last executing test programs: 14m1.580418849s ago: executing program 0 (id=189): syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') 13m57.786831978s ago: executing program 0 (id=200): r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/98, 0x2c}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 13m57.531810295s ago: executing program 0 (id=201): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008117687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r2, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @none}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x200001, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="1175"], 0x31) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB="d20000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009acf33f0b5cb2843863790501adb0138e5f39aed5d899a5716914ee72c8743b47bc467350f59c822c9575ec0c7176b9a38e157d615a59c0954882a2e569a81fac754a8a38c87"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r11, r8, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r11, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x200000714f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x20}}, 0x20008000) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000e30000008fd257f9afc0e4d075a96fd01674c4850dd764f812f6c654f15d70f707930c80e03ce60c9a92d73ca37a632dd849061af6727a6f52c39106c6b3893eaa5bb23cf08ca0a4b260e7c551229e3cba4340e23497c9aa188135eb15c0c68489c89947a2b83d120b6d0528d5ff4811412c91efba4261a0d714146324cbfb1defcffd04f79fd510a1bcbe1f7cb8ad8f2317e804a268a819c69c6ee127e76acd54159d6ffb4f5b2360325d6a8cfe9a0ec14e707e77302a692daef00ea1511bbd00e07e0b1000"/258], &(0x7f0000000100)=0x107) 13m53.72910401s ago: executing program 0 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x2) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0xc4, 0x1, [@m_mirred={0xc0, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x71, 0xa, "adff4c64295ae0a739a4658a25024096eaf7686cb0806b030e44456bef966a4e8983b8efb7ea63e18b5f9652edecf46031c71bb77225d4f4acec14fc5fd67817ada9704540576736979aa549fcbdac30478e076024e8edacd8abb076b4111939619a395d89d0ab7f0f4d1c4c6b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xd8}}, 0x2000a804) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x108000, 0x108) faccessat2(r6, &(0x7f0000000140)='./file1\x00', 0x0, 0x1200) 13m52.591665266s ago: executing program 0 (id=214): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13m47.229624264s ago: executing program 0 (id=225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20001}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r5, 0x25, 0x0, @val=@netkit}, 0x1c) 13m46.657536795s ago: executing program 32 (id=225): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20001}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r5, 0x25, 0x0, @val=@netkit}, 0x1c) 11m40.49870749s ago: executing program 2 (id=513): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8400ae8e, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000, 0x42000d, 0x1002, 0xffff, 0xd, 0x7, 0x0, 0x0, 0x40, 0x3}}, 0x50) lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x8c2a0d9606c7ca99}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000c00), &(0x7f0000002000)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 11m37.282142469s ago: executing program 2 (id=521): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sync() (fail_nth: 3) 11m35.175124338s ago: executing program 2 (id=525): r0 = userfaultfd(0x80001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) accept4(r2, &(0x7f0000000240)=@sco, &(0x7f0000000000)=0x80, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4c080) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000140)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8}, {&(0x7f00000012c0)="e95c9468d731f180512dd75e4520ce5aa11343a14b7b39c8c3a3bce1765d881b0d5f669689be05f50e3b98af28aa6cd5bcb2f83282f6525c98a7ee764f67b6f0672dbc9fbc856538f785438b9adf386ee9e89e077c192c0bbcc61c084f3292daf878482854d4d44fa641f79e4ec1e304d71d27fdbd3a3bb8f33a44d87d232064344ad81af668c87c1fc3658c97c6e56a2662242098e803129150991a87e56702b51bd7745f10ec64736da610f5e01d39ba1511bb8f882a2c51000000000000000000", 0xc2}, {&(0x7f0000001400)="fcb6fada3543fbb63c27a74c88dbc9de6b356d65d8d9", 0x16}], 0x3}}], 0x1, 0xc040) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001280)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000014c0)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bddf4ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083201c945da77392e6631d215ae374f30d4b79e26b39e890559a41ed0253d8", 0x4d}, {&(0x7f00000002c0)="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", 0xf35}, {&(0x7f0000000080)="d0", 0xfffffe77}, {&(0x7f0000001240)="b9cee6b6a592bf2b48d7c91bde59", 0xe}], 0x4}, 0x9cdc2384056f40b8) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="cf004e407d33aaaaaaaaaa2e86dd697a262d00383a01fe8000000000000000000000000000aaff0200000000000000000000000000010200907800008021620813310009ff00000000005617127e3f695e17000000010000000000000000000000013b000e186500000000000000"], 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) socket$packet(0x11, 0x3, 0x300) r7 = socket$netlink(0x10, 0x3, 0x4) setreuid(0x0, 0xee01) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000400)={{0x3, 0x0, 0x80000001, 0x3, 0x5}, 0x4, 0x4, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x7, 0x2000000040, 0x10}) 11m33.28316238s ago: executing program 2 (id=528): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='pstore\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000c0000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080), 0x1003, r1}, 0x38) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x401}, 0x14}}, 0x4) 11m31.159262194s ago: executing program 2 (id=531): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000, 0x42000d, 0x1002, 0xffff, 0xd, 0x7, 0x0, 0x0, 0x40, 0x3}}, 0x50) lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x8c2a0d9606c7ca99}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000c00), &(0x7f0000002000)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 11m31.04128687s ago: executing program 5 (id=533): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 11m30.504549266s ago: executing program 5 (id=534): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x5d49, &(0x7f0000000100)={0x0, 0x2f55, 0x2, 0x2, 0x2d7}, &(0x7f0000000040), &(0x7f0000000180)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)={0x0, 0x2000000}) io_uring_setup(0x2fb6, &(0x7f0000000240)={0x0, 0xa848, 0x200, 0x2, 0x1f5, 0x0, r2}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000002c0)) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x8080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(0x0) setuid(0xee01) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff02"], 0x1c}}, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r8, 0x1) r9 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r9, 0x25, 0x0, 0x4) listen(r0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 11m29.683470067s ago: executing program 5 (id=537): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000100)={0x5, 0x80000001, 0x3, 0x6}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(r2, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/208, 0xd0}], 0x5}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/54, 0x36}, {&(0x7f0000002600)=""/204, 0xcc}, {&(0x7f0000002700)=""/183, 0xb7}], 0x3, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000028c0)=""/14, 0xe}, {&(0x7f0000002900)=""/43, 0x2b}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/162, 0xa2}, {&(0x7f0000003a00)=""/115, 0x73}, {&(0x7f0000003a80)=""/105, 0x69}, {&(0x7f0000003b00)=""/12, 0xc}, {&(0x7f0000003b40)=""/216, 0xd8}], 0x8, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x2, &(0x7f0000003e40)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semop(0x0, &(0x7f0000000200), 0x53) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11m29.520479833s ago: executing program 2 (id=539): r0 = syz_io_uring_setup(0xac7, &(0x7f00000002c0)={0x0, 0x2000, 0x10, 0x0, 0x23b}, &(0x7f00000001c0), &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x20, 0x0, 0x1) 11m28.406604547s ago: executing program 33 (id=539): r0 = syz_io_uring_setup(0xac7, &(0x7f00000002c0)={0x0, 0x2000, 0x10, 0x0, 0x23b}, &(0x7f00000001c0), &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x20, 0x0, 0x1) 11m28.399525587s ago: executing program 5 (id=541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc, &(0x7f0000001700)={[{0x8, 0x4e00, "99797757a4f1a344"}]}) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x10, 0x1) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x316575}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m25.291679433s ago: executing program 5 (id=550): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x80, 0x2, 0x2, "b217283a0fc3c617a9d13f0a85c44a76b52c6ab1558ec7550f98f4a37dfb854f", 0x50313134}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/power/pm_freeze_timeout', 0x1, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x48, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x79, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x8}}}}}}}}}, 0x0) pwrite64(r3, &(0x7f0000000f40)="adb0", 0x2, 0x2) pidfd_send_signal(r3, 0x0, &(0x7f0000000640)={0x2}, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="20141100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000102010800000000000000000200000a480001800c00028005000100000000002c000180080003"], 0x5c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x112, &(0x7f00000002c0)={@local, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x18, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x4c, 0x2f, 0x3, 0xe, [{@broadcast, 0x9}, {@private=0xa010101, 0x2}, {@local, 0xfffffe00}, {@local, 0x99}, {@empty, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0xfffffffb}, {@multicast1, 0x6}, {@multicast1}]}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x32, 0x1000000, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x18, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8041) 11m22.199182252s ago: executing program 5 (id=557): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x7c14, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r6 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x86604, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x2) sendmsg$inet(r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x7) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0xffffffffffffffa7, 0x4000004, &(0x7f0000000540)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c) r10 = socket(0x15, 0x5, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r10, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68", @ANYRES64=r1], 0x20000600}}, 0x0) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)="a9ea8383faa3bd3f36333977dcc20cd35a95c68dee2a5c0c06ab861187d363c9a4efcff45e4037f52efbdec7905cf3821674f9c6b9c34d6d25f3290357", 0x3d}, {&(0x7f0000000380)="9fb35926796e6527f8da3327e1577f6f366b7a74abbc843ed28589f6a74f2572ff5ec229568a131f17b509df055eba514a71b0da0e6873fc1423bbac22be37d35be84296c9ee99c2767fc4ee0f2fef05f82a9756f91e954a8fb2e2c640a288662145bf5c1b186ecadcc1dfbf628a8b8eedc3e5e177d9946c9a674a8cedf27dcb1ffeecb2b4b501bfe4fd7ef5c31ada435a45f750e5ab73e0174fd1452596d499c94bf652d584f99673d61e66ddcb5aa2092a2e2980f2c514be3b4a239490d54e0dd4481a1a39494e210d3acb5aaf5353eb8dd8", 0xd3}, {&(0x7f0000000240)="d2a984cb8bfd50c95949477bdfa1536536c842dc712a17bd3130eb35edc017d4add1b37cb2022c243a6705b90eefa3810294fd76e8565eb9943a0eac40379782a2e9903d741147a52ee952a701708a0d09ccca994436d4ba1d90d3f2e251728b679b2b4b5089999a60978efd5f2701", 0x6f}, {&(0x7f00000005c0)="cd541dea40fe06681967b20ea0a537923f7f674871914ff794a570ce47f87a7385f33567649a73a62566d52212135de31cb3f60eaa9b717435669209e3365a838212ff3eea8f7fe816242ae5119e9a10034bb9b78a14b65613c4ed34130d85c29cd60499c54a654a582760d643a960337fd4ba8e8dfe4eddabb2e758421a9a79ba39fa33b0c8f8b2078653462079ab427534a09b2adb44a0ee2aa6a22222f0fa184a0acbf0379f6387b2dfe52d275165a3cafcaaf600a2c727c1f11e", 0xbc}, {&(0x7f0000000100)="775fd1c09d51305aff19", 0xa}, {&(0x7f00000004c0)="9d9d5d42", 0x4}, {&(0x7f0000000680)="a3b744f73e24922f3adb55c1d81ccab450d45379897e1934f09ae6190f7851abcb093883c17fa3e64192a98096970912e0e58d1d770b88c418ea4f12c8aff65874a8ccd2a61c738e2c7c05cc2f6c73a7489ff00185630f1a1c8bcc374cf90ee9dcb68a0d7304e8902cac253375982593fb6c65edbce5e540a17257326ea63dbf21fd2162dad058baf3d3aa60108fc739c8e6791aae80ab1be752a95815757f9d453c4db0879017837ceeb1743cf45e941c19198d3ca190945e31d68634e105c6e7252e9317b0f33807fc21389040f42963b6051e9ee5e67b8c4e96020749ea902f62c4d069ae7d", 0xe7}], 0x7, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 11m9.59786784s ago: executing program 4 (id=580): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = dup(r0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x7, 0x0, [{0xa54, 0x0, 0x1}, {0x20e, 0x0, 0x9}, {0x96a, 0x0, 0xd}, {0x835, 0x0, 0x8}, {0xa84, 0x0, 0x8}, {0x9e1, 0x0, 0x5}, {0x843, 0x0, 0xb}]}) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001e80)="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", 0x184}], 0x1}}], 0x1, 0x20040) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 11m9.176676655s ago: executing program 4 (id=583): r0 = socket$inet(0x2, 0x4000000000000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) unshare(0x22020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x4801) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x98) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = fcntl$dupfd(r0, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r7, &(0x7f0000000e00)=ANY=[], 0x958) 11m8.218002125s ago: executing program 1 (id=584): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0), &(0x7f0000000280), 0x2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg$unix(r2, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/208, 0xd0}], 0x5}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f00000025c0)=""/54, 0x36}, {&(0x7f0000002600)=""/204, 0xcc}, {&(0x7f0000002700)=""/183, 0xb7}], 0x3, &(0x7f0000002800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000028c0)=""/14, 0xe}, {&(0x7f0000002900)=""/43, 0x2b}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/162, 0xa2}, {&(0x7f0000003a00)=""/115, 0x73}, {&(0x7f0000003a80)=""/105, 0x69}, {&(0x7f0000003b00)=""/12, 0xc}, {&(0x7f0000003b40)=""/216, 0xd8}], 0x8, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x2, &(0x7f0000003e40)={0x77359400}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) semop(0x0, &(0x7f0000000200), 0x53) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11m7.720386738s ago: executing program 4 (id=586): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r0, 0x101, 0xf, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) writev(r1, &(0x7f00000010c0)=[{0x0}, {&(0x7f00000000c0)="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", 0x607}], 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) 11m7.61016671s ago: executing program 4 (id=587): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfefff038}]}, 0x10) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00') r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x65) sendto$inet6(r6, &(0x7f0000001b00), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r6, 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 11m6.930342599s ago: executing program 34 (id=557): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x7c14, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) r6 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x86604, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x2) sendmsg$inet(r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)=0x7) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r9, 0x0, 0xffffffffffffffa7, 0x4000004, &(0x7f0000000540)={0xa, 0x4e21, 0x8, @mcast2}, 0x1c) r10 = socket(0x15, 0x5, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r10, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68", @ANYRES64=r1], 0x20000600}}, 0x0) sendmsg$sock(r11, &(0x7f0000001940)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x1, 0x1}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)="a9ea8383faa3bd3f36333977dcc20cd35a95c68dee2a5c0c06ab861187d363c9a4efcff45e4037f52efbdec7905cf3821674f9c6b9c34d6d25f3290357", 0x3d}, {&(0x7f0000000380)="9fb35926796e6527f8da3327e1577f6f366b7a74abbc843ed28589f6a74f2572ff5ec229568a131f17b509df055eba514a71b0da0e6873fc1423bbac22be37d35be84296c9ee99c2767fc4ee0f2fef05f82a9756f91e954a8fb2e2c640a288662145bf5c1b186ecadcc1dfbf628a8b8eedc3e5e177d9946c9a674a8cedf27dcb1ffeecb2b4b501bfe4fd7ef5c31ada435a45f750e5ab73e0174fd1452596d499c94bf652d584f99673d61e66ddcb5aa2092a2e2980f2c514be3b4a239490d54e0dd4481a1a39494e210d3acb5aaf5353eb8dd8", 0xd3}, {&(0x7f0000000240)="d2a984cb8bfd50c95949477bdfa1536536c842dc712a17bd3130eb35edc017d4add1b37cb2022c243a6705b90eefa3810294fd76e8565eb9943a0eac40379782a2e9903d741147a52ee952a701708a0d09ccca994436d4ba1d90d3f2e251728b679b2b4b5089999a60978efd5f2701", 