207d38874cd66cce348a6ea21809595309934e05acdb6b7f0669236f60e4a281a86c16580b8867b1feb82a84436552c7cc26ca83a7cbaeb1d92ba454644cad808f8e181eb6ffb21ed258764843b9ff934518e371e41b2bb79ac2a64c1dda5b62824d0e885be74cac2c8c8e5ec8ea6bde827cee8f0c7c4b896c52609823b8ec626fbe0f271598ad673814a9818075f125ae3486d7db1a66b622ada3f60810c1dbd3608850b4b6bd668089d395b23005ac8153f2b9d11762ee7aa54317404719f3bcc7644c96d6a2be01713ef2b3d8bc44833bb50f757cffd037427a7c39e5794f1be238cf3283eab60b53a4e5162c7784f18cf03c362e1991951d9516e59b3a88fa9ed33aa8b9f3a25b33df16980c27f00a04628a5bd038b3654e5832ad5858c4b89e1abe39d28accd8e6c8c4524caf2d84612a308b54229dcaddbfa3eb9871c9185a7018c260a568b62e526b68e68324d66801b5e7a6f2825b4f3e4e1edaea536436efb89075a1bd3438569f5c573e0af2b30ede9b0dfe4df3ed6e36d543d2d8cda340caab06b52112e2bbd494eb33df340cb82fe11ab1ece73e0d8dac2f41ca869dbc8e1ffe84263d4aeb9574c7b54c83b6f562d1b94d833c7eaa6d8d1b1d20bd3907eb6d69dd646ed486c20af2b1c9058046fe048a1009290252c5b66e6cb2d0ae48cf1c64c7da1990743e77ffc23ab7a961434b0604d94a040a823f61bf7c8682e21b220e5ee7ba2b0e2997965c9c809c645b4c6c0f62b103469b6380ac63fd30a7fa01b94a18bf5b263544f46a0eccac7021afbbf576403b25293d5d00f1e5254c4e08c60af4d0c8b4d9746f28a0118f32b2a7dd1397a0775cf0d79f9fa4a20ef04e8b5375260cc9f25758782ef4e7b33b9b94fcf4a82757a8b784fed9e776090b196703bffc061e71b19b270b9efe9726e8955ab78e4db6372021426cc36d4d2b6f2e933983455d875046abc386e26a0ea0a94ab61ee8e4970970d0293799923f514a1d667910cbdd7258f9f9a09dacc81367b8f349b6ce6da97bf655208714a75c96b2f1481ed284d33aa7941be6568523ea821bea88bc877c4e38db959b40f916f9086d84621e9abdb3440d40cf783cb43285fcd88dfe424e70b0891863e4e8fa31ef2b10d4f0f6f97420c5309eb2401d77008a825b3ad8601bbe4485f0047ca3a4997100c9e4203b56b5e1f17ed562837c2257a01266df9974aff7223ee5cada6b9a806fca808df5fdff8fa9a804994c1ec407da7465fc9fafb13ce7930271746e1ec9cd8ef01cfb04332c5d48a13a976e8aa089dac5c15d4a0df123f96fb0e8483ac26ebda022a006a46642", 0x2000, &(0x7f0000003b00)={&(0x7f00000003c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x420410, 0xfffe, 0x1000, 0x8, 0x5, 0x0, 0x0, 0x10, 0x3ff}}, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffd, {0x6}}, &(0x7f0000000340)={0x18, 0x0, 0x5, {0x7c}}, &(0x7f0000000440)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000480)={0x18, 0x0, 0x6, {0x2}}, &(0x7f00000004c0)={0x28, 0xfffffffffffffffe, 0x9, {{0x100000000, 0x7ff, 0x2, r2}}}, &(0x7f0000000540)={0x60, 0x0, 0x1000, {{0x8, 0x6, 0x4, 0x3, 0x7c7, 0xe2ac, 0xf, 0x8}}}, &(0x7f00000005c0)={0x18, 0xffffffffffffffda, 0x8000, {0x4}}, &(0x7f0000000640)={0x1f, 0xfffffffffffffff5, 0x9, {'/dev/cpu/#/msr\x00'}}, &(0x7f0000000680)={0x20, 0x0, 0x7, {0x0, 0x8}}, &(0x7f0000000780)={0x78, 0xfffffffffffffff5, 0x4, {0xffffffff, 0x2, 0x0, {0x5, 0x5, 0x3, 0x5, 0x7fffffff, 0x33, 0x3, 0xfffffffa, 0x4, 0x2000, 0x6, 0x0, 0x0, 0x100, 0x3}}}, &(0x7f0000000800)={0x90, 0x0, 0xd4, {0x6, 0x3, 0x4, 0x9, 0xa45, 0x4, {0x5, 0x484, 0xe, 0xffffffffffffffff, 0xaea, 0x5, 0x2, 0x5, 0x1, 0x6000, 0xfff, 0xee00, 0x0, 0x8}}}, &(0x7f00000008c0)={0xb8, 0x0, 0xffffffffffff0001, [{0x0, 0x9, 0x1, 0x0, '\x00'}, {0x1, 0x4, 0x4, 0x4c85, 'GPL\x00'}, {0x1, 0x7, 0xb, 0x4, 'tunnel_key\x00'}, {0x3, 0x6, 0x3, 0xffffff00, '--,'}, {0x4, 0x960d, 0x4, 0x0, 'GPL\x00'}]}, &(0x7f0000003380)={0x3d0, 0x0, 0x3, [{{0x4, 0x2, 0x40000000, 0x7, 0x470, 0x5, {0x4, 0x5, 0xfff, 0xd, 0x81, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, 0x2}}, {0x5, 0x3, 0x0, 0x9}}, {{0x1, 0x2, 0x722, 0x2, 0x7fffffff, 0x5, {0x2, 0x1, 0x5, 0xc, 0x3, 0x0, 0x7, 0x3, 0x7, 0xc000, 0x7, 0x0, 0x0, 0x3f2, 0x17c8}}, {0x2, 0x4, 0x2, 0x0, 'K+'}}, {{0x4, 0x2, 0x2, 0x6, 0x5, 0x401, {0x5, 0x71c, 0x80000001, 0x4, 0x5b3e, 0xffffffff, 0x40, 0xc, 0xff, 0x4000, 0xe, 0x0, 0x0, 0x3, 0x2}}, {0x0, 0x1, 0xb, 0x6d15, 'tunnel_key\x00'}}, {{0x6, 0x1, 0xa98, 0x2, 0x9, 0x5bce, {0x2, 0x6, 0x7f, 0x1, 0xd, 0x7, 0x1, 0xfffffffc, 0x8, 0x0, 0x2, 0xee00, 0x0, 0x40, 0xfffffe72}}, {0x1, 0x4, 0x4, 0xffffd7c8, 'GPL\x00'}}, {{0x3, 0x2, 0x5, 0x96b7, 0x10, 0x7, {0x5, 0x6, 0x5d4, 0x6, 0x9, 0x8, 0x2, 0x101, 0x5, 0x1000, 0x200, 0x0, 0x0, 0x5, 0x80}}, {0x5, 0x80000000, 0x8, 0x7, '\\:-\xf6*;-)'}}, {{0x6, 0x1, 0x1, 0x1, 0x3, 0x9, {0x4, 0x6555, 0xe1, 0x0, 0x0, 0x401, 0xf, 0x80, 0x2, 0xc000, 0x7fff, r4, r5, 0x9, 0x7f}}, {0x1, 0x7, 0x5, 0xfff, '$#)\xf4#'}}]}, &(0x7f00000038c0)={0xa0, 0x0, 0x27df, {{0x5, 0x2, 0x1d11, 0x100, 0x0, 0x6, {0x6, 0x7, 0x3, 0x2, 0x1, 0x21a, 0x5, 0xffffe1ee, 0x1, 0xc000, 0xfffffffa, r6, r7, 0x2, 0x9}}, {0x0, 0x4}}}, &(0x7f0000003980)={0x20, 0xfffffffffffffff5, 0x0, {0x7, 0x4, 0x5, 0x6}}, &(0x7f00000039c0)={0x130, 0x24, 0x5e, {0x6, 0x1, 0x0, '\x00', {0x800, 0x0, 0x5a, 0x80000000, r8, r10, 0x1000, '\x00', 0xeb7, 0x3, 0x2, 0x1, {0x9, 0x64833b02}, {0x6, 0xbf}, {0x9, 0x7fff}, {0x9f}, 0x4, 0x8, 0x2, 0x4}}}}) sendmmsg$unix(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="e4", 0x1}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0xffffff0f, 0x1, &(0x7f0000000000)="17efb513ec25236354d3d5bbd2f9b176cd865edea94e83a1b4d49afeb9659182a506f0c5fd179bebb8cf5973b0ffd81cdf7886b7af852427bf5cead060abf1869e05695ac7a38843e4556750", 0x4c, 0xc9de, 0x2, 0x0, 0xf, 0x1, &(0x7f0000000080)="b1e74daa9ccf2b1cb6663835e41487a82bd7fcfc712c76d96de4efe7f93615b35edeec21c384c9365a6869dd9c13b1b890789b971c46abe2c1ba7e9aabca65bfacc9f0f1c77e95f2b5aded42063800a4959c37670d90386332d6bc7139cb0be49e355e6f5cd207e9"}) 13.083751614s ago: executing program 0 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffd2a9dc6da626c0e21677ffaaaaaaaaaa2b86dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002001000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = mq_open(&(0x7f0000000300)='\xe1\xb7}=\x9ag\v|\xec\b\xb4\x160\xd8W\xadC5\x93} \x00', 0x8c2, 0x30, &(0x7f0000000080)={0x1, 0x100000001, 0x2, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) epoll_create1(0x80000) mq_timedreceive(r2, &(0x7f0000000140)=""/154, 0x9a, 0x0, &(0x7f0000000040)={0x77359400}) creat(&(0x7f00000001c0)='./file0\x00', 0x16c) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast2, 0x4e24, 0x4, 'wrr\x00', 0x39, 0x7ff, 0x22}, 0x2c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) 12.935028849s ago: executing program 2 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x17b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873"], 0x90}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/19, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) 11.270683126s ago: executing program 2 (id=235): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000003c0)={0x1d, r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fanotify_init(0x200, 0x0) write(r5, &(0x7f0000000040)="ff000000", 0x4) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r6, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 10.796813706s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000500)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 10.377515015s ago: executing program 1 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000029000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 9.542585885s ago: executing program 4 (id=239): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) getsockname$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 9.059377707s ago: executing program 2 (id=240): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) fanotify_init(0x0, 0x400) r2 = socket(0x1, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x560b, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000100)={0x1, 0x8, 0x6, 0x80, 0x9, "efa25ba54a99c5ea267ff8beae91ff741dab5d"}) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40), 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0x9, 0x3, 0xa, 0x1, 0xfffffffd, 0x401, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x9, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x102, 0x17fffd, 0x7, 0x8b, 0x7, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffffd, 0x6, 0x8, 0x8, 0x8, 0xffffffff, 0x5, 0x2, 0x80, 0xc, 0x5, 0x0, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x3ff, 0x404, 0x2, 0xfffffffe, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x3, 0x4, 0xc801, 0x401, 0x8, 0xd0a, 0x401, 0x1, 0x200, 0xc5d, 0x2]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 7.521092613s ago: executing program 5 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x202e) fcntl$setown(r1, 0x8, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102376, 0x18fe8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x25}, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f00000002c0), 0x10) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a02000000006558", 0x2c}], 0x2) 7.362865933s ago: executing program 0 (id=242): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x1000000}) 6.767456917s ago: executing program 0 (id=243): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_open_dev$sndpcmp(0x0, 0x6, 0x50100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 6.678445134s ago: executing program 3 (id=244): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2"], 0xe0}], 0x1, 0x0, 0x0, 0x20000073}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 5.382282903s ago: executing program 0 (id=245): remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x4, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x5, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2, 0x10001}, 0x8) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000140)=ANY=[@ANYBLOB="6e725f696e6e6465733d322c739a15697a613d34"]) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="980000086b0000000400000049a5ffff9500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) r4 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x1000007, 0x428b}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87eed956", 0xb}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00001f0000/0x2000)=nil, 0x2000, 0x3000008, 0x35a4, 0x20000) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r8, 0x90044802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 5.226275876s ago: executing program 5 (id=246): getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f0000000140)=0x300) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x3, 0x8, 0x6, 0x8, 0x2, 0xe, 0x6}, &(0x7f00000000c0)=0x9c) socket$kcm(0x10, 0x2, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) 4.522363579s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r0, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x17b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873"], 0x90}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/19, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) 4.254420007s ago: executing program 1 (id=248): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.218898767s ago: executing program 4 (id=249): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)="43f90326a6436f594c3ea8dd63ed5f15b69ecf9b9c4f823ae9881aa4b2ea1704898f1c9c78a5fdf7a3af9f41097a4f5f11b7e3fa0d783425e64847090709350100000022975e809324e841988c5635f3e260d1b438f3665900aeda3c8bf655bb7e7d6500c4cec4981cae3eb4df30695d7e77a62beba3c1f9be4ebe87c668c9b4e001", 0x82}, {0x0}], 0x3, 0x5412, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) unlink(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff00"/108], 0xb8}}, 0x0) 2.95721997s ago: executing program 5 (id=250): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500010300000000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x894}, 0x0) 2.722836529s ago: executing program 2 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000500)=0x4, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 2.058831408s ago: executing program 1 (id=252): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) r2 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f00000008c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000003c0)={0x1d, r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = fanotify_init(0x200, 0x0) write(r5, &(0x7f0000000040)="ff000000", 0x4) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) r6 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r6, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 1.851509566s ago: executing program 4 (id=253): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$tipc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) 1.790630139s ago: executing program 0 (id=254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e25, 0xffff, @mcast1, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 790.719603ms ago: executing program 2 (id=255): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) poll(0x0, 0x0, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000043000000", 0x30) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 178.334378ms ago: executing program 1 (id=256): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480), 0x0}}, &(0x7f0000bbdffc)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) getpid() getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 0s ago: executing program 4 (id=257): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_open_dev$sndpcmp(0x0, 0x6, 0x50100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 84.101841][ T5809] cgroup: Unknown subsys name 'net' [ 84.272551][ T5809] cgroup: Unknown subsys name 'cpuset' [ 84.282019][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.853891][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.952578][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.973136][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.981363][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.988295][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.989761][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.996551][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.011043][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.012276][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.018363][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.025828][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.032802][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.040537][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.046951][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.060838][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.061576][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.068411][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.075709][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.082152][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.097323][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.097879][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.105855][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.112389][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.118949][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.126040][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.132114][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.141257][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.153591][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.159743][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.177360][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.192576][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.824629][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.140907][ T841] cfg80211: failed to load regulatory.db [ 91.170690][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.218803][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.279995][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.291789][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.361390][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.383519][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.391510][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.398883][ T5826] bridge_slave_0: entered allmulticast mode [ 91.406467][ T5826] bridge_slave_0: entered promiscuous mode [ 91.473643][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.480826][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.488924][ T5826] bridge_slave_1: entered allmulticast mode [ 91.496303][ T5826] bridge_slave_1: entered promiscuous mode [ 91.680149][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.707737][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.715328][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.722504][ T5841] bridge_slave_0: entered allmulticast mode [ 91.730330][ T5841] bridge_slave_0: entered promiscuous mode [ 91.759547][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.796138][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.803386][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.810692][ T5841] bridge_slave_1: entered allmulticast mode [ 91.818006][ T5841] bridge_slave_1: entered promiscuous mode [ 91.831210][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.838303][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.845975][ T5827] bridge_slave_0: entered allmulticast mode [ 91.853450][ T5827] bridge_slave_0: entered promiscuous mode [ 91.876080][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.883190][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.890369][ T5831] bridge_slave_0: entered allmulticast mode [ 91.897679][ T5831] bridge_slave_0: entered promiscuous mode [ 91.945506][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.953119][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.960420][ T5827] bridge_slave_1: entered allmulticast mode [ 91.967778][ T5827] bridge_slave_1: entered promiscuous mode [ 91.987961][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.995111][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.002315][ T5831] bridge_slave_1: entered allmulticast mode [ 92.009697][ T5831] bridge_slave_1: entered promiscuous mode [ 92.016588][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.023909][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.031602][ T5828] bridge_slave_0: entered allmulticast mode [ 92.039012][ T5828] bridge_slave_0: entered promiscuous mode [ 92.087830][ T5826] team0: Port device team_slave_0 added [ 92.107261][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114477][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.121691][ T5828] bridge_slave_1: entered allmulticast mode [ 92.129724][ T5828] bridge_slave_1: entered promiscuous mode [ 92.139407][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.148801][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.155952][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.163145][ T5837] bridge_slave_0: entered allmulticast mode [ 92.170661][ T5837] bridge_slave_0: entered promiscuous mode [ 92.179105][ T5141] Bluetooth: hci1: command tx timeout [ 92.184684][ T5846] Bluetooth: hci0: command tx timeout [ 92.190303][ T5843] Bluetooth: hci2: command tx timeout [ 92.202404][ T5826] team0: Port device team_slave_1 added [ 92.237233][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.246536][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.254074][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.259504][ T5846] Bluetooth: hci4: command tx timeout [ 92.261631][ T5837] bridge_slave_1: entered allmulticast mode [ 92.266650][ T5141] Bluetooth: hci5: command tx timeout [ 92.274574][ T5837] bridge_slave_1: entered promiscuous mode [ 92.277842][ T5843] Bluetooth: hci3: command tx timeout [ 92.288184][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.313820][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.364344][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.388626][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.400552][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.450864][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.457784][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.484518][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.511560][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.522850][ T5841] team0: Port device team_slave_0 added [ 92.531542][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.555486][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.562463][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.588886][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.627547][ T5841] team0: Port device team_slave_1 added [ 92.635337][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.646870][ T5827] team0: Port device team_slave_0 added [ 92.663767][ T5831] team0: Port device team_slave_0 added [ 92.710531][ T5827] team0: Port device team_slave_1 added [ 92.719314][ T5831] team0: Port device team_slave_1 added [ 92.726756][ T5828] team0: Port device team_slave_0 added [ 92.787751][ T5828] team0: Port device team_slave_1 added [ 92.793875][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.800855][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.826860][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.840206][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.847131][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.873065][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.886108][ T5837] team0: Port device team_slave_0 added [ 92.955573][ T5837] team0: Port device team_slave_1 added [ 92.972689][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.979823][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.006966][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.031971][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.039144][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.065431][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.103752][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.111179][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.137118][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.156312][ T5826] hsr_slave_0: entered promiscuous mode [ 93.163177][ T5826] hsr_slave_1: entered promiscuous mode [ 93.170450][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.177367][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.203262][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.214874][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.222107][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.248182][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.304352][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.311306][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.337403][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.361362][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.368291][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.394924][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.421986][ T5841] hsr_slave_0: entered promiscuous mode [ 93.428365][ T5841] hsr_slave_1: entered promiscuous mode [ 93.434657][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 93.440455][ T5841] Cannot create hsr debugfs directory [ 93.446615][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.453812][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.479807][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.569706][ T5827] hsr_slave_0: entered promiscuous mode [ 93.576114][ T5827] hsr_slave_1: entered promiscuous mode [ 93.582802][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 93.588554][ T5827] Cannot create hsr debugfs directory [ 93.614976][ T5831] hsr_slave_0: entered promiscuous mode [ 93.621436][ T5831] hsr_slave_1: entered promiscuous mode [ 93.627577][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 93.633534][ T5831] Cannot create hsr debugfs directory [ 93.759658][ T5828] hsr_slave_0: entered promiscuous mode [ 93.766043][ T5828] hsr_slave_1: entered promiscuous mode [ 93.772962][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 93.778743][ T5828] Cannot create hsr debugfs directory [ 93.816384][ T5837] hsr_slave_0: entered promiscuous mode [ 93.822857][ T5837] hsr_slave_1: entered promiscuous mode [ 93.829482][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 93.835197][ T5837] Cannot create hsr debugfs directory [ 94.258860][ T5141] Bluetooth: hci1: command tx timeout [ 94.259056][ T5846] Bluetooth: hci2: command tx timeout [ 94.264330][ T5843] Bluetooth: hci0: command tx timeout [ 94.338752][ T5843] Bluetooth: hci3: command tx timeout [ 94.338794][ T5846] Bluetooth: hci4: command tx timeout [ 94.344146][ T5141] Bluetooth: hci5: command tx timeout [ 94.479845][ T5826] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.494679][ T5826] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.506047][ T5826] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.525745][ T5826] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.586315][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.599019][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.615030][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.628410][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.716846][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.748327][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.774593][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.787063][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.880341][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.895879][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.914174][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.924078][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.963279][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.021080][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.047215][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.061610][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.075089][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.086012][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.132660][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.139850][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.164689][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.193895][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.201003][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.262976][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.277258][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.297509][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.318094][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.326665][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.361562][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.368685][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.422513][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.429623][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.461773][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.561025][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.599895][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.607008][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.634606][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.641799][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.710994][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.745404][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.833902][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.855901][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.891829][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.898967][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.922324][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.929462][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.948100][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.969845][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.976933][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.002781][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.021425][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.028562][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.141377][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.191862][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.256186][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.263330][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.316399][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.323548][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.340348][ T5846] Bluetooth: hci0: command tx timeout [ 96.343930][ T5843] Bluetooth: hci2: command tx timeout [ 96.351289][ T5141] Bluetooth: hci1: command tx timeout [ 96.420292][ T5843] Bluetooth: hci5: command tx timeout [ 96.420323][ T5846] Bluetooth: hci3: command tx timeout [ 96.425722][ T5141] Bluetooth: hci4: command tx timeout [ 96.505407][ T5841] veth0_vlan: entered promiscuous mode [ 96.545747][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.557583][ T5841] veth1_vlan: entered promiscuous mode [ 96.694365][ T5841] veth0_macvtap: entered promiscuous mode [ 96.775026][ T5841] veth1_macvtap: entered promiscuous mode [ 96.816172][ T5837] veth0_vlan: entered promiscuous mode [ 96.854828][ T5837] veth1_vlan: entered promiscuous mode [ 96.903515][ T5826] veth0_vlan: entered promiscuous mode [ 96.950500][ T5826] veth1_vlan: entered promiscuous mode [ 96.972493][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.001030][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.022781][ T5837] veth0_macvtap: entered promiscuous mode [ 97.037840][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.061237][ T5837] veth1_macvtap: entered promiscuous mode [ 97.067986][ T3534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.078391][ T3534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.095364][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.104877][ T3534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.114083][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.166640][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.228379][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.277873][ T5826] veth0_macvtap: entered promiscuous mode [ 97.287510][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.348182][ T5826] veth1_macvtap: entered promiscuous mode [ 97.360699][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.382012][ T3534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.395168][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.404245][ T3534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.427155][ T3534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.435963][ T3534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.498072][ T5828] veth0_vlan: entered promiscuous mode [ 97.521921][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.554853][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.566174][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.573594][ T5827] veth0_vlan: entered promiscuous mode [ 97.584723][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.621469][ T5828] veth1_vlan: entered promiscuous mode [ 97.661179][ T5827] veth1_vlan: entered promiscuous mode [ 97.682081][ T3534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.702528][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.734128][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.761504][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.781296][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.852553][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.872335][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.936390][ T5831] veth0_vlan: entered promiscuous mode [ 98.006307][ T5827] veth0_macvtap: entered promiscuous mode [ 98.016158][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.039668][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.052019][ T5828] veth0_macvtap: entered promiscuous mode [ 98.106322][ T5827] veth1_macvtap: entered promiscuous mode [ 98.147644][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.160424][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.239595][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.247402][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.270239][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.301756][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.319174][ T147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.488713][ T5846] Bluetooth: hci2: command tx timeout [ 98.494350][ T5846] Bluetooth: hci0: command tx timeout [ 98.500324][ T5141] Bluetooth: hci1: command tx timeout [ 98.506010][ T5846] Bluetooth: hci4: command tx timeout [ 98.512637][ T5141] Bluetooth: hci5: command tx timeout [ 98.518172][ T5846] Bluetooth: hci3: command tx timeout [ 98.887580][ T5828] veth1_macvtap: entered promiscuous mode [ 98.923693][ T5831] veth1_vlan: entered promiscuous mode [ 98.940902][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.006651][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.025249][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.219107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 99.229034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.475052][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.286633][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.464665][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.489155][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.530031][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.564813][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.687024][ T5831] veth0_macvtap: entered promiscuous mode [ 100.715777][ T4178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.736274][ T4178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.774762][ T5831] veth1_macvtap: entered promiscuous mode [ 100.929125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.937829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.946450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.059075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.078307][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.172090][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.199566][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.364525][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.379427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.471911][ T6005] capability: warning: `syz.1.12' uses 32-bit capabilities (legacy support in use) [ 101.603533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.709243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.717862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.237589][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.363116][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.492922][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.540030][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.699041][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 102.721263][ T9] usb 3-1: config 1 has an invalid interface number: 139 but max is 1 [ 102.754178][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.786955][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.807244][ T9] usb 3-1: config 1 has no interface number 0 [ 102.827942][ T9] usb 3-1: config 1 interface 139 altsetting 255 endpoint 0xD has invalid maxpacket 943, setting to 64 [ 102.904059][ T9] usb 3-1: config 1 interface 139 altsetting 255 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 102.935342][ T9] usb 3-1: config 1 interface 139 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 102.937348][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.969720][ T9] usb 3-1: config 1 interface 139 altsetting 255 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 103.021331][ T9] usb 3-1: config 1 interface 139 has no altsetting 0 [ 103.079847][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=7825, bcdDevice=44.cb [ 103.133855][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.176289][ T9] usb 3-1: Product: syz [ 103.215779][ T9] usb 3-1: Manufacturer: 島旸႟㌴쒕쏹ಲ䮷㤏﷤弴쇲鳊᪶㺨铓좁᫸钠䧯펲몥厼ᾷ樎瓍ܮ횡뿃泒辋婙㎝⣚昞枹ᬶᨀ妻峑朓報劁둁껐遧陣륝@嵺魪﫼关ั涕Ɀꁞ햇塎꤮㗞瓆✜ᙓ쟜ㆄ࣬쮟뻒䈔袐膪拴쇶쿼埬諙탵︅鰴擸흋↰挺窝덟옉忩刯憲禈룻詇鰯伐 [ 103.265937][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.317172][ T9] usb 3-1: SerialNumber: syz [ 103.626658][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.099996][ T9] plusb 3-1:1.139: probe with driver plusb failed with error -22 [ 104.169820][ T9] usb 3-1: USB disconnect, device number 2 [ 104.881212][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.930580][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.021399][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.044701][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.102862][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.162966][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.457619][ T6039] syz.5.14 (6039) used greatest stack depth: 17688 bytes left [ 106.518772][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.812687][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.897163][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 106.907093][ T6070] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 106.909810][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.982427][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.285222][ T5909] IPVS: starting estimator thread 0... [ 107.493897][ T6076] IPVS: using max 34 ests per chain, 81600 per kthread [ 108.706565][ T24] usb 6-1: Product: syz [ 109.029532][ T24] usb 6-1: Manufacturer: syz [ 109.034159][ T24] usb 6-1: SerialNumber: syz [ 109.239752][ T24] cdc_ncm 6-1:1.0: bind() failure [ 109.282591][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 109.348824][ T24] cdc_ncm 6-1:1.1: bind() failure [ 109.389111][ T24] usb 6-1: USB disconnect, device number 2 [ 109.869569][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.050584][ T5909] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.091603][ T5909] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.143977][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.158972][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 110.181157][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 110.224809][ T5909] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.226196][ T6107] syzkaller0: entered promiscuous mode [ 110.241736][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.250698][ T5909] usb 1-1: Product: syz [ 110.255253][ T5909] usb 1-1: Manufacturer: syz [ 110.276880][ T6107] syzkaller0: entered allmulticast mode [ 110.285952][ T5909] cdc_wdm 1-1:1.0: skipping garbage [ 110.299512][ T5909] cdc_wdm 1-1:1.0: skipping garbage [ 110.319606][ T5909] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 110.335149][ T5909] cdc_wdm 1-1:1.0: Unknown control protocol [ 110.679011][ T6115] CIFS: VFS: Malformed UNC in devname [ 111.589092][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.767712][ T5909] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 111.804855][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.817841][ T5909] usb 6-1: Product: syz [ 111.825207][ T5909] usb 6-1: Manufacturer: syz [ 111.830791][ T5909] usb 6-1: SerialNumber: syz [ 112.071881][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.085311][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.344321][ T5909] rtl8150 6-1:1.0: couldn't reset the device [ 112.388645][ T5909] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 112.494673][ T5909] usb 6-1: USB disconnect, device number 3 [ 113.227456][ T10] usb 1-1: USB disconnect, device number 2 [ 114.550593][ T6151] kAFS: unable to lookup cell '' [ 114.799197][ T6158] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 115.501475][ T6171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.40'. [ 116.188597][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.415855][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 116.920802][ T6183] syzkaller0: entered promiscuous mode [ 116.928737][ T6183] syzkaller0: entered allmulticast mode [ 116.947011][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.990882][ T5909] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 117.027841][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.053234][ T5909] usb 2-1: Product: syz [ 117.072717][ T5909] usb 2-1: Manufacturer: syz [ 117.079871][ T5909] usb 2-1: SerialNumber: syz [ 117.131445][ T5909] usb 2-1: config 0 descriptor?? [ 117.162189][ T5909] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 117.973141][ T6063] usb 2-1: USB disconnect, device number 2 [ 120.548650][ T5931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.743413][ T6232] netlink: 88 bytes leftover after parsing attributes in process `syz.2.51'. [ 121.485341][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.547823][ T5931] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 121.569649][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.611059][ T5931] usb 2-1: config 0 descriptor?? [ 122.521754][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 122.527766][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 122.869068][ T5931] usb 2-1: USB disconnect, device number 3 [ 123.229188][ T5931] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.462062][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.58'. [ 124.103780][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 124.134137][ T5931] usb 2-1: device descriptor read/all, error -71 [ 129.116301][ T6287] tipc: Started in network mode [ 129.138180][ T6287] tipc: Node identity 529cc653946b, cluster identity 4711 [ 129.200240][ T6287] tipc: Enabled bearer , priority 0 [ 129.234603][ T6288] syzkaller0: entered promiscuous mode [ 129.274751][ T6288] syzkaller0: entered allmulticast mode [ 129.368355][ T6287] tipc: Resetting bearer [ 129.415927][ T6286] tipc: Resetting bearer [ 129.482850][ T6286] tipc: Disabling bearer [ 131.896074][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.71'. [ 132.199503][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.206031][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.729979][ T6320] ======================================================= [ 133.729979][ T6320] WARNING: The mand mount option has been deprecated and [ 133.729979][ T6320] and is ignored by this kernel. Remove the mand [ 133.729979][ T6320] option from the mount to silence this warning. [ 133.729979][ T6320] ======================================================= [ 133.767238][ T6320] hfsplus: unable to find HFS+ superblock [ 134.219134][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.312839][ T6326] Zero length message leads to an empty skb [ 134.398620][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 134.429757][ T5931] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 134.471839][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.523044][ T5931] usb 3-1: Product: syz [ 134.544559][ T5931] usb 3-1: Manufacturer: syz [ 134.550851][ T6333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.81'. [ 135.077470][ T5931] usb 3-1: SerialNumber: syz [ 135.467365][ T5931] usb 3-1: config 0 descriptor?? [ 135.503806][ T5931] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 135.513088][ T5931] usb 3-1: Detected FT232H [ 135.709966][ T5931] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 136.901003][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 137.056877][ T5931] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.800341][ T5970] usb 3-1: USB disconnect, device number 3 [ 138.821323][ T5970] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 138.834254][ T5970] ftdi_sio 3-1:0.0: device disconnected [ 140.963948][ T6367] hfsplus: unable to find HFS+ superblock [ 142.104726][ T6378] tipc: Started in network mode [ 142.116542][ T6378] tipc: Node identity 1e8b33b204a, cluster identity 4711 [ 142.126217][ T6378] tipc: Enabled bearer , priority 0 [ 142.137110][ T6378] syzkaller0: entered promiscuous mode [ 142.143025][ T6378] syzkaller0: entered allmulticast mode [ 142.156994][ T6378] tipc: Resetting bearer [ 142.165688][ T6377] tipc: Resetting bearer [ 142.179888][ T6377] tipc: Disabling bearer [ 142.298717][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.518565][ T5836] usb 5-1: Using ep0 maxpacket: 8 [ 142.525835][ T5836] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 142.535491][ T5836] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.547129][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.557711][ T5836] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.569556][ T5836] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.583990][ T5836] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.608718][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.657540][ T5836] usb 5-1: usb_control_msg returned -32 [ 143.663734][ T5836] usbtmc 5-1:16.0: can't read capabilities [ 143.718041][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 144.527269][ T5836] usb 5-1: USB disconnect, device number 2 [ 150.290468][ T6448] block device autoloading is deprecated and will be removed. [ 150.392590][ T6446] block nbd5: shutting down sockets [ 151.923190][ T5141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.931809][ T5141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.940836][ T5141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.950353][ T5141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.958986][ T5141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.879042][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.020912][ T5141] Bluetooth: hci6: command tx timeout [ 154.230855][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.596119][ T6511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.124'. [ 154.605140][ T6511] netlink: 72 bytes leftover after parsing attributes in process `syz.5.124'. [ 154.691523][ T6513] netlink: 88 bytes leftover after parsing attributes in process `syz.5.124'. [ 155.067411][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.951697][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.099152][ T5141] Bluetooth: hci6: command tx timeout [ 156.342598][ T6523] mmap: syz.1.128 (6523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.485833][ T6527] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 156.498590][ T6093] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.822328][ T6477] chnl_net:caif_netlink_parms(): no params data found [ 156.859513][ T6093] usb 6-1: Using ep0 maxpacket: 16 [ 156.872560][ T6093] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 156.898120][ T13] bridge_slave_1: left allmulticast mode [ 156.919112][ T6093] usb 6-1: config 0 has no interface number 0 [ 156.928685][ T921] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 156.936240][ T13] bridge_slave_1: left promiscuous mode [ 156.951444][ T6093] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 156.970882][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.003674][ T6093] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.031669][ T13] bridge_slave_0: left allmulticast mode [ 157.037440][ T13] bridge_slave_0: left promiscuous mode [ 157.060210][ T6093] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.092113][ T6093] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 157.096397][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.101501][ T6093] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 157.132612][ T6093] usb 6-1: Product: syz [ 157.150427][ T921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 157.165760][ T921] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 157.176049][ T6093] usb 6-1: Manufacturer: syz [ 157.191472][ T6093] usb 6-1: SerialNumber: syz [ 157.204959][ T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.217373][ T6093] usb 6-1: config 0 descriptor?? [ 157.240216][ T6521] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 157.275327][ T921] usb 2-1: config 0 descriptor?? [ 157.347471][ T6529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 157.828168][ T921] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 157.976306][ T6306] usb 2-1: USB disconnect, device number 6 [ 158.197322][ T5141] Bluetooth: hci6: command tx timeout [ 159.629295][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'. [ 160.765763][ T5846] Bluetooth: hci6: command tx timeout [ 160.807315][ T6547] fido_id[6547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 161.829209][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.892649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.934700][ T13] bond0 (unregistering): Released all slaves [ 162.482956][ T6093] usb 6-1: USB disconnect, device number 4 [ 163.073254][ T6582] hfsplus: unable to find HFS+ superblock [ 163.174796][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.197715][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.220952][ T6477] bridge_slave_0: entered allmulticast mode [ 163.244248][ T6477] bridge_slave_0: entered promiscuous mode [ 163.303288][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.325391][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.349226][ T6477] bridge_slave_1: entered allmulticast mode [ 163.371880][ T6477] bridge_slave_1: entered promiscuous mode [ 163.529521][ T6477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.669344][ T6477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.552449][ T13] hsr_slave_0: left promiscuous mode [ 164.668693][ T13] hsr_slave_1: left promiscuous mode [ 164.704761][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.767301][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.809793][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.817524][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.874575][ T13] veth1_macvtap: left promiscuous mode [ 164.909514][ T13] veth0_macvtap: left promiscuous mode [ 164.915168][ T13] veth1_vlan: left promiscuous mode [ 164.943452][ T13] veth0_vlan: left promiscuous mode [ 164.962926][ T6602] fuse: Bad value for 'fd' [ 165.849798][ T6612] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 166.413703][ T6613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.146'. [ 168.075030][ T5836] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 168.261980][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 168.294635][ T5836] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.339926][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.432159][ T5836] usb 5-1: config 0 descriptor?? [ 168.447130][ T6608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.840853][ T13] team0 (unregistering): Port device team_slave_1 removed [ 168.950990][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 168.957028][ T5836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.996093][ T5836] usb 5-1: USB disconnect, device number 3 [ 169.152310][ T13] team0 (unregistering): Port device team_slave_0 removed [ 169.318618][ T5931] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 169.542216][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 169.575353][ T5931] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 169.616475][ T5931] usb 6-1: config 0 has no interface number 0 [ 169.632595][ T5931] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 169.669296][ T5931] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.718577][ T5931] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.770881][ T5931] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 169.780065][ T5931] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 169.796016][ T5931] usb 6-1: Product: syz [ 169.812017][ T5931] usb 6-1: Manufacturer: syz [ 169.830015][ T5931] usb 6-1: SerialNumber: syz [ 169.888222][ T5931] usb 6-1: config 0 descriptor?? [ 169.906916][ T6637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 170.589905][ T6477] team0: Port device team_slave_0 added [ 170.622716][ T6477] team0: Port device team_slave_1 added [ 170.846522][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.882219][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.020499][ T6477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.111048][ T6477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.140791][ T6477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.241502][ T6477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.142233][ T6477] hsr_slave_0: entered promiscuous mode [ 172.161909][ T6477] hsr_slave_1: entered promiscuous mode [ 172.214605][ T6477] debugfs: 'hsr0' already exists in 'hsr' [ 172.231572][ T6477] Cannot create hsr debugfs directory [ 172.848071][ T6661] fuse: Bad value for 'fd' [ 173.525550][ T5931] usb 6-1: USB disconnect, device number 5 [ 177.208047][ T6093] IPVS: starting estimator thread 0... [ 177.329625][ T6718] IPVS: using max 25 ests per chain, 60000 per kthread [ 177.853397][ T6477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.895654][ T6477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.939818][ T6477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.000908][ T6477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.390953][ T6477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.495184][ T6477] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.598847][ T6140] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.606007][ T6140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.704430][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.711592][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.021761][ T5836] IPVS: starting estimator thread 0... [ 179.249148][ T6762] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.459813][ T5836] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 179.630396][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 179.678850][ T5836] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 179.730339][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.743305][ T5836] usb 5-1: config 0 descriptor?? [ 179.749559][ T6761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.837077][ T6769] erspan0: entered promiscuous mode [ 180.949303][ T5836] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 181.159817][ T6063] usb 5-1: USB disconnect, device number 4 [ 181.195574][ T6776] fido_id[6776]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04F3:0755.0002/report_descriptor': No such device [ 182.403930][ T6477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.444937][ T6477] veth0_vlan: entered promiscuous mode [ 182.457542][ T6477] veth1_vlan: entered promiscuous mode [ 182.691371][ T6477] veth0_macvtap: entered promiscuous mode [ 182.735541][ T6477] veth1_macvtap: entered promiscuous mode [ 182.847264][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.926756][ T6477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.196147][ T147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.249009][ T147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.334088][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.362772][ T31] audit: type=1326 audit(1765971718.712:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d1b8f749 code=0x7fc00000 [ 183.418574][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.662730][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.704160][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.901434][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.936900][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.060041][ T31] audit: type=1326 audit(1765971719.412:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d1b8f749 code=0x7fc00000 [ 188.707909][ T9] IPVS: starting estimator thread 0... [ 188.716380][ T31] audit: type=1326 audit(1765971724.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 188.826512][ T31] audit: type=1326 audit(1765971724.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 188.838581][ T6884] IPVS: using max 34 ests per chain, 81600 per kthread [ 188.916467][ T31] audit: type=1326 audit(1765971724.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 188.998732][ T31] audit: type=1326 audit(1765971724.092:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.118626][ T31] audit: type=1326 audit(1765971724.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.213963][ T31] audit: type=1326 audit(1765971724.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.310356][ T31] audit: type=1326 audit(1765971724.232:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.492165][ T31] audit: type=1326 audit(1765971724.232:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.515791][ T31] audit: type=1326 audit(1765971724.232:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.538838][ T31] audit: type=1326 audit(1765971724.232:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6879 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f668bf8f749 code=0x7fc00000 [ 189.860002][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.206'. [ 190.869306][ T6903] tipc: Started in network mode [ 190.892180][ T6903] tipc: Node identity 52fcdc9d3053, cluster identity 4711 [ 190.930554][ T6903] tipc: Enabled bearer , priority 0 [ 190.960918][ T6908] syzkaller0: entered promiscuous mode [ 191.003771][ T6908] syzkaller0: entered allmulticast mode [ 191.061427][ T6903] tipc: Resetting bearer [ 191.103619][ T6902] tipc: Resetting bearer [ 191.569340][ T6902] tipc: Disabling bearer [ 192.385790][ T5836] tipc: Node number set to 1655692445 [ 192.529737][ T6927] hfsplus: unable to find HFS+ superblock [ 193.641451][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778980][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.523231][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 195.532313][ T6964] netlink: 72 bytes leftover after parsing attributes in process `syz.2.219'. [ 195.617626][ T6965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.219'. [ 198.644264][ T6983] tipc: Enabled bearer , priority 0 [ 198.775094][ T6983] syzkaller0: entered promiscuous mode [ 198.803897][ T6983] syzkaller0: entered allmulticast mode [ 198.992116][ T6983] tipc: Resetting bearer [ 199.168909][ T6982] tipc: Resetting bearer [ 199.322787][ T6982] tipc: Disabling bearer [ 200.292791][ T7014] hfsplus: unable to find HFS+ superblock [ 200.388580][ T5836] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 200.659279][ T5836] usb 6-1: Using ep0 maxpacket: 16 [ 200.676382][ T5836] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 200.685057][ T5836] usb 6-1: config 0 has no interface number 0 [ 200.883078][ T5836] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 200.911880][ T5836] usb 6-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.935072][ T5836] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 201.687043][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'. [ 201.696123][ T7023] netlink: 72 bytes leftover after parsing attributes in process `syz.2.234'. [ 201.708252][ T5836] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 201.717408][ T5836] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 201.737659][ T7025] netlink: 88 bytes leftover after parsing attributes in process `syz.2.234'. [ 201.766264][ T5836] usb 6-1: Product: syz [ 201.790521][ T5836] usb 6-1: Manufacturer: syz [ 201.808022][ T5836] usb 6-1: SerialNumber: syz [ 201.846118][ T5836] usb 6-1: config 0 descriptor?? [ 201.871265][ T7006] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 205.823440][ T5836] usb 6-1: USB disconnect, device number 6 [ 206.339321][ T5836] IPVS: starting estimator thread 0... [ 206.454262][ T7067] IPVS: using max 26 ests per chain, 62400 per kthread [ 208.321122][ T7083] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 208.739064][ T5961] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 208.959880][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 209.028591][ T5961] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 209.090022][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.133100][ T5961] usb 1-1: config 0 descriptor?? [ 209.143307][ T7081] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.676294][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.247'. [ 209.685354][ T7095] netlink: 72 bytes leftover after parsing attributes in process `syz.4.247'. [ 209.787207][ T7096] netlink: 88 bytes leftover after parsing attributes in process `syz.4.247'. [ 210.243791][ T5961] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 