0x6f}, {&(0x7f00000005c0)="cd541dea40fe06681967b20ea0a537923f7f674871914ff794a570ce47f87a7385f33567649a73a62566d52212135de31cb3f60eaa9b717435669209e3365a838212ff3eea8f7fe816242ae5119e9a10034bb9b78a14b65613c4ed34130d85c29cd60499c54a654a582760d643a960337fd4ba8e8dfe4eddabb2e758421a9a79ba39fa33b0c8f8b2078653462079ab427534a09b2adb44a0ee2aa6a22222f0fa184a0acbf0379f6387b2dfe52d275165a3cafcaaf600a2c727c1f11e", 0xbc}, {&(0x7f0000000100)="775fd1c09d51305aff19", 0xa}, {&(0x7f00000004c0)="9d9d5d42", 0x4}, {&(0x7f0000000680)="a3b744f73e24922f3adb55c1d81ccab450d45379897e1934f09ae6190f7851abcb093883c17fa3e64192a98096970912e0e58d1d770b88c418ea4f12c8aff65874a8ccd2a61c738e2c7c05cc2f6c73a7489ff00185630f1a1c8bcc374cf90ee9dcb68a0d7304e8902cac253375982593fb6c65edbce5e540a17257326ea63dbf21fd2162dad058baf3d3aa60108fc739c8e6791aae80ab1be752a95815757f9d453c4db0879017837ceeb1743cf45e941c19198d3ca190945e31d68634e105c6e7252e9317b0f33807fc21389040f42963b6051e9ee5e67b8c4e96020749ea902f62c4d069ae7d", 0xe7}], 0x7, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 11m6.801465846s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000580)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x20, 0x38, @loopback, 0x6}, {0xa, 0x4e24, 0x2, @mcast1, 0x9}, r5, 0x1}}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x20, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0xc3, &(0x7f00000003c0)=""/195, 0x40f00, 0x42, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0xe, 0x7f, 0x6c39}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xdf}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = epoll_create(0x7) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f00000006c0)={r9, r2, 0xe}) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_VENDOR(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000680)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r11 = syz_pidfd_open(r0, 0x0) tkill(r0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r4, 0x25, 0x12, @val=@iter={&(0x7f00000001c0)=@task={r0, r0, r11}, 0x10}}, 0x20) socket(0xa, 0x2, 0x28) ioctl$TIOCGSOFTCAR(r3, 0x4b46, &(0x7f0000000140)) 11m5.252735416s ago: executing program 1 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 11m3.64925168s ago: executing program 4 (id=592): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50424752, 0x2, @stepwise={0x5, 0xbc, 0x4, 0x766, 0x6, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="58dcdfb59bb3c9552df8d93b7fa2e964f11894aa9b3bc42856df44b7a800eb0e28190816f7ac2cf03decc096f149fefe34df936152eb70136ee9ee1fa818030b8e1a1efa0383eaf4e8f6898810162a0b772023216f3f6d50cfa76537bcdbe70a6fa4a177ca44df4e3c89d443d0e9f14f3b4ac7f8", @ANYBLOB="0000000000000060000000000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x40, 0x8, 0x9, 0x2, 0x2, 0x56ee, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0xfffffff4}}, 0xf20, 0x7, 0x6, 0xe5, 0x9}}, 0x0) 11m3.25939294s ago: executing program 1 (id=595): r0 = socket$inet(0x2, 0x4000000000000001, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) unshare(0x22020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x4801) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x2d, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x98) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = fcntl$dupfd(r0, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r7, &(0x7f0000000e00)=ANY=[], 0x958) 11m1.970502996s ago: executing program 1 (id=597): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = shmget$private(0x0, 0x800000, 0x8, &(0x7f0000173000/0x800000)=nil) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0xfffffff7, 0x1, 0x3}) shmat(r0, &(0x7f00008bd000/0x4000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 11m0.077420101s ago: executing program 4 (id=600): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200001032cbd7000ffdbdf2502000008000000010000000005001300010001000c000c400000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x7f, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xfffffffffffffffc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x5b8e515a) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000027dc9050a9c9839117bb0d91137d9883b19e8ee0ef30d909d9f873e0fbc1cfeb38e6bfb5eaf098ac7c3bc0a073c78cbe42fdcd95c9b752ebf8858a6ccd3086f2da182ab6886454439a878d478969373b8765cede85a4dc803b830e542e403a9963ecf42ff75c9b1f04493e8067730ff109892229b709958e9e3f22cf0c0aa3ef042b0d0a4b329cfa756a25", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200900) close(r5) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 10m57.776738141s ago: executing program 1 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 10m45.009751872s ago: executing program 35 (id=600): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200001032cbd7000ffdbdf2502000008000000010000000005001300010001000c000c400000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') pread64(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x7f, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xfffffffffffffffc) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x5b8e515a) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000027dc9050a9c9839117bb0d91137d9883b19e8ee0ef30d909d9f873e0fbc1cfeb38e6bfb5eaf098ac7c3bc0a073c78cbe42fdcd95c9b752ebf8858a6ccd3086f2da182ab6886454439a878d478969373b8765cede85a4dc803b830e542e403a9963ecf42ff75c9b1f04493e8067730ff109892229b709958e9e3f22cf0c0aa3ef042b0d0a4b329cfa756a25", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200900) close(r5) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 10m42.625720868s ago: executing program 36 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffe, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 3.535620394s ago: executing program 3 (id=1263): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043009ffc9000defc5a5cf79f71b4e8fe58e10c72cad719aa42379f001ed21b1bfb6f310e30d65bbaab79200bef5f1b525664729732880a1d316c967c4db08c7fed806b8a6be5c1c05e09ef5e30cc2714dfa3f942700000000023a5ede2803bf8ee023bfbe9f8a8dc8d128fdd3d11e66f2a1a2483c525dffda9ebb0acfae00a80555788310d84e9f3078f7e4971d8f1c7ed6509dc615767fe87b00000000000000000000000000000000e2e9f9b6b6abd449d4a7649363e9a765f3a8b162b8f4382308545a791ad18710c557a144bc0db8262f6df33950e16d1b7b0864c9f5428249"], 0x6) sync() 3.300968148s ago: executing program 3 (id=1264): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x4, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x2, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x1000, 0x8, 0x300, 0x3, 0x0, 0x3, 0xfffffffffffffffd}) 1.551686079s ago: executing program 3 (id=1265): open(&(0x7f00000001c0)='./bus\x00', 0x842fe, 0x1e3) lgetxattr(&(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f00000006c0)=""/185, 0xb9) 900.270011ms ago: executing program 3 (id=1266): r0 = syz_io_uring_setup(0x16b, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0xfffffffffffffe93) 867.669715ms ago: executing program 3 (id=1267): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xe000, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000300)={&(0x7f0000001000)={[{&(0x7f0000000140)="c696f8c74f0f805ae8026560457f5b7c3a369440389ab2654660bc0d14647937227ab2a6937d7e672e34582c", 0x2c, 0x1}, {&(0x7f0000000380)="fffb85825d839b143a7c9b2f94618bcb2877049d814a1a8581e86ff498f0797c6d9ec2b3bee6806da30bf58d74b4b103c7de1cd1d0e86bcf9bcd5d2cfb64883ae1df82509c04bf915261ccae15d6badc084113caec0e0d4b42c00de049067e71fd1fdf01d849e677fea79a80a394a1a9f3b3408d621c8003054addc6cf3de4f7d3cabdd9ed8f4112a259a578bc9eb07a0470f0dbc560b621bc8e61dffa95cd7b9680b1b1e2936a0c00fddad254d9b8", 0xaf}, {&(0x7f00000001c0)="30390e42a2712f8999b4de54f58208d0087ec605d00b4b1d5c9b794f2e473eec279ba1bcaa0175f5be66868c82e87ac87dfea2abc58145f0f724cbdef903ec84ba6ce4231fd1a6f903d497d574bc6616ee06860f906054eeb2cdf1afea4f2dadb01fd87f9a04ecaa036711082eb57c18", 0x70, 0x1}]}, 0x3}, 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 0s ago: executing program 3 (id=1268): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001100), 0x181400, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r3 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000480)={0x7e9c, 0x3, 0x2}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xff}], 0x1, &(0x7f0000000280)=[{0x28, 0x1, 0xffffc9ef, "36860c057350ca3983927cbf93ab7df3a7c29e33bb95e7"}, {0x98, 0x110, 0xff, "120bde90a1ff281840cc27c870194e6624cee3f813e8f30e69124952640f1ecf0519f420881f2f0c6fcaa26d5f34554d36f0f754d1a6d355a156ac1e81a70da1058ac6f8035af8691a9661615eaa4419357c0e5789feb20c8b87e52a4027092a969acd360e5ec0e60298c6cc5f1a373fcf5ca4c9fa46db0e1aa0b65b317eb5af3c"}, {0x100, 0x10f, 0x8001, "4ae4993dee4f2d02c813d3668b7a090dd364da8797f31b43764a87814600efd25235b8362b785a57fe9a8a247d05d1822e76b16125c4c2887c7d670b7105db3492ababe0e29c69317518405b42050a53ab768acebc6d68667eefe4f4611b0b11df7b457ab28a216d47b91e022791f8cae71a272e76c6219125ce6fe6d25b2e0e758f54906dab5885f579047939ba4101eb7315b625079b16f79de0000512934a1cb9ff655f01c92ae6714432900b0ceb679f0ba3e631aad4cad08a0ee63cce3775d10d14b255e16d5d9007119a6380d22cc64f409d7ef0285f01b0912ab6aad959ba2a8865e62f8c2bec09"}], 0x1c0}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002207000000a385334e1805"], 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbfc, {0xa, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) kernel console output (not intermixed with test programs): ge0: port 1(bridge_slave_0) entered disabled state [ 739.286490][ T9897] bridge_slave_0: entered allmulticast mode [ 739.288379][ T9897] bridge_slave_0: entered promiscuous mode [ 739.438043][ T9971] syz.3.978 (9971): drop_caches: 2 [ 739.458421][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.459765][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.491400][ T9897] bridge_slave_1: entered allmulticast mode [ 739.634319][ T9897] bridge_slave_1: entered promiscuous mode [ 739.763723][ T9710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 740.100290][ T9973] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.979'. [ 740.454550][ T9977] syz.3.980 (9977): drop_caches: 2 [ 742.154896][ T9710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 742.283321][ T9710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 742.333142][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.337884][ T9710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 742.392423][ T6025] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 742.542429][ T6025] usb 4-1: Using ep0 maxpacket: 8 [ 742.557468][ T6025] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.557486][ T6025] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.557499][ T6025] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 742.557512][ T6025] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.557540][ T6025] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.557552][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.629561][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.788682][ T6025] usb 4-1: usb_control_msg returned -71 [ 742.788733][ T6025] usbtmc 4-1:16.0: can't read capabilities [ 742.816165][ T6025] usb 4-1: USB disconnect, device number 40 [ 743.189600][ T9897] team0: Port device team_slave_0 added [ 743.197175][ T9897] team0: Port device team_slave_1 added [ 744.713071][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.713091][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.713118][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.055618][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.055633][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.055648][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.378043][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 745.381055][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 745.385790][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 745.409708][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 745.410498][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.822269][ T9897] hsr_slave_0: entered promiscuous mode [ 745.823741][ T9897] hsr_slave_1: entered promiscuous mode [ 745.824776][ T9897] debugfs: 'hsr0' already exists in 'hsr' [ 745.824799][ T9897] Cannot create hsr debugfs directory [ 747.542807][ T6886] Bluetooth: hci2: command tx timeout [ 747.836537][T10007] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.986'. [ 747.958889][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 748.004443][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 748.011901][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 748.023407][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 748.024287][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 748.626502][ T9805] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 748.696687][ T44] bridge_slave_1: left allmulticast mode [ 748.696716][ T44] bridge_slave_1: left promiscuous mode [ 748.696959][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.473144][ T44] bridge_slave_0: left allmulticast mode [ 749.473167][ T44] bridge_slave_0: left promiscuous mode [ 749.473326][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.562704][T10019] loop2: detected capacity change from 0 to 7 [ 750.713256][ T61] Bluetooth: hci2: command tx timeout [ 750.713322][ T61] Bluetooth: hci4: command tx timeout [ 750.729679][T10019] Dev loop2: unable to read RDB block 7 [ 750.729727][T10019] loop2: unable to read partition table [ 750.729864][T10019] loop2: partition table beyond EOD, truncated [ 750.729875][T10019] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 750.856657][ T44] bridge_slave_1: left allmulticast mode [ 750.856688][ T44] bridge_slave_1: left promiscuous mode [ 750.856935][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.963804][ T44] bridge_slave_0: left allmulticast mode [ 750.963835][ T44] bridge_slave_0: left promiscuous mode [ 750.964607][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.732339][ T6886] Bluetooth: hci4: command tx timeout [ 752.732357][ T61] Bluetooth: hci2: command tx timeout [ 753.470674][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.470746][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.842812][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.904067][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.924993][ T44] bond0 (unregistering): Released all slaves [ 754.812415][ T61] Bluetooth: hci2: command tx timeout [ 754.831003][ T61] Bluetooth: hci4: command tx timeout [ 755.682814][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.743757][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.765028][ T44] bond0 (unregistering): Released all slaves [ 755.807577][ T9805] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 755.877019][ T9805] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 756.097818][T10032] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.993'. [ 756.146164][ T9805] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 756.892270][ T61] Bluetooth: hci4: command tx timeout [ 758.732443][ T44] hsr_slave_0: left promiscuous mode [ 758.773919][ T44] hsr_slave_1: left promiscuous mode [ 758.774960][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.824447][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.113988][ T44] hsr_slave_0: left promiscuous mode [ 759.132313][ T44] hsr_slave_1: left promiscuous mode [ 759.133655][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.974359][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.126616][T10054] loop2: detected capacity change from 0 to 7 [ 761.133051][T10054] Dev loop2: unable to read RDB block 7 [ 761.133081][T10054] loop2: unable to read partition table [ 761.133214][T10054] loop2: partition table beyond EOD, truncated [ 761.133226][T10054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 761.836846][T10060] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.999'. [ 762.572958][ T44] team0 (unregistering): Port device team_slave_1 removed [ 762.618327][T10062] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1000'. [ 762.987992][T10066] hfs: can't find a HFS filesystem on dev nullb0 [ 763.843118][ T44] team0 (unregistering): Port device team_slave_0 removed [ 764.728673][ T6886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 764.737607][ T6886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 764.742074][ T6886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 764.792897][ T6886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 764.794093][ T6886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.980686][T10071] loop2: detected capacity change from 0 to 7 [ 765.984635][T10071] Dev loop2: unable to read RDB block 7 [ 765.984656][T10071] loop2: AHDI p1 p2 p3 [ 765.984674][T10071] loop2: partition table partially beyond EOD, truncated [ 765.984779][T10071] loop2: p1 start 1818582900 is beyond EOD, truncated [ 765.984789][T10071] loop2: p3 start 335544320 is beyond EOD, truncated [ 766.668517][T10080] 9pnet_fd: Insufficient options for proto=fd [ 766.892297][ T61] Bluetooth: hci5: command tx timeout [ 768.634422][ T44] team0 (unregistering): Port device team_slave_1 removed [ 768.923440][ T44] team0 (unregistering): Port device team_slave_0 removed [ 768.972371][ T61] Bluetooth: hci5: command tx timeout [ 771.061969][ T61] Bluetooth: hci5: command tx timeout [ 772.948026][ T9998] chnl_net:caif_netlink_parms(): no params data found [ 773.019772][T10096] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1006'. [ 773.132464][ T61] Bluetooth: hci5: command tx timeout [ 773.577943][T10010] chnl_net:caif_netlink_parms(): no params data found [ 773.794870][T10103] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1007'. [ 777.093218][ T9998] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.093474][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.093615][ T9998] bridge_slave_0: entered allmulticast mode [ 777.095153][ T9998] bridge_slave_0: entered promiscuous mode [ 777.974038][ T9998] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.974127][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.974259][ T9998] bridge_slave_1: entered allmulticast mode [ 777.975763][ T9998] bridge_slave_1: entered promiscuous mode [ 779.332821][ T5928] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 779.354721][ T9998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.466500][ T9998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.469115][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.469941][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.470138][T10010] bridge_slave_0: entered allmulticast mode [ 779.473116][T10010] bridge_slave_0: entered promiscuous mode [ 779.482290][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 779.512454][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.512482][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.512505][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.512527][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.512568][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.512592][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.659158][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.659283][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.659502][T10010] bridge_slave_1: entered allmulticast mode [ 779.661788][T10010] bridge_slave_1: entered promiscuous mode [ 779.923637][ T5928] usb 4-1: usb_control_msg returned -71 [ 779.923692][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 779.932666][ T5928] usb 4-1: USB disconnect, device number 41 [ 779.964828][ T9998] team0: Port device team_slave_0 added [ 779.964918][ T9897] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 780.146950][ T9998] team0: Port device team_slave_1 added [ 780.147281][ T9897] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.226048][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.293467][ T9897] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 780.450162][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.534536][ T9897] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 781.642597][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.642616][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.642642][ T9998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.734548][ T9998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.734567][ T9998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.734592][ T9998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.797808][T10010] team0: Port device team_slave_0 added [ 781.838403][T10072] chnl_net:caif_netlink_parms(): no params data found [ 781.873800][T10010] team0: Port device team_slave_1 added [ 782.248636][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.248655][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.248680][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.360266][T10140] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1013'. [ 782.394745][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.394759][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.394772][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.528779][ T9998] hsr_slave_0: entered promiscuous mode [ 782.529681][ T9998] hsr_slave_1: entered promiscuous mode [ 782.530257][ T9998] debugfs: 'hsr0' already exists in 'hsr' [ 782.530279][ T9998] Cannot create hsr debugfs directory [ 783.455671][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.455874][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.456145][T10072] bridge_slave_0: entered allmulticast mode [ 783.458386][T10072] bridge_slave_0: entered promiscuous mode [ 783.619449][T10146] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1014'. [ 783.714204][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.714354][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.714555][T10072] bridge_slave_1: entered allmulticast mode [ 783.718344][T10072] bridge_slave_1: entered promiscuous mode [ 783.729652][T10010] hsr_slave_0: entered promiscuous mode [ 783.730970][T10010] hsr_slave_1: entered promiscuous mode [ 783.731879][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 783.731902][T10010] Cannot create hsr debugfs directory [ 783.805518][ T6886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 783.808798][ T6886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 783.811142][ T6886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 783.826278][ T6886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 783.847834][ T6886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.476829][T10072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.721069][T10072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.932305][ T6886] Bluetooth: hci1: command tx timeout [ 786.261636][T10072] team0: Port device team_slave_0 added [ 786.295000][T10072] team0: Port device team_slave_1 added [ 788.398009][ T6886] Bluetooth: hci1: command tx timeout [ 788.597971][T10072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.597984][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.597998][T10072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.665510][T10072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.665528][T10072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.665542][T10072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.261462][T10174] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1021'. [ 789.669311][T10072] hsr_slave_0: entered promiscuous mode [ 789.670281][T10072] hsr_slave_1: entered promiscuous mode [ 789.670861][T10072] debugfs: 'hsr0' already exists in 'hsr' [ 789.670879][T10072] Cannot create hsr debugfs directory [ 791.135630][ T6886] Bluetooth: hci1: command tx timeout [ 791.237109][ T5952] kernel write not supported for file /1903/setgroups (pid: 5952 comm: kworker/1:8) [ 792.037282][T10149] chnl_net:caif_netlink_parms(): no params data found [ 793.230746][T10191] loop2: detected capacity change from 0 to 7 [ 793.231451][ T6886] Bluetooth: hci1: command tx timeout [ 793.244358][T10191] Dev loop2: unable to read RDB block 7 [ 793.244379][T10191] loop2: AHDI p1 p2 p3 [ 793.244397][T10191] loop2: partition table partially beyond EOD, truncated [ 793.244465][T10191] loop2: p1 start 1818582900 is beyond EOD, truncated [ 793.244475][T10191] loop2: p3 start 335544320 is beyond EOD, truncated [ 794.759763][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.760324][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.760891][T10149] bridge_slave_0: entered allmulticast mode [ 794.784689][T10149] bridge_slave_0: entered promiscuous mode [ 794.788231][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.788435][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.788627][T10149] bridge_slave_1: entered allmulticast mode [ 794.791652][T10149] bridge_slave_1: entered promiscuous mode [ 795.029824][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.049066][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.293584][T10149] team0: Port device team_slave_0 added [ 795.322491][T10204] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1028'. [ 795.326402][T10149] team0: Port device team_slave_1 added [ 795.580560][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.580577][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.580597][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.581564][ T44] bridge_slave_1: left allmulticast mode [ 795.581601][ T44] bridge_slave_1: left promiscuous mode [ 795.581859][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.703540][ T44] bridge_slave_0: left allmulticast mode [ 795.703562][ T44] bridge_slave_0: left promiscuous mode [ 795.703807][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.778688][ T44] bridge_slave_1: left allmulticast mode [ 795.778712][ T44] bridge_slave_1: left promiscuous mode [ 795.778883][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.843985][ T44] bridge_slave_0: left allmulticast mode [ 795.844014][ T44] bridge_slave_0: left promiscuous mode [ 795.844242][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.914904][ T44] bridge_slave_1: left allmulticast mode [ 795.914927][ T44] bridge_slave_1: left promiscuous mode [ 795.915121][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.983343][ T44] bridge_slave_0: left allmulticast mode [ 795.983365][ T44] bridge_slave_0: left promiscuous mode [ 795.983530][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.328994][T10206] loop2: detected capacity change from 0 to 7 [ 796.331008][T10206] Dev loop2: unable to read RDB block 7 [ 796.331029][T10206] loop2: AHDI p1 p2 p3 [ 796.331045][T10206] loop2: partition table partially beyond EOD, truncated [ 796.331108][T10206] loop2: p1 start 1818582900 is beyond EOD, truncated [ 796.331118][T10206] loop2: p3 start 335544320 is beyond EOD, truncated [ 797.573036][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.702975][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.767102][ T44] bond0 (unregistering): Released all slaves [ 797.993123][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.072850][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.134321][ T44] bond0 (unregistering): Released all slaves [ 798.322979][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.402931][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.481023][ T44] bond0 (unregistering): Released all slaves [ 798.523536][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.523549][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.523569][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.182360][ T44] hsr_slave_0: left promiscuous mode [ 799.232431][ T44] hsr_slave_1: left promiscuous mode [ 799.234980][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.283076][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.402353][ T44] hsr_slave_0: left promiscuous mode [ 799.444251][ T44] hsr_slave_1: left promiscuous mode [ 799.444951][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.473050][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.613562][ T44] hsr_slave_0: left promiscuous mode [ 799.652321][ T44] hsr_slave_1: left promiscuous mode [ 799.653032][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.712861][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.236097][T10229] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1035'. [ 801.302929][ T44] team0 (unregistering): Port device team_slave_1 removed [ 801.462889][ T44] team0 (unregistering): Port device team_slave_0 removed [ 802.739664][T10231] loop2: detected capacity change from 0 to 7 [ 802.751293][T10231] Dev loop2: unable to read RDB block 7 [ 802.751316][T10231] loop2: AHDI p1 p2 p3 [ 802.751338][T10231] loop2: partition table partially beyond EOD, truncated [ 802.751412][T10231] loop2: p1 start 1818582900 is beyond EOD, truncated [ 802.751422][T10231] loop2: p3 start 335544320 is beyond EOD, truncated [ 804.908400][ T44] team0 (unregistering): Port device team_slave_1 removed [ 805.333107][ T44] team0 (unregistering): Port device team_slave_0 removed [ 806.165390][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 806.170024][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.171295][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 806.176160][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 806.199698][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.484674][ T44] team0 (unregistering): Port device team_slave_1 removed [ 806.643188][ T44] team0 (unregistering): Port device team_slave_0 removed [ 807.617317][T10149] hsr_slave_0: entered promiscuous mode [ 807.618841][T10149] hsr_slave_1: entered promiscuous mode [ 807.619408][T10149] debugfs: 'hsr0' already exists in 'hsr' [ 807.619426][T10149] Cannot create hsr debugfs directory [ 808.332468][ T61] Bluetooth: hci3: command tx timeout [ 808.687486][ T6886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 808.693301][ T6886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 808.694716][ T6886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 808.737178][ T6886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 808.738521][ T6886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.569424][T10242] chnl_net:caif_netlink_parms(): no params data found [ 809.725331][T10264] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1042'. [ 810.436813][ T61] Bluetooth: hci3: command tx timeout [ 810.532874][T10242] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.533050][T10242] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.533273][T10242] bridge_slave_0: entered allmulticast mode [ 810.563209][T10242] bridge_slave_0: entered promiscuous mode [ 810.763484][T10242] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.763624][T10242] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.763883][T10242] bridge_slave_1: entered allmulticast mode [ 811.629987][ T61] Bluetooth: hci4: command tx timeout [ 811.717028][T10242] bridge_slave_1: entered promiscuous mode [ 812.139365][T10242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.492465][ T61] Bluetooth: hci3: command tx timeout [ 812.564747][T10242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.228124][T10279] loop2: detected capacity change from 0 to 7 [ 814.228795][ T61] Bluetooth: hci4: command tx timeout [ 814.232884][T10279] Dev loop2: unable to read RDB block 7 [ 814.232904][T10279] loop2: AHDI p1 p2 p3 [ 814.232922][T10279] loop2: partition table partially beyond EOD, truncated [ 814.232993][T10279] loop2: p1 start 1818582900 is beyond EOD, truncated [ 814.233004][T10279] loop2: p3 start 335544320 is beyond EOD, truncated [ 814.394017][T10254] chnl_net:caif_netlink_parms(): no params data found [ 814.582235][ T61] Bluetooth: hci3: command tx timeout [ 814.634845][T10242] team0: Port device team_slave_0 added [ 814.674055][T10242] team0: Port device team_slave_1 added [ 815.352848][T10284] loop2: detected capacity change from 0 to 7 [ 816.025725][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.025813][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.047254][T10284] Dev loop2: unable to read RDB block 7 [ 816.047277][T10284] loop2: AHDI p1 p2 p3 [ 816.047297][T10284] loop2: partition table partially beyond EOD, truncated [ 816.047369][T10284] loop2: p1 start 1818582900 is beyond EOD, truncated [ 816.047379][T10284] loop2: p3 start 335544320 is beyond EOD, truncated [ 816.252356][ T61] Bluetooth: hci4: command tx timeout [ 816.533824][T10242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.533850][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.533876][T10242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.557096][T10242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.557118][T10242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.557144][T10242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.182633][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.182794][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.182974][T10254] bridge_slave_0: entered allmulticast mode [ 817.184627][T10254] bridge_slave_0: entered promiscuous mode [ 817.362935][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.363061][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.363292][T10254] bridge_slave_1: entered allmulticast mode [ 817.365885][T10254] bridge_slave_1: entered promiscuous mode [ 817.374290][T10242] hsr_slave_0: entered promiscuous mode [ 817.375795][T10242] hsr_slave_1: entered promiscuous mode [ 817.376686][T10242] debugfs: 'hsr0' already exists in 'hsr' [ 817.376709][T10242] Cannot create hsr debugfs directory [ 817.643374][T10293] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1048'. [ 817.643398][T10293] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1048'. [ 817.663560][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.799597][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.839443][T10297] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 818.357940][ T61] Bluetooth: hci4: command tx timeout [ 820.356049][T10311] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 820.407568][T10254] team0: Port device team_slave_0 added [ 820.443549][T10254] team0: Port