211.024654][ T5961] usb 1-1: USB disconnect, device number 3 [ 211.723945][ T7108] fido_id[7108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 318.848438][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 318.855441][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7129/1:b..l P7124/1:b..l P7127/3:b..l P7071/1:b..l [ 318.867077][ C1] rcu: (detected by 1, t=10502 jiffies, g=20133, q=783 ncpus=2) [ 318.874771][ C1] task:dhcpcd-run-hook state:R running task stack:24312 pid:7071 tgid:7071 ppid:5486 task_flags:0x400000 flags:0x00080000 [ 318.888797][ C1] Call Trace: [ 318.892087][ C1] [ 318.894999][ C1] __schedule+0x14bc/0x5000 [ 318.899492][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 318.904690][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.910311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.915935][ C1] ? __pfx___schedule+0x10/0x10 [ 318.920768][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.926380][ C1] ? stack_trace_save+0x9c/0xe0 [ 318.931222][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 318.936586][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 318.941850][ C1] preempt_schedule_irq+0xb5/0x150 [ 318.946943][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 318.952647][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 318.958261][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 318.964056][ C1] irqentry_exit+0x5d8/0x660 [ 318.968633][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.974593][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 318.979859][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 d4 38 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 318.999444][ C1] RSP: 0018:ffffc90003417218 EFLAGS: 00000206 [ 319.005495][ C1] RAX: a273dca0ca90ac00 RBX: 0000000000000000 RCX: a273dca0ca90ac00 [ 319.013445][ C1] RDX: 00000000d6ae4171 RSI: ffffffff8d978ff2 RDI: ffffffff8bc08360 [ 319.021394][ C1] RBP: ffffffff81743f85 R08: ffffffff81743f85 R09: ffffffff8df41a20 [ 319.029344][ C1] R10: dffffc0000000000 R11: fffff52000682e89 R12: 0000000000000002 [ 319.037296][ C1] R13: ffffffff8df41a20 R14: 0000000000000000 R15: 0000000000000246 [ 319.045249][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.050360][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.055465][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.061083][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.066178][ C1] ? arch_stack_walk+0xe4/0x150 [ 319.071015][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.076113][ C1] unwind_next_frame+0xc2/0x23d0 [ 319.081035][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.086141][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 319.091234][ C1] ? __unwind_start+0xf8/0x760 [ 319.095986][ C1] __unwind_start+0x5b9/0x760 [ 319.100650][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 319.106797][ C1] arch_stack_walk+0xe4/0x150 [ 319.111460][ C1] ? arch_stack_walk+0xe4/0x150 [ 319.116294][ C1] stack_trace_save+0x9c/0xe0 [ 319.120965][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 319.126333][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.131949][ C1] kasan_save_track+0x3e/0x80 [ 319.136674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.142292][ C1] __kasan_slab_alloc+0x6c/0x80 [ 319.147125][ C1] ? kmem_cache_alloc_noprof+0x230/0x710 [ 319.152747][ C1] kmem_cache_alloc_noprof+0x37d/0x710 [ 319.158200][ C1] ? vm_area_dup+0x2b/0x680 [ 319.162687][ C1] vm_area_dup+0x2b/0x680 [ 319.166996][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.172607][ C1] ? __vm_enough_memory+0x11b/0x380 [ 319.177798][ C1] dup_mmap+0x870/0x1b80 [ 319.182046][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 319.186722][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.192337][ C1] ? mm_init+0xa91/0xc60 [ 319.196562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.202180][ C1] copy_mm+0x13c/0x4b0 [ 319.206236][ C1] copy_process+0x165d/0x3950 [ 319.210905][ C1] ? copy_process+0x915/0x3950 [ 319.215657][ C1] ? __pfx_copy_process+0x10/0x10 [ 319.220675][ C1] kernel_clone+0x21e/0x820 [ 319.225168][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 319.230194][ C1] __x64_sys_clone+0x18b/0x1e0 [ 319.234946][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 319.240229][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.245849][ C1] ? do_syscall_64+0xbe/0xf80 [ 319.250511][ C1] do_syscall_64+0xfa/0xf80 [ 319.254996][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.260608][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.266657][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.272527][ C1] RIP: 0033:0x7fe14bd47636 [ 319.276920][ C1] RSP: 002b:00007ffc70bd88e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 319.285319][ C1] RAX: ffffffffffffffda RBX: 00007ffc70bd88e8 RCX: 00007fe14bd47636 [ 319.293284][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 319.301235][ C1] RBP: 0000558ec6f08e60 R08: 0000000000000000 R09: 0000558ec6f08c30 [ 319.309187][ C1] R10: 00007fe14bbadf50 R11: 0000000000000246 R12: 0000558ec6f0cb40 [ 319.317134][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.325096][ C1] [ 319.328095][ C1] task:syz.2.255 state:R running task stack:25712 pid:7127 tgid:7126 ppid:5841 task_flags:0x400040 flags:0x00080000 [ 319.341588][ C1] Call Trace: [ 319.344843][ C1] [ 319.347751][ C1] __schedule+0x14bc/0x5000 [ 319.352248][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 319.357174][ C1] ? __pfx___schedule+0x10/0x10 [ 319.362003][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.367619][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.373235][ C1] ? irqentry_exit+0x5dd/0x660 [ 319.377977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.383588][ C1] ? trace_irq_disable+0x37/0x100 [ 319.388608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.394223][ C1] ? preempt_schedule+0xae/0xc0 [ 319.399062][ C1] preempt_schedule_common+0x83/0xd0 [ 319.404328][ C1] preempt_schedule+0xae/0xc0 [ 319.408981][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 319.414334][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.419958][ C1] preempt_schedule_thunk+0x16/0x30 [ 319.425142][ C1] _raw_spin_unlock+0x3f/0x50 [ 319.429810][ C1] filemap_map_pages+0x192d/0x1fd0 [ 319.434920][ C1] ? filemap_map_pages+0x160/0x1fd0 [ 319.440192][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.445638][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 319.451078][ C1] ? do_pte_missing+0x11a9/0x3330 [ 319.456083][ C1] do_pte_missing+0x20b0/0x3330 [ 319.460920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.466535][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 319.471463][ C1] handle_mm_fault+0x1b26/0x32b0 [ 319.476394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.482018][ C1] ? handle_mm_fault+0xdb/0x32b0 [ 319.486953][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 319.492228][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.497844][ C1] ? follow_page_pte+0x7ef/0x13e0 [ 319.502865][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 319.508142][ C1] ? __get_user_pages+0x15fb/0x29f0 [ 319.513334][ C1] __get_user_pages+0x1650/0x29f0 [ 319.518370][ C1] populate_vma_page_range+0x29f/0x3a0 [ 319.523819][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 319.529790][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.535406][ C1] ? down_read+0x274/0x2e0 [ 319.539805][ C1] ? __mm_populate+0x160/0x380 [ 319.544557][ C1] __mm_populate+0x24c/0x380 [ 319.549137][ C1] ? __pfx___mm_populate+0x10/0x10 [ 319.554235][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.559855][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.565473][ C1] vm_mmap_pgoff+0x387/0x4d0 [ 319.570047][ C1] ? __se_sys_futex+0x36f/0x400 [ 319.574887][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.579982][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.585601][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.591217][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 319.596064][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.601679][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 319.606429][ C1] do_syscall_64+0xfa/0xf80 [ 319.610917][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.616961][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.622574][ C1] ? exc_page_fault+0xab/0x100 [ 319.627321][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.633190][ C1] RIP: 0033:0x7f3a07b8f749 [ 319.637581][ C1] RSP: 002b:00007f3a08960038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 319.645972][ C1] RAX: ffffffffffffffda RBX: 00007f3a07de5fa0 RCX: 00007f3a07b8f749 [ 319.653926][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 319.661878][ C1] RBP: 00007f3a07c13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 319.669829][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 319.677780][ C1] R13: 00007f3a07de6038 R14: 00007f3a07de5fa0 R15: 00007fffeb68d9d8 [ 319.685742][ C1] [ 319.688747][ C1] task:syz.0.254 state:R running task stack:24800 pid:7124 tgid:7120 ppid:5827 task_flags:0x40044c flags:0x00080001 [ 319.702248][ C1] Call Trace: [ 319.705505][ C1] [ 319.708415][ C1] __schedule+0x14bc/0x5000 [ 319.712931][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 319.717852][ C1] ? __pfx___schedule+0x10/0x10 [ 319.722678][ C1] ? do_raw_spin_lock+0x121/0x290 [ 319.727692][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 319.733058][ C1] ? preempt_schedule+0xae/0xc0 [ 319.737890][ C1] preempt_schedule_common+0x83/0xd0 [ 319.743153][ C1] preempt_schedule+0xae/0xc0 [ 319.747810][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 319.753160][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.758783][ C1] preempt_schedule_thunk+0x16/0x30 [ 319.763962][ C1] _raw_spin_unlock+0x3f/0x50 [ 319.768629][ C1] unmap_page_range+0x38bc/0x4170 [ 319.773665][ C1] ? mas_next_slot+0xc20/0xcf0 [ 319.778411][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 