device team_slave_1 added [ 820.558615][T10072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 820.669664][T10072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 820.708944][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.708963][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.708988][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.742356][T10072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 820.786391][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.786409][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.786434][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.910869][T10072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 821.234605][T10254] hsr_slave_0: entered promiscuous mode [ 821.235485][T10254] hsr_slave_1: entered promiscuous mode [ 821.236127][T10254] debugfs: 'hsr0' already exists in 'hsr' [ 821.236143][T10254] Cannot create hsr debugfs directory [ 821.376452][T10149] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 821.518031][T10149] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 822.687049][T10149] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 822.804617][ T44] bridge_slave_1: left allmulticast mode [ 822.804647][ T44] bridge_slave_1: left promiscuous mode [ 822.804853][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.873354][ T44] bridge_slave_0: left allmulticast mode [ 822.873379][ T44] bridge_slave_0: left promiscuous mode [ 822.873569][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.934790][ T44] bridge_slave_1: left allmulticast mode [ 822.934811][ T44] bridge_slave_1: left promiscuous mode [ 822.934968][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.994657][ T44] bridge_slave_0: left allmulticast mode [ 822.994680][ T44] bridge_slave_0: left promiscuous mode [ 822.994834][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.074914][ T44] bridge_slave_1: left allmulticast mode [ 823.074942][ T44] bridge_slave_1: left promiscuous mode [ 823.075147][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.143352][ T44] bridge_slave_0: left allmulticast mode [ 823.143375][ T44] bridge_slave_0: left promiscuous mode [ 823.143543][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.436237][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.522938][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.588775][ T44] bond0 (unregistering): Released all slaves [ 824.933305][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.013150][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.074316][ T44] bond0 (unregistering): Released all slaves [ 825.413124][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.493478][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.564586][ T44] bond0 (unregistering): Released all slaves [ 825.593166][T10149] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 826.129075][ T6886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 826.162460][T10342] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 826.164199][ T6886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 826.191901][ T6886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 826.247381][ T6886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 826.248268][ T6886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 827.536732][T10348] loop2: detected capacity change from 0 to 7 [ 827.537604][T10348] Dev loop2: unable to read RDB block 7 [ 827.537623][T10348] loop2: AHDI p1 p2 p3 [ 827.537640][T10348] loop2: partition table partially beyond EOD, truncated [ 827.537711][T10348] loop2: p1 start 1818582900 is beyond EOD, truncated [ 827.537722][T10348] loop2: p3 start 335544320 is beyond EOD, truncated [ 828.332645][ T6886] Bluetooth: hci2: command tx timeout [ 828.346084][T10355] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1063'. [ 828.434267][ T44] hsr_slave_0: left promiscuous mode [ 828.472631][ T44] hsr_slave_1: left promiscuous mode [ 828.473307][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.503304][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.660587][ T44] hsr_slave_0: left promiscuous mode [ 828.692427][ T44] hsr_slave_1: left promiscuous mode [ 828.693117][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.717444][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.872571][ T44] hsr_slave_0: left promiscuous mode [ 828.892521][ T44] hsr_slave_1: left promiscuous mode [ 828.893278][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.934507][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.412401][ T6886] Bluetooth: hci2: command tx timeout [ 830.613227][ T44] team0 (unregistering): Port device team_slave_1 removed [ 830.753728][ T44] team0 (unregistering): Port device team_slave_0 removed [ 831.853771][ T44] team0 (unregistering): Port device team_slave_1 removed [ 832.013133][ T44] team0 (unregistering): Port device team_slave_0 removed [ 832.502293][ T6886] Bluetooth: hci2: command tx timeout [ 833.152837][ T44] team0 (unregistering): Port device team_slave_1 removed [ 833.293278][ T44] team0 (unregistering): Port device team_slave_0 removed [ 834.376912][T10371] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 834.507791][T10373] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1069'. [ 834.592298][ T61] Bluetooth: hci2: command tx timeout [ 835.713882][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.714092][T10381] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1071'. [ 835.714110][T10381] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1071'. [ 835.948745][T10339] chnl_net:caif_netlink_parms(): no params data found [ 836.028118][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.028383][T10254] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 836.316640][T10254] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 837.348984][T10254] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 837.422478][T10395] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 837.537347][T10398] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1076'. [ 837.537621][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.537824][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.538409][T10254] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 838.880712][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 839.140717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.140941][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.151968][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.152449][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.152695][T10339] bridge_slave_0: entered allmulticast mode [ 839.155309][T10339] bridge_slave_0: entered promiscuous mode [ 839.213355][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.213492][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.213718][T10339] bridge_slave_1: entered allmulticast mode [ 839.217993][T10339] bridge_slave_1: entered promiscuous mode [ 839.442049][T10242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 839.688838][T10242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 839.799265][T10339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.799363][T10242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 839.876585][T10339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.006432][T10242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 840.155642][T10421] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 841.072712][T10427] loop2: detected capacity change from 0 to 7 [ 841.800218][T10427] Dev loop2: unable to read RDB block 7 [ 841.800242][T10427] loop2: AHDI p1 p2 p3 [ 841.800258][T10427] loop2: partition table partially beyond EOD, truncated [ 841.800336][T10427] loop2: p1 start 1818582900 is beyond EOD, truncated [ 841.800346][T10427] loop2: p3 start 335544320 is beyond EOD, truncated [ 841.930870][T10339] team0: Port device team_slave_0 added [ 841.997196][T10339] team0: Port device team_slave_1 added [ 842.317235][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.317253][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.317279][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.390019][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.390038][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.390064][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.170790][T10339] hsr_slave_0: entered promiscuous mode [ 844.188163][T10339] hsr_slave_1: entered promiscuous mode [ 844.188793][T10339] debugfs: 'hsr0' already exists in 'hsr' [ 844.188815][T10339] Cannot create hsr debugfs directory [ 845.043900][T10443] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1085'. [ 845.067393][T10443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.194775][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 845.215843][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 845.221604][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 845.239147][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 845.240498][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 845.985082][T10452] loop2: detected capacity change from 0 to 7 [ 846.714159][T10452] Dev loop2: unable to read RDB block 7 [ 846.714184][T10452] loop2: AHDI p1 p2 p3 [ 846.714200][T10452] loop2: partition table partially beyond EOD, truncated [ 846.714266][T10452] loop2: p1 start 1818582900 is beyond EOD, truncated [ 846.714276][T10452] loop2: p3 start 335544320 is beyond EOD, truncated [ 847.293711][ T61] Bluetooth: hci1: command tx timeout [ 847.780512][T10457] syz.3.1088 (10457): drop_caches: 2 [ 848.356822][T10459] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 848.511166][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.620068][T10242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.649344][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.719425][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.720221][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.879613][T10471] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1092'. [ 848.895207][T10242] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.895785][T10471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 848.937025][ T4547] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.937239][ T4547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.996571][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.996729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.053259][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.053749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.130823][ T44] bridge_slave_1: left allmulticast mode [ 849.130852][ T44] bridge_slave_1: left promiscuous mode [ 849.131105][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.219476][ T44] bridge_slave_0: left allmulticast mode [ 849.219498][ T44] bridge_slave_0: left promiscuous mode [ 849.219685][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.392600][T10462] Bluetooth: hci1: command tx timeout [ 849.675055][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.752812][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.834126][ T44] bond0 (unregistering): Released all slaves [ 850.020781][T10449] chnl_net:caif_netlink_parms(): no params data found [ 850.238867][T10483] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 851.262613][T10487] loop2: detected capacity change from 0 to 7 [ 851.421762][T10487] Dev loop2: unable to read RDB block 7 [ 851.421784][T10487] loop2: AHDI p1 p2 p3 [ 851.421804][T10487] loop2: partition table partially beyond EOD, truncated [ 851.421872][T10487] loop2: p1 start 1818582900 is beyond EOD, truncated [ 851.421882][T10487] loop2: p3 start 335544320 is beyond EOD, truncated [ 851.456537][T10462] Bluetooth: hci0: command 0x0406 tx timeout [ 851.456839][T10462] Bluetooth: hci1: command tx timeout [ 851.572334][ T44] hsr_slave_0: left promiscuous mode [ 851.612491][ T44] hsr_slave_1: left promiscuous mode [ 851.613508][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.656715][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.592991][ T44] team0 (unregistering): Port device team_slave_1 removed [ 852.862984][ T44] team0 (unregistering): Port device team_slave_0 removed [ 853.382149][T10507] syz.3.1101 (10507): drop_caches: 2 [ 853.555255][ T61] Bluetooth: hci1: command tx timeout [ 854.030401][T10509] FAULT_INJECTION: forcing a failure. [ 854.030401][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 854.030444][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.3.1102 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.030466][T10509] Tainted: [L]=SOFTLOCKUP [ 854.030472][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 854.030484][T10509] Call Trace: [ 854.030494][T10509] [ 854.030502][T10509] dump_stack_lvl+0x189/0x250 [ 854.030528][T10509] ? __pfx____ratelimit+0x10/0x10 [ 854.030547][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.030566][T10509] ? __pfx__printk+0x10/0x10 [ 854.030587][T10509] ? __pfx___might_resched+0x10/0x10 [ 854.030604][T10509] ? fs_reclaim_acquire+0x7d/0x100 [ 854.030623][T10509] should_fail_ex+0x46c/0x600 [ 854.030649][T10509] ? mas_alloc_nodes+0x291/0x350 [ 854.030665][T10509] should_failslab+0xa8/0x100 [ 854.030681][T10509] ? mas_alloc_nodes+0x291/0x350 [ 854.030695][T10509] kmem_cache_alloc_noprof+0x84/0x6c0 [ 854.030723][T10509] mas_alloc_nodes+0x291/0x350 [ 854.030743][T10509] mas_preallocate+0x2e0/0x670 [ 854.030765][T10509] ? __pfx_mas_preallocate+0x10/0x10 [ 854.030788][T10509] ? __asan_memset+0x22/0x50 [ 854.030815][T10509] commit_merge+0x1fa/0x620 [ 854.030837][T10509] ? __pfx_commit_merge+0x10/0x10 [ 854.030862][T10509] ? vma_modify+0xc6b/0x1c00 [ 854.030878][T10509] ? dup_anon_vma+0x7b/0x2c0 [ 854.030899][T10509] vma_modify+0x1118/0x1c00 [ 854.030931][T10509] vma_modify_flags_uffd+0x204/0x250 [ 854.030951][T10509] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 854.030984][T10509] ? mas_find+0xb0e/0xd30 [ 854.031005][T10509] userfaultfd_release_all+0x34c/0x5d0 [ 854.031032][T10509] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 854.031066][T10509] userfaultfd_release+0xea/0x1b0 [ 854.031084][T10509] ? __pfx_userfaultfd_release+0x10/0x10 [ 854.031098][T10509] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 854.031118][T10509] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 854.031138][T10509] ? rt_spin_lock+0x1c1/0x3e0 [ 854.031151][T10509] ? evm_file_release+0x10a/0x1e0 [ 854.031170][T10509] ? __pfx_userfaultfd_release+0x10/0x10 [ 854.031186][T10509] __fput+0x45b/0xa80 [ 854.031214][T10509] fput_close_sync+0x113/0x220 [ 854.031231][T10509] ? __pfx_fput_close_sync+0x10/0x10 [ 854.031257][T10509] __x64_sys_close+0x7f/0x110 [ 854.031276][T10509] do_syscall_64+0xfa/0xf80 [ 854.031295][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.031311][T10509] ? clear_bhb_loop+0x60/0xb0 [ 854.031330][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.031344][T10509] RIP: 0033:0x7fce7d8bf749 [ 854.031360][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.031373][T10509] RSP: 002b:00007fce7bb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 854.031397][T10509] RAX: ffffffffffffffda RBX: 00007fce7db15fa0 RCX: 00007fce7d8bf749 [ 854.031408][T10509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 854.031417][T10509] RBP: 00007fce7bb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 854.031426][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.031435][T10509] R13: 00007fce7db16038 R14: 00007fce7db15fa0 R15: 00007fff02bffbc8 [ 854.031463][T10509] [ 854.112029][T10511] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 854.529923][T10513] FAULT_INJECTION: forcing a failure. [ 854.529923][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 854.529947][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.3.1104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 854.529962][T10513] Tainted: [L]=SOFTLOCKUP [ 854.529966][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 854.529972][T10513] Call Trace: [ 854.529977][T10513] [ 854.529981][T10513] dump_stack_lvl+0x189/0x250 [ 854.529999][T10513] ? __pfx____ratelimit+0x10/0x10 [ 854.530012][T10513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.530024][T10513] ? __pfx__printk+0x10/0x10 [ 854.530037][T10513] ? __pfx___might_resched+0x10/0x10 [ 854.530051][T10513] should_fail_ex+0x46c/0x600 [ 854.530073][T10513] should_failslab+0xa8/0x100 [ 854.530093][T10513] __kmalloc_noprof+0xe0/0x7e0 [ 854.530108][T10513] ? kfree+0x4d/0x900 [ 854.530118][T10513] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 854.530135][T10513] tomoyo_realpath_from_path+0xe3/0x5d0 [ 854.530148][T10513] ? tomoyo_domain+0xd9/0x130 [ 854.530163][T10513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 854.530174][T10513] tomoyo_path_number_perm+0x1e8/0x5a0 [ 854.530185][T10513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 854.530198][T10513] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 854.530211][T10513] ? lockdep_hardirqs_on+0x98/0x140 [ 854.530239][T10513] ? __fget_files+0x2a/0x420 [ 854.530253][T10513] ? __fget_files+0x3a6/0x420 [ 854.530262][T10513] ? __fget_files+0x2a/0x420 [ 854.530274][T10513] security_file_ioctl+0xcb/0x2d0 [ 854.530286][T10513] __se_sys_ioctl+0x47/0x170 [ 854.530301][T10513] do_syscall_64+0xfa/0xf80 [ 854.530314][T10513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.530324][T10513] ? clear_bhb_loop+0x60/0xb0 [ 854.530336][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.530346][T10513] RIP: 0033:0x7fce7d8bf749 [ 854.530356][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.530364][T10513] RSP: 002b:00007fce7bb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.530375][T10513] RAX: ffffffffffffffda RBX: 00007fce7db15fa0 RCX: 00007fce7d8bf749 [ 854.530383][T10513] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 854.530389][T10513] RBP: 00007fce7bb1e090 R08: 0000000000000000 R09: 0000000000000000 [ 854.530395][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.530401][T10513] R13: 00007fce7db16038 R14: 00007fce7db15fa0 R15: 00007fff02bffbc8 [ 854.530417][T10513] [ 854.530433][T10513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 854.596017][T10513] kvm: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x79 [ 854.598200][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 854.600380][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.600929][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.601739][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.602586][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.603530][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.604082][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.604882][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.605436][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 854.606234][T10513] kvm_intel: kvm [10512]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x41 [ 855.563093][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.563275][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.563471][T10449] bridge_slave_0: entered allmulticast mode [ 855.565878][T10449] bridge_slave_0: entered promiscuous mode [ 855.652474][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.652553][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.652750][T10449] bridge_slave_1: entered allmulticast mode [ 855.654316][T10449] bridge_slave_1: entered promiscuous mode [ 855.928931][T10524] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 856.038003][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.074900][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.272661][T10528] loop2: detected capacity change from 0 to 7 [ 857.434890][T10528] Dev loop2: unable to read RDB block 7 [ 857.434914][T10528] loop2: AHDI p1 p2 p3 [ 857.434931][T10528] loop2: partition table partially beyond EOD, truncated [ 857.435001][T10528] loop2: p1 start 1818582900 is beyond EOD, truncated [ 857.435011][T10528] loop2: p3 start 335544320 is beyond EOD, truncated [ 857.944035][T10449] team0: Port device team_slave_0 added [ 858.003579][T10449] team0: Port device team_slave_1 added [ 858.303828][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.303847][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.303872][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.361350][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.361369][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.361394][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.664868][T10339] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 858.765764][T10541] syz.3.1108 (10541): drop_caches: 2 [ 859.527567][T10545] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 859.547767][T10339] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 859.591085][T10449] hsr_slave_0: entered promiscuous mode [ 859.601940][T10449] hsr_slave_1: entered promiscuous mode [ 859.605647][T10449] debugfs: 'hsr0' already exists in 'hsr' [ 859.605674][T10449] Cannot create hsr debugfs directory [ 859.612688][T10339] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 861.252428][T10339] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 862.382688][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.704670][T10242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.297405][ T37] audit: type=1326 audit(1765106322.546:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.299347][ T37] audit: type=1326 audit(1765106322.546:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.299403][ T37] audit: type=1326 audit(1765106322.546:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.299444][ T37] audit: type=1326 audit(1765106322.546:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.301266][ T37] audit: type=1326 audit(1765106322.546:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.301315][ T37] audit: type=1326 audit(1765106322.546:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.301668][ T37] audit: type=1326 audit(1765106322.546:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.301782][ T37] audit: type=1326 audit(1765106322.546:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.301925][ T37] audit: type=1326 audit(1765106322.546:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.307728][ T37] audit: type=1326 audit(1765106322.556:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10575 comm="syz.3.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 864.463297][T10576] fuse: Unknown parameter 'fsname' [ 865.100023][T10583] hfs: can't find a HFS filesystem on dev nullb0 [ 865.905621][T10585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1116'. [ 865.946476][T10585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.018703][T10588] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 866.109038][T10254] veth0_vlan: entered promiscuous mode [ 866.198681][T10254] veth1_vlan: entered promiscuous mode [ 866.381042][T10339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.387220][ T44] bridge_slave_1: left allmulticast mode [ 866.387248][ T44] bridge_slave_1: left promiscuous mode [ 866.387536][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.412741][ T805] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 866.473971][ T44] bridge_slave_0: left allmulticast mode [ 866.473994][ T44] bridge_slave_0: left promiscuous mode [ 866.474151][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.576003][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 866.576026][ T805] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 866.576039][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 866.576050][ T805] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 866.576073][ T805] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 866.576085][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.579219][ T805] usb 4-1: config 0 descriptor?? [ 866.793033][ T805] hdpvr 4-1:0.0: unexpected answer of status request, len 39 [ 866.793059][ T805] hdpvr 4-1:0.0: device init failed [ 866.793140][ T805] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 867.090579][ T6886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 867.109873][ T6886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 867.111139][ T6886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 867.130400][ T6886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 867.148197][ T6886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 868.714466][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.792990][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.818431][ T44] bond0 (unregistering): Released all slaves [ 869.161419][ T5928] usb 4-1: USB disconnect, device number 42 [ 869.292409][ T61] Bluetooth: hci3: command tx timeout [ 869.612501][ T44] hsr_slave_0: left promiscuous mode [ 869.634047][ T44] hsr_slave_1: left promiscuous mode [ 869.635043][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.682895][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.074908][ T6886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.096468][ T6886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.112436][ T6886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.147502][ T6886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.149411][ T6886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 871.402264][ T61] Bluetooth: hci3: command tx timeout [ 873.212234][ T61] Bluetooth: hci4: command tx timeout [ 873.452318][ T61] Bluetooth: hci3: command tx timeout [ 873.783709][ T44] team0 (unregistering): Port device team_slave_1 removed [ 874.044262][ T44] team0 (unregistering): Port device team_slave_0 removed [ 875.292474][ T61] Bluetooth: hci4: command tx timeout [ 875.532258][ T61] Bluetooth: hci3: command tx timeout [ 876.336917][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.337020][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.736838][T10339] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.872345][ T5928] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 876.894441][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.894598][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.951144][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.951280][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.033439][ T5928] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 877.033468][ T5928] usb 4-1: config 0 has no interface number 0 [ 877.033515][ T5928] usb 4-1: config 0 interface 150 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 877.033542][ T5928] usb 4-1: config 0 interface 150 has no altsetting 0 [ 877.037402][ T5928] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 877.037430][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.037448][ T5928] usb 4-1: Product: syz [ 877.037461][ T5928] usb 4-1: Manufacturer: syz [ 877.037473][ T5928] usb 4-1: SerialNumber: syz [ 877.040734][ T5928] usb 4-1: config 0 descriptor?? [ 877.382394][ T61] Bluetooth: hci4: command tx timeout [ 877.559880][ T5928] usb 4-1: USB disconnect, device number 43 [ 877.723016][T10593] chnl_net:caif_netlink_parms(): no params data found [ 878.033115][T10449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 878.095000][T10449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 878.155722][T10627] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1123'. [ 878.323249][T10627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.323697][T10449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 878.373882][T10632] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 878.502660][T10600] chnl_net:caif_netlink_parms(): no params data found [ 878.714556][T10449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 878.760530][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.760662][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.760803][T10593] bridge_slave_0: entered allmulticast mode [ 878.768137][T10593] bridge_slave_0: entered promiscuous mode [ 879.620015][ T61] Bluetooth: hci4: command tx timeout [ 880.072444][T10646] loop2: detected capacity change from 0 to 7 [ 880.799013][T10646] Dev loop2: unable to read RDB block 7 [ 880.799037][T10646] loop2: AHDI p1 p2 p3 [ 880.799058][T10646] loop2: partition table partially beyond EOD, truncated [ 880.799125][T10646] loop2: p1 start 1818582900 is beyond EOD, truncated [ 880.799135][T10646] loop2: p3 start 335544320 is beyond EOD, truncated [ 881.016722][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.016887][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.017066][T10593] bridge_slave_1: entered allmulticast mode [ 881.021280][T10593] bridge_slave_1: entered promiscuous mode [ 881.484662][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 881.523997][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.543928][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.321913][T10593] team0: Port device team_slave_0 added [ 883.327934][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.328054][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.328199][T10600] bridge_slave_0: entered allmulticast mode [ 883.329748][T10600] bridge_slave_0: entered promiscuous mode [ 883.507412][T10593] team0: Port device team_slave_1 added [ 883.508035][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.508574][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.508696][T10600] bridge_slave_1: entered allmulticast mode [ 883.510225][T10600] bridge_slave_1: entered promiscuous mode [ 883.595684][T10339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.137055][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.137069][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.137083][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.110473][T10600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.129342][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.129361][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.129384][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.167339][T10600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.763950][T10600] team0: Port device team_slave_0 added [ 886.895248][T10600] team0: Port device team_slave_1 added [ 887.133783][T10593] hsr_slave_0: entered promiscuous mode [ 887.134613][T10593] hsr_slave_1: entered promiscuous mode [ 887.135207][T10593] debugfs: 'hsr0' already exists in 'hsr' [ 887.135227][T10593] Cannot create hsr debugfs directory [ 887.423425][T10600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.423438][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.423453][T10600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.480185][T10600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.480202][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.480227][T10600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.698713][ T6886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 887.710743][ T6886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 887.713056][ T6886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 887.714892][ T6886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 887.715774][ T6886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.611145][T10600] hsr_slave_0: entered promiscuous mode [ 889.611989][T10600] hsr_slave_1: entered promiscuous mode [ 889.624895][T10600] debugfs: 'hsr0' already exists in 'hsr' [ 889.624913][T10600] Cannot create hsr debugfs directory [ 889.773099][ T6886] Bluetooth: hci2: command tx timeout [ 891.854956][ T6886] Bluetooth: hci2: command tx timeout [ 892.235703][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.515416][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.612009][ T44] bridge_slave_1: left allmulticast mode [ 894.612041][ T44] bridge_slave_1: left promiscuous mode [ 894.612815][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.641426][ T6886] Bluetooth: hci2: command tx timeout [ 894.713542][ T44] bridge_slave_0: left allmulticast mode [ 894.713565][ T44] bridge_slave_0: left promiscuous mode [ 894.713728][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.417237][T10714] loop2: detected capacity change from 0 to 7 [ 895.991271][T10714] Dev loop2: unable to read RDB block 7 [ 895.991300][T10714] loop2: AHDI p1 p2 p3 [ 895.991316][T10714] loop2: partition table partially beyond EOD, truncated [ 895.991383][T10714] loop2: p1 start 1818582900 is beyond EOD, truncated [ 895.991393][T10714] loop2: p3 start 335544320 is beyond EOD, truncated [ 896.109183][ T44] bridge_slave_1: left allmulticast mode [ 896.109216][ T44] bridge_slave_1: left promiscuous mode [ 896.109454][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.213793][ T44] bridge_slave_0: left allmulticast mode [ 896.213823][ T44] bridge_slave_0: left promiscuous mode [ 896.214107][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.710721][ T6886] Bluetooth: hci2: command tx timeout [ 899.272868][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.335357][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.357852][ T44] bond0 (unregistering): Released all slaves [ 901.073418][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.142960][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.164568][ T44] bond0 (unregistering): Released all slaves [ 901.314937][T10731] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1146'. [ 901.365551][T10686] chnl_net:caif_netlink_parms(): no params data found [ 901.426724][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.426947][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.613651][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.613791][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.912506][ T44] hsr_slave_0: left promiscuous mode [ 901.947438][ T44] hsr_slave_1: left promiscuous mode [ 901.948434][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.992913][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.152399][ T44] hsr_slave_0: left promiscuous mode [ 902.172965][ T44] hsr_slave_1: left promiscuous mode [ 902.173639][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.223220][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.305343][ T44] veth1_vlan: left promiscuous mode [ 902.305504][ T44] veth0_vlan: left promiscuous mode [ 904.963091][ T44] team0 (unregistering): Port device team_slave_1 removed [ 905.243918][ T44] team0 (unregistering): Port device team_slave_0 removed [ 906.060617][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 906.081029][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 906.091790][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 906.129424][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 906.130609][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 908.172362][ T61] Bluetooth: hci5: command tx timeout [ 909.243302][ T44] team0 (unregistering): Port device team_slave_1 removed [ 909.482849][ T44] team0 (unregistering): Port device team_slave_0 removed [ 910.252358][ T61] Bluetooth: hci5: command tx timeout [ 912.426820][ T61] Bluetooth: hci5: command tx timeout [ 914.128602][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.128779][T10686] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.129017][T10686] bridge_slave_0: entered allmulticast mode [ 914.131320][T10686] bridge_slave_0: entered promiscuous mode [ 914.193906][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.194045][T10686] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.194279][T10686] bridge_slave_1: entered allmulticast mode [ 914.197141][T10686] bridge_slave_1: entered promiscuous mode [ 914.492392][ T61] Bluetooth: hci5: command tx timeout [ 914.799693][T10686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.811077][T10686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.115289][T10686] team0: Port device team_slave_0 added [ 915.135341][T10686] team0: Port device team_slave_1 added [ 915.481437][T10759] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1153'. [ 915.622373][T10686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.622398][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.622424][T10686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.633667][T10686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.633685][T10686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.633710][T10686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.489384][T10686] hsr_slave_0: entered promiscuous mode [ 916.490233][T10686] hsr_slave_1: entered promiscuous mode [ 916.490874][T10686] debugfs: 'hsr0' already exists in 'hsr' [ 916.490890][T10686] Cannot create hsr debugfs directory [ 917.577824][T10747] chnl_net:caif_netlink_parms(): no params data found [ 918.343210][T10593] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 918.442432][ T6025] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 918.522928][T10593] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 918.592360][ T6025] usb 4-1: Using ep0 maxpacket: 16 [ 918.594429][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 918.597078][ T6025] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 918.597095][ T6025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.597105][ T6025] usb 4-1: Product: syz [ 918.597113][ T6025] usb 4-1: Manufacturer: syz [ 918.597122][ T6025] usb 4-1: SerialNumber: syz [ 918.600266][ T6025] usb 4-1: config 0 descriptor?? [ 918.605112][ T6025] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 918.605147][ T6025] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 918.671506][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.671734][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.672676][T10747] bridge_slave_0: entered allmulticast mode [ 918.676380][T10747] bridge_slave_0: entered promiscuous mode [ 918.679445][T10593] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 918.798551][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.798683][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.799150][T10747] bridge_slave_1: entered allmulticast mode [ 918.801537][T10747] bridge_slave_1: entered promiscuous mode [ 918.831651][T10593] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 919.209449][ T6025] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 919.316988][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.511760][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.727510][ T6025] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 919.727543][ T6025] em28xx 4-1:0.0: board has no eeprom [ 919.782372][ T6025] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 919.782408][ T6025] em28xx 4-1:0.0: dvb set to bulk mode. [ 919.783230][ T805] em28xx 4-1:0.0: Binding DVB extension [ 919.799135][ T6025] usb 4-1: USB disconnect, device number 44 [ 919.801179][ T6025] em28xx 4-1:0.0: Disconnecting em28xx [ 919.850756][ T805] em28xx 4-1:0.0: Registering input extension [ 919.854377][ T6025] em28xx 4-1:0.0: Closing input extension [ 919.920374][ T6025] em28xx 4-1:0.0: Freeing device [ 919.980409][T10747] team0: Port device team_slave_0 added [ 919.990405][T10747] team0: Port device team_slave_1 added [ 920.081022][T10600] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 920.592519][T10600] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 920.619297][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.619310][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.619327][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.734508][T10600] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 920.756243][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.756256][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.756270][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.975095][T10600] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 921.371215][T10747] hsr_slave_0: entered promiscuous mode [ 921.374461][T10747] hsr_slave_1: entered promiscuous mode [ 921.375444][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 921.375468][T10747] Cannot create hsr debugfs directory [ 921.414442][T10802] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1160'. [ 922.857412][ T44] bridge_slave_1: left allmulticast mode [ 922.857440][ T44] bridge_slave_1: left promiscuous mode [ 922.857675][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.924138][ T44] bridge_slave_0: left allmulticast mode [ 922.924161][ T44] bridge_slave_0: left promiscuous mode [ 922.924313][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.998836][ T44] bridge_slave_1: left allmulticast mode [ 922.998867][ T44] bridge_slave_1: left promiscuous mode [ 922.999103][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.083853][ T44] bridge_slave_0: left allmulticast mode [ 923.083884][ T44] bridge_slave_0: left promiscuous mode [ 923.084133][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.032895][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.093368][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.154255][ T44] bond0 (unregistering): Released all slaves [ 927.873054][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.953157][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.999178][ T44] bond0 (unregistering): Released all slaves [ 928.060598][ T6886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 928.066528][ T6886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 928.079419][ T6886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 928.101262][ T6886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 928.115823][ T6886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 928.625133][T10686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 928.658027][T10686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 929.666213][T10686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 929.748668][T10686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 929.921986][T10842] Process accounting resumed [ 929.982440][ T44] hsr_slave_0: left promiscuous mode [ 930.023259][ T44] hsr_slave_1: left promiscuous mode [ 930.023911][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.045476][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.172412][ T61] Bluetooth: hci1: command tx timeout [ 930.187870][ T44] hsr_slave_0: left promiscuous mode [ 930.242388][ T44] hsr_slave_1: left promiscuous mode [ 930.243487][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.263253][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.852633][T10846] loop2: detected capacity change from 0 to 7 [ 932.020129][T10846] Dev loop2: unable to read RDB block 7 [ 932.020163][T10846] loop2: AHDI p1 p2 p3 [ 932.020188][T10846] loop2: partition table partially beyond EOD, truncated [ 932.020273][T10846] loop2: p1 start 1818582900 is beyond EOD, truncated [ 932.020283][T10846] loop2: p3 start 335544320 is beyond EOD, truncated [ 932.209937][ T6886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 932.248813][ T6886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 932.250352][ T6886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 932.255454][ T6886] Bluetooth: hci1: command tx timeout [ 932.272041][ T6886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 932.275457][ T6886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 932.313163][ T44] team0 (unregistering): Port device team_slave_1 removed [ 932.532762][ T44] team0 (unregistering): Port device team_slave_0 removed [ 934.354658][ T6886] Bluetooth: hci3: command tx timeout [ 934.354985][ T6886] Bluetooth: hci1: command tx timeout [ 936.412340][ T6886] Bluetooth: hci1: command tx timeout [ 936.497347][ T6886] Bluetooth: hci3: command tx timeout [ 937.032849][ T44] team0 (unregistering): Port device team_slave_1 removed [ 937.293018][ T44] team0 (unregistering): Port device team_slave_0 removed [ 937.777968][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.778157][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.582302][ T6886] Bluetooth: hci3: command tx timeout [ 940.103792][T10863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 940.653174][ T6886] Bluetooth: hci3: command tx timeout [ 941.294496][T10879] [U] ÿ [ 941.460132][T10882] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 942.957224][T10686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.981027][T10686] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.991064][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.991286][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.004417][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.004629][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.202627][T10828] chnl_net:caif_netlink_parms(): no params data found [ 944.296752][T10905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1184'. [ 944.296779][T10905] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1184'. [ 944.572785][T10915] [U] ÿ [ 944.924943][T10747] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 945.008125][T10828] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.008326][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.008539][T10828] bridge_slave_0: entered allmulticast mode [ 945.011212][T10828] bridge_slave_0: entered promiscuous mode [ 945.065931][T10747] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 945.164169][T10828] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.164276][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.164398][T10828] bridge_slave_1: entered allmulticast mode [ 945.165869][T10828] bridge_slave_1: entered promiscuous mode [ 945.167424][T10850] chnl_net:caif_netlink_parms(): no params data found [ 945.173267][T10747] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 945.352471][T10747] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 945.402265][ T805] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 945.509345][T10828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.562402][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 945.566593][ T805] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 945.566612][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 945.566625][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 945.566638][ T805] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 945.566662][ T805] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 945.566674][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.639334][T10828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.813062][ T805] usb 4-1: GET_CAPABILITIES returned 0 [ 945.813113][ T805] usbtmc 4-1:16.0: can't read capabilities [ 945.914654][T10828] team0: Port device team_slave_0 added [ 946.004750][T10828] team0: Port device team_slave_1 added [ 946.134506][ T805] usb 4-1: USB disconnect, device number 45 [ 946.183816][T10850] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.184449][T10850] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.184656][T10850] bridge_slave_0: entered allmulticast mode [ 946.187313][T10850] bridge_slave_0: entered promiscuous mode [ 946.273861][T10850] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.274559][T10850] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.274702][T10850] bridge_slave_1: entered allmulticast mode [ 946.276231][T10850] bridge_slave_1: entered promiscuous mode [ 946.409445][T10828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.409458][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.409471][T10828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.599098][T10828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.599111][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.599126][T10828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.941994][T10850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.971854][T10850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.625780][T10850] team0: Port device team_slave_0 added [ 948.630908][T10828] hsr_slave_0: entered promiscuous mode [ 948.631735][T10828] hsr_slave_1: entered promiscuous mode [ 948.633896][T10828] debugfs: 'hsr0' already exists in 'hsr' [ 948.633938][T10828] Cannot create hsr debugfs directory [ 948.846987][T10945] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1191'. [ 948.895908][T10850] team0: Port device team_slave_1 added [ 948.969462][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 948.974187][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 948.975609][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.009783][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.010700][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.051727][T10951] [U] ÿ [ 949.576231][T10850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.576244][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.576258][T10850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.765358][T10850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.765371][T10850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.765385][T10850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.464689][T10960] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1194'. [ 950.464831][T10960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1194'. [ 950.553680][T10960] serio: Serial port ptm0 [ 951.061528][ T61] Bluetooth: hci2: command tx timeout [ 951.231527][T10850] hsr_slave_0: entered promiscuous mode [ 951.233223][T10850] hsr_slave_1: entered promiscuous mode [ 951.234217][T10850] debugfs: 'hsr0' already exists in 'hsr' [ 951.234240][T10850] Cannot create hsr debugfs directory [ 951.752350][ T805] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 951.912367][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 951.914412][ T805] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.914430][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 951.914443][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.914455][ T805] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.914479][ T805] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.914491][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.213943][ T805] usb 4-1: GET_CAPABILITIES returned 0 [ 952.213976][ T805] usbtmc 4-1:16.0: can't read capabilities [ 952.586849][ T5928] usb 4-1: USB disconnect, device number 46 [ 953.132407][ T61] Bluetooth: hci2: command tx timeout [ 953.429772][T10969] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1197'. [ 953.429789][T10969] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 953.466800][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.562329][ T5893] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 953.712457][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 953.717751][ T5893] usb 4-1: config 0 has an invalid interface number: 180 but max is 0 [ 953.717779][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.717796][ T5893] usb 4-1: config 0 has no interface number 0 [ 953.720235][ T5893] usb 4-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 953.720262][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.720282][ T5893] usb 4-1: Product: syz [ 953.720295][ T5893] usb 4-1: Manufacturer: syz [ 953.720307][ T5893] usb 4-1: SerialNumber: syz [ 953.725752][ T5893] usb 4-1: config 0 descriptor?? [ 953.766137][ T5893] usb 4-1: bad CDC descriptors [ 953.795818][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.821122][T10948] chnl_net:caif_netlink_parms(): no params data found [ 953.849077][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.849213][ T6757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.959971][ T44] bridge_slave_1: left allmulticast mode [ 953.959992][ T44] bridge_slave_1: left promiscuous mode [ 953.960161][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.977373][ T5893] usb 4-1: USB disconnect, device number 47 [ 954.074482][ T44] bridge_slave_0: left allmulticast mode [ 954.074503][ T44] bridge_slave_0: left promiscuous mode [ 954.074663][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.134807][ T44] bridge_slave_1: left allmulticast mode [ 954.134829][ T44] bridge_slave_1: left promiscuous mode [ 954.134980][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.193149][ T44] bridge_slave_0: left allmulticast mode [ 954.193171][ T44] bridge_slave_0: left promiscuous mode [ 954.193329][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.525300][T10976] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1198'. [ 954.655030][T10981] [U] ÿ [ 955.842337][ T61] Bluetooth: hci2: command tx timeout [ 956.104547][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.183135][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.245307][ T44] bond0 (unregistering): Released all slaves [ 956.888537][T10994] syz.3.1203 (10994): drop_caches: 2 [ 958.431320][T11003] loop2: detected capacity change from 0 to 7 [ 959.124385][ T61] Bluetooth: hci2: command tx timeout [ 959.146261][T11003] Dev loop2: unable to read RDB block 7 [ 959.146285][T11003] loop2: AHDI p1 p2 p3 [ 959.146305][T11003] loop2: partition table partially beyond EOD, truncated [ 959.146374][T11003] loop2: p1 start 1818582900 is beyond EOD, truncated [ 959.146384][T11003] loop2: p3 start 335544320 is beyond EOD, truncated [ 959.339823][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.453191][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.515029][ T44] bond0 (unregistering): Released all slaves [ 959.574725][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.574876][ T6757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.931664][T11011] [U] ÿ [ 961.356259][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.358292][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.358533][T10948] bridge_slave_0: entered allmulticast mode [ 961.361191][T10948] bridge_slave_0: entered promiscuous mode [ 961.457458][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.457607][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.457798][T10948] bridge_slave_1: entered allmulticast mode [ 961.460626][T10948] bridge_slave_1: entered promiscuous mode [ 961.737860][T11020] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1208'. [ 961.742340][ T44] hsr_slave_0: left promiscuous mode [ 961.782422][ T44] hsr_slave_1: left promiscuous mode [ 961.783082][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.839890][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.032473][ T44] hsr_slave_0: left promiscuous mode [ 962.052341][ T44] hsr_slave_1: left promiscuous mode [ 962.053047][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.093125][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.773061][ T44] team0 (unregistering): Port device team_slave_1 removed [ 962.912867][ T44] team0 (unregistering): Port device team_slave_0 removed [ 964.093144][ T44] team0 (unregistering): Port device team_slave_1 removed [ 964.233158][ T44] team0 (unregistering): Port device team_slave_0 removed [ 965.006052][T11026] vlan2: entered promiscuous mode [ 965.006066][T11026] team0: entered promiscuous mode [ 965.006074][T11026] team_slave_0: entered promiscuous mode [ 965.006250][T11026] team_slave_1: entered promiscuous mode [ 965.202773][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.057086][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.404101][T10948] team0: Port device team_slave_0 added [ 966.408912][T10948] team0: Port device team_slave_1 added [ 966.679516][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.679534][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.679558][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.741274][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.741286][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.741301][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.357835][ T6886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 967.383684][ T6886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 967.386142][ T6886] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 967.402606][ T6886] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 967.413129][ T6886] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 967.430527][T10948] hsr_slave_0: entered promiscuous mode [ 967.439744][T10948] hsr_slave_1: entered promiscuous mode [ 967.440729][T10948] debugfs: 'hsr0' already exists in 'hsr' [ 967.440749][T10948] Cannot create hsr debugfs directory [ 967.589983][T10828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 967.679018][T10828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 967.807258][T10828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 967.949929][T10828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 968.454005][T10850] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 968.501793][T10850] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 968.565115][T10850] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 968.610955][T10850] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.257556][ T61] Bluetooth: hci4: command tx timeout [ 971.892659][T11077] loop2: detected capacity change from 0 to 7 [ 972.077667][T11077] Dev loop2: unable to read RDB block 7 [ 972.077693][T11077] loop2: AHDI p1 p2 p3 [ 972.077714][T11077] loop2: partition table partially beyond EOD, truncated [ 972.077783][T11077] loop2: p1 start 1818582900 is beyond EOD, truncated [ 972.077792][T11077] loop2: p3 start 335544320 is beyond EOD, truncated [ 972.332659][ T61] Bluetooth: hci4: command tx timeout [ 972.564158][T11045] chnl_net:caif_netlink_parms(): no params data found [ 974.030969][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.037007][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.037272][T11045] bridge_slave_0: entered allmulticast mode [ 974.047911][T11045] bridge_slave_0: entered promiscuous mode [ 974.066824][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.066952][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.067190][T11045] bridge_slave_1: entered allmulticast mode [ 974.069838][T11045] bridge_slave_1: entered promiscuous mode [ 974.412294][ T61] Bluetooth: hci4: command tx timeout [ 974.416492][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.493808][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.790731][T11045] team0: Port device team_slave_0 added [ 974.813995][T11045] team0: Port device team_slave_1 added [ 974.932300][T10948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 974.972664][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.094872][T10948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 975.158732][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.158745][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.158759][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.160346][T10948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 975.271407][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.271422][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.271437][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.316136][ T44] bridge_slave_1: left allmulticast mode [ 975.316164][ T44] bridge_slave_1: left promiscuous mode [ 975.316457][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.450539][ T44] bridge_slave_0: left allmulticast mode [ 975.450569][ T44] bridge_slave_0: left promiscuous mode [ 975.450831][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.685919][ T44] bridge_slave_1: left allmulticast mode [ 975.685941][ T44] bridge_slave_1: left promiscuous mode [ 975.686116][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.677410][ T61] Bluetooth: hci4: command tx timeout [ 976.724243][ T44] bridge_slave_0: left allmulticast mode [ 976.724274][ T44] bridge_slave_0: left promiscuous mode [ 976.724555][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.957769][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.016251][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.062753][ T44] bond0 (unregistering): Released all slaves [ 981.745907][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.803249][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.824670][ T44] bond0 (unregistering): Released all slaves [ 981.862663][T10948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 982.083867][T11114] bridge_slave_0: left allmulticast mode [ 982.083891][T11114] bridge_slave_0: left promiscuous mode [ 982.084366][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.206340][T11114] bridge_slave_1: left allmulticast mode [ 982.206363][T11114] bridge_slave_1: left promiscuous mode [ 982.206495][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.373760][T11114] bond0: (slave bond_slave_0): Releasing backup interface [ 982.453007][T11114] bond0: (slave bond_slave_1): Releasing backup interface [ 982.495704][T11114] team_slave_0: left promiscuous mode [ 982.516541][T11114] team0: Port device team_slave_0 removed [ 982.517267][T11114] team_slave_1: left promiscuous mode [ 982.556447][T11114] team0: Port device team_slave_1 removed [ 982.557303][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.557319][T11114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.604423][T11114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.604443][T11114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.635640][T11114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.860912][T10850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.870926][T10828] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.992457][ T44] hsr_slave_0: left promiscuous mode [ 983.012482][ T44] hsr_slave_1: left promiscuous mode [ 983.013150][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.063220][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.204566][ T44] hsr_slave_0: left promiscuous mode [ 983.242420][ T44] hsr_slave_1: left promiscuous mode [ 983.243191][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.272926][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.075248][ T44] team0 (unregistering): Port device team_slave_1 removed [ 984.333705][ T44] team0 (unregistering): Port device team_slave_0 removed [ 987.433342][ T44] team0 (unregistering): Port device team_slave_1 removed [ 987.682943][ T44] team0 (unregistering): Port device team_slave_0 removed [ 989.229105][ T6886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 989.251397][ T6886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 989.286349][ T6886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 989.288505][ T6886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 989.289254][ T6886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 990.174060][T11045] hsr_slave_0: entered promiscuous mode [ 990.178359][T11045] hsr_slave_1: entered promiscuous mode [ 990.180969][T11045] debugfs: 'hsr0' already exists in 'hsr' [ 990.180994][T11045] Cannot create hsr debugfs directory [ 990.567106][T10850] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.865604][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.865731][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.382581][ T61] Bluetooth: hci5: command tx timeout [ 992.228554][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.243172][T11129] chnl_net:caif_netlink_parms(): no params data found [ 993.033657][ T6886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 993.038562][ T6886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 993.050220][ T6886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 993.051480][ T6886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 993.064290][ T6886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.556649][ T6886] Bluetooth: hci5: command tx timeout [ 995.197893][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.222549][ T6886] Bluetooth: hci1: command tx timeout [ 995.408057][T11129] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.408753][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.408936][T11129] bridge_slave_0: entered allmulticast mode [ 995.410547][T11129] bridge_slave_0: entered promiscuous mode [ 995.601392][T11157] syz.3.1232 (11157): drop_caches: 2 [ 996.252712][T11129] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.252863][T11129] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.253118][T11129] bridge_slave_1: entered allmulticast mode [ 996.255397][T11129] bridge_slave_1: entered promiscuous mode [ 996.578718][ T6886] Bluetooth: hci5: command tx timeout [ 997.292755][ T6886] Bluetooth: hci1: command tx timeout [ 997.376703][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.376851][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.704089][T11129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.730532][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.730777][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.745250][T11129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.968900][ T37] kauditd_printk_skb: 180 callbacks suppressed [ 997.968932][ T37] audit: type=1326 audit(1765106968.209:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.969027][ T37] audit: type=1326 audit(1765106968.209:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.969068][ T37] audit: type=1326 audit(1765106968.209:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.969183][ T37] audit: type=1326 audit(1765106968.209:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.969271][ T37] audit: type=1326 audit(1765106968.209:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.969311][ T37] audit: type=1326 audit(1765106968.219:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.977638][ T37] audit: type=1326 audit(1765106968.219:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 997.977834][ T37] audit: type=1326 audit(1765106968.219:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11167 comm="syz.3.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7d8bf749 code=0x7ffc0000 [ 998.652319][ T6886] Bluetooth: hci5: command tx timeout [ 998.965198][T11129] team0: Port device team_slave_0 added [ 998.980832][T11129] team0: Port device team_slave_1 added [ 999.220031][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.220102][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.296601][T11045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 999.312490][ T6025] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 999.394687][T11129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.394707][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.394732][T11129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.397355][T11045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 999.462271][ T6025] usb 4-1: Using ep0 maxpacket: 16 [ 999.464140][T11129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.464275][T11129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.464301][T11129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.466767][T11045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 999.467891][ T6025] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 999.467915][ T6025] usb 4-1: config 0 has no interface number 0 [ 999.467961][ T6025] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 999.470142][ T6025] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 999.470168][ T6025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.470186][ T6025] usb 4-1: Product: syz [ 999.470194][ T6025] usb 4-1: Manufacturer: syz [ 999.470201][ T6025] usb 4-1: SerialNumber: syz [ 999.475187][ T6025] usb 4-1: config 0 descriptor?? [ 999.502986][T11174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 999.506742][ T6025] asix 4-1:0.251: probe with driver asix failed with error -22 [ 999.612500][ T6886] Bluetooth: hci1: command tx timeout [ 999.864995][ T6025] usb 4-1: USB disconnect, device number 48 [ 999.868795][T11045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1000.718778][T11129] hsr_slave_0: entered promiscuous mode [ 1000.720297][T11129] hsr_slave_1: entered promiscuous mode [ 1000.720860][T11129] debugfs: 'hsr0' already exists in 'hsr' [ 1000.720886][T11129] Cannot create hsr debugfs directory [ 1001.535263][T11142] chnl_net:caif_netlink_parms(): no params data found [ 1001.692462][ T6886] Bluetooth: hci1: command tx timeout [ 1002.545820][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.546016][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.546242][T11142] bridge_slave_0: entered allmulticast mode [ 1002.548521][T11142] bridge_slave_0: entered promiscuous mode [ 1002.639884][ T6886] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1002.697037][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.697831][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.698038][T11142] bridge_slave_1: entered allmulticast mode [ 1002.700632][T11142] bridge_slave_1: entered promiscuous mode [ 1002.986014][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.017111][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.679443][T11142] team0: Port device team_slave_0 added [ 1004.802332][ T6120] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1004.857167][T11142] team0: Port device team_slave_1 added [ 1004.955305][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.955338][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.955375][ T6120] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1004.955396][ T6120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.002789][ T6120] usb 4-1: config 0 descriptor?? [ 1005.248542][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.248559][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.248582][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.298688][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.300818][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.300835][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.300857][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.631109][T11221] netlink: 'syz.3.1249': attribute type 11 has an invalid length. [ 1005.834770][T11142] hsr_slave_0: entered promiscuous mode [ 1005.836149][T11142] hsr_slave_1: entered promiscuous mode [ 1005.837151][T11142] debugfs: 'hsr0' already exists in 'hsr' [ 1005.837171][T11142] Cannot create hsr debugfs directory [ 1006.116777][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.150914][ T6120] usbhid 4-1:0.0: can't add hid device: -71 [ 1006.151038][ T6120] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1006.176059][ T6120] usb 4-1: USB disconnect, device number 49 [ 1006.231657][ T44] bridge_slave_1: left allmulticast mode [ 1006.231678][ T44] bridge_slave_1: left promiscuous mode [ 1006.231861][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.334118][ T44] bridge_slave_0: left allmulticast mode [ 1006.334139][ T44] bridge_slave_0: left promiscuous mode [ 1006.334308][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.394812][ T44] bridge_slave_1: left allmulticast mode [ 1006.394834][ T44] bridge_slave_1: left promiscuous mode [ 1006.394990][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.463252][ T44] bridge_slave_0: left allmulticast mode [ 1006.463276][ T44] bridge_slave_0: left promiscuous mode [ 1006.463438][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.392886][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.472938][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.534123][ T44] bond0 (unregistering): Released all slaves [ 1010.283095][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.335826][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.340281][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.341527][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.364470][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.369542][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1010.400757][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.454076][ T44] bond0 (unregistering): Released all slaves [ 1010.877859][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.097817][ T44] hsr_slave_0: left promiscuous mode [ 1012.145876][ T44] hsr_slave_1: left promiscuous mode [ 1012.146799][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.166031][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.312434][ T44] hsr_slave_0: left promiscuous mode [ 1012.332351][ T44] hsr_slave_1: left promiscuous mode [ 1012.333293][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.355753][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.422498][ T61] Bluetooth: hci3: command tx timeout [ 1013.293271][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1013.472963][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1014.492244][ T61] Bluetooth: hci3: command tx timeout [ 1016.572317][ T61] Bluetooth: hci3: command tx timeout [ 1016.923652][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1017.073098][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1018.660488][ T61] Bluetooth: hci3: command tx timeout [ 1019.110575][ T3828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.111018][ T3828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.231802][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.232024][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.235378][T11263] input: syz0 as /devices/virtual/input/input47 [ 1019.288454][T11129] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1019.516107][T11129] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1019.592449][T10591] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1019.752392][T10591] usb 4-1: Using ep0 maxpacket: 16 [ 1019.756225][T10591] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 1019.756254][T10591] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1019.756274][T10591] usb 4-1: config 0 has no interface number 0 [ 1019.756320][T10591] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1019.756346][T10591] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1019.756374][T10591] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1019.756399][T10591] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 27951, setting to 1024 [ 1019.756424][T10591] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1019.756446][T10591] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1019.756486][T10591] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1019.756507][T10591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.761548][T10591] usb 4-1: config 0 descriptor?? [ 1019.765261][T11263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1019.765627][T11263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1019.771391][T10591] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1019.928490][T11129] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1020.008396][ T5976] usb 4-1: USB disconnect, device number 50 [ 1020.081333][T11129] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1021.240037][T11242] chnl_net:caif_netlink_parms(): no params data found [ 1022.097308][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1022.097335][ T6025] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1022.117148][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1022.118746][T11142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1022.518353][T11142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1022.565090][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.565322][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.565531][T11242] bridge_slave_0: entered allmulticast mode [ 1022.571263][T11242] bridge_slave_0: entered promiscuous mode [ 1022.755034][T11142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1022.798055][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.798211][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.798405][T11242] bridge_slave_1: entered allmulticast mode [ 1022.802913][T11242] bridge_slave_1: entered promiscuous mode [ 1022.913532][T11142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1023.178408][T11129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.203197][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.230503][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.241112][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.945213][T11242] team0: Port device team_slave_0 added [ 1024.165508][T11242] team0: Port device team_slave_1 added [ 1024.685346][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.685365][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.685390][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.693529][T11129] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.697886][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.697902][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.697927][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.738225][ T3828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.738427][ T3828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.785647][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.785855][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.812314][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 1024.819216][ T6025] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1024.819239][ T6025] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1025.133071][T11242] hsr_slave_0: entered promiscuous mode [ 1025.133887][T11242] hsr_slave_1: entered promiscuous mode [ 1025.134462][T11242] debugfs: 'hsr0' already exists in 'hsr' [ 1025.134477][T11242] Cannot create hsr debugfs directory [ 1025.269122][T11045] veth0_vlan: entered promiscuous mode [ 1025.409752][T11045] veth1_vlan: entered promiscuous mode [ 1025.678175][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.760108][ T44] bridge_slave_1: left allmulticast mode [ 1025.760136][ T44] bridge_slave_1: left promiscuous mode [ 1025.760860][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.843360][ T44] bridge_slave_0: left allmulticast mode [ 1025.843383][ T44] bridge_slave_0: left promiscuous mode [ 1025.843560][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.216247][ T5893] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1026.364210][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1026.364260][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1026.364273][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.367322][ T5893] usb 4-1: config 0 descriptor?? [ 1026.799161][ T5893] logitech 0003:046D:CA03.000D: unbalanced collection at end of report description [ 1026.799649][ T5893] logitech 0003:046D:CA03.000D: parse failed [ 1026.799792][ T5893] logitech 0003:046D:CA03.000D: probe with driver logitech failed with error -22 [ 1026.972531][ T6025] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1026.972557][ T6025] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1026.998991][ C0] ------------[ cut here ]------------ [ 1026.999003][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 1026.999031][ C0] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#0: ktimers/0/16 [ 1026.999055][ C0] Modules linked in: [ 1026.999073][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.999094][ C0] Tainted: [L]=SOFTLOCKUP [ 1026.999100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.999109][ C0] RIP: 0010:__queue_work+0xd88/0xff0 [ 1026.999128][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 d8 [ 1026.999143][ C0] RSP: 0018:ffffc900001577f0 EFLAGS: 00010082 [ 1026.999155][ C0] RAX: 1ffff1100b6e2953 RBX: 0000000000000008 RCX: ffff88801b6edac0 [ 1026.999167][ C0] RDX: ffff8880484ff168 RSI: ffffffff89cc8350 RDI: ffffffff8edd4660 [ 1026.999180][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1026.999191][ C0] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 1026.999203][ C0] R13: ffff88805b714a98 R14: ffffffff8edd4660 R15: ffff8880484ff168 [ 1026.999216][ C0] FS: 0000000000000000(0000) GS:ffff888126d12000(0000) knlGS:0000000000000000 [ 1026.999231][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.999245][ C0] CR2: 000000110c2ce2a6 CR3: 000000003c86e000 CR4: 00000000003526f0 [ 1026.999262][ C0] Call Trace: [ 1026.999271][ C0] [ 1026.999291][ C0] call_timer_fn+0x16e/0x590 [ 1026.999322][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1026.999338][ C0] ? call_timer_fn+0xbe/0x590 [ 1026.999356][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1026.999383][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1026.999399][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1026.999418][ C0] __run_timer_base+0x709/0x970 [ 1026.999448][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1026.999479][ C0] run_timer_softirq+0xb7/0x180 [ 1026.999497][ C0] handle_softirqs+0x226/0x6d0 [ 1026.999522][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1026.999553][ C0] run_ktimerd+0xcf/0x190 [ 1026.999571][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1026.999586][ C0] ? schedule+0x91/0x360 [ 1026.999609][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1026.999625][ C0] smpboot_thread_fn+0x542/0xa60 [ 1026.999643][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1026.999667][ C0] kthread+0x711/0x8a0 [ 1026.999688][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1026.999704][ C0] ? __pfx_kthread+0x10/0x10 [ 1026.999720][ C0] ? rt_spin_unlock+0x150/0x200 [ 1026.999737][ C0] ? rt_spin_unlock+0x161/0x200 [ 1026.999749][ C0] ? __pfx_kthread+0x10/0x10 [ 1026.999767][ C0] ret_from_fork+0x599/0xb30 [ 1026.999785][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.999808][ C0] ? __switch_to_asm+0x39/0x70 [ 1026.999827][ C0] ? __switch_to_asm+0x33/0x70 [ 1026.999845][ C0] ? __pfx_kthread+0x10/0x10 [ 1026.999865][ C0] ret_from_fork_asm+0x1a/0x30 [ 1026.999904][ C0] [ 1026.999921][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1026.999934][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.999953][ C0] Tainted: [L]=SOFTLOCKUP [ 1026.999958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.999966][ C0] Call Trace: [ 1026.999972][ C0] [ 1026.999978][ C0] dump_stack_lvl+0x99/0x250 [ 1026.999996][ C0] ? __asan_memcpy+0x40/0x70 [ 1027.000014][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.000031][ C0] ? __pfx__printk+0x10/0x10 [ 1027.000056][ C0] vpanic+0x237/0x6d0 [ 1027.000074][ C0] ? __pfx_vpanic+0x10/0x10 [ 1027.000090][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1027.000108][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1027.000131][ C0] panic+0xb9/0xc0 [ 1027.000150][ C0] ? __pfx_panic+0x10/0x10 [ 1027.000174][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1027.000198][ C0] __warn+0x317/0x4b0 [ 1027.000222][ C0] __report_bug+0x288/0x500 [ 1027.000247][ C0] ? __pfx___report_bug+0x10/0x10 [ 1027.000264][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1027.000291][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1027.000314][ C0] report_bug_entry+0x16a/0x220 [ 1027.000331][ C0] ? __queue_work+0xd88/0xff0 [ 1027.000347][ C0] ? __queue_work+0xd8d/0xff0 [ 1027.000363][ C0] handle_bug+0xca/0x200 [ 1027.000384][ C0] exc_invalid_op+0x1a/0x50 [ 1027.000403][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1027.000417][ C0] RIP: 0010:__queue_work+0xd88/0xff0 [ 1027.000435][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 39 3a 98 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 40 d8 [ 1027.000448][ C0] RSP: 0018:ffffc900001577f0 EFLAGS: 00010082 [ 1027.000461][ C0] RAX: 1ffff1100b6e2953 RBX: 0000000000000008 RCX: ffff88801b6edac0 [ 1027.000471][ C0] RDX: ffff8880484ff168 RSI: ffffffff89cc8350 RDI: ffffffff8edd4660 [ 1027.000481][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1027.000490][ C0] R10: dffffc0000000000 R11: ffffffff818aa600 R12: dffffc0000000000 [ 1027.000500][ C0] R13: ffff88805b714a98 R14: ffffffff8edd4660 R15: ffff8880484ff168 [ 1027.000514][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1027.000540][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1027.000570][ C0] call_timer_fn+0x16e/0x590 [ 1027.000590][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1027.000605][ C0] ? call_timer_fn+0xbe/0x590 [ 1027.000623][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1027.000651][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1027.000666][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1027.000684][ C0] __run_timer_base+0x709/0x970 [ 1027.000715][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1027.000748][ C0] run_timer_softirq+0xb7/0x180 [ 1027.000766][ C0] handle_softirqs+0x226/0x6d0 [ 1027.000790][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1027.000814][ C0] run_ktimerd+0xcf/0x190 [ 1027.000830][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1027.000845][ C0] ? schedule+0x91/0x360 [ 1027.000866][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1027.000882][ C0] smpboot_thread_fn+0x542/0xa60 [ 1027.000899][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1027.000923][ C0] kthread+0x711/0x8a0 [ 1027.000943][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1027.000960][ C0] ? __pfx_kthread+0x10/0x10 [ 1027.000975][ C0] ? rt_spin_unlock+0x150/0x200 [ 1027.000992][ C0] ? rt_spin_unlock+0x161/0x200 [ 1027.001003][ C0] ? __pfx_kthread+0x10/0x10 [ 1027.001023][ C0] ret_from_fork+0x599/0xb30 [ 1027.001041][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1027.001065][ C0] ? __switch_to_asm+0x39/0x70 [ 1027.001104][ C0] ? __switch_to_asm+0x33/0x70 [ 1027.001139][ C0] ? __pfx_kthread+0x10/0x10 [ 1027.001158][ C0] ret_from_fork_asm+0x1a/0x30 [ 1027.001188][ C0] [ 1027.002077][ C0] Kernel Offset: disabled