319.783780][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.789393][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.795016][ C1] ? unmap_vmas+0x144/0x580 [ 319.799509][ C1] unmap_vmas+0x399/0x580 [ 319.803822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.809446][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 319.814292][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.819910][ C1] exit_mmap+0x239/0xb10 [ 319.824131][ C1] ? uprobe_clear_state+0x20f/0x290 [ 319.829332][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 319.834091][ C1] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 319.839717][ C1] ? __pfx_exit_aio+0x10/0x10 [ 319.844737][ C1] ? uprobe_clear_state+0x27c/0x290 [ 319.849913][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.855534][ C1] __mmput+0x118/0x430 [ 319.859586][ C1] exit_mm+0x1da/0x2c0 [ 319.863644][ C1] ? __pfx_exit_mm+0x10/0x10 [ 319.868228][ C1] do_exit+0x658/0x2310 [ 319.872375][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.877988][ C1] ? do_raw_spin_lock+0x121/0x290 [ 319.883001][ C1] ? __pfx_do_exit+0x10/0x10 [ 319.887589][ C1] do_group_exit+0x21c/0x2d0 [ 319.892163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.897775][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 319.902957][ C1] get_signal+0x1285/0x1340 [ 319.907461][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 319.913002][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.919155][ C1] ? exit_to_user_mode_loop+0x55/0x4f0 [ 319.924598][ C1] exit_to_user_mode_loop+0x87/0x4f0 [ 319.929860][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.935472][ C1] ? rcu_is_watching+0x15/0xb0 [ 319.940224][ C1] do_syscall_64+0x2d0/0xf80 [ 319.944795][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.950838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.956451][ C1] ? exc_page_fault+0xab/0x100 [ 319.961196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.967067][ C1] RIP: 0033:0x7f3ccaf8f749 [ 319.971457][ C1] RSP: 002b:00007f3ccbd6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.979850][ C1] RAX: 0000000000000172 RBX: 00007f3ccb1e6090 RCX: 00007f3ccaf8f749 [ 319.987799][ C1] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 319.995746][ C1] RBP: 00007f3ccb013f91 R08: 0000000000000000 R09: 0000000000000000 [ 320.003695][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.011646][ C1] R13: 00007f3ccb1e6128 R14: 00007f3ccb1e6090 R15: 00007fffd442cf18 [ 320.019609][ C1] [ 320.022607][ C1] task:syz.1.256 state:R running task stack:28568 pid:7129 tgid:7128 ppid:5837 task_flags:0x400140 flags:0x00080000 [ 320.036118][ C1] Call Trace: [ 320.039375][ C1] [ 320.042286][ C1] __schedule+0x14bc/0x5000 [ 320.046771][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.052388][ C1] ? rcu_is_watching+0x15/0xb0 [ 320.057153][ C1] ? __pfx___schedule+0x10/0x10 [ 320.061993][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 320.067259][ C1] preempt_schedule_irq+0xb5/0x150 [ 320.072349][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 320.078051][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.083672][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.089285][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 320.095079][ C1] irqentry_exit+0x5d8/0x660 [ 320.099648][ C1] ? rcu_is_watching+0x15/0xb0 [ 320.104407][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 320.109868][ C1] RIP: 0010:lock_acquire+0x16c/0x340 [ 320.115141][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 d4 38 e0 10 <48> 3b 44 24 58 0f 85 e5 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 320.134735][ C1] RSP: 0018:ffffc90003247af8 EFLAGS: 00000206 [ 320.140783][ C1] RAX: 07542aba854f0e00 RBX: 0000000000000000 RCX: 07542aba854f0e00 [ 320.148733][ C1] RDX: 000000005a44979c RSI: ffffffff8d978ff2 RDI: ffffffff8bc08360 [ 320.156684][ C1] RBP: ffffffff81b4ad10 R08: ffffffff81b4ad10 R09: ffffffff8df41a20 [ 320.164634][ C1] R10: dffffc0000000000 R11: fffff52000648f8b R12: 0000000000000002 [ 320.172583][ C1] R13: ffffffff8df41a20 R14: 0000000000000000 R15: 0000000000000246 [ 320.180533][ C1] ? futex_hash+0x40/0x2d0 [ 320.184935][ C1] ? futex_hash+0x40/0x2d0 [ 320.189340][ C1] ? __pfx_get_futex_key+0x10/0x10 [ 320.194429][ C1] ? futex_hash+0x40/0x2d0 [ 320.198824][ C1] ? futex_hash+0x40/0x2d0 [ 320.203231][ C1] futex_hash+0x5d/0x2d0 [ 320.207450][ C1] ? futex_hash+0x40/0x2d0 [ 320.211847][ C1] futex_wake+0x161/0x560 [ 320.216169][ C1] ? __pfx_futex_wake+0x10/0x10 [ 320.221019][ C1] do_futex+0x395/0x420 [ 320.225158][ C1] ? __fget_files+0x2a/0x420 [ 320.229740][ C1] ? __pfx_do_futex+0x10/0x10 [ 320.234405][ C1] __se_sys_futex+0x36f/0x400 [ 320.239072][ C1] ? __fget_files+0x2a/0x420 [ 320.243647][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 320.248832][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.254444][ C1] ? __x64_sys_futex+0x21/0xf0 [ 320.259192][ C1] do_syscall_64+0xfa/0xf80 [ 320.263682][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.269723][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.275334][ C1] ? exc_page_fault+0xab/0x100 [ 320.280080][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.285955][ C1] RIP: 0033:0x7f0fb0d8f749 [ 320.290353][ C1] RSP: 002b:00007f0fb1bae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 320.298750][ C1] RAX: ffffffffffffffda RBX: 00007f0fb0fe5fa8 RCX: 00007f0fb0d8f749 [ 320.306700][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fb0fe5fac [ 320.314650][ C1] RBP: 00007f0fb0fe5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 320.322603][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 320.330551][ C1] R13: 00007f0fb0fe6038 R14: 00007ffcb0c822d0 R15: 00007ffcb0c823b8 [ 320.338517][ C1] [ 320.341512][ C1] rcu: rcu_preempt kthread starved for 10647 jiffies! g20133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 320.352679][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 320.362623][ C1] rcu: RCU grace-period kthread stack dump: [ 320.368485][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 320.381959][ C1] Call Trace: [ 320.385214][ C1] [ 320.388124][ C1] __schedule+0x14bc/0x5000 [ 320.392625][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 320.397803][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.403418][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 320.409303][ C1] ? __pfx___schedule+0x10/0x10 [ 320.414142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.419760][ C1] ? schedule+0x91/0x360 [ 320.423982][ C1] schedule+0x165/0x360 [ 320.428116][ C1] schedule_timeout+0x12b/0x270 [ 320.432955][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 320.438313][ C1] ? __pfx_process_timeout+0x10/0x10 [ 320.443590][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.449205][ C1] ? prepare_to_swait_event+0x341/0x380 [ 320.454767][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 320.459610][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 320.464527][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 320.469702][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 320.474969][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 320.480168][ C1] ? finish_swait+0xcd/0x1f0 [ 320.484747][ C1] rcu_gp_kthread+0x99/0x390 [ 320.489321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.494501][ C1] ? __kthread_parkme+0x7b/0x200 [ 320.499420][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.505035][ C1] ? __kthread_parkme+0x1a1/0x200 [ 320.510746][ C1] kthread+0x711/0x8a0 [ 320.514805][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 320.519987][ C1] ? __pfx_kthread+0x10/0x10 [ 320.524560][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.530178][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.535366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.540979][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 320.546157][ C1] ? __pfx_kthread+0x10/0x10 [ 320.550733][ C1] ret_from_fork+0x599/0xb30 [ 320.555304][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 320.560402][ C1] ? __switch_to_asm+0x39/0x70 [ 320.565152][ C1] ? __switch_to_asm+0x33/0x70 [ 320.569897][ C1] ? __pfx_kthread+0x10/0x10 [ 320.574471][ C1] ret_from_fork_asm+0x1a/0x30 [ 320.579233][ C1] [ 320.582227][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 320.588519][ C1] Sending NMI from CPU 1 to CPUs 0: [ 320.593708][ C0] NMI backtrace for cpu 0 [ 320.593723][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 320.593745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.593758][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 320.593782][ C0] Code: 5e 93 b4 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 a0 0c 00 f3 0f 1e fa fb f4 33 93 b4 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 320.593799][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 320.593818][ C0] RAX: 1690d05bc5b06100 RBX: ffffffff81978fda RCX: 1690d05bc5b06100 [ 320.593834][ C0] RDX: 0000000000000001 RSI: ffffffff8d7922ac RDI: ffffffff8bc08360 [ 320.593849][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 320.593865][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f821f70 [ 320.593880][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 320.593897][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 320.593914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.593928][ C0] CR2: 0000000000000000 CR3: 0000000058ce8000 CR4: 0000000000350ef0 [ 320.593944][ C0] Call Trace: [ 320.593952][ C0] [ 320.593960][ C0] default_idle+0x13/0x20 [ 320.593985][ C0] default_idle_call+0x73/0xb0 [ 320.594011][ C0] do_idle+0x1ea/0x520 [ 320.594033][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.594058][ C0] ? irqentry_exit+0x5ba/0x660 [ 320.594083][ C0] ? __pfx_do_idle+0x10/0x10 [ 320.594117][ C0] cpu_startup_entry+0x44/0x60 [ 320.594141][ C0] rest_init+0x2de/0x300 [ 320.594171][ C0] start_kernel+0x3a7/0x400 [ 320.594206][ C0] x86_64_start_reservations+0x24/0x30 [ 320.594234][ C0] x86_64_start_kernel+0x143/0x1c0 [ 320.594261][ C0] common_startup_64+0x13e/0x147 [ 320.594300][ C0]